last executing test programs: 3.085598466s ago: executing program 1 (id=598): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x0, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x100}, 0x4c000) 2.951908733s ago: executing program 1 (id=602): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d48100170008004500005c00000001"], 0x0) 2.883145395s ago: executing program 1 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="f2d9d9001f58"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 2.751504869s ago: executing program 1 (id=608): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d016e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e8b701d2d17ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01d51e242443618c02e0a428da651366e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab7158edeeccd92e3a88dc0f432187ce92d7b17a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb373845255012e028cb2654d493afb4b35faae176f99b745eda2967199cc93685bb444f9bc50713061385537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d1ff07000000000000000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ab2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b371867a79b31f3f514573f1e30d1fd2d763f3ee9210b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f240080000534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74d1ffdaccf0ea5f02e0163a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01f7ada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd2190780fa39c43ea647eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0000000000000001062a35376413c29f7c6f7bde29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000fc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5018e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e2b70590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5002adef9546abb7a2d9c085b189b5ff30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd0387837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f012df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dc816126b6f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bb01b53a2d862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94986157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d7004d29ad77f54836779600bb0b247139d429df96362db3ecfbd36fa8164fabdcf2e58b720e8e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a56f3ebb16fad3e9269495230cd88b0ea2e3affa196a2f0adf733bc6afd37a659ecc933d636c1b27d3a16c5ea25301f9b5789e4aa8e7228e3002f146aa5e575bb74b1ebb82147edf8161d362704377058e887c608be8719ea1b6c490f79e0832e2ddd7e217c7adddd4731e032d7eb35bdc38160c676d840e2e8be9033a686cf7061f5f55e2851736aa8c2f3bad8ac05c048e20d8c03b68008a70b8f80c93ebd2ababb5c65fe9abc4642d7b58d8c93efd7b6b39c68a16d75a7852dfc37a6a50cb28a9b6f685a465d08fc603d81d8ddd5296fae97be1401a8be7748a71fcdc85ba2049e96c4e6dce59b88cd5472726bc237fbcf3ffcbf32e2aac9b2f9d6013b59780ded723b08c767fa091e2fa4d51863500fcd5041bcc98a685504835743194113ea0b97b4f9ddc395b9ac4defefadd37a8871fd91f31a56eb96ecf90000000000000000000000000000000000000000000c447ea475c236c3b7f24079fe375f3f861fc54d9d8a04a6cb8c0dbf9e9cc53a84a5795ae5ebcbd825e3572df16fbdcd395e995fa4fcbbf31583d9e1d3ff537f401a3139200a8bd2122157887199cd54075a4d5b29935dda5c6aa0f3ac6895eb73c7abbd4603abdaa8629dedb2cab0fa80f9514ad310491a9a300015c18cdfd9342cff50d849d7516134d45d1a8cf157abe0c79de543993cf689f8a7113508fbf8a610417045e6c38a5d4ff4656dbd9656ad6ce625e1674ab57944ebb834743a248a2be304ba1e037cb63a169d340be8befc1b238aa26e24"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0xfffffe09}], 0x1}, 0x0) write(r2, 0x0, 0x0) 1.915865666s ago: executing program 0 (id=628): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x0, 0x20040001, 0xfffffffd, 0x4}}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x14, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) 1.711994814s ago: executing program 1 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) shutdown(r2, 0x1) close(0x4) 1.711550502s ago: executing program 0 (id=633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000800000003"], 0xfce) 1.494330717s ago: executing program 0 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x8, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) 1.280081321s ago: executing program 0 (id=646): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x72b}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.031510945s ago: executing program 4 (id=652): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="363c8f3f8a5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 912.023261ms ago: executing program 4 (id=654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@loopback, @private1, @remote, 0x1, 0x0, 0x40, 0x100, 0x209, 0x10208}) 810.992711ms ago: executing program 4 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a00fdff0000", @ANYRES32=0x0, @ANYRES32], 0x30}}, 0x0) 810.067628ms ago: executing program 1 (id=657): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r12, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 693.958189ms ago: executing program 4 (id=659): syz_emit_ethernet(0x24a6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], 0x0) 671.289781ms ago: executing program 3 (id=660): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) 564.155266ms ago: executing program 4 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 553.956427ms ago: executing program 2 (id=662): syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x30, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0xc, 0xc2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x25, 0x1}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x9}]}}}}}}}}, 0x0) 531.662382ms ago: executing program 3 (id=663): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/4080, 0xff0}, {&(0x7f0000003100)=""/4096, 0x1000}], 0x2}, 0x10002) 493.174389ms ago: executing program 4 (id=664): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010101}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x10000}, &(0x7f00000000c0)=0x8) 412.193046ms ago: executing program 2 (id=665): syz_emit_ethernet(0x7e, &(0x7f0000002740)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, [{0x5, 0x6, "e2b72506cfe872c92e1c2c7798029d4790bf23363bbd23be82a928b5d15919c2ae1043f7d5e8ae3800b283137ede59c0"}, {}]}}}}}}, 0x0) 411.833525ms ago: executing program 3 (id=666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8000) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 390.104045ms ago: executing program 2 (id=667): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x54}}, 0x0) 379.084222ms ago: executing program 3 (id=668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x11) 287.86758ms ago: executing program 0 (id=669): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01"], 0x3c}}, 0x0) 287.434222ms ago: executing program 2 (id=670): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x205, 0x0, 0x1, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @local}]}, 0x2c}}, 0x26048880) 263.690006ms ago: executing program 3 (id=671): pipe(&(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) tee(r0, r5, 0x8f5, 0x100000000000000) write(r3, 0x0, 0x0) 179.067316ms ago: executing program 2 (id=672): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1dc, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x1a0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x178, 0x1, [@m_simple={0x30, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0xbc, 0xa, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xfffffff8, 0x2, 0x100, 0x1}, @broadcast, @multicast2, 0xff000000}}]}, {0x69, 0x6, "455c01c35a2bca70225b757b65e5e4a3d41b6fb981e9f5ab2f14ad001cda09785441b43636124ee3000e13fa20bea090aab2bdd9895404add20f4fcf1a162cef77fa8839a02231378329689c84c729801c399b2e8e9d7612504fe105d4368f62612597163d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x88, 0x17, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xef, 0x8a, 0x0, 0xc69, 0x80000000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_CT_MARK={0x8, 0x5, 0xb3b}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_ACTION={0x6, 0x3, 0x2b}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_FD={0x8}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.503483ms ago: executing program 2 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x44801}, 0x48000) 2.216589ms ago: executing program 3 (id=674): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 0 (id=675): syz_emit_ethernet(0x66, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x30, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0xc, 0xc2, 0xffff, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x25, 0x1}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x8, 0x9}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 70.060214][ T5822] cgroup: Unknown subsys name 'net' [ 70.172934][ T5822] cgroup: Unknown subsys name 'cpuset' [ 70.181490][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.400557][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.407084][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.597945][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.414157][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.414281][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.430285][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.439113][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.446467][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.455358][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.455473][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.470649][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.479176][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.486973][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.495059][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.505178][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.521272][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.540400][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.560120][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.580224][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.582370][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.596089][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.597074][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.611250][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.611422][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.626498][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.634529][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.634536][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.649957][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.114191][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.214195][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 76.491034][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.500855][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.508868][ T5836] bridge_slave_0: entered allmulticast mode [ 76.516728][ T5836] bridge_slave_0: entered promiscuous mode [ 