last executing test programs: 1.80505389s ago: executing program 1 (id=1628): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.076632309s ago: executing program 0 (id=1641): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7}, {0x5, 0xb}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) 1.076270264s ago: executing program 2 (id=1642): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff5050505050080000008f0000432fc556dd"], 0x50}}, 0x0) 1.052438649s ago: executing program 3 (id=1644): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb}, 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x75, &(0x7f0000000000)=r3, 0x8) 998.224567ms ago: executing program 0 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x0, 0x0, 0x8}, {0x6}]}) 948.909955ms ago: executing program 2 (id=1646): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x20000001) setsockopt$sock_attach_bpf(r0, 0x6, 0x21, &(0x7f0000001540), 0x20) 896.536173ms ago: executing program 4 (id=1647): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x903, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 895.968091ms ago: executing program 1 (id=1648): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0400460005003400fe000000080026006c09000030"], 0x60}}, 0x40080) 844.776306ms ago: executing program 3 (id=1649): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 794.095374ms ago: executing program 4 (id=1650): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x3a4, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x360, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xc7}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_ACT={0x7c, 0x6, [@m_skbmod={0x78, 0x10, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0x3d, 0x6, "7901b3fc3a31098ccc741994d7db7a507cbf22a1ff0285366899077d32faa55f59c3af121f3f1a3ae833a52c0446aab12aca4e1ec36703c61a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}, @TCA_ROUTE4_ACT={0x2b0, 0x6, [@m_mpls={0x10c, 0xc, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xb, 0x7fffffff, 0x8, 0xfbd3, 0x41}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0x7}]}, {0xba, 0x6, "1450832869f1faf9080bb8c14c3ffd9f068a5a099e83984416194bab23580c5cb15163044f3389338ec4f4022499e130b6433d16206d59d6d8ebd344b5f42f85e3a20e0067700f153cdacd9913f7f4377820356cbfefea1007b06f9ca2c61e9bdcdb4ccecf878915171448b8d42c0bda69c93fc6c0a82cecb26a1d9b164e2ab6fd24d8a70eb230b60d404af62718008e88a31e6644dea180d15f7badce7042d175bf172e27eebe8d41b1643109371695bfde576ebaba"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0xe4, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @random="52d96a7aa793"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x95, 0x6, "2f340131b00ac8304c6eb30f89b66aed2bbfe46e1716e34ebb9e6379ade6e573c1bda6931adc221c9bc78ccf7626d6b5ebb3eb289294c7544951bcf31a11180ec9935d21c364a168b2706f9517190268ab56817543205e5be1ef00df564f32b979412db3abe9a46418928e950d99d4e605cc0a64c1213499990153e3ee11585fae3ec3016a910b579ab915e4520de7078f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_csum={0xbc, 0x11, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x2, 0x400, 0x9}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xe42e, 0x2}, 0x5c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x1, 0x20000001, 0x7, 0x400}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0xffffffffffffffff, 0x5, 0x4}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7f, 0x5, 0x10000000, 0x33e, 0x3}, 0x21}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 771.733685ms ago: executing program 0 (id=1651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x23, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x7e, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x6f}, 0x1, 0x0, 0x0, 0x40000}, 0x60000000) listen(r2, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200ffffffffffffff"], 0x1eb) 724.75545ms ago: executing program 2 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000140)={'syzkaller0\x00', @random="000f00"}) close(0x3) 678.096864ms ago: executing program 1 (id=1653): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000017c0)="93a734", 0x3}], 0x1}, 0x40) sendmsg$inet(r0, 0x0, 0x4010) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2004c841) 677.618742ms ago: executing program 3 (id=1654): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/cgroup\x00') r0 = socket(0x8, 0x4, 0x1) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x8000}, 0xc) 617.422077ms ago: executing program 4 (id=1655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ff", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 520.782134ms ago: executing program 1 (id=1656): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff5050505050080000008f0000432fc556dd"], 0x50}}, 0x0) 493.083961ms ago: executing program 3 (id=1657): r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044942, &(0x7f0000000200)) 492.701615ms ago: executing program 4 (id=1658): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000940)="5c00000012006bab9a3fe3d86e17aa0a046b870af34f04001a001931a0e69ee517d2301f2febcf0eca707888d34460bc8c000000a705251e6182949a3651f60a84c9e4d4938037e70e4509c5bb00000000000000000000ee17459447", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/212, 0xd4}, {&(0x7f0000001e40)=""/4097, 0x1001}, {&(0x7f0000000a40)=""/234, 0xea}, {&(0x7f0000000600)=""/226, 0xe2}, {&(0x7f0000000700)=""/136, 0x88}, {&(0x7f0000002e80)=""/4037, 0xfc5}, {&(0x7f00000007c0)=""/261, 0x105}, {&(0x7f00000002c0)=""/171, 0xab}], 0x9}, 0x40010002) 386.138719ms ago: executing program 0 (id=1659): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x800a801) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="fa55a399db34dd5dad0613480eff1599c2015e864e5a7756aee4bba6894af69245e90c3028f176", 0x27}, {&(0x7f00000003c0)="342c5a6f61db", 0x6}, {&(0x7f0000000200)="facde9f8ac79774b83abd29892dfe4b4388fee3b7db42115f5b5789c", 0x1c}], 0x3}}], 0x1, 0x404000c) 339.618036ms ago: executing program 4 (id=1660): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x903, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 338.79362ms ago: executing program 1 (id=1661): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 320.291379ms ago: executing program 2 (id=1662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 303.939744ms ago: executing program 3 (id=1663): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="1c3a838777cb5c129637a766ab823c0f15ecb5f15bd40c88", 0x18}], 0x1, 0x0, 0x0, 0x10}}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1}, 0x0) 228.48379ms ago: executing program 0 (id=1664): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 227.778318ms ago: executing program 1 (id=1665): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 215.800416ms ago: executing program 4 (id=1666): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 140.411771ms ago: executing program 3 (id=1667): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu '], 0x5) write$cgroup_subtree(r5, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r6 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 68.369047ms ago: executing program 2 (id=1668): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffd, 0x7}]}}}}}}}, 0x0) 67.967688ms ago: executing program 0 (id=1669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x23, 0x80805, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x7e, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x6f}, 0x1, 0x0, 0x0, 0x40000}, 0x60000000) listen(r2, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200ffffffffffffff"], 0x1eb) 0s ago: executing program 2 (id=1670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 84.521574][ T5829] cgroup: Unknown subsys name 'net' [ 84.656427][ T5829] cgroup: Unknown subsys name 'cpuset' [ 84.665765][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.341328][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.511281][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.528767][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.537507][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.544401][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.547108][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.552431][ T5858] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.569286][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.578618][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.585752][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.593761][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.601931][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.610242][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.619288][ T5859] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.627928][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.637610][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.646881][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.649398][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.655759][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.668844][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.680085][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.692214][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.709174][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.716469][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.727008][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.745962][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.308254][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.478305][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.550715][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 91.638573][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.710058][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.718096][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.726230][ T5839] bridge_slave_0: entered allmulticast mode [ 91.734412][ T5839] bridge_slave_0: entered promiscuous mode [ 91.792774][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.799950][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.807461][ T5839] bridge_slave_1: entered allmulticast mode [ 91.815548][ T5839] bridge_slave_1: entered promiscuous mode [ 91.873030][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 