last executing test programs: 4.043692797s ago: executing program 4 (id=372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 3.663644039s ago: executing program 4 (id=376): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) bind$can_j1939(r0, &(0x7f0000000200)={0x1d, r1, 0x2, {0x2, 0xf0, 0x3}, 0xe9d2c4bffb33924a}, 0x18) 3.135205259s ago: executing program 0 (id=380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.895999478s ago: executing program 0 (id=382): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xffffffff, @mcast2, 0x5}, 0x51) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e24, 0x2, @loopback, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x110}}], 0x2, 0x24001c00) 2.831614873s ago: executing program 1 (id=384): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="ba3e07db3c8fca560993067c1c3b3e5e7fcac2dd5cb81106f1a3c711199159f495a9df4ff27c6d4b0b16101d922b1a357181c553f6d41bc33ac92ea5667af720d88c4053de69ebefa589b550e42d1f409bf9bb1b721c56cebca1acc53857f4d60057f04226a8e47382c9d79ad4d973b8b5944041238426d4855af71f74ba23e68ea462a790dfe8cf0b5cd5721c8b6c33080f4a2c2f207617f5d28ad49e597a31a2e45b2a472ef2", 0xa7}], 0x1, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x85, 0x1, 0x7, [{@remote, 0xbce5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x1}]}]}}}], 0x60}}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000480)="71fa", 0x2}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4004080) 2.831481363s ago: executing program 4 (id=385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 2.643515478s ago: executing program 3 (id=386): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0xc, 0x25, &(0x7f00000009c0)="160000000000000000b2317233f54c843626ac7a395c5e5813bc3845128e05bad960a99225", 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x0, 'syz0\x00'}) 2.63812305s ago: executing program 0 (id=387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c0}, 0x50) 2.577344648s ago: executing program 4 (id=389): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) 2.366929315s ago: executing program 3 (id=390): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01082cbd7000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="2400508005000200040000", @ANYRESOCT], 0x40}, 0x1, 0x0, 0x0, 0x40905}, 0x4040800) 2.307664491s ago: executing program 4 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000001c0)=0x2) 2.307495509s ago: executing program 0 (id=393): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.180709418s ago: executing program 3 (id=394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1) 1.825726639s ago: executing program 1 (id=398): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0xfffffffffffffffc, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) 1.675911354s ago: executing program 2 (id=399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0) 1.675713666s ago: executing program 1 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000080)) 1.580867501s ago: executing program 2 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r0, 0x200) 1.553266617s ago: executing program 3 (id=402): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000040010000400000005"], 0x50) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x2, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.386643886s ago: executing program 2 (id=403): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0xff8e, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20008446}, 0x20000000) 1.179703657s ago: executing program 0 (id=404): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000180)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000000040)=0x80, 0x80000) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x88, &(0x7f0000000200), &(0x7f0000000280)=0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = epoll_create1(0x80000) r10 = socket(0x40000000015, 0x805, 0x0) getsockopt(r10, 0x114, 0x2718, 0x0, &(0x7f0000000200)) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0xba01}, 0x0) 1.171459865s ago: executing program 4 (id=405): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x6, 0x100}}}}}}}}}, 0x4a) 1.092444068s ago: executing program 1 (id=406): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x20, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r1, 0x78fe, 0x7800, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xec, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 1.023779437s ago: executing program 3 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09"], 0xfdef) 894.291401ms ago: executing program 2 (id=408): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x400c000) 546.181345ms ago: executing program 0 (id=409): socket(0x5, 0x80000, 0xffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000002c0)={0x402, {{0xa, 0xffff, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4, 0x0, @local}}}, 0x108) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, 0x0, 0x20000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x24}, &(0x7f0000000200)=0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x4000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r6]) 435.267499ms ago: executing program 2 (id=410): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 412.785473ms ago: executing program 1 (id=411): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x80, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}}, [0x0, 0xe4cb, 0x3, 0xfff, 0x6, 0x60000000000, 0x9, 0x7, 0x7, 0xffff, 0xf6c, 0x4, 0x8, 0x7, 0x1]}, &(0x7f0000000140)=0x100) 295.659985ms ago: executing program 3 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x818}, 0x4000) 245.58995ms ago: executing program 1 (id=413): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x200, 0x1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x4c}}, 0x8010) 0s ago: executing program 2 (id=414): socket$kcm(0x2, 0x3, 0x2) socketpair(0x1, 0x100000005, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x24000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 82.855935][ T5825] cgroup: Unknown subsys name 'net' [ 82.972993][ T5825] cgroup: Unknown subsys name 'cpuset' [ 82.982706][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.679402][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.386923][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.404229][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.412835][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.421320][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.429231][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.438485][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.446833][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.454268][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.462576][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.470986][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.479175][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.488658][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.488661][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.509510][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.517524][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.525432][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.529773][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.541305][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.550175][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.558900][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.661215][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.673876][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.681588][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.690095][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.698057][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.307931][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.450834][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.463515][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.619762][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 