76.527584][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 76.545058][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.552236][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.559947][ T5832] bridge_slave_0: entered allmulticast mode [ 76.567215][ T5832] bridge_slave_0: entered promiscuous mode [ 76.575176][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.582470][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.589820][ T5836] bridge_slave_1: entered allmulticast mode [ 76.596716][ T5836] bridge_slave_1: entered promiscuous mode [ 76.604387][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.620298][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.627545][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.634713][ T5832] bridge_slave_1: entered allmulticast mode [ 76.642215][ T5832] bridge_slave_1: entered promiscuous mode [ 76.695312][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 76.768683][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.781624][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.793712][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.806385][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.935889][ T5832] team0: Port device team_slave_0 added [ 76.943614][ T5836] team0: Port device team_slave_0 added [ 76.963751][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.973244][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.980840][ T5838] bridge_slave_0: entered allmulticast mode [ 76.988260][ T5838] bridge_slave_0: entered promiscuous mode [ 77.003293][ T5832] team0: Port device team_slave_1 added [ 77.010553][ T5836] team0: Port device team_slave_1 added [ 77.030844][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.040048][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.047556][ T5838] bridge_slave_1: entered allmulticast mode [ 77.054462][ T5838] bridge_slave_1: entered promiscuous mode [ 77.106599][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.113769][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.121545][ T5844] bridge_slave_0: entered allmulticast mode [ 77.129653][ T5844] bridge_slave_0: entered promiscuous mode [ 77.169210][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.176170][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.202557][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.216384][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.223579][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.249859][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.273548][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.280748][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.288174][ T5844] bridge_slave_1: entered allmulticast mode [ 77.295111][ T5844] bridge_slave_1: entered promiscuous mode [ 77.338941][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.345905][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.372237][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.398681][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.411646][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.421170][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.428911][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.436065][ T5846] bridge_slave_0: entered allmulticast mode [ 77.443414][ T5846] bridge_slave_0: entered promiscuous mode [ 77.451518][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.458714][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.465893][ T5846] bridge_slave_1: entered allmulticast mode [ 77.473636][ T5846] bridge_slave_1: entered promiscuous mode [ 77.481947][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.489190][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.515436][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.557894][ T5835] Bluetooth: hci1: command tx timeout [ 77.557897][ T5840] Bluetooth: hci0: command tx timeout [ 77.593409][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.644789][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.647086][ T5840] Bluetooth: hci2: command tx timeout [ 77.672913][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.695565][ T5838] team0: Port device team_slave_0 added [ 77.709779][ T5832] hsr_slave_0: entered promiscuous mode [ 77.716697][ T5832] hsr_slave_1: entered promiscuous mode [ 77.722511][ T5840] Bluetooth: hci4: command tx timeout [ 77.722519][ T5835] Bluetooth: hci3: command tx timeout [ 77.730016][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.776729][ T5838] team0: Port device team_slave_1 added [ 77.814020][ T5836] hsr_slave_0: entered promiscuous mode [ 77.822489][ T5836] hsr_slave_1: entered promiscuous mode [ 77.828787][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.836483][ T5836] Cannot create hsr debugfs directory [ 77.862013][ T5844] team0: Port device team_slave_0 added [ 77.901041][ T5846] team0: Port device team_slave_0 added [ 77.910553][ T5846] team0: Port device team_slave_1 added [ 77.924627][ T5844] team0: Port device team_slave_1 added [ 77.954061][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.961069][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.987221][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.040936][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.047991][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.074675][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.102915][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.110548][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.136860][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.162137][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.169236][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.195497][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.223468][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.230693][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.257111][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.297312][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.304281][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.330356][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.455160][ T5844] hsr_slave_0: entered promiscuous mode [ 78.462263][ T5844] hsr_slave_1: entered promiscuous mode [ 78.468532][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.476087][ T5844] Cannot create hsr debugfs directory [ 78.499006][ T5838] hsr_slave_0: entered promiscuous mode [ 78.505377][ T5838] hsr_slave_1: entered promiscuous mode [ 78.511593][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.519205][ T5838] Cannot create hsr debugfs directory [ 78.605325][ T5846] hsr_slave_0: entered promiscuous mode [ 78.611709][ T5846] hsr_slave_1: entered promiscuous mode [ 78.618030][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.625596][ T5846] Cannot create hsr debugfs directory [ 78.876201][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.920395][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.964586][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.005578][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.104196][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.129277][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.150922][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.178226][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.239832][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.255357][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.288883][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.306305][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.396687][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.415186][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.438803][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.451163][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.500883][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.527342][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.580538][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.598603][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.605845][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.621625][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.628838][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.639517][ T5840] Bluetooth: hci1: command tx timeout [ 79.639525][ T5835] Bluetooth: hci0: command tx timeout [ 79.648626][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.660820][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.671793][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.717099][ T5840] Bluetooth: hci2: command tx timeout [ 79.721470][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.797733][ T5840] Bluetooth: hci3: command tx timeout [ 79.798335][ T5835] Bluetooth: hci4: command tx timeout [ 79.820374][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.846720][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.853903][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.872800][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.894538][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.901729][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.974948][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.041369][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.048523][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.082471][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.089665][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.143357][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.164074][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.245274][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.332746][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.346873][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.354022][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.376152][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.418984][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.426146][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.449839][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.457029][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.476069][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.513977][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.521165][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.639936][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.704501][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.813555][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.895960][ T5832] veth0_vlan: entered promiscuous mode [ 80.996112][ T5832] veth1_vlan: entered promiscuous mode [ 81.043520][ T5844] veth0_vlan: entered promiscuous mode [ 81.166449][ T5844] veth1_vlan: entered promiscuous mode [ 81.219485][ T5832] veth0_macvtap: entered promiscuous mode [ 81.255880][ T5836] veth0_vlan: entered promiscuous mode [ 81.278322][ T5836] veth1_vlan: entered promiscuous mode [ 81.285588][ T5832] veth1_macvtap: entered promiscuous mode [ 