last executing test programs: 1.479311438s ago: executing program 4 (id=783): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c, 0x0}}], 0x2, 0x8000) 1.409331833s ago: executing program 0 (id=784): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.398083245s ago: executing program 3 (id=785): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="826c88", 0x3}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) 1.283605545s ago: executing program 2 (id=786): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x14, 0x4, 0x8200) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 1.283421666s ago: executing program 4 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000000000)={0x30, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0) 1.258698977s ago: executing program 3 (id=788): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(0x3) 1.182558742s ago: executing program 0 (id=789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020c50000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.091461101s ago: executing program 4 (id=790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='/\x00\x00\x00\b'], 0x20) 1.037689123s ago: executing program 2 (id=791): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="6a5000f60b00040008002900777d040008001b0000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.013088183s ago: executing program 0 (id=792): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0c}]}]}, 0x3c}}, 0x0) 939.643407ms ago: executing program 3 (id=793): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f0500010002000000050000000a00000000300000cf0000002e"], &(0x7f00000001c0)=""/257, 0x3a, 0x101, 0x6, 0x0, 0x0, @void, @value}, 0x28) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 866.671627ms ago: executing program 1 (id=794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) 866.511404ms ago: executing program 4 (id=795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) 838.283986ms ago: executing program 3 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) epoll_create(0x1) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xf, 0xfff3}, {0xffa6, 0xfff1}, {0xffe0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000094}, 0x4041080) 730.319066ms ago: executing program 0 (id=797): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x21c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x20b, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x13c, 0x64, 0x0, 0x1, [@nested={0xd9, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r0}, @nested={0x4d, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f"]}]}, @nested={0x5a, 0xf, 0x0, 0x1, [@generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b10907", @typed={0x8, 0x94, 0x0, 0x0, @fd=r0}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac643378"]}]}, 0x21c}], 0x1}, 0x0) 729.874531ms ago: executing program 2 (id=798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 662.604833ms ago: executing program 1 (id=799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="0800060037b98c"], 0x24}}, 0x0) 633.962844ms ago: executing program 4 (id=800): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) 521.946579ms ago: executing program 1 (id=801): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000500)="a9050000008074640000000000103552bde5c064c6f6ff1bf949d234838198a7307052a0", 0x24}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000240)="5825be57aff9352b35d100000000000000e6caa7", 0x14}], 0x1}}], 0x2, 0x4) 521.235096ms ago: executing program 3 (id=802): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 475.556111ms ago: executing program 2 (id=803): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x3d}}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r3], 0xf) 398.436135ms ago: executing program 1 (id=804): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010004be3fe1cfc6f1e5efc007a000000", @ANYRES32=0x0], 0x44}}, 0x0) 375.766961ms ago: executing program 0 (id=805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x858, 0x2, [@TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x1, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0x90, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x2, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x6, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x3, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xffffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x0, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x7, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0xc004884}, 0x0) 349.950186ms ago: executing program 3 (id=806): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 306.490324ms ago: executing program 4 (id=807): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000107400)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000109600)={0x3af7, [], 0x9, "3ef6f3c4857e59"}) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 306.081829ms ago: executing program 2 (id=808): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}]}}]}, 0x9c}}, 0x0) 162.31565ms ago: executing program 1 (id=809): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) 78.590676ms ago: executing program 2 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf250f000000050033000100000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r1, {0x1f, 0x3}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 50.100066ms ago: executing program 0 (id=811): unshare(0x20000400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) 0s ago: executing program 1 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0, 0x0, 0xbed}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 74.042372][ T5822] cgroup: Unknown subsys name 'net' [ 74.170172][ T5822] cgroup: Unknown subsys name 'cpuset' [ 74.178892][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.784654][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.061956][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.076160][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.086280][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.126562][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.134359][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.142187][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.206565][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.223858][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.232324][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.240455][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.248240][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.271814][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.281021][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.297129][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.316350][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.322227][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.324012][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.331353][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.358531][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.368223][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.376682][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.384043][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.384502][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.392150][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.407233][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.407239][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.407399][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.414903][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.435418][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.458300][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.718840][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.897035][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 78.918107][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.926462][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.933824][ T5832] bridge_slave_0: entered allmulticast mode [ 78.940939][ T5832] bridge_slave_0: entered promiscuous mode [ 78.962836][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972109][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.980854][ T5832] bridge_slave_1: entered allmulticast mode [ 78.989509][ T5832] bridge_slave_1: entered promiscuous mode [ 79.022915][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.073010][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.100451][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 79.129921][ T5832] team0: Port device team_slave_0 added [ 79.139920][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.172168][ T5832] team0: Port device team_slave_1 added [ 79.259772][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.269187][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.295653][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.325025][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.332406][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.339655][ T5838] bridge_slave_0: entered allmulticast mode [ 79.346607][ T5838] bridge_slave_0: entered promiscuous mode [ 79.354160][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.361342][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.368838][ T5838] bridge_slave_1: entered allmulticast mode [ 79.375559][ T5838] bridge_slave_1: entered promiscuous mode [ 79.382670][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.389904][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.415926][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.535838][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.556920][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.564290][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.572051][ T5845] bridge_slave_0: entered allmulticast mode [ 79.579707][ T5845] bridge_slave_0: entered promiscuous mode [ 79.591393][ T5832] hsr_slave_0: entered promiscuous mode [ 79.598224][ T5832] hsr_slave_1: entered promiscuous mode [ 79.608653][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.626908][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.644840][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.652294][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.659670][ T5845] bridge_slave_1: entered allmulticast mode [ 79.666890][ T5845] bridge_slave_1: entered promiscuous mode [ 79.702252][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.713009][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.720391][ T5837] bridge_slave_0: entered allmulticast mode [ 79.727669][ T5837] bridge_slave_0: entered promiscuous mode [ 79.755318][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.782902][ T5838] team0: Port device team_slave_0 added [ 79.795405][ T5838] team0: Port device team_slave_1 added [ 79.801522][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.809167][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.816687][ T5837] bridge_slave_1: entered allmulticast mode [ 79.823391][ T5837] bridge_slave_1: entered promiscuous mode [ 79.847121][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.958782][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.965822][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.992939][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.007251][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.020103][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.037967][ T5845] team0: Port device team_slave_0 added [ 80.051900][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.059167][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.085156][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.118060][ T5845] team0: Port device team_slave_1 added [ 80.124062][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.131450][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.139125][ T5842] bridge_slave_0: entered allmulticast mode [ 80.146194][ T5842] bridge_slave_0: entered promiscuous mode [ 80.154613][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.161919][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.167915][ T5854] Bluetooth: hci0: command tx timeout [ 80.175003][ T5842] bridge_slave_1: entered allmulticast mode [ 80.181992][ T5842] bridge_slave_1: entered promiscuous mode [ 80.218251][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.225236][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.255196][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.280316][ T5837] team0: Port device team_slave_0 added [ 80.302926][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.310287][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.336405][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.362609][ T5837] team0: Port device team_slave_1 added [ 80.385597][ T5838] hsr_slave_0: entered promiscuous mode [ 80.392066][ T5838] hsr_slave_1: entered promiscuous mode [ 80.398674][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.406899][ T5838] Cannot create hsr debugfs directory [ 80.414839][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.427169][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.464360][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.471429][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.486114][ T5854] Bluetooth: hci4: command tx timeout [ 80.498027][ T5843] Bluetooth: hci1: command tx timeout [ 80.503760][ T5854] Bluetooth: hci2: command tx timeout [ 80.515425][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.560614][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.566117][ T5854] Bluetooth: hci3: command tx timeout [ 80.570404][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.600334][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.623729][ T5842] team0: Port device team_slave_0 added [ 80.646894][ T5845] hsr_slave_0: entered promiscuous mode [ 80.653048][ T5845] hsr_slave_1: entered promiscuous mode [ 80.659520][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.667156][ T5845] Cannot create hsr debugfs directory [ 80.690826][ T5842] team0: Port device team_slave_1 added [ 80.772522][ T5837] hsr_slave_0: entered promiscuous mode [ 80.781002][ T5837] hsr_slave_1: entered promiscuous mode [ 80.787901][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.795493][ T5837] Cannot create hsr debugfs directory [ 80.813706][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.820739][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.847458][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.883164][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.890641][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.917165][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.040982][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.089372][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.108636][ T5842] hsr_slave_0: entered promiscuous mode [ 81.114864][ T5842] hsr_slave_1: entered promiscuous mode [ 81.123434][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.132268][ T5842] Cannot create hsr debugfs directory [ 81.145161][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.160057][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.300658][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.314077][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.343965][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.361364][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.432596][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.442474][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.470434][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.495158][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.567402][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.598232][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.608568][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.646491][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.712554][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.732759][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.744265][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.752008][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.773885][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.788729][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.811934][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.835430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.842742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.862862][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.887497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.894633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.922218][ T5054] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.929481][ T5054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.973482][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980720][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.071866][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.089574][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.113108][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.124096][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.200526][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.228192][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.246325][ T5854] Bluetooth: hci0: command tx timeout [ 82.271031][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.278231][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.289580][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.296744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.378045][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.385209][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.398744][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.405968][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.481231][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.499695][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.539746][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.566608][ T5854] Bluetooth: hci1: command tx timeout [ 82.566637][ T5843] Bluetooth: hci4: command tx timeout [ 82.572092][ T5854] Bluetooth: hci2: command tx timeout [ 82.593706][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.647401][ T5854] Bluetooth: hci3: command tx timeout [ 82.680011][ T1321] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.687231][ T1321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.705673][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.712889][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.797959][ T5838] veth0_vlan: entered promiscuous mode [ 82.828757][ T5832] veth0_vlan: entered promiscuous mode [ 82.867916][ T5832] veth1_vlan: entered promiscuous mode [ 82.934870][ T5838] veth1_vlan: entered promiscuous mode [ 82.983408][ T5832] veth0_macvtap: entered promiscuous mode [ 83.002086][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.020746][ T5832] veth1_macvtap: entered promiscuous mode [ 83.041977][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.153864][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.193239][ T5838] veth0_macvtap: entered promiscuous mode [ 83.211921][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.235128][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.250030][ T5837] veth0_vlan: entered promiscuous mode [ 83.262692][ T5838] veth1_macvtap: entered promiscuous mode [ 83.282266][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.293409][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.302857][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.312814][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.328977][ T5837] veth1_vlan: entered promiscuous mode [ 83.344342][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.374099][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.393651][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.434445][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.445351][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.459800][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.471832][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.481149][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491267][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.500427][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.613686][ T5837] veth0_macvtap: entered promiscuous mode [ 83.662750][ T5842] veth0_vlan: entered promiscuous mode [ 83.666504][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.677504][ T5837] veth1_macvtap: entered promiscuous mode [ 83.687956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.714744][ T5845] veth0_vlan: entered promiscuous mode [ 83.753485][ T5842] veth1_vlan: entered promiscuous mode [ 83.761616][ T5054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.782838][ T5054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.787583][ T5845] veth1_vlan: entered promiscuous mode [ 83.805282][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.818689][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.828885][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.845492][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.858656][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.888085][ T5054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.897386][ T5054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.917516][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.929611][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.941267][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.951864][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.963317][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.974656][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.983560][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.992609][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.001495][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029643][ T5845] veth0_macvtap: entered promiscuous mode [ 84.058779][ T5842] veth0_macvtap: entered promiscuous mode [ 84.072625][ T5845] veth1_macvtap: entered promiscuous mode [ 84.101906][ T5842] veth1_macvtap: entered promiscuous mode [ 84.137307][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.145196][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.168450][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.184640][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.195233][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.206338][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.216993][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.227629][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244664][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.273557][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.287963][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.308510][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.318669][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.329382][ T5854] Bluetooth: hci0: command tx timeout [ 84.329753][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.344925][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.356087][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.366093][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.376670][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.388178][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.410519][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.421183][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.431946][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.442419][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.453294][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.463825][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.474824][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.504500][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.528627][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.544770][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.558599][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.569156][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.581039][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.599149][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.613503][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.625120][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.646080][ T5854] Bluetooth: hci2: command tx timeout [ 84.652547][ T5921] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.664874][ T5843] Bluetooth: hci1: command tx timeout [ 84.671455][ T5854] Bluetooth: hci4: command tx timeout [ 84.696517][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706129][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.714886][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.724360][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733435][ T5854] Bluetooth: hci3: command tx timeout [ 84.743601][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.753607][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.771845][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.780760][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.789725][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.803984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.813024][ T5921] hsr_slave_0: left promiscuous mode [ 84.816308][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.829301][ T5921] hsr_slave_1: left promiscuous mode [ 85.007598][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.042310][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.154107][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.173961][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.190089][ T5929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.204995][ T5925] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 85.244496][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.256152][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.379539][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.395519][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.404454][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.448137][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.598219][ T5938] syzkaller1: entered promiscuous mode [ 85.610957][ T5938] syzkaller1: entered allmulticast mode [ 85.863862][ T5945] Cannot find map_set index 0 as target [ 86.045575][ T5945] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 86.161171][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 86.407196][ T5854] Bluetooth: hci0: command tx timeout [ 86.737769][ T5854] Bluetooth: hci4: command tx timeout [ 86.743602][ T5843] Bluetooth: hci1: command tx timeout [ 86.749352][ T5851] Bluetooth: hci2: command tx timeout [ 86.807065][ T5854] Bluetooth: hci3: command tx timeout [ 86.827749][ T5959] vlan2: entered promiscuous mode [ 86.832843][ T5959] batadv0: entered promiscuous mode [ 87.096602][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.293068][ T5970] netlink: 'syz.3.17': attribute type 1 has an invalid length. [ 87.398697][ T5959] syz.2.12 (5959) used greatest stack depth: 18552 bytes left [ 87.419796][ T31] audit: type=1800 audit(1742601167.768:2): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="blkio.bfq.time_recursive" dev="tmpfs" ino=24 res=0 errno=0 [ 87.464578][ T31] audit: type=1800 audit(1742601167.768:3): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.16" name="blkio.bfq.time_recursive" dev="tmpfs" ino=24 res=0 errno=0 [ 87.860260][ T5987] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 87.888861][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.923713][ T5982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 87.938438][ T5989] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21'. [ 88.024178][ T5987] bond0: (slave team0): Enslaving as an active interface with an up link [ 88.189660][ T6008] Zero length message leads to an empty skb [ 88.531122][ T6018] netlink: 'syz.4.25': attribute type 8 has an invalid length. [ 88.545940][ T31] audit: type=1800 audit(1742601168.878:4): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.26" name="blkio.bfq.time_recursive" dev="tmpfs" ino=35 res=0 errno=0 [ 88.637236][ T6023] netlink: 20 bytes leftover after parsing attributes in process `syz.2.26'. [ 88.661205][ T6022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 88.946796][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.114644][ T6040] tipc: Started in network mode [ 89.119809][ T6040] tipc: Node identity 4, cluster identity 4711 [ 89.129797][ T6040] tipc: Node number set to 4 [ 89.180104][ T6047] netlink: 'syz.3.32': attribute type 3 has an invalid length. [ 89.263953][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 89.336649][ T6050] hsr_slave_0: left promiscuous mode [ 89.375711][ T6050] hsr_slave_1: left promiscuous mode [ 89.381690][ T6053] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 89.934360][ T6078] netlink: 'syz.3.40': attribute type 8 has an invalid length. [ 90.069036][ T6084] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 90.308357][ T6087] netlink: 256 bytes leftover after parsing attributes in process `syz.1.44'. [ 90.434404][ T6056] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 90.816825][ T6101] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 90.890471][ T6101] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.941050][ T6101] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.958821][ T6101] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.968809][ T6101] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.995734][ T6102] tipc: Started in network mode [ 91.001651][ T6102] tipc: Node identity 4, cluster identity 4711 [ 91.029889][ T6102] tipc: Node number set to 4 [ 91.284329][ T6108] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 91.477064][ T6107] warning: `syz.4.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.528567][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 91.850335][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.52'. [ 91.987561][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 92.061280][ T6136] netlink: 'syz.3.55': attribute type 8 has an invalid length. [ 92.176530][ T31] audit: type=1800 audit(1742601172.528:5): pid=6141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.56" name="blkio.bfq.time_recursive" dev="tmpfs" ino=91 res=0 errno=0 [ 92.256544][ T47] cfg80211: failed to load regulatory.db [ 92.300673][ T31] audit: type=1800 audit(1742601172.648:6): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.56" name="blkio.bfq.time_recursive" dev="tmpfs" ino=91 res=0 errno=0 [ 92.765769][ T6160] tipc: Started in network mode [ 92.785606][ T6160] tipc: Node identity 4, cluster identity 4711 [ 92.796266][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 92.814400][ T6160] tipc: Node number set to 4 [ 92.816017][ T6161] netlink: 'syz.0.61': attribute type 30 has an invalid length. [ 92.877218][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 92.915264][ T6163] netlink: 'syz.0.61': attribute type 30 has an invalid length. [ 92.989214][ T6161] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.998376][ T6161] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.007227][ T6161] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.016133][ T6161] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.021456][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 93.081111][ T5846] IPVS: starting estimator thread 0... [ 93.089222][ T6169] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 93.176154][ T6171] IPVS: using max 19 ests per chain, 45600 per kthread [ 93.311620][ T6175] netlink: 44 bytes leftover after parsing attributes in process `syz.1.64'. [ 93.340221][ T6179] netlink: 10 bytes leftover after parsing attributes in process `syz.2.65'. [ 93.521322][ T6188] netlink: 'syz.4.68': attribute type 8 has an invalid length. [ 93.668690][ T6199] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 93.694137][ T6199] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 94.008556][ T6212] xt_connbytes: Forcing CT accounting to be enabled [ 94.036011][ T6212] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 94.053966][ T6212] xt_bpf: check failed: parse error [ 94.163938][ T6221] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 94.211997][ T6221] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 94.229457][ T6221] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 94.245121][ T6221] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 94.713334][ T6235] netlink: 'syz.3.78': attribute type 74 has an invalid length. [ 94.893712][ T6246] veth1_macvtap: left promiscuous mode [ 95.404279][ T6268] netlink: 'syz.2.87': attribute type 8 has an invalid length. [ 95.972796][ T6288] syzkaller0: entered promiscuous mode [ 95.981951][ T6295] __nla_validate_parse: 6 callbacks suppressed [ 95.981971][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 96.021440][ T6288] syzkaller0: entered allmulticast mode [ 96.345721][ T6304] netlink: 'syz.2.95': attribute type 10 has an invalid length. [ 97.328153][ T6336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 98.707522][ T6336] netlink: 'syz.1.98': attribute type 1 has an invalid length. [ 98.727850][ T6336] netlink: 'syz.1.98': attribute type 2 has an invalid length. [ 98.994447][ T6361] netlink: 'syz.4.99': attribute type 8 has an invalid length. [ 99.148052][ T6364] tipc: Enabled bearer , priority 22 [ 99.208702][ T6367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.100'. [ 99.436616][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 100.909769][ T6424] netlink: 'syz.1.114': attribute type 4 has an invalid length. [ 101.089799][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.2.105'. [ 101.532730][ T6443] bridge_slave_0: left allmulticast mode [ 101.543244][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.117'. [ 101.621412][ T6443] bridge_slave_0: left promiscuous mode [ 101.635426][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.864595][ T6443] bridge_slave_1: left allmulticast mode [ 101.926034][ T6443] bridge_slave_1: left promiscuous mode [ 101.931869][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.962055][ T6443] bond0: (slave bond_slave_0): Releasing backup interface [ 101.979754][ T6443] bond0: (slave bond_slave_1): Releasing backup interface [ 102.011766][ T6443] team0: Failed to send options change via netlink (err -105) [ 102.021000][ T6443] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 102.034052][ T6443] team0: Port device team_slave_0 removed [ 102.053767][ T6443] team0: Failed to send options change via netlink (err -105) [ 102.063359][ T6443] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 102.080265][ T6443] team0: Port device team_slave_1 removed [ 102.088983][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.099299][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.110298][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.118538][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.154117][ T6456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.624336][ T6487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'. [ 102.878347][ T6496] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 102.906326][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.006207][ T6503] SET target dimension over the limit! [ 103.324474][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.133'. [ 103.377451][ T6507] netlink: 'syz.2.133': attribute type 1 