91.946233][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.021025][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.031247][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.039488][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.047283][ T5840] bridge_slave_0: entered allmulticast mode [ 92.054980][ T5840] bridge_slave_0: entered promiscuous mode [ 92.064063][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.071242][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.079185][ T5840] bridge_slave_1: entered allmulticast mode [ 92.089646][ T5840] bridge_slave_1: entered promiscuous mode [ 92.096620][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.104037][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.111210][ T5845] bridge_slave_0: entered allmulticast mode [ 92.118748][ T5845] bridge_slave_0: entered promiscuous mode [ 92.173722][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.180951][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.188771][ T5845] bridge_slave_1: entered allmulticast mode [ 92.196243][ T5845] bridge_slave_1: entered promiscuous mode [ 92.280930][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.288362][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.295978][ T5841] bridge_slave_0: entered allmulticast mode [ 92.304501][ T5841] bridge_slave_0: entered promiscuous mode [ 92.322702][ T5839] team0: Port device team_slave_0 added [ 92.333601][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.346234][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.359388][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.366873][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.374340][ T5841] bridge_slave_1: entered allmulticast mode [ 92.381810][ T5841] bridge_slave_1: entered promiscuous mode [ 92.419214][ T5839] team0: Port device team_slave_1 added [ 92.428285][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.440189][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.527376][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.551301][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.558820][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.566612][ T5847] bridge_slave_0: entered allmulticast mode [ 92.574672][ T5847] bridge_slave_0: entered promiscuous mode [ 92.583094][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.590290][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.598396][ T5847] bridge_slave_1: entered allmulticast mode [ 92.606702][ T5847] bridge_slave_1: entered promiscuous mode [ 92.643559][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.669517][ T5845] team0: Port device team_slave_0 added [ 92.689988][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.697068][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.723615][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.741043][ T5840] team0: Port device team_slave_0 added [ 92.748135][ T5849] Bluetooth: hci1: command tx timeout [ 92.748141][ T5858] Bluetooth: hci2: command tx timeout [ 92.776588][ T5845] team0: Port device team_slave_1 added [ 92.797724][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.805570][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.821874][ T5849] Bluetooth: hci3: command tx timeout [ 92.831806][ T5856] Bluetooth: hci0: command tx timeout [ 92.837684][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.843023][ T5858] Bluetooth: hci4: command tx timeout [ 92.868136][ T5840] team0: Port device team_slave_1 added [ 92.890605][ T5841] team0: Port device team_slave_0 added [ 92.914012][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.927250][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.955017][ T5841] team0: Port device team_slave_1 added [ 92.961835][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.968816][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.995665][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.068593][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.076329][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.102807][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.121233][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.128495][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.155103][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.181084][ T5847] team0: Port device team_slave_0 added [ 93.203645][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.210718][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.237640][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.250240][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.257714][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.284135][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.317135][ T5847] team0: Port device team_slave_1 added [ 93.339310][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.346391][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.372540][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.412879][ T5839] hsr_slave_0: entered promiscuous mode [ 93.419403][ T5839] hsr_slave_1: entered promiscuous mode [ 93.519850][ T5840] hsr_slave_0: entered promiscuous mode [ 93.526372][ T5840] hsr_slave_1: entered promiscuous mode [ 93.533829][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.542604][ T5840] Cannot create hsr debugfs directory [ 93.549148][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.557039][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.583526][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.596312][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.603706][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.630493][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.676678][ T5845] hsr_slave_0: entered promiscuous mode [ 93.684116][ T5845] hsr_slave_1: entered promiscuous mode [ 93.690330][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.698227][ T5845] Cannot create hsr debugfs directory [ 93.734704][ T5841] hsr_slave_0: entered promiscuous mode [ 93.741247][ T5841] hsr_slave_1: entered promiscuous mode [ 93.748046][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.756267][ T5841] Cannot create hsr debugfs directory [ 94.034552][ T5847] hsr_slave_0: entered promiscuous mode [ 94.041072][ T5847] hsr_slave_1: entered promiscuous mode [ 94.047930][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.055708][ T5847] Cannot create hsr debugfs directory [ 94.469325][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.507294][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.527551][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.548005][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.584936][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.601368][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.615367][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.642114][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.716700][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.746741][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.778996][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.809503][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.821779][ T5858] Bluetooth: hci1: command tx timeout [ 94.831675][ T5858] Bluetooth: hci2: command tx timeout [ 94.859090][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.872676][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.895008][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.902719][ T5858] Bluetooth: hci3: command tx timeout [ 94.912176][ T5856] Bluetooth: hci0: command tx timeout [ 94.917723][ T5858] Bluetooth: hci4: command tx timeout [ 94.938188][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.045340][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.079901][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.117190][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.125191][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.156442][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.194347][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.248748][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.283015][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.293901][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.301602][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.335863][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.343077][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.356674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.363884][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.415186][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.422397][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.496801][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.544803][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.591208][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.628554][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.635868][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.667142][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.699533][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.706737][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.729319][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.750771][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.785040][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.792248][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.859428][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.867250][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.887196][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.951415][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.958645][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.990561][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.997822][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.218791][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.338459][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.435816][ T5840] veth0_vlan: entered promiscuous mode [ 96.456496][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.526241][ T5840] veth1_vlan: entered promiscuous mode [ 96.654854][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.676213][ T5839] veth0_vlan: entered promiscuous mode [ 96.738196][ T5839] veth1_vlan: entered promiscuous mode [ 96.786888][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.809089][ T5840] veth0_macvtap: entered promiscuous mode [ 96.848203][ T5840] veth1_macvtap: entered promiscuous mode [ 96.887774][ T5847] veth0_vlan: entered promiscuous mode [ 96.902316][ T5858] Bluetooth: hci2: command tx timeout [ 96.907795][ T5858] Bluetooth: hci1: command tx timeout [ 96.939901][ T5847] veth1_vlan: entered promiscuous mode [ 96.952903][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.966251][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.984694][ T5858] Bluetooth: hci4: command tx timeout [ 96.986680][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.990224][ T5858] Bluetooth: hci0: command tx timeout [ 96.999172][ T5856] Bluetooth: hci3: command tx timeout [ 97.010950][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.020936][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.030056][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.055840][ T5841] veth0_vlan: entered promiscuous mode [ 97.096847][ T5839] veth0_macvtap: entered promiscuous mode [ 97.119015][ T5841] veth1_vlan: entered promiscuous mode [ 97.138193][ T5839] veth1_macvtap: entered promiscuous mode [ 97.151093][ T49] cfg80211: failed to load regulatory.db [ 97.226725][ T5847] veth0_macvtap: entered promiscuous mode [ 97.256290][ T5847] veth1_macvtap: entered promiscuous mode [ 97.266264][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.266579][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.282727][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.299465][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.308337][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.335980][ T5845] veth0_vlan: entered promiscuous mode [ 97.346379][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.357921][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.371248][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.421279][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.430599][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.439508][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448637][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.463770][ T5845] veth1_vlan: entered promiscuous mode [ 97.471325][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.479687][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.484097][ T5841] veth0_macvtap: entered promiscuous mode [ 97.496189][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.507064][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.520220][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.531198][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.543945][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.567885][ T5841] veth1_macvtap: entered promiscuous mode [ 97.604390][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.617344][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.634650][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.647190][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.662322][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.694476][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.700197][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.719770][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.728602][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.737692][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.773628][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.784952][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.796418][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.807229][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.818376][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.829643][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.845248][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.921164][ T5927] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 97.925664][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.942147][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.956606][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.967663][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.978038][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.989592][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.008886][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.052809][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.060775][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.085518][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.098955][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.108298][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.118714][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206291][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.217212][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.278195][ T5845] veth0_macvtap: entered promiscuous mode [ 98.319712][ T5845] veth1_macvtap: entered promiscuous mode [ 98.338406][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.362056][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.470024][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.498896][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.509810][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.521008][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.531443][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.542439][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.552438][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.562995][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.585078][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.596258][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.607631][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.619241][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.639276][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.651936][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.665258][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.675869][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.687524][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.701081][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.738669][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.770595][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.792256][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.808973][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.846913][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.870229][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.886264][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.964051][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.978514][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.001579][ T5856] Bluetooth: hci1: command tx timeout [ 99.007617][ T5849] Bluetooth: hci2: command tx timeout [ 99.062239][ T5856] Bluetooth: hci3: command tx timeout [ 99.067720][ T5856] Bluetooth: hci0: command tx timeout [ 99.073280][ T5849] Bluetooth: hci4: command tx timeout [ 99.150523][ T5948] smc: net device bond0 applied user defined pnetid SYZ0 [ 99.162401][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.198177][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.384084][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.408272][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.436435][ T5951] batadv1: entered promiscuous mode [ 99.531345][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.552128][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.867156][ T5962] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.946324][ T5964] smc: net device bond0 erased user defined pnetid SYZ0 [ 100.390937][ T5974] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20'. [ 100.411315][ T5976] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.093378][ T5987] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.275051][ T5987] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.529337][ T5987] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.748009][ T5987] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.036007][ T6023] Zero length message leads to an empty skb [ 102.118618][ T5987] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.256618][ T5987] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.290278][ T6033] netlink: 96 bytes leftover after parsing attributes in process `syz.2.46'. [ 102.316111][ T6033] netlink: 'syz.2.46': attribute type 5 has an invalid length. [ 102.356355][ T5987] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.371619][ T6033] netlink: 44 bytes leftover after parsing attributes in process `syz.2.46'. [ 102.473394][ T5987] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.480373][ T6038] syz.4.50 uses obsolete (PF_INET,SOCK_PACKET) [ 102.717965][ T30] audit: type=1107 audit(1744207300.419:2): pid=6043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 103.025316][ T6053] netlink: 36 bytes leftover after parsing attributes in process `syz.2.57'. [ 103.093711][ T6060] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.60'. [ 103.137601][ T6055] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.60'. [ 103.383834][ T6068] IPVS: stopping master sync thread 6070 ... [ 103.390544][ T6070] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 103.855147][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 104.093158][ T6097] xt_socket: unknown flags 0x8 [ 104.123191][ T6099] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.74'. [ 104.232474][ T6095] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.74'. [ 105.017949][ T6136] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.92'. [ 105.055804][ T6132] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.92'. [ 105.117116][ T6138] netlink: 'syz.4.94': attribute type 6 has an invalid length. [ 105.320220][ T6144] netlink: 100 bytes leftover after parsing attributes in process `syz.2.97'. [ 105.545690][ T30] audit: type=1107 audit(1744207303.249:3): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 105.575233][ T6153] IPVS: stopping master sync thread 6155 ... [ 105.581417][ T6155] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 105.796846][ T6160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.050216][ T6160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.115516][ T6171] geneve2: entered promiscuous mode [ 106.120895][ T6171] geneve2: entered allmulticast mode [ 106.298294][ T6160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.425109][ T30] audit: type=1107 audit(1744207304.129:4): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 106.595338][ T6160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.886182][ T6160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.902963][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 106.935733][ T6204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.124'. [ 106.950676][ T6160] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.962098][ T6205] tipc: Started in network mode [ 106.967253][ T6205] tipc: Node identity 7f000001, cluster identity 4711 [ 106.983180][ T6205] tipc: Enabled bearer , priority 10 [ 107.016590][ T6160] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.227602][ T30] audit: type=1107 audit(1744207304.929:5): pid=6217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 107.277013][ T6160] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.408217][ T6223] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 107.737812][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.2.137'. [ 107.978210][ T30] audit: type=1107 audit(1744207305.679:6): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 108.040162][ T6252] tipc: Enabling of bearer rejected, already enabled [ 108.066203][ T6252] tipc: Enabled bearer , priority 10 [ 108.108648][ T6260] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 108.118828][ T6259] IPVS: stopping master sync thread 6260 ... [ 108.208406][ T6264] netlink: 'syz.1.147': attribute type 6 has an invalid length. [ 108.396659][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 108.419921][ T6267] netlink: 48 bytes leftover after parsing attributes in process `syz.3.150'. [ 108.625445][ T6275] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.635523][ T6275] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.645187][ T6275] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.654201][ T6275] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.686449][ T6275] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.695529][ T6275] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.704744][ T6275] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.713772][ T6275] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.743946][ T6281] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 108.795200][ T6280] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.800451][ T6284] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 108.803510][ T6280] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.803570][ T6280] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.828220][ T6280] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.841985][ T6280] vxlan0: entered promiscuous mode [ 108.850801][ T6280] vxlan0: entered allmulticast mode [ 108.877869][ T6280] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.886698][ T6280] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.895954][ T6280] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.907434][ T6280] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.925831][ T6288] netlink: 'syz.0.159': attribute type 6 has an invalid length. [ 108.968034][ T6281] batman_adv: batadv0: Adding interface: team0 [ 108.976647][ T6281] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.006089][ T6281] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 109.016908][ T6284] team0: entered promiscuous mode [ 109.028937][ T6284] team_slave_0: entered promiscuous mode [ 109.035258][ T6284] team_slave_1: entered promiscuous mode [ 109.047244][ T6284] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.054711][ T6284] batman_adv: batadv0: Interface activated: team0 [ 109.061556][ T6284] batman_adv: batadv0: Interface deactivated: team0 [ 109.068448][ T6284] batman_adv: batadv0: Removing interface: team0 [ 109.078146][ T6284] bridge0: port 3(team0) entered blocking state [ 109.085180][ T6284] bridge0: port 3(team0) entered disabled state [ 109.092700][ T977] tipc: Node number set to 2130706433 [ 109.093181][ T6284] team0: entered allmulticast mode [ 109.106447][ T6284] team_slave_0: entered allmulticast mode [ 109.113188][ T6284] team_slave_1: entered allmulticast mode [ 109.124901][ T6284] bridge0: port 3(team0) entered blocking state [ 109.132489][ T6284] bridge0: port 3(team0) entered forwarding state [ 109.155314][ T6292] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 109.690203][ T6316] IPVS: stopping master sync thread 6319 ... [ 109.691455][ T6319] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 110.159344][ T6343] __nla_validate_parse: 4 callbacks suppressed [ 110.159365][ T6343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. [ 110.251038][ T6345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.259334][ T6348] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 110.301260][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 110.358594][ T6345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.459718][ T6348] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 110.481982][ T6348] team0: Failed to send options change via netlink (err -105) [ 110.489656][ T6348] team0: Port device geneve0 added [ 110.544395][ T6345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.626677][ T6345] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.771962][ T6345] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.797787][ T6369] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.806957][ T6369] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.815936][ T6369] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.824444][ T6369] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.843649][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 110.875283][ T6369] vxlan0: entered promiscuous mode [ 110.880640][ T6369] vxlan0: entered allmulticast mode [ 110.918256][ T6369] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.926852][ T6369] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.937922][ T6369] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.947118][ T6369] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.003391][ T6345] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.036530][ T6345] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.128500][ T6345] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.274975][ T6384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.203'. [ 111.321104][ T6384] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.332147][ T6384] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.341763][ T6384] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.351130][ T6384] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.384026][ T6384] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.393508][ T6384] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.403976][ T6384] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.413832][ T6384] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.578514][ T6399] bridge0: entered promiscuous mode [ 111.588579][ T6399] macvlan2: entered promiscuous mode [ 111.748516][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 111.785076][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 111.894562][ T6412] batadv1: entered promiscuous mode [ 111.910250][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 111.996522][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 112.357965][ T6439] bridge_slave_0: left allmulticast mode [ 112.412484][ T6439] bridge_slave_0: left promiscuous mode [ 112.425977][ T6446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.231'. [ 112.436154][ T6439] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.475023][ T6439] bridge_slave_1: left allmulticast mode [ 112.498152][ T6439] bridge_slave_1: left promiscuous mode [ 112.540554][ T6439] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.616222][ T6439] bond0: (slave bond_slave_0): Releasing backup interface [ 112.656728][ T6439] bond0: (slave bond_slave_1): Releasing backup interface [ 112.726659][ T6439] team0: Port device team_slave_0 removed [ 112.747636][ T6439] team0: Port device team_slave_1 removed [ 112.760339][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.769603][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.789096][ T6439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.797980][ T6439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.835505][ T6439] team0: Port device geneve0 removed [ 112.872948][ T6446] team0: Mode changed to "roundrobin" [ 112.886992][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.240'. [ 113.020701][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.241'. [ 113.737909][ T6497] syzkaller0: entered allmulticast mode [ 113.768292][ T6497] syzkaller0 (unregistering): left allmulticast mode [ 115.137503][ T6543] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.282893][ T6543] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.413115][ T6543] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.521460][ T6543] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.681218][ T6543] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.705706][ T6543] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.726270][ T6543] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.749982][ T6543] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.812733][ T6564] __nla_validate_parse: 2 callbacks suppressed [ 115.812754][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 115.829123][ T6562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 116.173525][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.4.293'. [ 116.249159][ T6582] netlink: 'syz.0.295': attribute type 10 has an invalid length. [ 116.277738][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.0.295'. [ 116.300118][ T6582] dummy0: entered promiscuous mode [ 116.324022][ T6582] bridge0: port 3(dummy0) entered blocking state [ 116.330871][ T6582] bridge0: port 3(dummy0) entered disabled state [ 116.343652][ T6582] dummy0: entered allmulticast mode [ 116.364891][ T6582] bridge0: port 3(dummy0) entered blocking state [ 116.371519][ T6582] bridge0: port 3(dummy0) entered forwarding state [ 116.605311][ T6595] batadv2: entered promiscuous mode [ 116.635657][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'. [ 116.871599][ T6608] tipc: Enabling of bearer rejected, already enabled [ 117.536739][ T6627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.314'. [ 119.807781][ T6486] Set syz1 is full, maxelem 65536 reached [ 120.118483][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.328'. [ 120.597819][ T6663] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.607334][ T6663] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.617408][ T6663] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.627301][ T6663] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.642602][ T6663] vxlan0: entered promiscuous mode [ 120.659453][ T6663] vxlan0: entered allmulticast mode [ 120.704056][ T6663] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.713910][ T6663] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.723377][ T6663] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.733985][ T6663] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.934468][ T6674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'. [ 121.372859][ T6687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 121.549277][ T6692] netlink: 96 bytes leftover after parsing attributes in process `syz.4.344'. [ 121.678151][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.345'. [ 122.209960][ T6717] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.271807][ T6714] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.354'. [ 122.333390][ T30] audit: type=1107 audit(1744207320.039:7): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 122.470095][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.360'. [ 122.721132][ T6738] netlink: 100 bytes leftover after parsing attributes in process `syz.4.364'. [ 122.925840][ T30] audit: type=1107 audit(1744207320.629:8): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 123.062100][ T6753] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.372'. [ 123.110154][ T6752] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.372'. [ 123.139136][ T6757] Bluetooth: MGMT ver 1.23 [ 123.326145][ T6764] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.446493][ T6767] dccp_close: ABORT with 32 bytes unread [ 124.036826][ T6796] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 124.537322][ T6813] dummy0: left allmulticast mode [ 124.571905][ T6813] bridge0: port 3(dummy0) entered disabled state [ 124.692667][ T6813] bridge_slave_0: left allmulticast mode [ 124.720926][ T6813] bridge_slave_0: left promiscuous mode [ 124.731541][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.768967][ T6813] bridge_slave_1: left allmulticast mode [ 124.776319][ T6813] bridge_slave_1: left promiscuous mode [ 124.805681][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.858689][ T6813] bond0: (slave bond_slave_0): Releasing backup interface [ 124.898021][ T6813] bond0: (slave bond_slave_1): Releasing backup interface [ 124.954201][ T6813] team0: Port device team_slave_0 removed [ 124.978296][ T6813] team0: Port device team_slave_1 removed [ 124.987405][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.013241][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.032170][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.039756][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.495790][ T6843] netlink: 'syz.4.410': attribute type 6 has an invalid length. [ 125.662367][ T6847] warning: `syz.4.412' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.739426][ T6854] tipc: Started in network mode [ 125.773155][ T6854] tipc: Node identity 7f000001, cluster identity 4711 [ 125.806617][ T6854] tipc: Enabling of bearer rejected, failed to enable media [ 125.858168][ T6854] tipc: Enabled bearer , priority 10 [ 126.602024][ T6893] __nla_validate_parse: 7 callbacks suppressed [ 126.602049][ T6893] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.428'. [ 126.628353][ T30] audit: type=1107 audit(1744207324.329:9): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 126.657883][ T6887] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.428'. [ 126.971694][ T24] tipc: Node number set to 2130706433 [ 127.023942][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.439'. [ 127.346917][ T6918] tipc: Enabling of bearer rejected, already enabled [ 127.380372][ T6918] tipc: Enabling of bearer rejected, already enabled [ 127.399383][ T30] audit: type=1107 audit(1744207325.099:10): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 127.468941][ T6923] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.445'. [ 127.512473][ T6922] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.445'. [ 127.935313][ T6940] netlink: 100 bytes leftover after parsing attributes in process `syz.0.454'. [ 128.020716][ T30] audit: type=1107 audit(1744207325.719:11): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.250125][ T6955] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.459'. [ 128.289243][ T6952] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.459'. [ 128.738047][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.466'. [ 128.851602][ T30] audit: type=1107 audit(1744207326.539:12): pid=6970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.886336][ T6971] netlink: 100 bytes leftover after parsing attributes in process `syz.4.468'. [ 129.316251][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.344732][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.367878][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.423684][ T6991] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.431126][ T30] audit: type=1107 audit(1744207327.129:13): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 129.473599][ T6991] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.582767][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.608997][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.638596][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.659016][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 129.681010][ T6991] virt_wifi0 speed is unknown, defaulting to 1000 [ 130.070385][ T7015] bridge_slave_0: left allmulticast mode [ 130.126855][ T7015] bridge_slave_0: left promiscuous mode [ 130.140474][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.158337][ T7015] bridge_slave_1: left allmulticast mode [ 130.165295][ T7015] bridge_slave_1: left promiscuous mode [ 130.171156][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.192569][ T7015] bond0: (slave bond_slave_0): Releasing backup interface [ 130.210091][ T7015] bond0: (slave bond_slave_1): Releasing backup interface [ 130.255776][ T7015] team0: Port device team_slave_0 removed [ 130.291026][ T7015] team0: Port device team_slave_1 removed [ 130.307646][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.328924][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.356578][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.375832][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.450983][ T7029] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 131.594962][ T6668] Set syz1 is full, maxelem 65536 reached [ 131.723878][ T7068] __nla_validate_parse: 13 callbacks suppressed [ 131.723900][ T7068] netlink: 88 bytes leftover after parsing attributes in process `syz.4.511'. [ 131.826645][ T7071] netlink: 100 bytes leftover after parsing attributes in process `syz.3.512'. [ 132.087048][ T7075] virt_wifi0 speed is unknown, defaulting to 1000 [ 132.128416][ T7081] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.515'. [ 132.177061][ T7078] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.515'. [ 132.802395][ T7097] wireguard0: entered promiscuous mode [ 132.808312][ T7097] wireguard0: entered allmulticast mode [ 132.903132][ T7104] netlink: 344 bytes leftover after parsing attributes in process `syz.4.524'. [ 133.129696][ T7107] netlink: 100 bytes leftover after parsing attributes in process `syz.2.525'. [ 133.447629][ T7109] IPVS: stopping master sync thread 7110 ... [ 133.454100][ T7110] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 133.892377][ T7125] tipc: Started in network mode [ 133.914115][ T7125] tipc: Node identity 7f000001, cluster identity 4711 [ 133.931117][ T7125] tipc: Enabled bearer , priority 10 [ 133.974206][ T7125] tipc: Enabled bearer , priority 10 [ 134.172581][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 134.226465][ T7137] netlink: 100 bytes leftover after parsing attributes in process `syz.4.537'. [ 134.925357][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 134.976158][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 135.041786][ T5895] tipc: Node number set to 2130706433 [ 135.841700][ T7189] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.850637][ T7189] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.859438][ T7189] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.868397][ T7189] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.899029][ T7189] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.908396][ T7189] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.917557][ T7189] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.926539][ T7189] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.188819][ T7200] xt_hashlimit: size too large, truncated to 1048576 [ 136.944703][ T7226] __nla_validate_parse: 6 callbacks suppressed [ 136.944728][ T7226] netlink: 48 bytes leftover after parsing attributes in process `syz.4.580'. [ 137.807604][ T7249] netlink: 76 bytes leftover after parsing attributes in process `syz.4.591'. [ 137.920980][ T7252] netlink: 48 bytes leftover after parsing attributes in process `syz.3.593'. [ 138.108412][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.122406][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.643374][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.602'. [ 138.877803][ T7280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'. [ 138.887676][ T7279] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'. [ 