last executing test programs: 2.294787182s ago: executing program 4 (id=799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newchain={0x580, 0x64, 0x100, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x550, 0x2, [@TCA_ROUTE4_ACT={0x54c, 0x6, [@m_police={0x548, 0xd, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x64a9, 0x10, 0xfffffffe, 0x7fffffff, 0x8, 0x3, 0x1, 0xfffff45b, 0xf3, 0x2, 0x9, 0xa, 0x8, 0x9, 0x1a3b, 0x4, 0x464, 0x800, 0x7fff, 0x9, 0x8, 0x4, 0x0, 0x3, 0x605, 0x9, 0xc, 0x2, 0x13, 0x8001, 0x10000, 0x8, 0x8, 0xdb7, 0x51b, 0x5, 0x8472, 0x240, 0xffff8001, 0x2, 0xb54, 0xfc7, 0x7, 0x9, 0x8000, 0x3, 0x6e, 0x5, 0x4, 0xa45, 0x3, 0xd7b9, 0xde, 0x1, 0x40, 0x6c, 0x6, 0x6f81636b, 0x0, 0x8bda, 0xb020, 0xaae, 0x1, 0xffffffef, 0x4, 0x1, 0x3, 0x8, 0x9, 0x5, 0x6, 0x1, 0x401, 0x7, 0x5, 0x6, 0x3, 0x5, 0x2, 0x3, 0x7, 0x200, 0xffffffff, 0x80000001, 0x3, 0xd, 0x58b, 0x3, 0x100, 0xe59, 0xfa, 0x80000000, 0x3a6, 0x1, 0x9, 0x3, 0x6, 0x1, 0x8, 0x3, 0xa00, 0x0, 0x5, 0x0, 0x8, 0xea1, 0xb57, 0x9, 0x6, 0x5, 0x24, 0x9, 0x5, 0x4, 0x6, 0x9a, 0x1, 0x9, 0x5, 0x0, 0x7fffffff, 0xb641, 0x2, 0x3, 0xffffffc2, 0x8, 0xfffffff5, 0x31a0, 0x18000000, 0x6, 0x80000000, 0xd, 0x1, 0x7, 0x2, 0x9, 0x4, 0xa4, 0x0, 0x1, 0x9, 0x4bc6, 0x1000, 0x8, 0x40, 0x6, 0x1, 0x1, 0x0, 0x3, 0x2, 0x8000, 0xfffffff9, 0x101, 0x602, 0x8000, 0x5, 0x4, 0x4, 0xffff0001, 0x93af, 0x53b8, 0x1, 0x419, 0x9, 0x9, 0x3, 0x4, 0x7000, 0x4, 0xb, 0x6, 0x97, 0x3, 0x0, 0x401, 0x0, 0x7, 0xffff3bc8, 0x2, 0xffff0001, 0x6, 0x643, 0xf, 0x1000, 0x6, 0x7, 0xfffff9ad, 0x6, 0x7ff, 0x60, 0x1, 0x7, 0x0, 0x3, 0x8, 0x2, 0x3, 0x7, 0x2, 0x8, 0x8, 0x1ff, 0x4, 0xfffffff8, 0xd4ba, 0x1, 0x658, 0xa47, 0x32, 0xfffffffe, 0x9, 0x3, 0x4, 0x2, 0x8, 0x4, 0x0, 0x0, 0x9, 0x3, 0x4, 0x3, 0xc191, 0x7, 0x8000, 0x6, 0x1ff, 0x9, 0xfffff800, 0x2c800000, 0x1, 0xe, 0x50, 0x8, 0x100, 0x6b, 0x7, 0xa, 0x80000000, 0x65, 0x79, 0x10, 0x7, 0x13f, 0x2, 0x0, 0x3, 0x4c, 0x9, 0xfffffff9, 0x0, 0x19a8, 0x10001, 0x9]}]]}, {0x115, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x800}, 0x20844) 1.335510304s ago: executing program 4 (id=814): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x8918, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 1.24888549s ago: executing program 0 (id=815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xc, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008849}, 0x30004440) 1.168775976s ago: executing program 3 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.105613257s ago: executing program 1 (id=819): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x17}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.067805815s ago: executing program 2 (id=820): unshare(0x400) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$TOKEN_CREATE(0x24, &(0x7f0000003000)={0x0, r1}, 0x8) 1.035456053s ago: executing program 4 (id=821): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) getpeername$qrtr(r0, 0x0, &(0x7f0000001040)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 940.214053ms ago: executing program 0 (id=822): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x80800) recvfrom$unix(r2, &(0x7f00000006c0)=""/236, 0xfffffffffffffdf5, 0x10120, 0x0, 0x0) 929.671473ms ago: executing program 2 (id=823): unshare(0x26020480) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x61, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) 868.134462ms ago: executing program 3 (id=824): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf7", 0x10}], 0x1}, 0x4) 780.75578ms ago: executing program 1 (id=825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x5fc168c9d6b4368d}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x10) 766.544474ms ago: executing program 0 (id=826): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd09, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010100}]}}]}, 0x54}}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 737.285255ms ago: executing program 4 (id=827): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="034886dd010000000000140000006019540003082f00fe88a43c22a400000000000000da2101ffa7"], 0xfdef) 689.519776ms ago: executing program 2 (id=828): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x10, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @multicast1=0xac141442, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 689.055772ms ago: executing program 3 (id=829): unshare(0x6020480) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$unix(0x1, 0x5, 0x0) unshare(0x60600) close(r0) 605.970621ms ago: executing program 2 (id=830): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 567.637125ms ago: executing program 0 (id=831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="51736374359d", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x8000000, @broadcast}, {0x3600, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x8, 0x0, @void}}}}}}}, 0x0) 524.261141ms ago: executing program 1 (id=832): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0xea, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x1, 0x8, 0x2, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in6=@remote, 0x0, 0x5, 0x3, 0xb7, 0x0, 0x8}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, 0x0, 0x1004) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x400c810, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) 373.033807ms ago: executing program 3 (id=833): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_dump={0x3e, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) 372.586237ms ago: executing program 1 (id=834): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) 372.324072ms ago: executing program 2 (id=835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x37) 299.319882ms ago: executing program 0 (id=836): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x375, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 258.773952ms ago: executing program 4 (id=837): r0 = socket$packet(0x11, 0x2, 0x300) socket(0x25, 0x0, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}], 0x1, 0x44) 180.703847ms ago: executing program 1 (id=838): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000040)=""/237, 0xed}, {0x0}], 0x2) 180.355175ms ago: executing program 2 (id=839): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83470806", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 180.102082ms ago: executing program 3 (id=840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e20, @broadcast}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x8000004, {0x0, 0x0, 0x0, 0x0, 0x88ad7db5, 0x8ca}, [@IFLA_LINK_NETNSID={0x8}]}, 0x28}}, 0x0) 85.041834ms ago: executing program 4 (id=841): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) sendfile(r1, r2, 0x0, 0xffffffff000) 81.158401ms ago: executing program 0 