has an invalid length. [ 103.507540][ T6525] netlink: 44 bytes leftover after parsing attributes in process `syz.1.138'. [ 103.691473][ T5854] Bluetooth: hci4: command tx timeout [ 103.825792][ T6520] netlink: 'syz.0.136': attribute type 13 has an invalid length. [ 105.220507][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 105.254145][ T6545] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 105.340570][ T6548] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 105.370487][ T6542] macvlan2: entered promiscuous mode [ 105.379868][ T6542] bond0: entered promiscuous mode [ 105.385595][ T6542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.412012][ T6551] netlink: 68 bytes leftover after parsing attributes in process `syz.3.140'. [ 105.804546][ T6566] netlink: 24 bytes leftover after parsing attributes in process `syz.4.148'. [ 105.824851][ T6566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.148'. [ 106.551753][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 106.566131][ T6589] tc_dump_action: action bad kind [ 106.806779][ T6596] netlink: 36 bytes leftover after parsing attributes in process `syz.4.158'. [ 106.864774][ T6605] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 106.875485][ T6596] xt_hashlimit: invalid interval [ 107.051250][ T6613] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 107.102437][ T6615] netlink: 128 bytes leftover after parsing attributes in process `syz.3.164'. [ 107.342192][ T6620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 107.365817][ T6625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 107.368451][ T6624] netlink: 'syz.3.167': attribute type 5 has an invalid length. [ 107.443666][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.167'. [ 107.906582][ T6639] sctp: [Deprecated]: syz.2.171 (pid 6639) Use of int in max_burst socket option. [ 107.906582][ T6639] Use struct sctp_assoc_value instead [ 108.999383][ T6669] netlink: 'syz.3.179': attribute type 10 has an invalid length. [ 109.059713][ T6671] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 109.347383][ T6675] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 109.918320][ T6696] tipc: Enabled bearer , priority 10 [ 110.628174][ T6709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.677692][ T6709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.713255][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 110.732574][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 110.757748][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 110.773155][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 110.808250][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 110.851058][ T6709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.864872][ T6709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.096592][ T6709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.215506][ T6709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.366197][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 111.811842][ T6709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.824923][ T6709] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.981624][ T6736] netlink: 'syz.3.199': attribute type 10 has an invalid length. [ 112.167933][ T6709] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.189099][ T6709] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.291560][ T6709] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.307872][ T6709] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.331639][ T6709] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.340543][ T6709] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 112.378315][ T6709] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 112.394495][ T6709] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 113.064372][ T6762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.206'. [ 113.085378][ T6760] vlan2: entered promiscuous mode [ 113.098075][ T6762] netlink: 5 bytes leftover after parsing attributes in process `syz.0.206'. [ 113.107367][ T6760] batadv0: entered promiscuous mode [ 113.506776][ T6771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 113.574739][ T6776] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 113.663222][ T6776] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 114.474528][ T6792] netlink: 'syz.0.215': attribute type 11 has an invalid length. [ 114.543817][ T6792] netlink: 32 bytes leftover after parsing attributes in process `syz.0.215'. [ 114.747289][ T6812] Cannot find set identified by id 0 to match [ 114.806291][ T6815] netlink: 'syz.2.219': attribute type 4 has an invalid length. [ 114.884660][ T6810] Bluetooth: MGMT ver 1.23 [ 115.119080][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 115.639261][ T6841] wg1: entered promiscuous mode [ 115.644321][ T6841] wg1: entered allmulticast mode [ 115.965966][ T31] audit: type=1800 audit(1742601196.308:7): pid=6847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name=363535343120766C656E3D310A0920747970655F69643D32206F66667365743D352073697A653D3130204E6F74206120564152206B696E64206D656D6265720A dev="tmpfs" ino=261 res=0 errno=0 [ 116.231250][ T6855] vlan2: entered promiscuous mode [ 116.236655][ T6855] batadv0: entered promiscuous mode [ 117.485584][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 117.615664][ T6900] netlink: 'syz.2.242': attribute type 5 has an invalid length. [ 117.696449][ T6900] : entered promiscuous mode [ 118.083393][ T6914] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 118.136022][ T6914] netlink: 'syz.2.246': attribute type 1 has an invalid length. [ 118.143737][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 118.862198][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.253'. [ 118.926024][ T6946] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 118.956944][ T6949] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.963069][ T6938] netlink: 108 bytes leftover after parsing attributes in process `syz.1.253'. [ 119.036123][ T6946] netlink: 'syz.1.253': attribute type 8 has an invalid length. [ 119.126538][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.258'. [ 119.141955][ T6953] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 119.640356][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.3.262'. [ 120.339910][ T6983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 120.346421][ T6966] tipc: Resetting bearer [ 120.606339][ T6987] netlink: 'syz.2.266': attribute type 11 has an invalid length. [ 120.619993][ T6987] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'. [ 120.731372][ T6966] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.740047][ T6966] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.749320][ T6966] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.758244][ T6966] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 120.792441][ T6966] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.801468][ T6966] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.811309][ T6966] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.820882][ T6966] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 120.832360][ T6966] bond0: left promiscuous mode [ 120.839539][ T6966] macvlan2: left promiscuous mode [ 120.975127][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.267'. [ 121.030882][ T6994] dccp_invalid_packet: P.Data Offset(0) too small [ 121.226484][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.271'. [ 121.361892][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 122.321876][ T7059] dccp_invalid_packet: pskb_may_pull failed [ 122.867373][ T7071] netlink: 'syz.2.290': attribute type 8 has an invalid length. [ 123.238714][ T7091] __nla_validate_parse: 3 callbacks suppressed [ 123.238732][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 123.270884][ T7093] netlink: 'syz.4.296': attribute type 8 has an invalid length. [ 123.302634][ T7091] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 123.320860][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.296'. [ 123.635806][ T7101] ip6tnl1: entered promiscuous mode [ 123.643631][ T7101] ip6tnl1: entered allmulticast mode [ 123.666759][ T7101] team0: Device ip6tnl1 is of different type [ 123.668716][ T7102] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 123.702612][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.299'. [ 123.997948][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.305'. [ 124.010322][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.049700][ T7118] bridge_slave_1 (unregistering): left allmulticast mode [ 124.096303][ T7118] bridge_slave_1 (unregistering): left promiscuous mode [ 124.124252][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.265165][ T7125] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.274286][ T7125] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.283634][ T7125] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.292979][ T7125] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.309984][ T7125] vxlan0: entered promiscuous mode [ 124.325502][ T7125] vxlan0: entered allmulticast mode [ 124.364251][ T7125] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.373728][ T7125] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.383754][ T7125] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.393489][ T7125] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 124.512264][ T7124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.650279][ T7124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.667682][ T7132] netlink: 'syz.2.309': attribute type 2 has an invalid length. [ 124.769104][ T7124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.904605][ T7124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.906929][ T7136] netlink: 'syz.2.311': attribute type 49 has an invalid length. [ 125.143637][ T7124] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.204153][ T7124] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.213100][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.313'. [ 125.263541][ T7124] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.344827][ T7124] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.635399][ T7158] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 125.947391][ T7171] netlink: 16 bytes leftover after parsing attributes in process `syz.2.323'. [ 126.075201][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.323'. [ 126.179529][ T7179] lo speed is unknown, defaulting to 1000 [ 126.214534][ T7179] lo speed is unknown, defaulting to 1000 [ 126.276507][ T7179] lo speed is unknown, defaulting to 1000 [ 126.305333][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 126.435834][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 126.546531][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 126.588457][ T7188] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 126.699096][ T7179] infiniband syz0: set active [ 126.708279][ T7179] infiniband syz0: added lo [ 126.727870][ T47] lo speed is unknown, defaulting to 1000 [ 126.873713][ T7179] RDS/IB: syz0: added [ 126.883234][ T7179] smc: adding ib device syz0 with port count 1 [ 126.904779][ T7179] smc: ib device syz0 port 1 has pnetid [ 126.912358][ T7197] syz.3.333: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 126.925313][ T5846] lo speed is unknown, defaulting to 1000 [ 126.928209][ T7197] CPU: 1 UID: 0 PID: 7197 Comm: syz.3.333 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 126.928237][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.928253][ T7197] Call Trace: [ 126.928261][ T7197] [ 126.928271][ T7197] dump_stack_lvl+0x241/0x360 [ 126.928314][ T7197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.928341][ T7197] ? __pfx__printk+0x10/0x10 [ 126.928370][ T7197] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 126.928402][ T7197] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 126.928436][ T7197] warn_alloc+0x278/0x410 [ 126.928463][ T7197] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 126.928488][ T7197] ? __pfx_warn_alloc+0x10/0x10 [ 126.928514][ T7197] ? kasan_save_track+0x3f/0x80 [ 126.928537][ T7197] ? __kasan_kmalloc+0x98/0xb0 [ 126.928576][ T7197] ? xsk_setsockopt+0x4aa/0x810 [ 126.928598][ T7197] ? do_sock_setsockopt+0x3af/0x720 [ 126.928625][ T7197] ? __x64_sys_setsockopt+0x1ee/0x280 [ 126.928651][ T7197] ? do_syscall_64+0xf3/0x230 [ 126.928684][ T7197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.928727][ T7197] __vmalloc_node_range_noprof+0x126/0x1380 [ 126.928783][ T7197] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 126.928813][ T7197] ? __kasan_kmalloc+0x98/0xb0 [ 126.928845][ T7197] vmalloc_user_noprof+0x74/0x80 [ 126.928869][ T7197] ? xskq_create+0xb6/0x170 [ 126.928893][ T7197] xskq_create+0xb6/0x170 [ 126.928920][ T7197] xsk_init_queue+0xa1/0x100 [ 126.928948][ T7197] xsk_setsockopt+0x4aa/0x810 [ 126.928974][ T7197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.928999][ T7197] ? __pfx_aa_sk_perm+0x10/0x10 [ 126.929038][ T7197] ? aa_sock_opt_perm+0x79/0x120 [ 126.929079][ T7197] ? __pfx_xsk_setsockopt+0x10/0x10 [ 126.929102][ T7197] do_sock_setsockopt+0x3af/0x720 [ 126.929136][ T7197] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 126.929169][ T7197] ? __fget_files+0x395/0x410 [ 126.929201][ T7197] ? __fget_files+0x2a/0x410 [ 126.929245][ T7197] __x64_sys_setsockopt+0x1ee/0x280 [ 126.929279][ T7197] do_syscall_64+0xf3/0x230 [ 126.929313][ T7197] ? clear_bhb_loop+0x35/0x90 [ 126.929350][ T7197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.929390][ T7197] RIP: 0033:0x7fb4f018d169 [ 126.929415][ T7197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.929434][ T7197] RSP: 002b:00007fb4f0fd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 126.929458][ T7197] RAX: ffffffffffffffda RBX: 00007fb4f03a5fa0 RCX: 00007fb4f018d169 [ 126.929474][ T7197] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 126.929488][ T7197] RBP: 00007fb4f020e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 126.929501][ T7197] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.929515][ T7197] R13: 0000000000000000 R14: 00007fb4f03a5fa0 R15: 00007ffed84e1d08 [ 126.929554][ T7197] [ 126.929565][ T7197] Mem-Info: [ 126.993953][ T7179] lo speed is unknown, defaulting to 1000 [ 127.051060][ T7197] active_anon:7079 inactive_anon:0 isolated_anon:0 [ 127.051060][ T7197] active_file:1576 inactive_file:38316 isolated_file:0 [ 127.051060][ T7197] unevictable:768 dirty:299 writeback:0 [ 127.051060][ T7197] slab_reclaimable:9894 slab_unreclaimable:108136 [ 127.051060][ T7197] mapped:29890 shmem:1437 pagetables:813 [ 127.051060][ T7197] sec_pagetables:0 bounce:0 [ 127.051060][ T7197] kernel_misc_reclaimable:0 [ 127.051060][ T7197] free:1319326 free_pcp:349 free_cma:0 [ 127.276170][ T7197] Node 0 active_anon:28516kB inactive_anon:0kB active_file:6304kB inactive_file:153188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119560kB dirty:1192kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11124kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no [ 127.336102][ T7197] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.406494][ T7197] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.464452][ T7179] lo speed is unknown, defaulting to 1000 [ 127.475212][ T7197] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 127.482424][ T7197] Node 0 DMA32 free:1350884kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28912kB inactive_anon:0kB active_file:6304kB inactive_file:152860kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2549692kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:1092kB free_cma:0kB [ 127.540653][ T7201] pim6reg: entered allmulticast mode [ 127.570663][ T7197] lowmem_reserve[]: 0 0 0 0 0 [ 127.575505][ T7197] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.657488][ T7197] lowmem_reserve[]: 0 0 0 0 0 [ 127.658473][ T7201] pim6reg: left allmulticast mode [ 127.662292][ T7197] Node 1 Normal free:3908720kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:64kB free_cma:0kB [ 127.726151][ T7197] lowmem_reserve[]: 0 0 0 0 0 [ 127.731056][ T7197] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.768407][ T7197] Node 0 DMA32: 178*4kB (UM) 246*8kB (UME) 161*16kB (U) 25*32kB (UE) 205*64kB (UME) 16*128kB (UME) 35*256kB (UM) 49*512kB (UME) 37*1024kB (UME) 7*2048kB (UME) 303*4096kB (M) = 1348584kB [ 127.807176][ T7203] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 127.818144][ T7197] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 127.863007][ T7179] lo speed is unknown, defaulting to 1000 [ 127.869551][ T7197] Node 1 Normal: 186*4kB (UM) 37*8kB (UME) 42*16kB (UME) 178*32kB (UME) 94*64kB (UME) 30*128kB (UME) 17*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3908720kB [ 127.929498][ T7197] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.955559][ T7197] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 127.975665][ T7197] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 127.995129][ T7197] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.011386][ T7197] 41329 total pagecache pages [ 128.026090][ T7197] 0 pages in swap cache [ 128.041879][ T7197] Free swap = 124996kB [ 128.062430][ T7197] Total swap = 124996kB [ 128.077147][ T7197] 2097051 pages RAM [ 128.081100][ T7197] 0 pages HighMem/MovableOnly [ 128.085800][ T7197] 427906 pages reserved [ 128.115976][ T7197] 0 pages cma reserved [ 128.129676][ T7210] bond_slave_0: entered promiscuous mode [ 128.135658][ T7210] bond_slave_1: entered promiscuous mode [ 128.206160][ T7210] macvtap1: entered promiscuous mode [ 128.230480][ T7210] bond0: entered promiscuous mode [ 128.277853][ T7210] macvtap1: entered allmulticast mode [ 128.302705][ T7210] bond0: entered allmulticast mode [ 128.330592][ T7210] bond_slave_0: entered allmulticast mode [ 128.342414][ T7210] bond_slave_1: entered allmulticast mode [ 128.358057][ T7210] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 128.382275][ T7214] macvtap1: left promiscuous mode [ 128.404539][ T7214] bond0: left promiscuous mode [ 128.422934][ T7214] macvtap1: left allmulticast mode [ 128.442623][ T7214] bond0: left allmulticast mode [ 128.463767][ T7214] bond_slave_0: left allmulticast mode [ 128.484117][ T7214] bond_slave_1: left allmulticast mode [ 128.514735][ T7179] lo speed is unknown, defaulting to 1000 [ 128.790147][ T7207] delete_channel: no stack [ 128.973654][ T7239] netlink: 'syz.0.344': attribute type 5 has an invalid length. [ 128.998414][ T7179] lo speed is unknown, defaulting to 1000 [ 129.087786][ T7239] __nla_validate_parse: 4 callbacks suppressed [ 129.087806][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 129.158167][ T7239] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 129.179350][ T7239] macvtap1: entered promiscuous mode [ 129.196191][ T7239] macvtap1: entered allmulticast mode [ 129.224374][ T7239] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 129.250973][ T7248] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.321973][ T7248] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.469260][ T7248] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.567784][ T7248] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.606820][ T7257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.350'. [ 129.723532][ T7248] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.739921][ T7248] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.795313][ T7248] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.842691][ T7248] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.407272][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.360'. [ 130.653111][ T7289] netlink: 256 bytes leftover after parsing attributes in process `syz.3.365'. [ 130.682991][ T7291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.366'. [ 130.954861][ T7297] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.147428][ T7303] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 131.158739][ T26] IPVS: starting estimator thread 0... [ 131.266020][ T7308] IPVS: using max 19 ests per chain, 45600 per kthread [ 133.218923][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.226763][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.434107][ T7348] netlink: 'syz.1.389': attribute type 1 has an invalid length. [ 133.450749][ T7348] netlink: 224 bytes leftover after parsing attributes in process `syz.1.389'. [ 133.916515][ T7371] netlink: 44 bytes leftover after parsing attributes in process `syz.1.399'. [ 134.648600][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 134.945737][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 135.798209][ T7448] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 135.805325][ T7451] netlink: 'syz.1.434': attribute type 11 has an invalid length. [ 135.889144][ T7453] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 135.915434][ T7453] netlink: 240 bytes leftover after parsing attributes in process `syz.2.435'. [ 135.934817][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 135.951508][ T7455] lo speed is unknown, defaulting to 1000 [ 137.637041][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.470'. [ 137.686620][ T5854] Bluetooth: hci1: command tx timeout [ 137.703956][ T7538] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.240891][ T7558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 138.309206][ T7562] netlink: 48 bytes leftover after parsing attributes in process `syz.0.482'. [ 138.668922][ T6483] bond0: (slave bond_slave_0): interface is now down [ 138.700210][ T6483] bond0: (slave bond_slave_1): interface is now down [ 138.718070][ T7582] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.735054][ T6483] bond0: now running without any active interface! [ 139.216937][ T7599] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 139.363807][ T7605] netlink: 340 bytes leftover after parsing attributes in process `syz.0.502'. [ 140.104756][ T7639] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.114834][ T7639] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.124060][ T7639] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.133068][ T7639] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.184822][ T7657] xt_CT: No such helper "snmp" [ 141.038253][ T7695] syzkaller1: entered promiscuous mode [ 141.043898][ T7695] syzkaller1: entered allmulticast mode [ 141.391436][ T7711] tipc: New replicast peer: 255.255.255.255 [ 141.401780][ T7711] tipc: Enabled bearer , priority 10 [ 141.751820][ T7725] macvtap0: entered promiscuous mode [ 141.783220][ T7725] team0: Device macvtap0 failed to register rx_handler [ 142.143446][ T7746] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 142.189461][ T7746] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 143.544955][ T7802] netlink: 'syz.0.582': attribute type 8 has an invalid length. [ 143.675642][ T7807] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 143.762948][ T7810] netlink: 256 bytes leftover after parsing attributes in process `syz.0.585'. [ 143.796582][ T7810] netlink: 72 bytes leftover after parsing attributes in process `syz.0.585'. [ 145.998711][ T7904] netlink: 264 bytes leftover after parsing attributes in process `syz.3.627'. [ 146.281786][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 146.327940][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.630'. [ 146.544841][ T7926] netlink: 16 bytes leftover after parsing attributes in process `syz.2.637'. [ 146.574223][ T7928] Driver unsupported XDP return value 0 on prog (id 285) dev N/A, expect packet loss! [ 147.002938][ T7947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 147.239965][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 147.266921][ T7956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 147.483530][ T7963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.654'. [ 147.534689][ T7963] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.144652][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 149.186499][ T8015] __nla_validate_parse: 1 callbacks suppressed [ 149.186521][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 149.257303][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.676'. [ 149.506189][ T8028] lo: entered promiscuous mode [ 149.512240][ T8028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.475485][ T8058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.694'. [ 151.100780][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 151.135797][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 151.221802][ T8086] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 151.884613][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.721'. [ 152.363399][ T8139] dccp_invalid_packet: P.Data Offset(0) too small [ 153.159610][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 153.808367][ T8198] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 153.822257][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.900692][ T8202] lo speed is unknown, defaulting to 1000 [ 155.221863][ T8234] netlink: 'syz.4.770': attribute type 9 has an invalid length. [ 155.802382][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 155.856131][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 156.341616][ T8277] tipc: Failed to remove unknown binding: 66,1,1/4:3629908547/3629908549 [ 156.371747][ T8277] tipc: Failed to remove unknown binding: 66,1,1/4:3629908547/3629908549 [ 156.405734][ T8277] tipc: Failed to remove unknown binding: 66,1,1/4:3629908547/3629908549 [ 156.584284][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 156.631750][ T6129] lo speed is unknown, defaulting to 1000 [ 156.661774][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 156.682356][ T6129] lo speed is unknown, defaulting to 1000 [ 156.936888][ T8299] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 156.944848][ T8299] netlink: 192 bytes leftover after parsing attributes in process `syz.0.797'. [ 157.260219][ T8311] netlink: 36 bytes leftover after parsing attributes in process `syz.1.804'. [ 157.287719][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.306476][ T8313] bridge0: entered allmulticast mode [ 157.333629][ T8320] bridge_slave_1: left allmulticast mode [ 157.343282][ T8320] bridge_slave_1: left promiscuous mode [ 157.353052][ T8320] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.426982][ T8320] bridge_slave_0: left allmulticast mode [ 157.438885][ T8320] bridge_slave_0: left promiscuous mode [ 157.464255][ T8320] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.525073][ T8327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 157.560882][ T8328] ------------[ cut here ]------------ [ 157.566850][ T8328] WARNING: CPU: 0 PID: 8328 at net/ipv4/udp_offload.c:118 udp_tunnel_update_gro_rcv+0x31d/0x670 [ 157.577453][ T8328] Modules linked in: [ 157.581397][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.0.811 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 157.592070][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.602224][ T8328] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 157.608847][ T8328] Code: 23 48 89 eb e8 c4 04 4f f7 c7 05 0a b6 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 ab 04 4f f7 eb 40 e8 a4 04 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 96 04 4f f7 eb 2b e8 8f 04 4f f7 eb 24 [ 157.628582][ T8328] RSP: 0018:ffffc90003397830 EFLAGS: 00010293 [ 157.634700][ T8328] RAX: ffffffff8a72eece RBX: 1ffff11006422d8f RCX: ffff888012145a00 [ 157.642965][ T8328] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 157.651024][ T8328] RBP: ffffffff86c2fe90 R08: ffffffff8a72ea27 R09: 1ffffffff207a42e [ 157.659123][ T8328] R10: dffffc0000000000 R11: fffffbfff207a42f R12: dffffc0000000000 [ 157.667663][ T8328] R13: 0000000000000002 R14: ffff888032116c78 R15: 0000000000000000 [ 157.676159][ T8328] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 157.685135][ T8328] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.692266][ T8328] CR2: 0000200000000000 CR3: 0000000012aee000 CR4: 00000000003526f0 [ 157.700348][ T8328] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 157.708399][ T8328] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 157.716604][ T8328] Call Trace: [ 157.719925][ T8328] [ 157.722893][ T8328] ? __warn+0x165/0x4d0 [ 157.727146][ T8328] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 157.733003][ T8328] ? report_bug+0x2b3/0x500 [ 157.737595][ T8328] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 157.743459][ T8328] ? handle_bug+0x60/0x90 [ 157.747942][ T8328] ? exc_invalid_op+0x1a/0x50 [ 157.752664][ T8328] ? asm_exc_invalid_op+0x1a/0x20 [ 157.757807][ T8328] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 157.763792][ T8328] ? udp_tunnel_update_gro_rcv+0xf7/0x670 [ 157.770006][ T8328] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 157.775983][ T8328] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 157.781853][ T8328] udpv6_destroy_sock+0x230/0x2a0 [ 157.786974][ T8328] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 157.792574][ T8328] sk_common_release+0x71/0x2e0 [ 157.797517][ T8328] inet_release+0x17d/0x200 [ 157.802081][ T8328] sock_close+0xbc/0x240 [ 157.806436][ T8328] ? __pfx_sock_close+0x10/0x10 [ 157.811338][ T8328] __fput+0x3e9/0x9f0 [ 157.815380][ T8328] task_work_run+0x24f/0x310 [ 157.820099][ T8328] ? __pfx_task_work_run+0x10/0x10 [ 157.825262][ T8328] ? do_exit+0xa25/0x2940 [ 157.829703][ T8328] ? do_exit+0xa25/0x2940 [ 157.834178][ T8328] do_exit+0xa2a/0x2940 [ 157.838686][ T8328] ? __pfx_do_exit+0x10/0x10 [ 157.843332][ T8328] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 157.848880][ T8328] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.854922][ T8328] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.861339][ T8328] ? _raw_spin_lock_irq+0xdf/0x120 [ 157.867021][ T8328] do_group_exit+0x207/0x2c0 [ 157.871669][ T8328] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.877433][ T8328] ? lockdep_hardirqs_on+0x99/0x150 [ 157.882782][ T8328] get_signal+0x168c/0x1720 [ 157.887392][ T8328] ? __pfx_get_signal+0x10/0x10 [ 157.892303][ T8328] arch_do_signal_or_restart+0x96/0x860 [ 157.897949][ T8328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.904146][ T8328] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 157.910259][ T8328] ? syscall_exit_to_user_mode+0xa3/0x340 [ 157.916106][ T8328] syscall_exit_to_user_mode+0xce/0x340 [ 157.921710][ T8328] do_syscall_64+0x100/0x230 [ 157.926714][ T8328] ? clear_bhb_loop+0x35/0x90 [ 157.931584][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.937569][ T8328] RIP: 0033:0x7fea8df8d169 [ 157.942020][ T8328] Code: Unable to access opcode bytes at 0x7fea8df8d13f. [ 157.949144][ T8328] RSP: 002b:00007fea8ed7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.957762][ T8328] RAX: fffffffffffffe00 RBX: 00007fea8e1a5fa8 RCX: 00007fea8df8d169 [ 157.965777][ T8328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea8e1a5fa8 [ 157.974295][ T8328] RBP: 00007fea8e1a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.982908][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea8e1a5fac [ 157.991021][ T8328] R13: 0000000000000000 R14: 00007ffef01707f0 R15: 00007ffef01708d8 [ 157.999083][ T8328] [ 158.002149][ T8328] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 158.009648][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.0.811 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 158.020284][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.030357][ T8328] Call Trace: [ 158.033648][ T8328] [ 158.036589][ T8328] dump_stack_lvl+0x241/0x360 [ 158.041290][ T8328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.046498][ T8328] ? __pfx__printk+0x10/0x10 [ 158.051102][ T8328] ? vscnprintf+0x5d/0x90 [ 158.055444][ T8328] panic+0x349/0x880 [ 158.059352][ T8328] ? __warn+0x174/0x4d0 [ 158.063515][ T8328] ? __pfx_panic+0x10/0x10 [ 158.067954][ T8328] __warn+0x344/0x4d0 [ 158.071945][ T8328] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 158.077772][ T8328] report_bug+0x2b3/0x500 [ 158.082122][ T8328] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 158.087985][ T8328] handle_bug+0x60/0x90 [ 158.092146][ T8328] exc_invalid_op+0x1a/0x50 [ 158.096670][ T8328] asm_exc_invalid_op+0x1a/0x20 [ 158.101563][ T8328] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 158.107995][ T8328] Code: 23 48 89 eb e8 c4 04 4f f7 c7 05 0a b6 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 ab 04 4f f7 eb 40 e8 a4 04 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 96 04 4f f7 eb 2b e8 8f 04 4f f7 eb 24 [ 158.127612][ T8328] RSP: 0018:ffffc90003397830 EFLAGS: 00010293 [ 158.133694][ T8328] RAX: ffffffff8a72eece RBX: 1ffff11006422d8f RCX: ffff888012145a00 [ 158.141673][ T8328] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 158.149737][ T8328] RBP: ffffffff86c2fe90 R08: ffffffff8a72ea27 R09: 1ffffffff207a42e [ 158.157714][ T8328] R10: dffffc0000000000 R11: fffffbfff207a42f R12: dffffc0000000000 [ 158.165691][ T8328] R13: 0000000000000002 R14: ffff888032116c78 R15: 0000000000000000 [ 158.173673][ T8328] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 158.179158][ T8328] ? udp_tunnel_update_gro_rcv+0xf7/0x670 [ 158.184920][ T8328] ? udp_tunnel_update_gro_rcv+0x59e/0x670 [ 158.190748][ T8328] udpv6_destroy_sock+0x230/0x2a0 [ 158.195793][ T8328] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 158.201360][ T8328] sk_common_release+0x71/0x2e0 [ 158.206227][ T8328] inet_release+0x17d/0x200 [ 158.210751][ T8328] sock_close+0xbc/0x240 [ 158.215009][ T8328] ? __pfx_sock_close+0x10/0x10 [ 158.219877][ T8328] __fput+0x3e9/0x9f0 [ 158.223886][ T8328] task_work_run+0x24f/0x310 [ 158.228494][ T8328] ? __pfx_task_work_run+0x10/0x10 [ 158.233616][ T8328] ? do_exit+0xa25/0x2940 [ 158.237966][ T8328] ? do_exit+0xa25/0x2940 [ 158.242314][ T8328] do_exit+0xa2a/0x2940 [ 158.246497][ T8328] ? __pfx_do_exit+0x10/0x10 [ 158.251101][ T8328] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 158.256491][ T8328] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.262490][ T8328] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.268832][ T8328] ? _raw_spin_lock_irq+0xdf/0x120 [ 158.273966][ T8328] do_group_exit+0x207/0x2c0 [ 158.278574][ T8328] ? _raw_spin_unlock_irq+0x23/0x50 [ 158.283784][ T8328] ? lockdep_hardirqs_on+0x99/0x150 [ 158.289009][ T8328] get_signal+0x168c/0x1720 [ 158.293537][ T8328] ? __pfx_get_signal+0x10/0x10 [ 158.298403][ T8328] arch_do_signal_or_restart+0x96/0x860 [ 158.303966][ T8328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 158.310133][ T8328] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.316146][ T8328] ? syscall_exit_to_user_mode+0xa3/0x340 [ 158.321889][ T8328] syscall_exit_to_user_mode+0xce/0x340 [ 158.327455][ T8328] do_syscall_64+0x100/0x230 [ 158.332061][ T8328] ? clear_bhb_loop+0x35/0x90 [ 158.336754][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.342659][ T8328] RIP: 0033:0x7fea8df8d169 [ 158.347082][ T8328] Code: Unable to access opcode bytes at 0x7fea8df8d13f. [ 158.354127][ T8328] RSP: 002b:00007fea8ed7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 158.362559][ T8328] RAX: fffffffffffffe00 RBX: 00007fea8e1a5fa8 RCX: 00007fea8df8d169 [ 158.370539][ T8328] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea8e1a5fa8 [ 158.378522][ T8328] RBP: 00007fea8e1a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 158.386501][ T8328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea8e1a5fac [ 158.394476][ T8328] R13: 0000000000000000 R14: 00007ffef01707f0 R15: 00007ffef01708d8 [ 158.402470][ T8328] [ 158.405891][ T8328] Kernel Offset: disabled [ 158.410305][ T8328] Rebooting in 86400 seconds..