138.907598][ T7280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.605'. [ 139.119515][ T7262] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 139.460554][ T7294] bridge0: entered promiscuous mode [ 139.478304][ T7294] bridge0: port 1(macsec1) entered blocking state [ 139.503079][ T7294] bridge0: port 1(macsec1) entered disabled state [ 139.522508][ T7294] macsec1: entered allmulticast mode [ 139.527910][ T7294] bridge0: entered allmulticast mode [ 139.593079][ T7294] macsec1: left allmulticast mode [ 139.609564][ T7294] bridge0: left allmulticast mode [ 139.667018][ T7294] bridge0: left promiscuous mode [ 140.336923][ T7319] netlink: 'syz.4.623': attribute type 21 has an invalid length. [ 140.345108][ T5856] Bluetooth: hci0: command 0x0c20 tx timeout [ 140.356331][ T7319] netlink: 'syz.4.623': attribute type 15 has an invalid length. [ 140.364413][ T7319] netlink: 156 bytes leftover after parsing attributes in process `syz.4.623'. [ 140.373849][ T7319] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.383993][ T7319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.391631][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 140.399103][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 140.406416][ T7319] IPv6: NLM_F_CREATE should be set when creating new route [ 140.678799][ T7325] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 140.690829][ T7322] IPVS: stopping master sync thread 7325 ... [ 141.037506][ T7337] netlink: 47 bytes leftover after parsing attributes in process `syz.4.630'. [ 141.526718][ T7357] IPVS: stopping master sync thread 7029 ... [ 142.168355][ T7377] netlink: 'syz.3.647': attribute type 6 has an invalid length. [ 142.391122][ T7102] Set syz1 is full, maxelem 65536 reached [ 143.731012][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.657'. [ 144.088053][ T7412] netlink: 'syz.2.664': attribute type 6 has an invalid length. [ 144.228976][ T7415] wg2: entered promiscuous mode [ 144.239448][ T7415] wg2: entered allmulticast mode [ 144.864458][ T7438] veth1_macvtap: left promiscuous mode [ 144.870262][ T7438] macsec0: entered promiscuous mode [ 145.911838][ T7485] veth1_macvtap: left promiscuous mode [ 146.954214][ T7530] Â: renamed from pim6reg1 [ 147.102471][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 147.685862][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.739'. [ 148.769837][ T7610] pim6reg1: entered promiscuous mode [ 148.791586][ T7610] pim6reg1: entered allmulticast mode [ 149.422642][ T7641] netlink: 'syz.4.773': attribute type 21 has an invalid length. [ 149.442730][ T7641] netlink: 'syz.4.773': attribute type 15 has an invalid length. [ 149.461002][ T7641] netlink: 156 bytes leftover after parsing attributes in process `syz.4.773'. [ 149.496228][ T7641] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.514044][ T7646] bridge_slave_0: entered promiscuous mode [ 149.520145][ T7646] bridge_slave_0: entered allmulticast mode [ 149.717453][ T7654] pim6reg1: entered promiscuous mode [ 149.730325][ T7654] pim6reg1: entered allmulticast mode [ 151.141057][ T7682] netlink: 'syz.1.792': attribute type 21 has an invalid length. [ 151.165388][ T7682] netlink: 'syz.1.792': attribute type 15 has an invalid length. [ 151.174766][ T7682] netlink: 156 bytes leftover after parsing attributes in process `syz.1.792'. [ 151.188021][ T7682] IPv6: NLM_F_CREATE should be specified when creating new route [ 151.206540][ T7682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 151.213920][ T7682] IPv6: NLM_F_CREATE should be set when creating new route [ 151.221245][ T7682] IPv6: NLM_F_CREATE should be set when creating new route [ 151.228586][ T7682] IPv6: NLM_F_CREATE should be set when creating new route [ 151.923631][ T7681] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 152.203964][ T7724] netlink: 76 bytes leftover after parsing attributes in process `syz.0.812'. [ 152.212444][ T7726] netlink: 892 bytes leftover after parsing attributes in process `syz.1.813'. [ 152.811045][ T7760] netlink: 892 bytes leftover after parsing attributes in process `syz.1.829'. [ 152.913485][ T7762] netlink: 76 bytes leftover after parsing attributes in process `syz.2.830'. [ 153.141536][ T5856] Bluetooth: hci0: command 0x0c20 tx timeout [ 153.148634][ T7739] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 153.366894][ T7790] netlink: 892 bytes leftover after parsing attributes in process `syz.0.843'. [ 154.167434][ T7822] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 154.180441][ T7822] netlink: 220 bytes leftover after parsing attributes in process `syz.4.858'. [ 154.190569][ T7822] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 154.377924][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 154.406683][ T7828] tipc: Enabling of bearer rejected, already enabled [ 154.663244][ T7847] wg2: entered promiscuous mode [ 154.681532][ T7847] wg2: entered allmulticast mode [ 155.229384][ T5856] Bluetooth: hci0: command 0x0c20 tx timeout [ 155.631594][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 155.642684][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.879'. [ 156.680745][ T7873] tipc: Started in network mode [ 156.685878][ T7873] tipc: Node identity 7f000001, cluster identity 4711 [ 156.694069][ T7873] tipc: Enabled bearer , priority 10 [ 156.706174][ T7878] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.715001][ T7878] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.723421][ T7878] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.732226][ T7878] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.761727][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.880'. [ 156.810255][ T7884] netlink: 'syz.3.881': attribute type 21 has an invalid length. [ 156.824520][ T7884] netlink: 'syz.3.881': attribute type 15 has an invalid length. [ 156.851576][ T7884] netlink: 156 bytes leftover after parsing attributes in process `syz.3.881'. [ 156.882565][ T7884] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.901776][ T7884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.909161][ T7884] IPv6: NLM_F_CREATE should be set when creating new route [ 156.916551][ T7884] IPv6: NLM_F_CREATE should be set when creating new route [ 156.923927][ T7884] IPv6: NLM_F_CREATE should be set when creating new route [ 156.948559][ T7888] wg2: entered promiscuous mode [ 156.963985][ T7888] wg2: entered allmulticast mode [ 157.142614][ T7899] netlink: 56 bytes leftover after parsing attributes in process `syz.2.888'. [ 157.811755][ T5894] tipc: Node number set to 2130706433 [ 157.840954][ T7922] wg2: entered promiscuous mode [ 157.850257][ T7922] wg2: entered allmulticast mode [ 157.977889][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.905'. [ 157.995376][ T7946] netlink: 56 bytes leftover after parsing attributes in process `syz.0.903'. [ 158.255348][ T7963] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 158.273013][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.910'. [ 158.340546][ T7963] team0: Port device geneve0 added [ 158.363354][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 158.396153][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.912'. [ 159.366394][ T8007] Bluetooth: MGMT ver 1.23 [ 159.383508][ T8006] : entered promiscuous mode [ 159.557276][ T8011] ipip0: entered promiscuous mode [ 160.678224][ T8062] __nla_validate_parse: 5 callbacks suppressed [ 160.678249][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.955'. [ 160.898845][ T8073] tipc: Enabling of bearer rejected, failed to enable media [ 160.928700][ T8073] tipc: Enabling of bearer rejected, already enabled [ 161.035452][ T8081] netlink: 860 bytes leftover after parsing attributes in process `syz.1.964'. [ 161.363146][ T8094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.970'. [ 161.557299][ T8103] netlink: 100 bytes leftover after parsing attributes in process `syz.2.975'. [ 161.605269][ T8105] netlink: 'syz.1.976': attribute type 21 has an invalid length. [ 161.626545][ T8105] netlink: 'syz.1.976': attribute type 15 has an invalid length. [ 161.652745][ T8105] netlink: 156 bytes leftover after parsing attributes in process `syz.1.976'. [ 161.694585][ T8105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.035347][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.984'. [ 162.152429][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.987'. [ 162.249291][ T8131] netlink: 100 bytes leftover after parsing attributes in process `syz.3.989'. [ 162.361528][ T8137] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 162.604204][ T8148] netlink: 20 bytes leftover after parsing attributes in process `syz.4.998'. [ 162.788345][ T8157] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1003'. [ 162.924421][ T8163] netlink: 'syz.2.1005': attribute type 6 has an invalid length. [ 163.269378][ T8185] ipip0: entered promiscuous mode [ 163.441655][ T8193] hsr0: entered promiscuous mode [ 163.472220][ T8193] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 163.479249][ T8193] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 163.498539][ T8193] hsr_slave_0: left promiscuous mode [ 163.525658][ T8193] hsr_slave_1: left promiscuous mode [ 163.577103][ T8193] hsr0 (unregistering): left promiscuous mode [ 163.591262][ T8199] tipc: Started in network mode [ 163.598599][ T8199] tipc: Node identity 7f000001, cluster identity 4711 [ 163.606911][ T8199] tipc: Enabled bearer , priority 10 [ 163.625471][ T8199] tipc: Enabled bearer , priority 10 [ 163.808176][ T8211] netlink: 'syz.4.1026': attribute type 21 has an invalid length. [ 163.834362][ T8211] netlink: 'syz.4.1026': attribute type 15 has an invalid length. [ 163.862243][ T8211] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.732038][ T5895] tipc: Node number set to 2130706433 [ 165.722858][ T8321] __nla_validate_parse: 12 callbacks suppressed [ 165.722881][ T8321] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1074'. [ 165.830033][ T8329] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1078'. [ 165.908870][ T8332] netlink: 'syz.4.1079': attribute type 21 has an invalid length. [ 165.921709][ T8332] netlink: 'syz.4.1079': attribute type 15 has an invalid length. [ 165.942035][ T8332] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1079'. [ 165.985606][ T8332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.169737][ T8346] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.173374][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1085'. [ 166.279670][ T8353] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1089'. [ 166.512421][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 167.085296][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 167.128566][ T8385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 167.168202][ T8385] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 167.264038][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 167.284990][ T8396] tipc: Enabling of bearer rejected, failed to enable media [ 167.305406][ T8396] tipc: Enabling of bearer rejected, already enabled [ 167.477245][ T8403] netlink: 'syz.0.1112': attribute type 6 has an invalid length. [ 167.487280][ T8405] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 167.836283][ T8417] pim6reg1: entered promiscuous mode [ 167.843522][ T8417] pim6reg1: entered allmulticast mode [ 167.923753][ T8422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1122'. [ 167.999842][ T8424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1123'. [ 168.480898][ T8435] ipip0: entered promiscuous mode [ 168.711316][ T8448] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 168.896464][ T8455] bridge_slave_0: left allmulticast mode [ 168.930346][ T8455] bridge_slave_0: left promiscuous mode [ 168.952379][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.012841][ T8455] bridge_slave_1: left allmulticast mode [ 169.019042][ T8455] bridge_slave_1: left promiscuous mode [ 169.075060][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.149514][ T8455] bond0: (slave bond_slave_0): Releasing backup interface [ 169.202096][ T8455] bond0: (slave bond_slave_1): Releasing backup interface [ 169.259717][ T8455] team0: Port device team_slave_0 removed [ 169.296862][ T8455] team0: Port device team_slave_1 removed [ 169.304704][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.313532][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.321381][ T8480] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 169.323913][ T8455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.345736][ T8455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.419894][ T8455] team0: Port device geneve0 removed [ 169.437054][ T8454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.480217][ T8458] bond0: entered promiscuous mode [ 169.502392][ T8458] bond_slave_0: entered promiscuous mode [ 169.514296][ T8458] bond_slave_1: entered promiscuous mode [ 169.528504][ T8458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.550006][ T8458] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 170.750804][ T8537] hsr0: entered promiscuous mode [ 170.782375][ T8537] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.788901][ T8537] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.824271][ T8537] __nla_validate_parse: 8 callbacks suppressed [ 170.824296][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 170.861620][ T8537] hsr_slave_0: left promiscuous mode [ 170.876704][ T8537] hsr_slave_1: left promiscuous mode [ 170.949421][ T8537] hsr0 (unregistering): left promiscuous mode [ 170.986385][ T8545] tipc: Enabling of bearer rejected, already enabled [ 171.003749][ T8547] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1173'. [ 171.087952][ T8549] netlink: 'syz.3.1174': attribute type 21 has an invalid length. [ 171.111485][ T8549] netlink: 'syz.3.1174': attribute type 15 has an invalid length. [ 171.119374][ T8549] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1174'. [ 171.178307][ T8549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.208345][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 171.232793][ T8554] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.245450][ T8557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1178'. [ 171.258689][ T8554] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 171.268819][ T8557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1178'. [ 171.595613][ T8574] tipc: Enabling of bearer rejected, already enabled [ 171.749907][ T8582] netlink: 'syz.1.1190': attribute type 21 has an invalid length. [ 171.763405][ T8582] netlink: 'syz.1.1190': attribute type 15 has an invalid length. [ 171.774557][ T8582] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1190'. [ 171.787000][ T8582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.858254][ T8584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 171.870662][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1191'. [ 172.229838][ T8597] ipip0: entered promiscuous mode [ 172.636028][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1206'. [ 172.691218][ T8614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.717352][ T8614] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.917867][ T8624] ipip0: entered promiscuous mode [ 173.163025][ T8633] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 174.377446][ T8687] tipc: Enabled bearer , priority 10 [ 174.466047][ T8693] netlink: 'syz.3.1241': attribute type 5 has an invalid length. [ 175.310766][ T8725] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 175.555137][ T8739] tipc: Enabling of bearer rejected, already enabled [ 175.791437][ T8752] hsr0: entered promiscuous mode [ 175.797466][ T8752] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 175.804008][ T8752] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 175.845167][ T8751] hsr0: left promiscuous mode [ 176.465985][ T8773] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.218967][ T8811] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 177.374899][ T8815] bond0: entered promiscuous mode [ 177.396879][ T8815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.431304][ T8815] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 177.608584][ T8833] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 177.759434][ T8841] netlink: 'syz.2.1311': attribute type 5 has an invalid length. [ 177.780578][ T8841] netlink: 'syz.2.1311': attribute type 5 has an invalid length. [ 177.886806][ T8843] __nla_validate_parse: 5 callbacks suppressed [ 177.886830][ T8843] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1313'. [ 178.174369][ T8861] hsr0: entered promiscuous mode [ 178.191639][ T8861] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.198193][ T8861] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.218339][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1322'. [ 178.228249][ T8861] hsr_slave_0: left promiscuous mode [ 178.238352][ T8861] hsr_slave_1: left promiscuous mode [ 178.295368][ T8861] hsr0 (unregistering): left promiscuous mode [ 178.509224][ T8878] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1328'. [ 178.634355][ T8885] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1332'. [ 178.865876][ T8899] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 179.214212][ T8914] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1345'. [ 179.518720][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1352'. [ 179.798565][ T8946] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1360'. [ 179.842259][ T8948] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 180.297128][ T8973] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1372'. [ 180.392357][ T8980] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 180.501257][ T8985] netlink: 'syz.1.1377': attribute type 21 has an invalid length. [ 180.509855][ T8985] netlink: 'syz.1.1377': attribute type 15 has an invalid length. [ 180.522311][ T8986] trusted_key: syz.2.1378 sent an empty control message without MSG_MORE. [ 180.529875][ T8985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1377'. [ 180.561544][ T8985] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.666715][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1381'. [ 180.687852][ T8993] netlink: 'syz.4.1381': attribute type 6 has an invalid length. [ 180.704049][ T8993] netlink: 'syz.4.1381': attribute type 5 has an invalid length. [ 180.740267][ T8993] netlink: 'syz.4.1381': attribute type 4 has an invalid length. [ 180.769312][ T8993] netlink: 'syz.4.1381': attribute type 6 has an invalid length. [ 180.986504][ T9009] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.060445][ T9015] hsr0: entered promiscuous mode [ 181.067145][ T9015] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.073806][ T9015] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.081163][ T9014] hsr0: left promiscuous mode [ 181.186816][ T9021] netlink: 'syz.0.1395': attribute type 21 has an invalid length. [ 181.196394][ T9021] netlink: 'syz.0.1395': attribute type 15 has an invalid length. [ 181.207858][ T9021] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.216510][ T9021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.223861][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 181.231178][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 181.238514][ T9021] IPv6: NLM_F_CREATE should be set when creating new route [ 181.478270][ T9037] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 181.579571][ T9041] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.749585][ T9049] netlink: 'syz.1.1408': attribute type 21 has an invalid length. [ 181.762842][ T9049] netlink: 'syz.1.1408': attribute type 15 has an invalid length. [ 181.774151][ T9049] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.915920][ T9054] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 182.442796][ T9084] C: renamed from lo (while UP) [ 183.262194][ T9126] __nla_validate_parse: 7 callbacks suppressed [ 183.262216][ T9126] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1445'. [ 183.408658][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 184.334424][ T9190] C: renamed from lo (while UP) [ 184.349128][ T9190] net_ratelimit: 2 callbacks suppressed [ 184.349149][ T9190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 184.375220][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1473'. [ 184.771234][ T9210] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1481'. [ 