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000600)=""/97, 0x61}, {&(0x7f0000000680)=""/114, 0x72}], 0x4}, 0x3f}], 0x2, 0x60, 0x0) 5.183492ms ago: executing program 3 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 0s ago: executing program 1 (id=844): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 77.449958][ T5814] cgroup: Unknown subsys name 'net' [ 77.558011][ T5814] cgroup: Unknown subsys name 'cpuset' [ 77.567696][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.220259][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.698870][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.708020][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.716001][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.724646][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.732993][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.740877][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.748563][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.756410][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.764858][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.781312][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.789034][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.797286][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.807670][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.820496][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.828336][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.859614][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.868038][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.875800][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.886127][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.894524][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.909850][ T5146] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.919630][ T5146] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.932325][ T5146] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.973624][ T5146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.982990][ T5146] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.502541][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 83.608686][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 83.634189][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 83.765717][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 83.871934][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.880131][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.888738][ T5826] bridge_slave_0: entered allmulticast mode [ 83.896208][ T5826] bridge_slave_0: entered promiscuous mode [ 83.940292][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.947824][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.955239][ T5839] bridge_slave_0: entered allmulticast mode [ 83.962539][ T5839] bridge_slave_0: entered promiscuous mode [ 83.970092][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.977328][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.984769][ T5826] bridge_slave_1: entered allmulticast mode [ 83.992007][ T5826] bridge_slave_1: entered promiscuous mode [ 84.016691][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.034638][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.041849][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.049421][ T5839] bridge_slave_1: entered allmulticast mode [ 84.056942][ T5839] bridge_slave_1: entered promiscuous mode [ 84.155807][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.163036][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.170394][ T5827] bridge_slave_0: entered allmulticast mode [ 84.177803][ T5827] bridge_slave_0: entered promiscuous mode [ 84.210054][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.223341][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.232923][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.241125][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.248558][ T5827] bridge_slave_1: entered allmulticast mode [ 84.256233][ T5827] bridge_slave_1: entered promiscuous mode [ 84.269338][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.277038][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.284555][ T5832] bridge_slave_0: entered allmulticast mode [ 84.291915][ T5832] bridge_slave_0: entered promiscuous mode [ 84.301707][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.325259][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.351588][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.358952][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.366670][ T5832] bridge_slave_1: entered allmulticast mode [ 84.374311][ T5832] bridge_slave_1: entered promiscuous mode [ 84.432887][ T5839] team0: Port device team_slave_0 added [ 84.455129][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.488710][ T5839] team0: Port device team_slave_1 added [ 84.496124][ T5826] team0: Port device team_slave_0 added [ 84.504406][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.526597][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.538597][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.560581][ T5826] team0: Port device team_slave_1 added [ 84.588018][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.595381][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.602575][ T5838] bridge_slave_0: entered allmulticast mode [ 84.610138][ T5838] bridge_slave_0: entered promiscuous mode [ 84.660940][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.668355][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.675970][ T5838] bridge_slave_1: entered allmulticast mode [ 84.683231][ T5838] bridge_slave_1: entered promiscuous mode [ 84.702404][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.709688][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.736865][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.749405][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.756611][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.782755][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.794852][ T5831] Bluetooth: hci0: command tx timeout [ 84.796439][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.807483][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.833716][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.847597][ T5827] team0: Port device team_slave_0 added [ 84.872909][ T5832] team0: Port device team_slave_0 added [ 84.878776][ T5831] Bluetooth: hci2: command tx timeout [ 84.884558][ T5146] Bluetooth: hci1: command tx timeout [ 84.891094][ T5832] team0: Port device team_slave_1 added [ 84.897628][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.904874][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.930930][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.944257][ T5827] team0: Port device team_slave_1 added [ 84.963992][ T5146] Bluetooth: hci3: command tx timeout [ 85.020519][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.027617][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.034910][ T5146] Bluetooth: hci4: command tx timeout [ 85.054274][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.073723][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.095321][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.102322][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.128477][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.151218][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.158343][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.184848][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.198403][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.219033][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.226061][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.252323][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.269486][ T5826] hsr_slave_0: entered promiscuous mode [ 85.276321][ T5826] hsr_slave_1: entered promiscuous mode [ 85.361194][ T5839] hsr_slave_0: entered promiscuous mode [ 85.368112][ T5839] hsr_slave_1: entered promiscuous mode [ 85.374582][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 85.380434][ T5839] Cannot create hsr debugfs directory [ 85.414659][ T5832] hsr_slave_0: entered promiscuous mode [ 85.421287][ T5832] hsr_slave_1: entered promiscuous mode [ 85.427921][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 85.433675][ T5832] Cannot create hsr debugfs directory [ 85.441420][ T5838] team0: Port device team_slave_0 added [ 85.481495][ T5838] team0: Port device team_slave_1 added [ 85.511129][ T5827] hsr_slave_0: entered promiscuous mode [ 85.518163][ T5827] hsr_slave_1: entered promiscuous mode [ 85.524639][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 85.530535][ T5827] Cannot create hsr debugfs directory [ 85.600717][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.607760][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.633816][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.673154][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.680324][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.706798][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.943841][ T5838] hsr_slave_0: entered promiscuous mode [ 85.950776][ T5838] hsr_slave_1: entered promiscuous mode [ 85.957312][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 85.963096][ T5838] Cannot create hsr debugfs directory [ 86.247397][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.268156][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.290828][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.301369][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.375566][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.395159][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.405936][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.430519][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.496766][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.511822][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.523250][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.535049][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.637797][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.656360][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.667517][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.690118][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.701392][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.799780][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.813514][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.820964][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.869765][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.877012][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.887684][ T5146] Bluetooth: hci0: command tx timeout [ 86.916239][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.929770][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.947223][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.954155][ T5146] Bluetooth: hci1: command tx timeout [ 86.959584][ T5831] Bluetooth: hci2: command tx timeout [ 86.964117][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.999754][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.035113][ T5831] Bluetooth: hci3: command tx timeout [ 87.102115][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.114328][ T5831] Bluetooth: hci4: command tx timeout [ 87.142604][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.169318][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.176535][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.246099][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.280561][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.291453][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.298645][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.331714][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.338963][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.383790][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.391037][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.501446][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.558083][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.565320][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.652103][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.659325][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.764334][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.826272][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.858293][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.865505][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.917920][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.925163][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.976166][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.080549][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.209351][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.278957][ T5826] veth0_vlan: entered promiscuous mode [ 88.335550][ T5826] veth1_vlan: entered promiscuous mode [ 88.396546][ T5839] veth0_vlan: entered promiscuous mode [ 88.430617][ T5832] veth0_vlan: entered promiscuous mode [ 88.441978][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.479180][ T5839] veth1_vlan: entered promiscuous mode [ 88.496876][ T5832] veth1_vlan: entered promiscuous mode [ 88.543517][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.562044][ T5826] veth0_macvtap: entered promiscuous mode [ 88.598265][ T5826] veth1_macvtap: entered promiscuous mode [ 88.661443][ T5832] veth0_macvtap: entered promiscuous mode [ 88.673258][ T5839] veth0_macvtap: entered promiscuous mode [ 88.703567][ T5832] veth1_macvtap: entered promiscuous mode [ 88.723538][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.743010][ T5839] veth1_macvtap: entered promiscuous mode [ 88.773363][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.829306][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.839028][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.849314][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.886437][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.896900][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.909652][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.926656][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.935463][ T5838] veth0_vlan: entered promiscuous mode [ 88.942928][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.954509][ T5831] Bluetooth: hci0: command tx timeout [ 89.000149][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.010115][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.035571][ T5831] Bluetooth: hci2: command tx timeout [ 89.038456][ T5146] Bluetooth: hci1: command tx timeout [ 89.046809][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.057694][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.073523][ T5838] veth1_vlan: entered promiscuous mode [ 89.104208][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.113656][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.123195][ T5146] Bluetooth: hci3: command tx timeout [ 89.167028][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.176328][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.194820][ T5146] Bluetooth: hci4: command tx timeout [ 89.246329][ T5827] veth0_vlan: entered promiscuous mode [ 89.259499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.278394][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.303609][ T5827] veth1_vlan: entered promiscuous mode [ 89.320787][ T5838] veth0_macvtap: entered promiscuous mode [ 89.345779][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.359544][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.371028][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.377380][ T5838] veth1_macvtap: entered promiscuous mode [ 89.383458][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.456151][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.475895][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.489398][ T5827] veth0_macvtap: entered promiscuous mode [ 89.531446][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.555947][ T5827] veth1_macvtap: entered promiscuous mode [ 89.566852][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.576287][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.596815][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.609283][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.660735][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.707211][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.725786][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.741505][ T1102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.765049][ T1102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781047][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 89.805459][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.849338][ T1102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.936751][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.069553][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.081143][ T164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.112000][ T164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.123929][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.162551][ T164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.172798][ T164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.538870][ T5962] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 90.854732][ T5966] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.12'. [ 90.894728][ T5962] warning: `syz.3.10' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.986480][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.024040][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.035652][ T5146] Bluetooth: hci0: command tx timeout [ 91.114245][ T5146] Bluetooth: hci2: command tx timeout [ 91.117210][ T5831] Bluetooth: hci1: command tx timeout [ 91.194380][ T5831] Bluetooth: hci3: command tx timeout [ 91.275248][ T5831] Bluetooth: hci4: command tx timeout [ 91.390651][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.401855][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.556290][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.578044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.088081][ T24] cfg80211: failed to load regulatory.db [ 92.144516][ T5994] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 92.778424][ T6014] netlink: 76 bytes leftover after parsing attributes in process `syz.4.33'. [ 92.785681][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 93.715054][ T6043] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.931156][ T6043] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.161175][ T6043] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.183365][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 94.249514][ T6071] pim6reg1: entered promiscuous mode [ 94.271770][ T6071] pim6reg1: entered allmulticast mode [ 94.312729][ T6043] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621630][ T164] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.694494][ T164] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.746235][ T164] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.795433][ T164] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.053638][ T6090] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 96.209499][ T6112] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.63'. [ 96.519162][ T6124] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 97.128916][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 97.171169][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 97.202695][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 97.248911][ T6139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.74'. [ 97.263742][ T6139] Zero length message leads to an empty skb [ 97.688451][ T6156] ieee802154 phy0 wpan0: encryption failed: -90 [ 97.865892][ T6163] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 97.996509][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 98.330312][ T6175] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.90'. [ 