81.312398][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.332457][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.346600][ T5844] veth0_macvtap: entered promiscuous mode [ 81.365278][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.378232][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.392747][ T5844] veth1_macvtap: entered promiscuous mode [ 81.417886][ T3439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.442173][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.452891][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.471464][ T5836] veth0_macvtap: entered promiscuous mode [ 81.482058][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.506361][ T5836] veth1_macvtap: entered promiscuous mode [ 81.522055][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.571795][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.586616][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.605361][ T3440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.621083][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.676641][ T3440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.699339][ T5838] veth0_vlan: entered promiscuous mode [ 81.721016][ T5835] Bluetooth: hci1: command tx timeout [ 81.734184][ T3448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.735077][ T5840] Bluetooth: hci0: command tx timeout [ 81.762473][ T3448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.796664][ T5838] veth1_vlan: entered promiscuous mode [ 81.811367][ T5840] Bluetooth: hci2: command tx timeout [ 81.830673][ T3448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.839993][ T3448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.877429][ T5840] Bluetooth: hci4: command tx timeout [ 81.879345][ T5835] Bluetooth: hci3: command tx timeout [ 81.889552][ T5846] veth0_vlan: entered promiscuous mode [ 81.914392][ T3448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.934583][ T3448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.974923][ T5846] veth1_vlan: entered promiscuous mode [ 82.052373][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.087381][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.160372][ T5846] veth0_macvtap: entered promiscuous mode [ 82.184379][ T3440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.194980][ T5846] veth1_macvtap: entered promiscuous mode [ 82.205751][ T3440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.229076][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.241478][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.296455][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.353215][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.371300][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.382701][ T5838] veth0_macvtap: entered promiscuous mode [ 82.390395][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.395513][ T5838] veth1_macvtap: entered promiscuous mode [ 82.398490][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.451804][ T3440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.463073][ T3440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485603][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.500188][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.540722][ T3440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.578056][ T3440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.596105][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.628406][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.637467][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.682315][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.724578][ T5954] syzkaller1: entered promiscuous mode [ 82.740660][ T5954] syzkaller1: entered allmulticast mode [ 82.781263][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.807834][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.904123][ T5962] Cannot find add_set index 0 as target [ 82.923380][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.948649][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.007594][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.021957][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.195625][ T3440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.211169][ T5969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 83.230664][ T3440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.338806][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.385481][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.577625][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8'. [ 83.604132][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.683654][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9'. [ 83.701207][ T3456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.723464][ T3456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.797264][ T5835] Bluetooth: hci1: command tx timeout [ 83.807066][ T5835] Bluetooth: hci0: command tx timeout [ 83.878194][ T5835] Bluetooth: hci2: command tx timeout [ 83.958095][ T5835] Bluetooth: hci3: command tx timeout [ 83.958468][ T5840] Bluetooth: hci4: command tx timeout [ 85.620577][ T5985] pim6reg: entered allmulticast mode [ 85.626886][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 85.874779][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 85.886661][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14'. [ 85.955954][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.085691][ T6007] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 86.128354][ T6007] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.408195][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 86.773373][ T9] cfg80211: failed to load regulatory.db [ 87.451716][ T6004] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.644888][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.673837][ T5897] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.687978][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.708989][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17'. [ 87.996764][ T6045] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.051849][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.208935][ T6051] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 88.336131][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.367349][ T6051] bridge_slave_1: left allmulticast mode [ 88.384165][ T6051] bridge_slave_1: left promiscuous mode [ 88.410680][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.438052][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 88.503761][ T6051] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 88.806371][ T6072] __nla_validate_parse: 2 callbacks suppressed [ 88.806387][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27'. [ 89.001873][ T6064] lo speed is unknown, defaulting to 1000 [ 89.024351][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28'. [ 89.144760][ T6064] lo speed is unknown, defaulting to 1000 [ 89.227035][ T6064] lo speed is unknown, defaulting to 1000 [ 89.448454][ T6085] syz.0.30 uses old SIOCAX25GETINFO [ 89.574823][ T6085] ip6t_srh: unknown srh invflags 4449 [ 89.603872][ T6064] infiniband syz0: set active [ 89.611996][ T5897] lo speed is unknown, defaulting to 1000 [ 89.618490][ T6064] infiniband syz0: added lo [ 89.624919][ T6064] syz0: rxe_create_cq: returned err = -12 [ 89.631995][ T6064] infiniband syz0: Couldn't create ib_mad CQ [ 89.641113][ T6064] infiniband syz0: Couldn't open port 1 [ 89.840590][ T6064] RDS/IB: syz0: added [ 89.848494][ T6064] smc: adding ib device syz0 with port count 1 [ 89.888682][ T6064] smc: ib device syz0 port 1 has pnetid [ 90.063511][ T5926] lo speed is unknown, defaulting to 1000 [ 90.087561][ T6064] lo speed is unknown, defaulting to 1000 [ 90.105308][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 90.245552][ T6104] sctp: [Deprecated]: syz.1.36 (pid 6104) Use of int in maxseg socket option. [ 90.245552][ T6104] Use struct sctp_assoc_value instead [ 90.417505][ T6109] xt_CT: You must specify a L4 protocol and not use inversions on it [ 90.452601][ T6111] Cannot find set identified by id 0 to match [ 90.805199][ T6064] lo speed is unknown, defaulting to 1000 [ 91.179318][ T6133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.43'. [ 91.338101][ T6137] Zero length message leads to an empty skb [ 91.385466][ T6139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 91.441675][ T3478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.470930][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.481034][ T3478] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.487446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.562133][ T6144] FAULT_INJECTION: forcing a failure. [ 91.562133][ T6144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.571817][ T6095] lo speed is unknown, defaulting to 1000 [ 91.595615][ T6144] CPU: 0 UID: 0 PID: 6144 Comm: syz.1.47 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 91.595641][ T6144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.595657][ T6144] Call Trace: [ 91.595664][ T6144] [ 91.595671][ T6144] dump_stack_lvl+0x189/0x250 [ 91.595707][ T6144] ? __pfx____ratelimit+0x10/0x10 [ 91.595727][ T6144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.595750][ T6144] ? __pfx__printk+0x10/0x10 [ 91.595776][ T6144] ? __might_fault+0xb0/0x130 [ 91.595811][ T6144] should_fail_ex+0x414/0x560 [ 91.595832][ T6144] _copy_from_user+0x2d/0xb0 [ 91.595849][ T6144] ___sys_sendmsg+0x158/0x2a0 [ 91.595876][ T6144] ? __pfx____sys_sendmsg+0x10/0x10 [ 91.595934][ T6144] ? __fget_files+0x2a/0x420 [ 91.595956][ T6144] ? __fget_files+0x3a0/0x420 [ 91.595984][ T6144] __x64_sys_sendmsg+0x19b/0x260 [ 91.596010][ T6144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 91.596044][ T6144] ? __pfx_ksys_write+0x10/0x10 [ 91.596066][ T6144] ? rcu_is_watching+0x15/0xb0 [ 91.596094][ T6144] ? do_syscall_64+0xbe/0x3b0 [ 91.596117][ T6144] do_syscall_64+0xfa/0x3b0 [ 91.596135][ T6144] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.596153][ T6144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.596170][ T6144] ? clear_bhb_loop+0x60/0xb0 [ 91.596191][ T6144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.596207][ T6144] RIP: 0033:0x7ff7e798e929 [ 91.596228][ T6144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.596242][ T6144] RSP: 002b:00007ff7e87dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.596261][ T6144] RAX: ffffffffffffffda RBX: 00007ff7e7bb5fa0 RCX: 00007ff7e798e929 [ 91.596274][ T6144] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 91.596285][ T6144] RBP: 00007ff7e87dd090 R08: 0000000000000000 R09: 0000000000000000 [ 91.596295][ T6144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.596305][ T6144] R13: 0000000000000000 R14: 00007ff7e7bb5fa0 R15: 00007ffe175efc68 [ 91.596334][ T6144] [ 91.899561][ T6148] netlink: 'syz.1.49': attribute type 10 has an invalid length. [ 91.913032][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.922070][ T6148] bridge_slave_1: left allmulticast mode [ 91.930801][ T6148] bridge_slave_1: left promiscuous mode [ 91.936760][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.967094][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.011475][ T6148] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.035798][ T6150] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 92.100649][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.168255][ T6150] bridge_slave_1: left allmulticast mode [ 92.201146][ T6150] bridge_slave_1: left promiscuous mode [ 92.240543][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.298477][ T6150] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 92.532140][ T6064] lo speed is unknown, defaulting to 1000 [ 92.537480][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.53'. [ 92.800226][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.56'. [ 92.815494][ T6170] netlink: 'syz.1.57': attribute type 5 has an invalid length. [ 93.304678][ T6064] lo speed is unknown, defaulting to 1000 [ 93.333492][ T6181] Bluetooth: MGMT ver 1.23 [ 93.692376][ T6064] lo speed is unknown, defaulting to 1000 [ 93.849675][ T6064] lo speed is unknown, defaulting to 1000 [ 93.999712][ T6064] lo speed is unknown, defaulting to 1000 [ 94.151419][ T6064] lo speed is unknown, defaulting to 1000 [ 94.497103][ T6190] block nbd0: server does not support multiple connections per device. [ 94.518962][ T6190] block nbd0: shutting down sockets [ 94.958247][ T6206] netlink: 'syz.4.68': attribute type 8 has an invalid length. [ 95.011701][ T6206] FAULT_INJECTION: forcing a failure. [ 95.011701][ T6206] name failslab, interval 1, probability 0, space 0, times 1 [ 95.038367][ T6206] CPU: 1 UID: 0 PID: 6206 Comm: syz.4.68 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 95.038392][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 95.038403][ T6206] Call Trace: [ 95.038411][ T6206] [ 95.038419][ T6206] dump_stack_lvl+0x189/0x250 [ 95.038451][ T6206] ? __pfx____ratelimit+0x10/0x10 [ 95.038471][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.038494][ T6206] ? __pfx__printk+0x10/0x10 [ 95.038516][ T6206] ? __pfx___might_resched+0x10/0x10 [ 95.038540][ T6206] ? fs_reclaim_acquire+0x7d/0x100 [ 95.038565][ T6206] should_fail_ex+0x414/0x560 [ 95.038591][ T6206] should_failslab+0xa8/0x100 [ 95.038611][ T6206] __kmalloc_cache_noprof+0x70/0x3d0 [ 95.038629][ T6206] ? vlan_vid_add+0x313/0x760 [ 95.038654][ T6206] vlan_vid_add+0x313/0x760 [ 95.038683][ T6206] __br_vlan_set_proto+0x38d/0xe50 [ 95.038715][ T6206] ? __pfx___br_vlan_set_proto+0x10/0x10 [ 95.038730][ T6206] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 95.038752][ T6206] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 95.038770][ T6206] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 95.038792][ T6206] br_changelink+0x407/0x1650 [ 95.038810][ T6206] ? __mutex_lock+0xa6d/0xe80 [ 95.038828][ T6206] ? __pfx_br_changelink+0x10/0x10 [ 95.038842][ T6206] ? __mutex_lock+0x51b/0xe80 [ 95.038864][ T6206] ? rtnl_newlink+0x8db/0x1c70 [ 95.038885][ T6206] ? __pfx___mutex_lock+0x10/0x10 [ 95.038911][ T6206] ? ns_capable+0x8a/0xf0 [ 95.038936][ T6206] ? rtnl_link_get_net_capable+0x16a/0x350 [ 95.038959][ T6206] rtnl_newlink+0x1666/0x1c70 [ 95.038976][ T6206] ? netlink_sendmsg+0x805/0xb30 [ 95.039007][ T6206] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.039047][ T6206] ? kasan_quarantine_put+0xdd/0x220 [ 95.039069][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.039091][ T6206] ? nlmon_xmit+0xb0/0x100 [ 95.039105][ T6206] ? kmem_cache_free+0x18f/0x400 [ 95.039127][ T6206] ? __local_bh_enable_ip+0x12d/0x1c0 [ 95.039150][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.039167][ T6206] ? __local_bh_enable_ip+0x12d/0x1c0 [ 95.039198][ T6206] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 95.039221][ T6206] ? __dev_queue_xmit+0x27e/0x3a70 [ 95.039258][ T6206] ? __lock_acquire+0xab9/0xd20 [ 95.039303][ T6206] ? __pfx_rtnl_newlink+0x10/0x10 [ 95.039321][ T6206] rtnetlink_rcv_msg+0x7cc/0xb70 [ 95.039345][ T6206] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 95.039363][ T6206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.039379][ T6206] ? ref_tracker_free+0x63a/0x7d0 [ 95.039398][ T6206] ? __copy_skb_header+0xa7/0x550 [ 95.039423][ T6206] ? __pfx_ref_tracker_free+0x10/0x10 [ 95.039454][ T6206] netlink_rcv_skb+0x208/0x470 [ 95.039474][ T6206] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 95.039493][ T6206] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 95.039519][ T6206] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.039538][ T6206] ? netlink_deliver_tap+0x2e/0x1b0 [ 95.039562][ T6206] netlink_unicast+0x75b/0x8d0 [ 95.039590][ T6206] netlink_sendmsg+0x805/0xb30 [ 95.039620][ T6206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.039644][ T6206] ? aa_sock_msg_perm+0x94/0x160 [ 95.039666][ T6206] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 95.039686][ T6206] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.039707][ T6206] __sock_sendmsg+0x219/0x270 [ 95.039729][ T6206] ____sys_sendmsg+0x505/0x830 [ 95.039756][ T6206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.039790][ T6206] ? import_iovec+0x74/0xa0 [ 95.039814][ T6206] ___sys_sendmsg+0x21f/0x2a0 [ 95.039838][ T6206] ? __pfx____sys_sendmsg+0x10/0x10 [ 95.039895][ T6206] ? __fget_files+0x2a/0x420 [ 95.039912][ T6206] ? __fget_files+0x3a0/0x420 [ 95.039938][ T6206] __x64_sys_sendmsg+0x19b/0x260 [ 95.039963][ T6206] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 95.039995][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 95.040016][ T6206] ? rcu_is_watching+0x15/0xb0 [ 95.040042][ T6206] ? do_syscall_64+0xbe/0x3b0 [ 95.040065][ T6206] do_syscall_64+0xfa/0x3b0 [ 95.040083][ T6206] ? lockdep_hardirqs_on+0x9c/0x150 [ 95.040100][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.040117][ T6206] ? clear_bhb_loop+0x60/0xb0 [ 95.040137][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.040154][ T6206] RIP: 0033:0x7f401df8e929 [ 95.040170][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.040192][ T6206] RSP: 002b:00007f401ee80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.040210][ T6206] RAX: ffffffffffffffda RBX: 00007f401e1b5fa0 RCX: 00007f401df8e929 [ 95.040222][ T6206] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 95.040232][ T6206] RBP: 00007f401ee80090 R08: 0000000000000000 R09: 0000000000000000 [ 95.040242][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.040252][ T6206] R13: 0000000000000000 R14: 00007f401e1b5fa0 R15: 00007ffd8d6c8bd8 [ 95.040280][ T6206] [ 95.477092][ C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 95.477109][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.590590][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.69'. [ 95.738031][ T6216] ip6t_srh: unknown srh invflags 4449 [ 95.818049][ T6218] trusted_key: syz.4.72 sent an empty control message without MSG_MORE. [ 95.970082][ T6220] netlink: 'syz.4.73': attribute type 4 has an invalid length. [ 96.335592][ T6227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.75'. [ 96.673474][ T6215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.712317][ T6215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.819960][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.80'. [ 96.885858][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.81'. [ 96.934294][ T6241] netlink: 'syz.1.79': attribute type 10 has an invalid length. [ 96.953429][ T3439] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 97.004216][ T3439] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 97.012040][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 97.090615][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 97.785338][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 97.797209][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 97.847596][ T6263] netlink: 'syz.0.88': attribute type 2 has an invalid length. [ 98.070930][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'. [ 98.111650][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 98.155544][ T6272] lo speed is unknown, defaulting to 1000 [ 98.194504][ T6276] ip6t_srh: unknown srh invflags 4449 [ 98.557551][ T6295] netlink: 'syz.4.97': attribute type 10 has an invalid length. [ 98.596770][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.630944][ T6295] bridge_slave_1: left allmulticast mode [ 98.643303][ T6295] bridge_slave_1: left promiscuous mode [ 98.657315][ T6295] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.682750][ T6295] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 98.973703][ T6313] netlink: 'syz.0.103': attribute type 8 has an invalid length. [ 98.997454][ T6312] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 99.034145][ T6313] FAULT_INJECTION: forcing a failure. [ 99.034145][ T6313] name failslab, interval 1, probability 0, space 0, times 0 [ 99.048842][ T6313] CPU: 0 UID: 0 PID: 6313 Comm: syz.0.103 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 99.048867][ T6313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.048877][ T6313] Call Trace: [ 99.048885][ T6313] [ 99.048894][ T6313] dump_stack_lvl+0x189/0x250 [ 99.048925][ T6313] ? __pfx____ratelimit+0x10/0x10 [ 99.048946][ T6313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.048971][ T6313] ? __pfx__printk+0x10/0x10 [ 99.048994][ T6313] ? __pfx___might_resched+0x10/0x10 [ 99.049020][ T6313] ? fs_reclaim_acquire+0x7d/0x100 [ 99.049046][ T6313] should_fail_ex+0x414/0x560 [ 99.049073][ T6313] should_failslab+0xa8/0x100 [ 99.049095][ T6313] __kmalloc_cache_noprof+0x70/0x3d0 [ 99.049112][ T6313] ? vlan_vid_add+0x313/0x760 [ 99.049137][ T6313] vlan_vid_add+0x313/0x760 [ 99.049168][ T6313] __br_vlan_set_proto+0x38d/0xe50 [ 99.049201][ T6313] ? __pfx___br_vlan_set_proto+0x10/0x10 [ 99.049215][ T6313] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 99.049237][ T6313] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 99.049254][ T6313] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.049279][ T6313] br_changelink+0x407/0x1650 [ 99.049296][ T6313] ? __mutex_lock+0xa6d/0xe80 [ 99.049315][ T6313] ? __pfx_br_changelink+0x10/0x10 [ 99.049329][ T6313] ? __mutex_lock+0x51b/0xe80 [ 99.049354][ T6313] ? rtnl_newlink+0x8db/0x1c70 [ 99.049377][ T6313] ? __pfx___mutex_lock+0x10/0x10 [ 99.049406][ T6313] ? ns_capable+0x8a/0xf0 [ 99.049429][ T6313] ? rtnl_link_get_net_capable+0x16a/0x350 [ 99.049453][ T6313] rtnl_newlink+0x1666/0x1c70 [ 99.049470][ T6313] ? netlink_sendmsg+0x805/0xb30 [ 99.049500][ T6313] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.049544][ T6313] ? kasan_quarantine_put+0xdd/0x220 [ 99.049567][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.049591][ T6313] ? nlmon_xmit+0xb0/0x100 [ 99.049606][ T6313] ? kmem_cache_free+0x18f/0x400 [ 99.049631][ T6313] ? __local_bh_enable_ip+0x12d/0x1c0 [ 99.049654][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.049672][ T6313] ? __local_bh_enable_ip+0x12d/0x1c0 [ 99.049693][ T6313] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 99.049721][ T6313] ? __dev_queue_xmit+0x27e/0x3a70 [ 99.049758][ T6313] ? __lock_acquire+0xab9/0xd20 [ 99.049810][ T6313] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.049840][ T6313] rtnetlink_rcv_msg+0x7cc/0xb70 [ 99.049863][ T6313] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 99.049883][ T6313] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.049899][ T6313] ? ref_tracker_free+0x63a/0x7d0 [ 99.049918][ T6313] ? __copy_skb_header+0xa7/0x550 [ 99.049941][ T6313] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.049972][ T6313] netlink_rcv_skb+0x208/0x470 [ 99.049993][ T6313] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.050013][ T6313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.050046][ T6313] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.050065][ T6313] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.050092][ T6313] netlink_unicast+0x75b/0x8d0 [ 99.050124][ T6313] netlink_sendmsg+0x805/0xb30 [ 99.050155][ T6313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.050181][ T6313] ? aa_sock_msg_perm+0x94/0x160 [ 99.050205][ T6313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.050226][ T6313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.050248][ T6313] __sock_sendmsg+0x219/0x270 [ 99.050271][ T6313] ____sys_sendmsg+0x505/0x830 [ 99.050302][ T6313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.050335][ T6313] ? import_iovec+0x74/0xa0 [ 99.050355][ T6313] ___sys_sendmsg+0x21f/0x2a0 [ 99.050377][ T6313] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.050437][ T6313] ? __fget_files+0x2a/0x420 [ 99.050455][ T6313] ? __fget_files+0x3a0/0x420 [ 99.050482][ T6313] __x64_sys_sendmsg+0x19b/0x260 [ 99.050506][ T6313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.050540][ T6313] ? __pfx_ksys_write+0x10/0x10 [ 99.050562][ T6313] ? rcu_is_watching+0x15/0xb0 [ 99.050591][ T6313] ? do_syscall_64+0xbe/0x3b0 [ 99.050615][ T6313] do_syscall_64+0xfa/0x3b0 [ 99.050631][ T6313] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.050648][ T6313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.050664][ T6313] ? clear_bhb_loop+0x60/0xb0 [ 99.050687][ T6313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.050704][ T6313] RIP: 0033:0x7f5305f8e929 [ 99.050719][ T6313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.050732][ T6313] RSP: 002b:00007f5306dfd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.050751][ T6313] RAX: ffffffffffffffda RBX: 00007f53061b5fa0 RCX: 00007f5305f8e929 [ 99.050764][ T6313] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 99.050775][ T6313] RBP: 00007f5306dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 99.050785][ T6313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.050795][ T6313] R13: 0000000000000000 R14: 00007f53061b5fa0 R15: 00007fffd8328368 [ 99.050833][ T6313] [ 99.557736][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 99.675677][ T6319] netlink: 28 bytes leftover after parsing attributes in process `syz.4.106'. [ 100.109865][ T6331] lo speed is unknown, defaulting to 1000 [ 100.410526][ T6347] ip6t_srh: unknown srh invflags 4449 [ 100.439879][ T6349] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 100.776610][ T6354] openvswitch: netlink: IP tunnel TTL not specified. [ 100.806560][ T6341] lo speed is unknown, defaulting to 1000 [ 100.917020][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 100.961131][ T6356] __nla_validate_parse: 1 callbacks suppressed [ 100.961148][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.118'. [ 101.138329][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.122'. [ 101.172098][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 101.211476][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.121'. [ 101.259332][ T6370] netlink: 'syz.4.121': attribute type 1 has an invalid length. [ 101.379365][ T6377] netlink: 'syz.2.124': attribute type 58 has an invalid length. [ 101.426279][ T6377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 101.479996][ T6370] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.550027][ T3448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.562585][ T3448] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.577136][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.757205][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.794380][ T6389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 101.866230][ T6391] netlink: 108 bytes leftover after parsing attributes in process `syz.4.131'. [ 102.027250][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.044796][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 102.113656][ T6387] lo speed is unknown, defaulting to 1000 [ 102.411539][ T6407] ip6t_srh: unknown srh invflags 4449 [ 102.499056][ T6409] netlink: 'syz.4.138': attribute type 8 has an invalid length. [ 102.531227][ T6409] FAULT_INJECTION: forcing a failure. [ 102.531227][ T6409] name failslab, interval 1, probability 0, space 0, times 0 [ 102.550927][ T6409] CPU: 1 UID: 0 PID: 6409 Comm: syz.4.138 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 102.550952][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.550963][ T6409] Call Trace: [ 102.550970][ T6409] [ 102.550978][ T6409] dump_stack_lvl+0x189/0x250 [ 102.551008][ T6409] ? __pfx____ratelimit+0x10/0x10 [ 102.551028][ T6409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.551053][ T6409] ? __pfx__printk+0x10/0x10 [ 102.551075][ T6409] ? __pfx___might_resched+0x10/0x10 [ 102.551099][ T6409] ? fs_reclaim_acquire+0x7d/0x100 [ 102.551125][ T6409] should_fail_ex+0x414/0x560 [ 102.551151][ T6409] should_failslab+0xa8/0x100 [ 102.551172][ T6409] __kmalloc_cache_noprof+0x70/0x3d0 [ 102.551188][ T6409] ? vlan_vid_add+0x313/0x760 [ 102.551212][ T6409] vlan_vid_add+0x313/0x760 [ 102.551243][ T6409] __br_vlan_set_proto+0x38d/0xe50 [ 102.551274][ T6409] ? __pfx___br_vlan_set_proto+0x10/0x10 [ 102.551298][ T6409] ? __pfx___mutex_trylock_common+0x10/0x10 [ 102.551326][ T6409] br_changelink+0x407/0x1650 [ 102.551344][ T6409] ? __mutex_lock+0x330/0xe80 [ 102.551363][ T6409] ? __pfx_br_changelink+0x10/0x10 [ 102.551380][ T6409] ? __pfx_aa_get_newest_label+0x10/0x10 [ 102.551405][ T6409] ? rtnl_newlink+0x8db/0x1c70 [ 102.551425][ T6409] ? rcu_is_watching+0x15/0xb0 [ 102.551451][ T6409] ? __pfx___mutex_lock+0x10/0x10 [ 102.551487][ T6409] ? ns_capable+0x8a/0xf0 [ 102.551513][ T6409] ? rtnl_link_get_net_capable+0x16a/0x350 [ 102.551538][ T6409] rtnl_newlink+0x1666/0x1c70 [ 102.551557][ T6409] ? netlink_sendmsg+0x805/0xb30 [ 102.551590][ T6409] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.551636][ T6409] ? kasan_quarantine_put+0xdd/0x220 [ 102.551660][ T6409] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.551685][ T6409] ? nlmon_xmit+0xb0/0x100 [ 102.551700][ T6409] ? kmem_cache_free+0x18f/0x400 [ 102.551724][ T6409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.551746][ T6409] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.551766][ T6409] ? __local_bh_enable_ip+0x12d/0x1c0 [ 102.551789][ T6409] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 102.551817][ T6409] ? __dev_queue_xmit+0x27e/0x3a70 [ 102.551855][ T6409] ? __lock_acquire+0xab9/0xd20 [ 102.551901][ T6409] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.551924][ T6409] rtnetlink_rcv_msg+0x7cc/0xb70 [ 102.551948][ T6409] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 102.551967][ T6409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.551984][ T6409] ? ref_tracker_free+0x63a/0x7d0 [ 102.552003][ T6409] ? __copy_skb_header+0xa7/0x550 [ 102.552029][ T6409] ? __pfx_ref_tracker_free+0x10/0x10 [ 102.552063][ T6409] netlink_rcv_skb+0x208/0x470 [ 102.552084][ T6409] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.552106][ T6409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.552140][ T6409] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.552159][ T6409] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.552185][ T6409] netlink_unicast+0x75b/0x8d0 [ 102.552216][ T6409] netlink_sendmsg+0x805/0xb30 [ 102.552246][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.552270][ T6409] ? aa_sock_msg_perm+0x94/0x160 [ 102.552292][ T6409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 102.552312][ T6409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.552334][ T6409] __sock_sendmsg+0x219/0x270 [ 102.552356][ T6409] ____sys_sendmsg+0x505/0x830 [ 102.552385][ T6409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.552418][ T6409] ? import_iovec+0x74/0xa0 [ 102.552440][ T6409] ___sys_sendmsg+0x21f/0x2a0 [ 102.552465][ T6409] ? __pfx____sys_sendmsg+0x10/0x10 [ 102.552536][ T6409] ? __fget_files+0x2a/0x420 [ 102.552555][ T6409] ? __fget_files+0x3a0/0x420 [ 102.552584][ T6409] __x64_sys_sendmsg+0x19b/0x260 [ 102.552610][ T6409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 102.552644][ T6409] ? __pfx_ksys_write+0x10/0x10 [ 102.552666][ T6409] ? rcu_is_watching+0x15/0xb0 [ 102.552696][ T6409] ? do_syscall_64+0xbe/0x3b0 [ 102.552720][ T6409] do_syscall_64+0xfa/0x3b0 [ 102.552737][ T6409] ? lockdep_hardirqs_on+0x9c/0x150 [ 102.552755][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.552773][ T6409] ? clear_bhb_loop+0x60/0xb0 [ 102.552794][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.552811][ T6409] RIP: 0033:0x7f401df8e929 [ 102.552827][ T6409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.552841][ T6409] RSP: 002b:00007f401ee80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.552860][ T6409] RAX: ffffffffffffffda RBX: 00007f401e1b5fa0 RCX: 00007f401df8e929 [ 102.552872][ T6409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 102.552883][ T6409] RBP: 00007f401ee80090 R08: 0000000000000000 R09: 0000000000000000 [ 102.552894][ T6409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.552904][ T6409] R13: 0000000000000000 R14: 00007f401e1b5fa0 R15: 00007ffd8d6c8bd8 [ 102.552933][ T6409] [ 103.397006][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 103.689343][ T6437] syz.1.142 uses obsolete (PF_INET,SOCK_PACKET) [ 103.755107][ T6426] syzkaller1: entered promiscuous mode [ 103.780045][ T6426] syzkaller1: entered allmulticast mode [ 103.863645][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.144'. [ 104.327718][ T6451] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 104.455335][ T9] IPVS: starting estimator thread 0... [ 104.557372][ T6457] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.662025][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.153'. [ 104.927601][ T3440] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 104.943356][ T3440] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 104.957093][ T5952] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 105.294797][ T6490] lo speed is unknown, defaulting to 1000 [ 105.450034][ T6498] netlink: 'syz.3.166': attribute type 10 has an invalid length. [ 105.495269][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.548689][ T6498] bridge_slave_1: left allmulticast mode [ 105.567054][ T6498] bridge_slave_1: left promiscuous mode [ 105.580789][ T6506] Bluetooth: MGMT ver 1.23 [ 105.610012][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.654055][ T6498] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 106.128358][ T6525] sctp: [Deprecated]: syz.4.174 (pid 6525) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.128358][ T6525] Use struct sctp_sack_info instead [ 106.216206][ T6529] netlink: 'syz.3.175': attribute type 4 has an invalid length. [ 106.325345][ T6534] netlink: 'syz.4.177': attribute type 8 has an invalid length. [ 106.396452][ T6534] FAULT_INJECTION: forcing a failure. [ 106.396452][ T6534] name failslab, interval 1, probability 0, space 0, times 0 [ 106.426634][ T6534] CPU: 0 UID: 0 PID: 6534 Comm: syz.4.177 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 106.426659][ T6534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.426670][ T6534] Call Trace: [ 106.426676][ T6534] [ 106.426684][ T6534] dump_stack_lvl+0x189/0x250 [ 106.426713][ T6534] ? __pfx____ratelimit+0x10/0x10 [ 106.426733][ T6534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.426756][ T6534] ? __pfx__printk+0x10/0x10 [ 106.426777][ T6534] ? __pfx___might_resched+0x10/0x10 [ 106.426801][ T6534] ? fs_reclaim_acquire+0x7d/0x100 [ 106.426828][ T6534] should_fail_ex+0x414/0x560 [ 106.426853][ T6534] should_failslab+0xa8/0x100 [ 106.426872][ T6534] __kmalloc_cache_noprof+0x70/0x3d0 [ 106.426888][ T6534] ? vlan_vid_add+0x313/0x760 [ 106.426912][ T6534] vlan_vid_add+0x313/0x760 [ 106.426940][ T6534] __br_vlan_set_proto+0x38d/0xe50 [ 106.426970][ T6534] ? __pfx___br_vlan_set_proto+0x10/0x10 [ 106.426985][ T6534] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 106.427007][ T6534] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 106.427024][ T6534] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.427050][ T6534] br_changelink+0x407/0x1650 [ 106.427068][ T6534] ? __mutex_lock+0xa6d/0xe80 [ 106.427087][ T6534] ? __pfx_br_changelink+0x10/0x10 [ 106.427110][ T6534] ? __mutex_lock+0x51b/0xe80 [ 106.427136][ T6534] ? rtnl_newlink+0x8db/0x1c70 [ 106.427160][ T6534] ? __pfx___mutex_lock+0x10/0x10 [ 106.427190][ T6534] ? ns_capable+0x8a/0xf0 [ 106.427215][ T6534] ? rtnl_link_get_net_capable+0x16a/0x350 [ 106.427241][ T6534] rtnl_newlink+0x1666/0x1c70 [ 106.427258][ T6534] ? netlink_sendmsg+0x805/0xb30 [ 106.427290][ T6534] ? __pfx_rtnl_newlink+0x10/0x10 [ 106.427334][ T6534] ? kasan_quarantine_put+0xdd/0x220 [ 106.427358][ T6534] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.427382][ T6534] ? nlmon_xmit+0xb0/0x100 [ 106.427397][ T6534] ? kmem_cache_free+0x18f/0x400 [ 106.427420][ T6534] ? __local_bh_enable_ip+0x12d/0x1c0 [ 106.427444][ T6534] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.427464][ T6534] ? __local_bh_enable_ip+0x12d/0x1c0 [ 106.427486][ T6534] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 106.427515][ T6534] ? __dev_queue_xmit+0x27e/0x3a70 [ 106.427553][ T6534] ? __lock_acquire+0xab9/0xd20 [ 106.427601][ T6534] ? __pfx_rtnl_newlink+0x10/0x10 [ 106.427621][ T6534] rtnetlink_rcv_msg+0x7cc/0xb70 [ 106.427644][ T6534] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 106.427663][ T6534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.427680][ T6534] ? ref_tracker_free+0x63a/0x7d0 [ 106.427699][ T6534] ? __copy_skb_header+0xa7/0x550 [ 106.427725][ T6534] ? __pfx_ref_tracker_free+0x10/0x10 [ 106.427757][ T6534] netlink_rcv_skb+0x208/0x470 [ 106.427778][ T6534] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.427800][ T6534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.427834][ T6534] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.427854][ T6534] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.427880][ T6534] netlink_unicast+0x75b/0x8d0 [ 106.427911][ T6534] netlink_sendmsg+0x805/0xb30 [ 106.427939][ T6534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.427964][ T6534] ? aa_sock_msg_perm+0x94/0x160 [ 106.427987][ T6534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.428007][ T6534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.428027][ T6534] __sock_sendmsg+0x219/0x270 [ 106.428048][ T6534] ____sys_sendmsg+0x505/0x830 [ 106.428076][ T6534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.428116][ T6534] ? import_iovec+0x74/0xa0 [ 106.428137][ T6534] ___sys_sendmsg+0x21f/0x2a0 [ 106.428163][ T6534] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.428227][ T6534] ? __fget_files+0x2a/0x420 [ 106.428245][ T6534] ? __fget_files+0x3a0/0x420 [ 106.428274][ T6534] __x64_sys_sendmsg+0x19b/0x260 [ 106.428300][ T6534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 106.428334][ T6534] ? __pfx_ksys_write+0x10/0x10 [ 106.428356][ T6534] ? rcu_is_watching+0x15/0xb0 [ 106.428386][ T6534] ? do_syscall_64+0xbe/0x3b0 [ 106.428409][ T6534] do_syscall_64+0xfa/0x3b0 [ 106.428427][ T6534] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.428446][ T6534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428463][ T6534] ? clear_bhb_loop+0x60/0xb0 [ 106.428485][ T6534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.428502][ T6534] RIP: 0033:0x7f401df8e929 [ 106.428518][ T6534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.428531][ T6534] RSP: 002b:00007f401ee80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.428550][ T6534] RAX: ffffffffffffffda RBX: 00007f401e1b5fa0 RCX: 00007f401df8e929 [ 106.428563][ T6534] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 106.428573][ T6534] RBP: 00007f401ee80090 R08: 0000000000000000 R09: 0000000000000000 [ 106.428583][ T6534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.428593][ T6534] R13: 0000000000000000 R14: 00007f401e1b5fa0 R15: 00007ffd8d6c8bd8 [ 106.428623][ T6534] [ 106.984742][ T6543] __nla_validate_parse: 5 callbacks suppressed [ 106.984761][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.181'. [ 107.273750][ T6556] ip6t_srh: unknown srh invflags 4449 [ 107.420767][ T6563] ip6t_srh: unknown srh invflags 4449 [ 107.654245][ T6558] lo speed is unknown, defaulting to 1000 [ 107.812800][ T6570] No such timeout policy "syz1" [ 107.917636][ T6575] netlink: 16 bytes leftover after parsing attributes in process `syz.0.193'. [ 107.959455][ T3440] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 107.959475][ T3440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.997070][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.004961][ T3440] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.027027][ T6570] tun0: tun_chr_ioctl cmd 2148553947 [ 108.108357][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 108.334091][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 108.354986][ T6562] lo speed is unknown, defaulting to 1000 [ 108.766108][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.077478][ T6620] ip6t_srh: unknown srh invflags 4449 [ 109.123784][ T6605] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 109.157033][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 109.302658][ T6624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 109.397357][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 109.518421][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 109.527685][ T6623] lo speed is unknown, defaulting to 1000 [ 110.130834][ T6641] netlink: 'syz.2.212': attribute type 3 has an invalid length. [ 110.178456][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 111.154709][ T6674] Unknown options in mask 700 [ 111.163054][ T6669] lo speed is unknown, defaulting to 1000 [ 111.432309][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.222'. [ 111.833578][ T6690] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 111.871629][ T6690] macsec1: entered promiscuous mode [ 111.877108][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.900436][ T6690] macsec1: entered allmulticast mode [ 111.914204][ T6693] Driver unsupported XDP return value 0 on prog (id 73) dev N/A, expect packet loss! [ 111.915237][ T6690] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 111.943372][ T6701] xt_ecn: cannot match TCP bits for non-tcp packets [ 112.250844][ T6712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.411639][ T6714] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 112.484394][ T6712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.508113][ T6725] kthread_run failed with err -4 [ 112.735628][ T6712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.791733][ T6733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 112.837033][ T6735] block nbd0: server does not support multiple connections per device. [ 112.870135][ T6735] block nbd0: shutting down sockets [ 112.924355][ T6712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.109915][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 113.150665][ T6743] lo speed is unknown, defaulting to 1000 [ 113.194106][ T3478] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.257033][ T3439] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.294561][ T3439] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.335455][ T6754] ip6t_srh: unknown srh invflags 4449 [ 113.356880][ T3439] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.561187][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 113.597119][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 114.096438][ T6773] lo speed is unknown, defaulting to 1000 [ 114.130881][ T6782] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 114.249818][ T6787] netlink: 'syz.0.252': attribute type 84 has an invalid length. [ 114.314267][ T6784] netlink: 'syz.1.253': attribute type 5 has an invalid length. [ 114.724431][ T6806] netlink: 'syz.0.258': attribute type 3 has an invalid length. [ 114.751936][ T6802] delete_channel: no stack [ 114.917037][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.285216][ T6830] ip6t_srh: unknown srh invflags 4449 [ 115.344567][ T6828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 115.567752][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 115.970689][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.270'. [ 116.036484][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 116.349904][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 116.513572][ T6864] lo speed is unknown, defaulting to 1000 [ 116.739525][ T6882] ip6t_srh: unknown srh invflags 4449 [ 116.754360][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.281'. [ 117.011332][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.031900][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.037118][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.193135][ T6876] lo speed is unknown, defaulting to 1000 [ 117.392843][ T6896] x_tables: duplicate underflow at hook 1 [ 117.798233][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.870434][ T6910] team_slave_0: entered promiscuous mode [ 117.876318][ T6910] team_slave_1: entered promiscuous mode [ 117.882438][ T5936] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.907267][ T6910] vlan2: entered promiscuous mode [ 117.912476][ T6910] team0: entered promiscuous mode [ 118.286597][ T6918] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 118.336256][ T6924] bridge_slave_0: left allmulticast mode [ 118.342652][ T6918] netlink: 'syz.1.295': attribute type 10 has an invalid length. [ 118.353358][ T6924] bridge_slave_0: left promiscuous mode [ 118.363472][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.417873][ T6924] bond0: (slave bridge_slave_1): Releasing backup interface [ 118.430327][ T6924] bond0: (slave bond_slave_0): Releasing backup interface [ 118.441717][ T6924] bond0: (slave bond_slave_1): Releasing backup interface [ 118.461751][ T6924] team0: Port device team_slave_0 removed [ 118.474580][ T6924] team0: Port device team_slave_1 removed [ 118.481938][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.489643][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.503134][ T6924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.512670][ T6924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.548102][ T6089] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.578072][ T6918] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 118.591387][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.606616][ T6918] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.757006][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 118.757008][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 118.830082][ T6934] __nla_validate_parse: 4 callbacks suppressed [ 118.830100][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'. [ 118.965449][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'. [ 119.071078][ T6941] netlink: 'syz.1.303': attribute type 10 has an invalid length. [ 119.660729][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 119.756964][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 119.808113][ T6963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 119.985891][ T6969] lo speed is unknown, defaulting to 1000 [ 120.037063][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 120.037080][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 120.040324][ T6978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.317'. [ 120.189210][ T3440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.198370][ T3440] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.217104][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 120.705668][ T6993] pim6reg1: entered allmulticast mode [ 120.822407][ T7005] netlink: 44 bytes leftover after parsing attributes in process `syz.4.325'. [ 120.874322][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.325'. [ 120.999353][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 121.013996][ T6976] lo speed is unknown, defaulting to 1000 [ 121.047334][ T7008] ip6t_srh: unknown srh invflags 4449 [ 121.157012][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 121.157154][ T5936] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 121.679720][ T6995] lo speed is unknown, defaulting to 1000 [ 121.995260][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 122.083417][ T7040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.336'. [ 122.534540][ T7046] lo speed is unknown, defaulting to 1000 [ 123.004683][ T48] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 123.022327][ T48] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 123.030737][ T5926] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 123.135124][ T7066] netlink: 'syz.4.347': attribute type 5 has an invalid length. [ 123.426052][ T7069] ip6t_srh: unknown srh invflags 4449 [ 123.839611][ T7081] __nla_validate_parse: 2 callbacks suppressed [ 123.839626][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 123.881995][ T7081] syz.4.353 (7081) used greatest stack depth: 18328 bytes left [ 123.890963][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 124.020640][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 124.066274][ T7101] lo speed is unknown, defaulting to 1000 [ 124.116279][ T7104] netlink: 256 bytes leftover after parsing attributes in process `syz.0.361'. [ 124.138073][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.4.358'. [ 124.223287][ T7111] ip6t_srh: unknown srh invflags 4449 [ 124.362717][ T7116] netlink: 248 bytes leftover after parsing attributes in process `syz.2.365'. [ 124.379981][ T7113] ip6t_srh: unknown srh invflags 4449 [ 124.495267][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.366'. [ 125.109853][ T7138] lo speed is unknown, defaulting to 1000 [ 125.136594][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 125.428179][ T7150] ip6t_srh: unknown srh invflags 4449 [ 125.480311][ T48] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 125.480330][ T48] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 125.527096][ T48] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 125.535731][ T5926] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 125.577149][ T5926] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 125.674433][ T7156] bridge0: port 2(ipvlan2) entered blocking state [ 125.681484][ T7156] bridge0: port 2(ipvlan2) entered disabled state [ 125.697260][ T7156] ipvlan2: entered allmulticast mode [ 125.707284][ T7156] veth0_vlan: entered allmulticast mode [ 125.727143][ T7156] ipvlan2: left allmulticast mode [ 125.742401][ T7156] veth0_vlan: left allmulticast mode [ 125.855946][ T7162] netlink: 'syz.4.381': attribute type 5 has an invalid length. [ 126.213075][ T7171] ip6t_srh: unknown srh invflags 4449 [ 126.280970][ T6089] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 126.448717][ T7180] netlink: 'syz.1.386': attribute type 1 has an invalid length. [ 126.468764][ T7180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.386'. [ 126.734093][ T7190] ip6t_srh: unknown srh invflags 4449 [ 127.279574][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.398'. [ 127.325064][ T3456] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.347144][ T3456] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.354880][ T6089] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.477015][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 127.487260][ T6089] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 127.625992][ T7239] ip6t_srh: unknown srh invflags 4449 [ 127.640611][ T7227] ip6t_srh: unknown srh invflags 4449 [ 127.745649][ T7235] lo speed is unknown, defaulting to 1000 [ 127.760114][ T7244] netlink: 'syz.2.408': attribute type 2 has an invalid length. [ 128.089210][ T7257] Unknown options in mask 700 [ 128.240414][ T7262] _ÐZ`Ô€@: entered promiscuous mode [ 128.251886][ T7265] netlink: 'syz.2.416': attribute type 5 has an invalid length. [ 128.623020][ T7276] ip6t_srh: unknown srh invflags 4449 [ 128.995731][ T7297] netlink: 'syz.3.428': attribute type 1 has an invalid length. [ 129.003765][ T7297] __nla_validate_parse: 2 callbacks suppressed [ 129.003783][ T7297] netlink: 232 bytes leftover after parsing attributes in process `syz.3.428'. [ 129.211538][ T7312] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 129.267916][ T7314] netlink: 'syz.1.433': attribute type 10 has an invalid length. [ 129.448188][ T7321] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 129.536183][ T7323] ip6t_srh: unknown srh invflags 4449 [ 129.718252][ T7332] netlink: 224 bytes leftover after parsing attributes in process `syz.4.440'. [ 129.970969][ T7345] syzkaller1: entered promiscuous mode [ 129.976491][ T7345] syzkaller1: entered allmulticast mode [ 130.013703][ T7340] lo speed is unknown, defaulting to 1000 [ 130.052159][ T7349] netlink: 'syz.3.447': attribute type 10 has an invalid length. [ 130.390041][ T7359] netlink: 44 bytes leftover after parsing attributes in process `syz.2.451'. [ 130.441164][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 130.803901][ T3440] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.823298][ T3440] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.838069][ T7379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.458'. [ 130.871467][ T3440] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.886436][ T3440] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.974708][ T7384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.460'. [ 131.073600][ T7387] syzkaller1: entered promiscuous mode [ 131.095042][ T7387] syzkaller1: entered allmulticast mode [ 131.100932][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 131.364153][ T7399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.465'. [ 131.450102][ T7400] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 131.600877][ T7406] bridge3: entered promiscuous mode [ 131.606316][ T7406] bridge3: entered allmulticast mode [ 131.618354][ T7406] team0: Port device bridge3 added [ 131.632559][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 131.797032][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 131.797050][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 131.836513][ T7406] team0 (unregistering): Port device team_slave_0 removed [ 131.848542][ T7406] team0 (unregistering): Port device team_slave_1 removed [ 131.862787][ T7406] team0 (unregistering): Port device bridge3 removed [ 131.910335][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.470'. [ 131.935509][ T7414] tipc: Started in network mode [ 131.948983][ T7414] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 131.971596][ T7414] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 131.983033][ T7414] tipc: Enabled bearer , priority 10 [ 132.841684][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.973711][ T7475] lo speed is unknown, defaulting to 1000 [ 133.011166][ T7484] netlink: 'syz.2.500': attribute type 1 has an invalid length. [ 133.108199][ T9] tipc: Node number set to 1 [ 133.150945][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.213931][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.244386][ T7488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.260188][ T7488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.344741][ T7480] netlink: 'syz.1.497': attribute type 6 has an invalid length. [ 134.127001][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 134.262974][ T7535] __nla_validate_parse: 6 callbacks suppressed [ 134.262992][ T7535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 134.344484][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.685396][ T7546] bridge_slave_0: left allmulticast mode [ 134.691258][ T7546] bridge_slave_0: left promiscuous mode [ 134.701044][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.045342][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 135.280563][ T7546] bond0: (slave bridge_slave_1): Releasing backup interface [ 135.314908][ T7546] bond0: (slave bond_slave_0): Releasing backup interface [ 135.377428][ T7546] bond0: (slave bond_slave_1): Releasing backup interface [ 135.515515][ T7546] team0: Port device team_slave_0 removed [ 135.543041][ T7546] team0: Port device team_slave_1 removed [ 135.550641][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.559670][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.580277][ T7546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.602519][ T7546] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.651204][ T9] lo speed is unknown, defaulting to 1000 [ 135.665432][ T7553] team0: Mode changed to "roundrobin" [ 135.670153][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.037054][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 136.461253][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 136.476737][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 136.597641][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.677030][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.684833][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 137.254491][ T7643] syzkaller0: entered promiscuous mode [ 137.276894][ T7643] syzkaller0: entered allmulticast mode [ 137.287031][ T7650] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 137.348636][ T7654] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 137.356544][ T7654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.572'. [ 137.366395][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 137.621590][ T3440] tipc: Subscription rejected, illegal request [ 138.597072][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 138.841914][ T5952] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.903173][ T7677] syzkaller1: entered promiscuous mode [ 138.912999][ T7677] syzkaller1: entered allmulticast mode [ 139.003516][ T7686] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 139.167040][ T6089] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 140.167204][ T7762] netlink: 'syz.4.619': attribute type 1 has an invalid length. [ 140.203120][ T7765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.620'. [ 140.222202][ T7762] bond2: (slave geneve2): making interface the new active one [ 140.231182][ T7762] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 140.260912][ T7762] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 140.271033][ T48] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.276351][ T7762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 140.319934][ T48] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.357784][ T7762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.373884][ T48] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.419931][ T48] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.517038][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 140.603892][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 140.884464][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.636'. [ 141.013821][ T7806] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 141.064003][ T7809] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 141.634848][ T7848] tipc: Can't bind to reserved service type 0 [ 141.916779][ T7863] netlink: 1 bytes leftover after parsing attributes in process `syz.4.661'. [ 142.202296][ T7880] netlink: 'syz.0.669': attribute type 1 has an invalid length. [ 142.270574][ T7880] bond2: (slave geneve2): making interface the new active one [ 142.295212][ T7880] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 142.311898][ T48] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.321177][ T48] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.343607][ T7880] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 142.354715][ T48] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.382530][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.0.669'. [ 142.391581][ T48] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.404880][ T7880] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.481989][ T7892] netlink: 'syz.3.674': attribute type 10 has an invalid length. [ 142.486905][ T3495] ------------[ cut here ]------------ [ 142.490687][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.495355][ T3495] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 142.496146][ T3495] WARNING: CPU: 0 PID: 3495 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 142.510096][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.512295][ T3495] Modules linked in: [ 142.522037][ T7892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.528015][ T7892] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 142.531043][ T3495] [ 142.552922][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: kworker/u8:12 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 142.565627][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.576060][ T3495] Workqueue: bond0 bond_mii_monitor [ 142.581599][ T3495] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 142.587717][ T3495] Code: 7c fe ff ff e8 6e 2a 69 f8 c6 05 15 15 34 06 01 90 48 c7 c7 c0 df 92 8c 48 c7 c6 61 d7 9c 8d ba 48 00 00 00 e8 de d2 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 142.607723][ T3495] RSP: 0018:ffffc9000c477670 EFLAGS: 00010246 [ 142.613823][ T3495] RAX: c2bf68f9420b0100 RBX: ffff88805d7d4000 RCX: ffff8880312c1e00 [ 142.621984][ T3495] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 142.630881][ T3495] RBP: 0000000000000000 R08: ffffffff8fa133f7 R09: 1ffffffff1f4267e [ 142.639659][ T3495] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: 1ffff1100bafa85d [ 142.647943][ T3495] R13: dffffc0000000000 R14: ffffffff8c1c5708 R15: 0000000000000000 [ 142.655954][ T3495] FS: 0000000000000000(0000) GS:ffff888125c48000(0000) knlGS:0000000000000000 [ 142.664942][ T3495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.671604][ T3495] CR2: 00007fed338e56c0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 142.680064][ T3495] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 142.688095][ T3495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 142.696081][ T3495] Call Trace: [ 142.699413][ T3495] [ 142.702364][ T3495] ? ethtool_op_get_link+0xd/0x70 [ 142.707718][ T3495] ethtool_op_get_link+0x15/0x70 [ 142.712687][ T3495] bond_check_dev_link+0x447/0x6c0 [ 142.717861][ T3495] ? __pfx_bond_check_dev_link+0x10/0x10 [ 142.723531][ T3495] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 142.730027][ T3495] bond_mii_monitor+0x428/0x2e00 [ 142.735900][ T3495] ? bond_mii_monitor+0x153/0x2e00 [ 142.742147][ T3495] ? __pfx_bond_mii_monitor+0x10/0x10 [ 142.747604][ T3495] ? __lock_acquire+0xab9/0xd20 [ 142.752488][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 142.758290][ T3495] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.763509][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 142.769576][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 142.775319][ T3495] process_scheduled_works+0xae1/0x17b0 [ 142.780913][ T3495] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.786964][ T3495] worker_thread+0x8a0/0xda0 [ 142.791575][ T3495] kthread+0x70e/0x8a0 [ 142.795635][ T3495] ? __pfx_worker_thread+0x10/0x10 [ 142.801045][ T3495] ? __pfx_kthread+0x10/0x10 [ 142.805668][ T3495] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.810911][ T3495] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.816126][ T3495] ? __pfx_kthread+0x10/0x10 [ 142.820729][ T3495] ret_from_fork+0x3fc/0x770 [ 142.825316][ T3495] ? __pfx_ret_from_fork+0x10/0x10 [ 142.830741][ T3495] ? __switch_to_asm+0x39/0x70 [ 142.836365][ T3495] ? __switch_to_asm+0x33/0x70 [ 142.842361][ T3495] ? __pfx_kthread+0x10/0x10 [ 142.847022][ T3495] ret_from_fork_asm+0x1a/0x30 [ 142.851819][ T3495] [ 142.854846][ T3495] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.862126][ T3495] CPU: 0 UID: 0 PID: 3495 Comm: kworker/u8:12 Not tainted 6.16.0-rc3-syzkaller-00909-g647496422ba9 #0 PREEMPT(full) [ 142.874370][ T3495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.884432][ T3495] Workqueue: bond0 bond_mii_monitor [ 142.889628][ T3495] Call Trace: [ 142.892894][ T3495] [ 142.895817][ T3495] dump_stack_lvl+0x99/0x250 [ 142.900405][ T3495] ? __asan_memcpy+0x40/0x70 [ 142.904988][ T3495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.910195][ T3495] ? __pfx__printk+0x10/0x10 [ 142.914797][ T3495] panic+0x2db/0x790 [ 142.918697][ T3495] ? __pfx_panic+0x10/0x10 [ 142.923127][ T3495] ? ret_from_fork_asm+0x1a/0x30 [ 142.928053][ T3495] __warn+0x31b/0x4b0 [ 142.932034][ T3495] ? __linkwatch_sync_dev+0x303/0x350 [ 142.937404][ T3495] ? __linkwatch_sync_dev+0x303/0x350 [ 142.942785][ T3495] report_bug+0x2be/0x4f0 [ 142.947111][ T3495] ? __linkwatch_sync_dev+0x303/0x350 [ 142.952481][ T3495] ? __linkwatch_sync_dev+0x303/0x350 [ 142.957845][ T3495] ? __linkwatch_sync_dev+0x305/0x350 [ 142.963212][ T3495] handle_bug+0x84/0x160 [ 142.967446][ T3495] exc_invalid_op+0x1a/0x50 [ 142.971940][ T3495] asm_exc_invalid_op+0x1a/0x20 [ 142.976783][ T3495] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 142.982765][ T3495] Code: 7c fe ff ff e8 6e 2a 69 f8 c6 05 15 15 34 06 01 90 48 c7 c7 c0 df 92 8c 48 c7 c6 61 d7 9c 8d ba 48 00 00 00 e8 de d2 2c f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 143.002364][ T3495] RSP: 0018:ffffc9000c477670 EFLAGS: 00010246 [ 143.008427][ T3495] RAX: c2bf68f9420b0100 RBX: ffff88805d7d4000 RCX: ffff8880312c1e00 [ 143.016405][ T3495] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 143.024364][ T3495] RBP: 0000000000000000 R08: ffffffff8fa133f7 R09: 1ffffffff1f4267e [ 143.032325][ T3495] R10: dffffc0000000000 R11: fffffbfff1f4267f R12: 1ffff1100bafa85d [ 143.040287][ T3495] R13: dffffc0000000000 R14: ffffffff8c1c5708 R15: 0000000000000000 [ 143.048269][ T3495] ? ethtool_op_get_link+0xd/0x70 [ 143.053296][ T3495] ethtool_op_get_link+0x15/0x70 [ 143.058234][ T3495] bond_check_dev_link+0x447/0x6c0 [ 143.063343][ T3495] ? __pfx_bond_check_dev_link+0x10/0x10 [ 143.068974][ T3495] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 143.075382][ T3495] bond_mii_monitor+0x428/0x2e00 [ 143.080323][ T3495] ? bond_mii_monitor+0x153/0x2e00 [ 143.085450][ T3495] ? __pfx_bond_mii_monitor+0x10/0x10 [ 143.090822][ T3495] ? __lock_acquire+0xab9/0xd20 [ 143.095684][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 143.101403][ T3495] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.106601][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 143.112334][ T3495] ? process_scheduled_works+0x9ef/0x17b0 [ 143.118070][ T3495] process_scheduled_works+0xae1/0x17b0 [ 143.123650][ T3495] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.129650][ T3495] worker_thread+0x8a0/0xda0 [ 143.134263][ T3495] kthread+0x70e/0x8a0 [ 143.138327][ T3495] ? __pfx_worker_thread+0x10/0x10 [ 143.143435][ T3495] ? __pfx_kthread+0x10/0x10 [ 143.148019][ T3495] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.153208][ T3495] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.158395][ T3495] ? __pfx_kthread+0x10/0x10 [ 143.162980][ T3495] ret_from_fork+0x3fc/0x770 [ 143.167569][ T3495] ? __pfx_ret_from_fork+0x10/0x10 [ 143.172701][ T3495] ? __switch_to_asm+0x39/0x70 [ 143.177452][ T3495] ? __switch_to_asm+0x33/0x70 [ 143.182212][ T3495] ? __pfx_kthread+0x10/0x10 [ 143.186799][ T3495] ret_from_fork_asm+0x1a/0x30 [ 143.191570][ T3495] [ 143.194876][ T3495] Kernel Offset: disabled [ 143.199193][ T3495] Rebooting in 86400 seconds..