184.780557][ T9210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 185.008159][ T9216] bond0: entered promiscuous mode [ 185.019784][ T9216] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 185.036254][ T9216] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 185.310252][ T9238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1492'. [ 185.322208][ T9238] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1492'. [ 185.336249][ T9238] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1492'. [ 185.355089][ T9242] netlink: 208 bytes leftover after parsing attributes in process `syz.4.1493'. [ 185.799958][ T9254] validate_nla: 10 callbacks suppressed [ 185.799983][ T9254] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 185.827202][ T9257] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1501'. [ 185.888515][ T9262] bond0: entered promiscuous mode [ 185.900638][ T9262] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.929326][ T9262] bond1: (slave macvlan2): Enslaving as a backup interface with a down link [ 187.457206][ T9333] hsr_slave_0: left promiscuous mode [ 187.469388][ T9333] hsr_slave_1: left promiscuous mode [ 188.162420][ T9371] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.178071][ T9371] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.381829][ T9382] __nla_validate_parse: 9 callbacks suppressed [ 188.381847][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1552'. [ 188.884281][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 189.463891][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1573'. [ 189.491143][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 189.536841][ T9433] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.562055][ T9433] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 191.301785][ T9462] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 191.776646][ T9494] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1599'. [ 192.107629][ T9509] C: renamed from lo (while UP) [ 192.116886][ T9509] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.136915][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1606'. [ 192.239336][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 192.249982][ T9513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.260729][ T9513] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.348729][ T9519] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1611'. [ 192.636941][ T9526] syzkaller0: entered promiscuous mode [ 192.653059][ T9526] syzkaller0: entered allmulticast mode [ 192.693758][ T9534] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 192.735698][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1618'. [ 194.042630][ T9541] __nla_validate_parse: 1 callbacks suppressed [ 194.042651][ T9541] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1621'. [ 194.225540][ T9553] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1626'. [ 194.445038][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1632'. [ 194.456952][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1632'. [ 194.563964][ T9573] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1635'. [ 194.733668][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'. [ 195.083972][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 195.239103][ T9595] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1647'. [ 195.461046][ T9607] syzkaller0: entered promiscuous mode [ 195.488980][ T9607] syzkaller0: entered allmulticast mode [ 195.647304][ T9618] delete_channel: no stack [ 195.661621][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1656'. [ 195.670940][ T9621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1658'. [ 196.115699][ T9634] ------------[ cut here ]------------ [ 196.122057][ T9634] WARNING: CPU: 0 PID: 9634 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.132626][ T9634] Modules linked in: [ 196.136844][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.1.1665 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 196.148688][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.159183][ T9634] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.165715][ T9634] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 196.187035][ T9634] RSP: 0018:ffffc90004507c48 EFLAGS: 00010293 [ 196.194974][ T9634] RAX: ffffffff8a93fdfc RBX: 0000000000000002 RCX: ffff888031165a00 [ 196.203195][ T9634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 196.211222][ T9634] RBP: 0000000000000001 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 196.219482][ T9634] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86da9250 [ 196.228174][ T9634] R13: dffffc0000000000 R14: ffff88805c3c52f8 R15: 0000000000000000 [ 196.238456][ T9634] FS: 0000555583e8f500(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 196.248035][ T9634] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.255283][ T9634] CR2: 00007ffc87d33f40 CR3: 0000000034066000 CR4: 00000000003526f0 [ 196.263813][ T9634] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.272420][ T9634] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.280448][ T9634] Call Trace: [ 196.283845][ T9634] [ 196.287992][ T9634] udpv6_destroy_sock+0x212/0x270 [ 196.294156][ T9634] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 196.299768][ T9634] sk_common_release+0x71/0x2e0 [ 196.304740][ T9634] inet_release+0x17d/0x200 [ 196.309299][ T9634] sock_close+0xbc/0x240 [ 196.313697][ T9634] ? __pfx_sock_close+0x10/0x10 [ 196.318608][ T9634] __fput+0x3e9/0x9f0 [ 196.322753][ T9634] task_work_run+0x251/0x310 [ 196.327407][ T9634] ? _raw_spin_unlock+0x28/0x50 [ 196.332412][ T9634] ? __pfx_task_work_run+0x10/0x10 [ 196.337589][ T9634] ? syscall_exit_to_user_mode+0xa3/0x340 [ 196.344180][ T9634] syscall_exit_to_user_mode+0x13f/0x340 [ 196.350149][ T9634] do_syscall_64+0x100/0x230 [ 196.354870][ T9634] ? clear_bhb_loop+0x45/0xa0 [ 196.359599][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.365681][ T9634] RIP: 0033:0x7f946158d169 [ 196.370291][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.391164][ T9634] RSP: 002b:00007ffcbaa29578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 196.400692][ T9634] RAX: 0000000000000000 RBX: 000000000002fd4e RCX: 00007f946158d169 [ 196.408795][ T9634] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 196.416857][ T9634] RBP: 00007f94617a7ba0 R08: 0000000000000001 R09: 0000000abaa2986f [ 196.424990][ T9634] R10: 00007f9461400000 R11: 0000000000000246 R12: 00007f94617a5fac [ 196.433094][ T9634] R13: 00007f94617a5fa0 R14: ffffffffffffffff R15: 00007ffcbaa29690 [ 196.441219][ T9634] [ 196.444373][ T9634] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.451725][ T9634] CPU: 0 UID: 0 PID: 9634 Comm: syz.1.1665 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 196.463582][ T9634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.473675][ T9634] Call Trace: [ 196.476969][ T9634] [ 196.479924][ T9634] dump_stack_lvl+0x241/0x360 [ 196.484635][ T9634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.489937][ T9634] ? __pfx__printk+0x10/0x10 [ 196.494601][ T9634] ? vscnprintf+0x5d/0x90 [ 196.499206][ T9634] panic+0x349/0x880 [ 196.503221][ T9634] ? __warn+0x174/0x4d0 [ 196.507914][ T9634] ? __pfx_panic+0x10/0x10 [ 196.512452][ T9634] __warn+0x344/0x4d0 [ 196.516474][ T9634] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.522295][ T9634] report_bug+0x2b3/0x500 [ 196.526679][ T9634] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.532523][ T9634] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.538447][ T9634] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 196.544266][ T9634] handle_bug+0x89/0x170 [ 196.548532][ T9634] exc_invalid_op+0x1a/0x50 [ 196.553053][ T9634] asm_exc_invalid_op+0x1a/0x20 [ 196.557920][ T9634] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 196.564466][ T9634] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 196.584263][ T9634] RSP: 0018:ffffc90004507c48 EFLAGS: 00010293 [ 196.590391][ T9634] RAX: ffffffff8a93fdfc RBX: 0000000000000002 RCX: ffff888031165a00 [ 196.598401][ T9634] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 196.606395][ T9634] RBP: 0000000000000001 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 196.614408][ T9634] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86da9250 [ 196.622486][ T9634] R13: dffffc0000000000 R14: ffff88805c3c52f8 R15: 0000000000000000 [ 196.630468][ T9634] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 196.635945][ T9634] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 196.641673][ T9634] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 196.647618][ T9634] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 196.653459][ T9634] udpv6_destroy_sock+0x212/0x270 [ 196.658518][ T9634] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 196.664167][ T9634] sk_common_release+0x71/0x2e0 [ 196.669125][ T9634] inet_release+0x17d/0x200 [ 196.673647][ T9634] sock_close+0xbc/0x240 [ 196.678041][ T9634] ? __pfx_sock_close+0x10/0x10 [ 196.682905][ T9634] __fput+0x3e9/0x9f0 [ 196.686933][ T9634] task_work_run+0x251/0x310 [ 196.691611][ T9634] ? _raw_spin_unlock+0x28/0x50 [ 196.696484][ T9634] ? __pfx_task_work_run+0x10/0x10 [ 196.701634][ T9634] ? syscall_exit_to_user_mode+0xa3/0x340 [ 196.707387][ T9634] syscall_exit_to_user_mode+0x13f/0x340 [ 196.713059][ T9634] do_syscall_64+0x100/0x230 [ 196.717751][ T9634] ? clear_bhb_loop+0x45/0xa0 [ 196.722452][ T9634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.728356][ T9634] RIP: 0033:0x7f946158d169 [ 196.732789][ T9634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.752601][ T9634] RSP: 002b:00007ffcbaa29578 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 196.761076][ T9634] RAX: 0000000000000000 RBX: 000000000002fd4e RCX: 00007f946158d169 [ 196.769344][ T9634] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 196.777437][ T9634] RBP: 00007f94617a7ba0 R08: 0000000000000001 R09: 0000000abaa2986f [ 196.785432][ T9634] R10: 00007f9461400000 R11: 0000000000000246 R12: 00007f94617a5fac [ 196.793418][ T9634] R13: 00007f94617a5fa0 R14: ffffffffffffffff R15: 00007ffcbaa29690 [ 196.801434][ T9634] [ 196.804762][ T9634] Kernel Offset: disabled [ 196.809109][ T9634] Rebooting in 86400 seconds..