99.169552][ T6192] bridge1: entered promiscuous mode [ 99.193252][ T6192] bridge1: entered allmulticast mode [ 99.235743][ T6192] team0: Failed to send port change of device bridge1 via netlink (err -105) [ 99.257670][ T6192] team0: Failed to send options change via netlink (err -105) [ 99.279219][ T6192] team0: Port device bridge1 added [ 99.433051][ T6198] trusted_key: syz.2.100 sent an empty control message without MSG_MORE. [ 99.466069][ T6200] netlink: 'syz.4.101': attribute type 3 has an invalid length. [ 99.560471][ T6203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.102'. [ 100.740699][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.4.119'. [ 101.104748][ T6258] syzkaller1: entered promiscuous mode [ 101.110303][ T6258] syzkaller1: entered allmulticast mode [ 101.899814][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.090345][ T6296] pim6reg1: entered promiscuous mode [ 102.095916][ T6296] pim6reg1: entered allmulticast mode [ 102.333028][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.341111][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.348962][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.356724][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.364488][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.372391][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.380156][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.387911][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 102.395659][ T6298] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 103.018025][ T6323] veth0: entered promiscuous mode [ 103.042034][ T6323] bond0: entered promiscuous mode [ 103.049762][ T6323] bond_slave_0: entered promiscuous mode [ 103.056986][ T6323] bond_slave_1: entered promiscuous mode [ 103.071348][ T6321] bond0: left promiscuous mode [ 103.077840][ T6321] bond_slave_0: left promiscuous mode [ 103.084484][ T6321] bond_slave_1: left promiscuous mode [ 103.090777][ T6321] veth0: left promiscuous mode [ 103.223464][ T6223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.452742][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 103.547548][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 107.147171][ T6447] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 107.316548][ T6447] bond1: entered promiscuous mode [ 107.322267][ T6447] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.385950][ T6450] bridge_slave_0: left allmulticast mode [ 107.414261][ T6450] bridge_slave_0: left promiscuous mode [ 107.422420][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.431886][ T6458] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 107.446614][ T6450] bridge_slave_1: left allmulticast mode [ 107.452566][ T6450] bridge_slave_1: left promiscuous mode [ 107.459079][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.473484][ T6450] bond0: (slave bond_slave_0): Releasing backup interface [ 107.486048][ T6450] bond0: (slave bond_slave_1): Releasing backup interface [ 107.502806][ T6450] team0: Port device team_slave_0 removed [ 107.512741][ T6450] team0: Port device team_slave_1 removed [ 107.521825][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.529958][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.539482][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.547408][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.556748][ T6450] net_ratelimit: 3256 callbacks suppressed [ 107.556767][ T6450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 107.607447][ T6452] bond1: (slave veth3): making interface the new active one [ 107.615056][ T6452] veth3: entered promiscuous mode [ 107.621346][ T6452] bond1: (slave veth3): Enslaving as an active interface with an up link [ 107.683662][ T6458] bond1: entered promiscuous mode [ 107.695028][ T6458] bond1: entered allmulticast mode [ 107.711386][ T6458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.767054][ T6461] erspan1: entered allmulticast mode [ 107.835462][ T6461] bond1: (slave erspan1): making interface the new active one [ 107.844586][ T6461] erspan1: entered promiscuous mode [ 107.851559][ T6461] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 108.288697][ T6483] netlink: 52 bytes leftover after parsing attributes in process `syz.4.207'. [ 108.320214][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.207'. [ 108.941137][ T6508] bridge0: port 3(erspan0) entered blocking state [ 108.948421][ T6508] bridge0: port 3(erspan0) entered disabled state [ 108.964327][ T6508] erspan0: entered allmulticast mode [ 108.975980][ T6508] erspan0: entered promiscuous mode [ 109.017568][ T6508] bridge0: port 3(erspan0) entered blocking state [ 109.024353][ T6508] bridge0: port 3(erspan0) entered forwarding state [ 109.070402][ T6510] erspan0: left allmulticast mode [ 109.093761][ T6510] erspan0: left promiscuous mode [ 109.129035][ T6510] bridge0: port 3(erspan0) entered disabled state [ 109.764625][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.810669][ T58] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.830062][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 109.842906][ T58] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.853694][ T58] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.869672][ T58] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.033271][ T6554] netlink: 'syz.4.235': attribute type 83 has an invalid length. [ 110.859079][ T6568] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 110.921998][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 110.951967][ T6574] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.976440][ T6576] netlink: 'syz.4.244': attribute type 1 has an invalid length. [ 111.196559][ T6580] bond1: (slave bridge1): making interface the new active one [ 111.219844][ T6580] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 111.587189][ T6598] scsi_nl_rcv_msg: discarding partial skb [ 111.784829][ T6609] syzkaller1: entered promiscuous mode [ 111.811380][ T6609] syzkaller1: entered allmulticast mode [ 113.258710][ T6653] netlink: 204 bytes leftover after parsing attributes in process `syz.2.272'. [ 113.279442][ T6653] netlink: 84 bytes leftover after parsing attributes in process `syz.2.272'. [ 113.532546][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 113.553776][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 113.589532][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.277'. [ 113.775122][ T6665] netlink: 49 bytes leftover after parsing attributes in process `syz.0.279'. [ 113.822342][ T6665] netlink: 140 bytes leftover after parsing attributes in process `syz.0.279'. [ 116.744656][ T6767] syzkaller1: entered promiscuous mode [ 116.751344][ T6767] syzkaller1: entered allmulticast mode [ 117.626147][ T6714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 118.670733][ T6836] sctp: [Deprecated]: syz.0.349 (pid 6836) Use of int in maxseg socket option. [ 118.670733][ T6836] Use struct sctp_assoc_value instead [ 118.887348][ T6844] syzkaller1: entered promiscuous mode [ 118.892909][ T6844] syzkaller1: entered allmulticast mode [ 119.137737][ T6856] batadv_slave_1: entered promiscuous mode [ 119.167984][ T6851] batadv_slave_1: left promiscuous mode [ 119.709062][ T6869] syzkaller0: entered promiscuous mode [ 119.717135][ T6869] syzkaller0: entered allmulticast mode [ 119.733580][ T6886] __nla_validate_parse: 2 callbacks suppressed [ 119.733599][ T6886] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.365'. [ 120.407214][ T6880] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.201376][ T6896] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 121.256452][ T6906] syzkaller1: entered promiscuous mode [ 121.321401][ T6906] syzkaller1: entered allmulticast mode [ 121.945383][ T6943] syzkaller1: entered promiscuous mode [ 121.964434][ T6943] syzkaller1: entered allmulticast mode [ 122.063315][ T6951] netlink: 'syz.4.386': attribute type 1 has an invalid length. [ 122.194830][ T6954] gretap1: entered allmulticast mode [ 122.203755][ T6954] bond2: (slave gretap1): making interface the new active one [ 122.269245][ T6954] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 122.278401][ T6919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.660730][ T6971] gretap1: entered promiscuous mode [ 122.748737][ T6975] gretap1: entered promiscuous mode [ 122.819775][ T6977] delete_channel: no stack [ 123.485948][ T7008] batadv_slave_1: entered promiscuous mode [ 123.516371][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'. [ 123.549164][ T7008] batadv_slave_1 (unregistering): left promiscuous mode [ 123.844180][ T7017] netlink: 'syz.1.415': attribute type 1 has an invalid length. [ 123.949452][ T7017] bond1: entered promiscuous mode [ 123.975334][ T7017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.101160][ T7025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.124523][ T7025] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 124.154462][ T7025] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 124.175351][ T7025] bond1: (slave gre1): making interface the new active one [ 124.184308][ T7025] gre1: entered promiscuous mode [ 124.200498][ T7025] bond1: (slave gre1): Enslaving as an active interface with an up link [ 124.367001][ T7042] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 124.375239][ T7042] netlink: 'syz.0.421': attribute type 4 has an invalid length. [ 124.395445][ T7042] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.421'. [ 125.114774][ T7065] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 125.182847][ T7065] syzkaller0: entered promiscuous mode [ 125.218272][ T7065] syzkaller0: entered allmulticast mode [ 125.845913][ T7096] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 125.903545][ T7099] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 126.077638][ T7103] GUP no longer grows the stack in syz.1.443 (7103): 200000003000-20000000a000 (200000001000) [ 126.124383][ T7103] CPU: 0 UID: 0 PID: 7103 Comm: syz.1.443 Not tainted syzkaller #0 PREEMPT(full) [ 126.124418][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.124440][ T7103] Call Trace: [ 126.124450][ T7103] [ 126.124461][ T7103] dump_stack_lvl+0xe8/0x150 [ 126.124511][ T7103] __get_user_pages+0x2453/0x29d0 [ 126.124549][ T7103] ? __lock_acquire+0x6b5/0x2cf0 [ 126.124600][ T7103] ? __gup_longterm_locked+0xc4e/0x1630 [ 126.124635][ T7103] ? down_read_killable+0x1bb/0x340 [ 126.124668][ T7103] __gup_longterm_locked+0xdcf/0x1630 [ 126.124739][ T7103] gup_fast_fallback+0x1d82/0x22e0 [ 126.124810][ T7103] ? __pfx_gup_fast_fallback+0x10/0x10 [ 126.124849][ T7103] ? is_valid_gup_args+0x11f/0x200 [ 126.124887][ T7103] ? get_user_pages_fast+0x4d/0xb0 [ 126.124924][ T7103] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 126.124961][ T7103] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 126.124996][ T7103] iov_iter_get_pages2+0x5e/0xa0 [ 126.125033][ T7103] __se_sys_vmsplice+0x7b3/0x1490 [ 126.125077][ T7103] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 126.125104][ T7103] ? __pfx_futex_wake+0x10/0x10 [ 126.125151][ T7103] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.125238][ T7103] do_syscall_64+0x14d/0xf80 [ 126.125259][ T7103] ? trace_irq_disable+0x3b/0x150 [ 126.125278][ T7103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.125301][ T7103] ? clear_bhb_loop+0x40/0x90 [ 126.125329][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.125356][ T7103] RIP: 0033:0x7f6faa39c819 [ 126.125382][ T7103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.125401][ T7103] RSP: 002b:00007f6fab243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 126.125432][ T7103] RAX: ffffffffffffffda RBX: 00007f6faa615fa0 RCX: 00007f6faa39c819 [ 126.125449][ T7103] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 126.125463][ T7103] RBP: 00007f6faa432c91 R08: 0000000000000000 R09: 0000000000000000 [ 126.125476][ T7103] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 126.125489][ T7103] R13: 00007f6faa616038 R14: 00007f6faa615fa0 R15: 00007ffc3097db48 [ 126.125527][ T7103] [ 126.618502][ T7115] syzkaller1: entered promiscuous mode [ 126.638927][ T7115] syzkaller1: entered allmulticast mode [ 128.084279][ T7193] netlink: 240 bytes leftover after parsing attributes in process `syz.0.463'. [ 128.900812][ T7214] syzkaller1: entered promiscuous mode [ 128.906862][ T7214] syzkaller1: entered allmulticast mode [ 129.707648][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 129.769183][ T7177] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.778498][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.478'. [ 129.790983][ T7177] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.824271][ T7177] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.847733][ T7177] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.928623][ T7291] tipc: Started in network mode [ 131.944053][ T7291] tipc: Node identity 4, cluster identity 4711 [ 131.961428][ T7291] tipc: Node number set to 4 [ 132.297659][ T7299] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 132.428603][ T7307] bond3: (slave geneve2): making interface the new active one [ 132.518187][ T7307] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 132.626105][ T7181] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.658794][ T7181] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.711317][ T7181] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 132.734399][ T7181] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 133.037760][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.054802][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.657529][ T7342] netlink: 'syz.4.514': attribute type 12 has an invalid length. [ 133.874517][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.882292][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.890060][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.897822][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.905586][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.913342][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.921134][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.928891][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.936622][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 133.944592][ T7343] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 136.007560][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'. [ 136.061805][ T7411] syz_tun: entered promiscuous mode [ 136.082843][ T7411] syz_tun: left promiscuous mode [ 136.187051][ T7418] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 136.395355][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.545'. [ 136.458296][ T7425] bond2: entered promiscuous mode [ 136.464899][ T7425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.553781][ T7397] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.578954][ T7431] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 136.964166][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 137.028659][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 137.131752][ T13] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.155869][ T13] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.250178][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.287337][ T13] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.619817][ T7469] tipc: Failed to remove unknown binding: 66,1,1/0:2759142299/2759142301 [ 137.644017][ T7469] tipc: Failed to remove unknown binding: 66,1,1/0:2759142299/2759142301 [ 139.024990][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 139.078113][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 139.377649][ T7542] pim6reg1: entered promiscuous mode [ 139.383033][ T7542] pim6reg1: entered allmulticast mode [ 141.346911][ T7594] netlink: 220 bytes leftover after parsing attributes in process `syz.0.607'. [ 141.360894][ T7594] netlink: 220 bytes leftover after parsing attributes in process `syz.0.607'. [ 141.370270][ T7594] netlink: 56 bytes leftover after parsing attributes in process `syz.0.607'. [ 141.472664][ T7503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.910949][ T7607] bridge0: port 3(vlan3) entered blocking state [ 141.924138][ T7607] bridge0: port 3(vlan3) entered disabled state [ 141.930776][ T7607] vlan3: entered allmulticast mode [ 141.955679][ T7611] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.614'. [ 141.975774][ T7607] geneve0: entered allmulticast mode [ 141.983293][ T7607] vlan3: entered promiscuous mode [ 142.015105][ T7607] geneve0: entered promiscuous mode [ 142.343647][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 143.391000][ T7667] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.635'. [ 143.590774][ T7674] syzkaller1: entered promiscuous mode [ 143.597863][ T7674] syzkaller1: entered allmulticast mode [ 144.047863][ T7695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.646'. [ 144.799362][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 145.072465][ T7727] netlink: 88 bytes leftover after parsing attributes in process `syz.4.659'. [ 145.100271][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 145.139277][ T7731] netlink: 'syz.1.661': attribute type 21 has an invalid length. [ 145.151090][ T7731] netlink: 'syz.1.661': attribute type 22 has an invalid length. [ 145.184143][ T7731] netlink: 'syz.1.661': attribute type 23 has an invalid length. [ 145.207105][ T7729] erspan0: entered promiscuous mode [ 145.217731][ T7731] netlink: 'syz.1.661': attribute type 25 has an invalid length. [ 145.231054][ T7729] macvtap1: entered promiscuous mode [ 145.257079][ T7729] macvtap1: entered allmulticast mode [ 145.269804][ T7729] erspan0: entered allmulticast mode [ 145.918635][ T7761] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 145.973222][ T7761] team0: Failed to send options change via netlink (err -105) [ 145.994836][ T7761] team0: Port device dummy0 added [ 146.001273][ T7765] netlink: 'syz.3.672': attribute type 10 has an invalid length. [ 146.060917][ T7765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.137558][ T7765] team0: Failed to send options change via netlink (err -105) [ 146.174328][ T7765] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.187902][ T7765] team0: Port device dummy0 removed [ 146.210133][ T7765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 146.440609][ T7773] syzkaller1: entered promiscuous mode [ 146.446755][ T7773] syzkaller1: entered allmulticast mode [ 146.669683][ T7775] __nla_validate_parse: 2 callbacks suppressed [ 146.669704][ T7775] netlink: 976 bytes leftover after parsing attributes in process `syz.4.675'. [ 146.717852][ T7775] netlink: 976 bytes leftover after parsing attributes in process `syz.4.675'. [ 146.990006][ T7780] net_ratelimit: 3255 callbacks suppressed [ 146.990029][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.003762][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.011531][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.019295][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.027038][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.034786][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.042493][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.050524][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.058264][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 147.066041][ T7780] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 148.861087][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 150.576510][ T7886] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 150.612968][ T7886] bond3: entered promiscuous mode [ 150.619049][ T7886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.664527][ T7886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.671784][ T7886] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 150.686157][ T7886] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 150.714173][ T7886] bond3: (slave vcan1): making interface the new active one [ 150.723950][ T7886] vcan1: entered promiscuous mode [ 150.732075][ T7886] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 150.930754][ T7899] netlink: 'syz.3.719': attribute type 10 has an invalid length. [ 150.953366][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 150.987137][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 151.001945][ T7899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 151.185171][ T9] hid-generic 0005:0002:0043.0001: unknown main item tag 0x3 [ 151.219189][ T9] hid-generic 0005:0002:0043.0001: unexpected long global item [ 151.249612][ T9] hid-generic 0005:0002:0043.0001: probe with driver hid-generic failed with error -22 [ 151.511685][ T7921] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 151.970067][ T7936] syzkaller1: entered promiscuous mode [ 151.976140][ T7936] syzkaller1: entered allmulticast mode [ 152.349496][ T7845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.752080][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.745'. [ 152.761812][ T7958] netlink: 'syz.1.745': attribute type 7 has an invalid length. [ 152.771095][ T7958] netlink: 'syz.1.745': attribute type 8 has an invalid length. [ 152.779707][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 153.114873][ T5831] Bluetooth: hci4: command tx timeout [ 153.543002][ T24] IPVS: starting estimator thread 0... [ 153.644046][ T7987] IPVS: using max 25 ests per chain, 60000 per kthread [ 153.706852][ T7990] netlink: 320 bytes leftover after parsing attributes in process `syz.4.756'. [ 153.719200][ T7993] netlink: 'syz.0.757': attribute type 4 has an invalid length. [ 153.727810][ T7993] netlink: 'syz.0.757': attribute type 1 has an invalid length. [ 153.766117][ T7993] netlink: 15506 bytes leftover after parsing attributes in process `syz.0.757'. [ 155.401328][ T8028] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 155.410567][ T8058] syzkaller1: entered promiscuous mode [ 155.454186][ T8058] syzkaller1: entered allmulticast mode [ 155.630902][ T8065] netlink: 'syz.1.784': attribute type 4 has an invalid length. [ 156.106484][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.791'. [ 156.228108][ T8081] bond1: entered promiscuous mode [ 156.252802][ T8081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.358285][ T8092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.375099][ T8092] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 156.386920][ T8092] bond1: (slave vcan1): Error -95 calling set_mac_address [ 156.627337][ T8090] syzkaller1: entered promiscuous mode [ 156.633207][ T8090] syzkaller1: entered allmulticast mode [ 157.798363][ T8155] IPv6: sit1: Disabled Multicast RS [ 158.264511][ T8176] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.830'. [ 158.301658][ T8176] net_ratelimit: 3256 callbacks suppressed [ 158.301681][ T8176] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 158.817605][ T8203] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 158.829578][ T8203] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 158.838035][ T8203] CPU: 1 UID: 0 PID: 8203 Comm: syz.0.842 Not tainted syzkaller #0 PREEMPT(full) [ 158.847382][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 158.857492][ T8203] RIP: 0010:memcpy_sglist+0x420/0x730 [ 158.862925][ T8203] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 158.882670][ T8203] RSP: 0018:ffffc9000356f698 EFLAGS: 00010202 [ 158.888972][ T8203] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 158.896983][ T8203] RDX: ffffc9000581a000 RSI: 00000000000001e3 RDI: 00000000000001e4 [ 158.905161][ T8203] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.913168][ T8203] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 158.922069][ T8203] R13: ffff888054715a40 R14: ffff88807b51c880 R15: 0000000000000008 [ 158.930085][ T8203] FS: 00007fb33ba0c6c0(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000 [ 158.939056][ T8203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.945675][ T8203] CR2: 0000200000002180 CR3: 0000000020ae6000 CR4: 00000000003526f0 [ 158.953698][ T8203] Call Trace: [ 158.957004][ T8203] [ 158.959962][ T8203] aead_recvmsg+0x719/0x1030 [ 158.964592][ T8203] ? __pfx_aead_recvmsg+0x10/0x10 [ 158.969662][ T8203] ? __pfx_aead_recvmsg+0x10/0x10 [ 158.974733][ T8203] sock_recvmsg_nosec+0x10c/0x140 [ 158.979812][ T8203] ____sys_recvmsg+0x3e3/0x4a0 [ 158.984623][ T8203] ? __pfx_____sys_recvmsg+0x10/0x10 [ 158.989954][ T8203] ? import_iovec+0x73/0xa0 [ 158.994487][ T8203] ___sys_recvmsg+0x215/0x590 [ 158.999232][ T8203] ? __lock_acquire+0x6b5/0x2cf0 [ 159.004204][ T8203] ? __pfx____sys_recvmsg+0x10/0x10 [ 159.009452][ T8203] do_recvmmsg+0x334/0x800 [ 159.013903][ T8203] ? __pfx_do_recvmmsg+0x10/0x10 [ 159.018889][ T8203] ? __pfx_do_futex+0x10/0x10 [ 159.023605][ T8203] __x64_sys_recvmmsg+0x198/0x250 [ 159.028651][ T8203] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 159.034227][ T8203] do_syscall_64+0x14d/0xf80 [ 159.038852][ T8203] ? trace_irq_disable+0x3b/0x150 [ 159.043914][ T8203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.050029][ T8203] ? clear_bhb_loop+0x40/0x90 [ 159.054748][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.060668][ T8203] RIP: 0033:0x7fb33ab9c819 [ 159.065116][ T8203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.084932][ T8203] RSP: 002b:00007fb33ba0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.093409][ T8203] RAX: ffffffffffffffda RBX: 00007fb33ae15fa0 RCX: 00007fb33ab9c819 [ 159.101413][ T8203] RDX: 0000000000000002 RSI: 0000200000002180 RDI: 0000000000000004 [ 159.109509][ T8203] RBP: 00007fb33ac32c91 R08: 0000000000000000 R09: 0000000000000000 [ 159.117506][ T8203] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 159.125508][ T8203] R13: 00007fb33ae16038 R14: 00007fb33ae15fa0 R15: 00007fffc99b1b58 [ 159.133548][ T8203] [ 159.136609][ T8203] Modules linked in: [ 159.141807][ T8203] ---[ end trace 0000000000000000 ]--- [ 159.169729][ T8203] RIP: 0010:memcpy_sglist+0x420/0x730 [ 159.187403][ T8203] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 159.207524][ T8203] RSP: 0018:ffffc9000356f698 EFLAGS: 00010202 [ 159.214172][ T8203] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 159.222734][ T8203] RDX: ffffc9000581a000 RSI: 00000000000001e3 RDI: 00000000000001e4 [ 159.241089][ T8203] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.249627][ T8203] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000000b [ 159.261219][ T8203] R13: ffff888054715a40 R14: ffff88807b51c880 R15: 0000000000000008 [ 159.303005][ T8203] FS: 00007fb33ba0c6c0(0000) GS:ffff88812554e000(0000) knlGS:0000000000000000 [ 159.312817][ T8203] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.319811][ T8203] CR2: 00007fa3de9e92f8 CR3: 0000000020ae6000 CR4: 00000000003526f0 [ 159.330601][ T8203] Kernel panic - not syncing: Fatal exception [ 159.336883][ T8203] Kernel Offset: disabled [ 159.341216][ T8203] Rebooting in 86400 seconds..