88.693686][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.701071][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.708910][ T5855] bridge_slave_0: entered allmulticast mode [ 88.716384][ T5855] bridge_slave_0: entered promiscuous mode [ 88.760469][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.767687][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.775912][ T5855] bridge_slave_1: entered allmulticast mode [ 88.783381][ T5855] bridge_slave_1: entered promiscuous mode [ 88.849409][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.856726][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.864519][ T5843] bridge_slave_0: entered allmulticast mode [ 88.872335][ T5843] bridge_slave_0: entered promiscuous mode [ 88.881515][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 88.920363][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.927555][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.935098][ T5838] bridge_slave_0: entered allmulticast mode [ 88.942801][ T5838] bridge_slave_0: entered promiscuous mode [ 88.963910][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.971531][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.979754][ T5843] bridge_slave_1: entered allmulticast mode [ 88.987026][ T5843] bridge_slave_1: entered promiscuous mode [ 89.012378][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.025427][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.035123][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.043576][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.050918][ T5838] bridge_slave_1: entered allmulticast mode [ 89.058615][ T5838] bridge_slave_1: entered promiscuous mode [ 89.169727][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.182758][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.216110][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.269422][ T5855] team0: Port device team_slave_0 added [ 89.277940][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.302918][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.312217][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.320656][ T5835] bridge_slave_0: entered allmulticast mode [ 89.327993][ T5835] bridge_slave_0: entered promiscuous mode [ 89.374113][ T5855] team0: Port device team_slave_1 added [ 89.395914][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.403516][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.411412][ T5835] bridge_slave_1: entered allmulticast mode [ 89.419208][ T5835] bridge_slave_1: entered promiscuous mode [ 89.430620][ T5843] team0: Port device team_slave_0 added [ 89.472123][ T5838] team0: Port device team_slave_0 added [ 89.482763][ T5838] team0: Port device team_slave_1 added [ 89.517637][ T5843] team0: Port device team_slave_1 added [ 89.538383][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.545554][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.552999][ T5847] bridge_slave_0: entered allmulticast mode [ 89.560309][ T5847] bridge_slave_0: entered promiscuous mode [ 89.584409][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.591475][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.611818][ T5844] Bluetooth: hci3: command tx timeout [ 89.618642][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.623126][ T5848] Bluetooth: hci2: command tx timeout [ 89.633734][ T5842] Bluetooth: hci0: command tx timeout [ 89.639176][ T5848] Bluetooth: hci1: command tx timeout [ 89.667319][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.693279][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.701178][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.709083][ T5847] bridge_slave_1: entered allmulticast mode [ 89.716400][ T5847] bridge_slave_1: entered promiscuous mode [ 89.738870][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.745851][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.771763][ T5848] Bluetooth: hci4: command tx timeout [ 89.779876][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.807222][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.832854][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.840134][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.866790][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.901895][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.914231][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.924426][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.931612][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.958083][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.985817][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.993000][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.019492][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.069151][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.076139][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.102499][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.124584][ T5835] team0: Port device team_slave_0 added [ 90.133884][ T5835] team0: Port device team_slave_1 added [ 90.173120][ T5847] team0: Port device team_slave_0 added [ 90.227157][ T5855] hsr_slave_0: entered promiscuous mode [ 90.234710][ T5855] hsr_slave_1: entered promiscuous mode [ 90.244111][ T5847] team0: Port device team_slave_1 added [ 90.279519][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.286513][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.312887][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.345261][ T5843] hsr_slave_0: entered promiscuous mode [ 90.352158][ T5843] hsr_slave_1: entered promiscuous mode [ 90.358561][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.366433][ T5843] Cannot create hsr debugfs directory [ 90.386381][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.396168][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.422656][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.434919][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.442260][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.468209][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.533630][ T5838] hsr_slave_0: entered promiscuous mode [ 90.540232][ T5838] hsr_slave_1: entered promiscuous mode [ 90.546488][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.555607][ T5838] Cannot create hsr debugfs directory [ 90.562138][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.569182][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.595519][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.704514][ T5847] hsr_slave_0: entered promiscuous mode [ 90.711099][ T5847] hsr_slave_1: entered promiscuous mode [ 90.717237][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.726151][ T5847] Cannot create hsr debugfs directory [ 90.863798][ T5835] hsr_slave_0: entered promiscuous mode [ 90.876897][ T5835] hsr_slave_1: entered promiscuous mode [ 90.885871][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.893774][ T5835] Cannot create hsr debugfs directory [ 91.399662][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.422081][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.434808][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.456769][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.517955][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.542054][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.553129][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.565759][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.644644][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.663745][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.675279][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.686297][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.694771][ T5848] Bluetooth: hci1: command tx timeout [ 91.698647][ T5842] Bluetooth: hci0: command tx timeout [ 91.700386][ T5852] Bluetooth: hci2: command tx timeout [ 91.707394][ T5844] Bluetooth: hci3: command tx timeout [ 91.835859][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.848427][ T5844] Bluetooth: hci4: command tx timeout [ 91.862581][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.874640][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.887975][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.934457][ T977] cfg80211: failed to load regulatory.db [ 92.011880][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.024303][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.035306][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.047383][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.078013][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.144242][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.187759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.195109][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.221881][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.236492][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.265550][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.272720][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.308208][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.365936][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.389961][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.397233][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.419266][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.426426][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.464402][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.471601][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.483908][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.491085][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.513022][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.617913][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.684186][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.695794][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.703080][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.764161][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.771404][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.802554][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.866303][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.874001][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.915306][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.922556][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.993299][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.257313][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.279942][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.486701][ T5843] veth0_vlan: entered promiscuous mode [ 93.516053][ T5838] veth0_vlan: entered promiscuous mode [ 93.557728][ T5843] veth1_vlan: entered promiscuous mode [ 93.604843][ T5838] veth1_vlan: entered promiscuous mode [ 93.697290][ T5843] veth0_macvtap: entered promiscuous mode [ 93.716714][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.754388][ T5843] veth1_macvtap: entered promiscuous mode [ 93.770590][ T5844] Bluetooth: hci1: command tx timeout [ 93.770691][ T5848] Bluetooth: hci2: command tx timeout [ 93.776030][ T5844] Bluetooth: hci3: command tx timeout [ 93.781821][ T5852] Bluetooth: hci0: command tx timeout [ 93.802031][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.845288][ T5855] veth0_vlan: entered promiscuous mode [ 93.886161][ T5838] veth0_macvtap: entered promiscuous mode [ 93.897949][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.921789][ T5835] veth0_vlan: entered promiscuous mode [ 93.933990][ T5855] veth1_vlan: entered promiscuous mode [ 93.939824][ T5852] Bluetooth: hci4: command tx timeout [ 93.961920][ T5847] veth0_vlan: entered promiscuous mode [ 93.969753][ T5835] veth1_vlan: entered promiscuous mode [ 93.976820][ T5838] veth1_macvtap: entered promiscuous mode [ 93.986480][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.032336][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.043826][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.055901][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.066118][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.075869][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.084971][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.095231][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.118533][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.130574][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.143157][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.156168][ T5847] veth1_vlan: entered promiscuous mode [ 94.175605][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.186735][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.196330][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.206791][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.277501][ T5835] veth0_macvtap: entered promiscuous mode [ 94.299240][ T5855] veth0_macvtap: entered promiscuous mode [ 94.314616][ T5835] veth1_macvtap: entered promiscuous mode [ 94.371926][ T5855] veth1_macvtap: entered promiscuous mode [ 94.394028][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.410457][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.422409][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.423521][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.440488][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.451157][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.462302][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.535855][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.547219][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.557139][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.567653][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.583393][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.596231][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.597694][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.619682][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.623762][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.638232][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.651896][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.662830][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.673372][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.683271][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.694281][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.705848][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.717383][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727091][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.740752][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.749586][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.767315][ T5847] veth0_macvtap: entered promiscuous mode [ 94.777504][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.788034][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.798175][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.808815][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.818704][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.829318][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.840980][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.888579][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.896476][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.906914][ T5847] veth1_macvtap: entered promiscuous mode [ 94.924331][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.943452][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.952359][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.961574][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.002693][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.141465][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.152963][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.166599][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.182550][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.193765][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.213248][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.230787][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.245631][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.276075][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.309235][ T5929] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 95.352845][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.372817][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.386322][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.418534][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.431187][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.442053][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.454563][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.467659][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.481543][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.506444][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.517461][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.551717][ T5847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561399][ T5847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.574367][ T5847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.583264][ T5847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.634149][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.652991][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.776502][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.809086][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.810162][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.817595][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.849265][ T5852] Bluetooth: hci3: command tx timeout [ 95.870319][ T5848] Bluetooth: hci0: command tx timeout [ 95.875802][ T5848] Bluetooth: hci1: command tx timeout [ 95.881506][ T5852] Bluetooth: hci2: command tx timeout [ 96.009015][ T5848] Bluetooth: hci4: command tx timeout [ 96.137313][ T3458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.180170][ T3458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.483363][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.519982][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.121768][ T977] IPVS: starting estimator thread 0... [ 97.228505][ T5973] IPVS: using max 26 ests per chain, 62400 per kthread [ 97.388924][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 97.570628][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 97.663203][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 97.825774][ T5988] Zero length message leads to an empty skb [ 98.574802][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 100.071678][ T6000] pimreg6: entered allmulticast mode [ 101.040943][ T6005] syzkaller0: entered promiscuous mode [ 101.046482][ T6005] syzkaller0: entered allmulticast mode [ 101.880964][ T6012] lo speed is unknown, defaulting to 1000 [ 101.886971][ T6012] lo speed is unknown, defaulting to 1000 [ 101.976398][ T6012] lo speed is unknown, defaulting to 1000 [ 101.988203][ T6012] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.065837][ T6012] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.118191][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 102.645893][ T6016] team0 (unregistering): Port device team_slave_0 removed [ 102.724359][ T6016] team0 (unregistering): Port device team_slave_1 removed [ 102.867549][ T6012] lo speed is unknown, defaulting to 1000 [ 102.883863][ T6021] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.893034][ T6021] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.902139][ T6021] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.911306][ T6021] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.119006][ T6012] lo speed is unknown, defaulting to 1000 [ 103.141884][ T6012] lo speed is unknown, defaulting to 1000 [ 103.151505][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 103.172916][ T6012] lo speed is unknown, defaulting to 1000 [ 103.263001][ T6012] lo speed is unknown, defaulting to 1000 [ 103.295151][ T6012] lo speed is unknown, defaulting to 1000 [ 103.346905][ T6012] lo speed is unknown, defaulting to 1000 [ 103.712473][ T6032] $z: renamed from pim6reg1 [ 103.837715][ T6032] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 104.883384][ T6047] lo speed is unknown, defaulting to 1000 [ 105.209956][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'. [ 105.299967][ T6057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.319703][ T6057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.348605][ T6057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.388153][ T6057] netlink: 36 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.415729][ T6054] lo speed is unknown, defaulting to 1000 [ 106.807780][ T6072] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.991337][ T6072] batadv0: entered promiscuous mode [ 106.997010][ T6072] vlan2: entered promiscuous mode [ 107.176465][ T5892] hid (null): unknown global tag 0xe [ 107.370547][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.425244][ T6075] lo speed is unknown, defaulting to 1000 [ 107.468583][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.477447][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 107.509533][ T6078] lo speed is unknown, defaulting to 1000 [ 107.588772][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35'. [ 108.879073][ T6105] netlink: zone id is out of range [ 109.256531][ T6115] netlink: 20 bytes leftover after parsing attributes in process `syz.4.44'. [ 109.359727][ T6115] vlan2: entered promiscuous mode [ 109.667742][ T5892] hid-generic 0005:07C0:0A0F.0001: unknown global tag 0xe [ 109.685942][ T5892] hid-generic 0005:07C0:0A0F.0001: item 0 2 1 14 parsing failed [ 109.728523][ T5892] hid-generic 0005:07C0:0A0F.0001: probe with driver hid-generic failed with error -22 [ 111.002155][ T6148] netlink: 'syz.4.56': attribute type 21 has an invalid length. [ 111.036465][ T6148] netlink: 156 bytes leftover after parsing attributes in process `syz.4.56'. [ 111.086969][ T6148] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 111.262903][ T6157] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 111.518672][ T6167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.60'. [ 111.536184][ T6167] vlan3: entered promiscuous mode [ 111.541696][ T6167] batadv0: entered promiscuous mode [ 111.596308][ T6169] netlink: 352 bytes leftover after parsing attributes in process `syz.4.62'. [ 111.854599][ T6178] xt_hashlimit: size too large, truncated to 1048576 [ 112.295309][ T6184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 112.570075][ T6190] warning: `syz.2.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.881444][ T6206] tipc: Started in network mode [ 112.886627][ T6206] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 112.902962][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.923772][ T6206] tipc: Enabled bearer , priority 10 [ 112.935752][ T6211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.77'. [ 112.993925][ T6210] pim6reg: entered allmulticast mode [ 113.079225][ T6214] pim6reg: left allmulticast mode [ 113.174543][ T6213] gtp0: entered promiscuous mode [ 113.189037][ T6213] gtp0: entered allmulticast mode [ 113.214643][ T6225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.80'. [ 113.254330][ T6225] vlan2: entered promiscuous mode [ 113.290439][ T6225] batadv0: entered promiscuous mode [ 113.337124][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.75'. [ 113.353272][ T6228] pimreg: entered allmulticast mode [ 113.369073][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 113.398714][ T6229] pimreg: left allmulticast mode [ 113.475362][ T6233] xt_bpf: check failed: parse error [ 113.501927][ T6210] bridge0: entered promiscuous mode [ 113.919583][ T5892] tipc: Node number set to 1 [ 114.210893][ T6248] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 114.410555][ T6257] netlink: 'syz.2.92': attribute type 9 has an invalid length. [ 114.418179][ T6257] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.92'. [ 114.542579][ T6263] tipc: New replicast peer: 255.255.255.255 [ 114.585069][ T6263] tipc: Enabled bearer , priority 10 [ 114.749017][ T6273] Cannot find add_set index 0 as target [ 114.769709][ T6274] netlink: 5 bytes leftover after parsing attributes in process `syz.0.95'. [ 114.843938][ T6266] vxcan3: entered allmulticast mode [ 115.195502][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'. [ 115.198140][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 115.390655][ T6295] vlan2: entered promiscuous mode [ 115.395771][ T6295] batadv0: entered promiscuous mode [ 115.462976][ T6298] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 115.618335][ T6312] bridge0: entered promiscuous mode [ 115.635648][ T6312] macvlan2: entered promiscuous mode [ 115.674406][ T6312] bridge0: port 3(macvlan2) entered blocking state [ 115.695157][ T6312] bridge0: port 3(macvlan2) entered disabled state [ 115.715423][ T6312] macvlan2: entered allmulticast mode [ 115.746646][ T6312] bridge0: entered allmulticast mode [ 115.780020][ T6312] macvlan2: left allmulticast mode [ 115.785289][ T6312] bridge0: left allmulticast mode [ 115.794550][ T6312] bridge0: left promiscuous mode [ 117.017483][ T6348] netlink: 128 bytes leftover after parsing attributes in process `syz.2.118'. [ 117.333876][ T6349] lo speed is unknown, defaulting to 1000 [ 117.643341][ T6369] netlink: 40 bytes leftover after parsing attributes in process `syz.1.123'. [ 118.022365][ T6375] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.031318][ T6375] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.040147][ T6375] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.049117][ T6375] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.110667][ T6375] vxlan0: entered promiscuous mode [ 118.148518][ T6375] vxlan0: entered allmulticast mode [ 118.274485][ T6375] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.284955][ T6375] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.295079][ T6375] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.304946][ T6375] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.480203][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 119.310934][ T6403] netlink: 24 bytes leftover after parsing attributes in process `syz.2.131'. [ 119.379452][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.131'. [ 119.853507][ T6419] netlink: 60 bytes leftover after parsing attributes in process `syz.2.135'. [ 119.894267][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.135'. [ 122.975027][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 123.011021][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 124.547832][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.165'. [ 124.749923][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 124.881629][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 125.174248][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 125.199411][ T6552] Bluetooth: MGMT ver 1.23 [ 125.284620][ T6552] lo speed is unknown, defaulting to 1000 [ 125.700075][ T6560] netlink: 'syz.3.172': attribute type 25 has an invalid length. [ 126.878971][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'. [ 127.242923][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.181'. [ 127.557419][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.182'. [ 127.941051][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 127.975762][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 128.033391][ T6598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 128.477542][ T6605] veth0_to_bond: entered promiscuous mode [ 128.516429][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 128.586624][ T6605] veth0_to_bond (unregistering): left promiscuous mode [ 128.602741][ T6607] netlink: 'syz.0.187': attribute type 11 has an invalid length. [ 128.674883][ T6605] bond0: (slave bond_slave_0): Releasing backup interface [ 129.035600][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 131.626968][ T6671] sctp: [Deprecated]: syz.4.204 (pid 6671) Use of int in max_burst socket option. [ 131.626968][ T6671] Use struct sctp_assoc_value instead [ 131.998875][ T6681] __nla_validate_parse: 2 callbacks suppressed [ 131.998896][ T6681] netlink: 256 bytes leftover after parsing attributes in process `syz.4.204'. [ 132.145401][ T6674] batadv_slave_1: entered promiscuous mode [ 132.173939][ T6678] batadv_slave_1: left promiscuous mode [ 132.595964][ T6687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 132.895656][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.902477][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.460914][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 133.470819][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 133.522575][ T6697] vlan4: entered promiscuous mode [ 133.541497][ T6697] gretap0: entered promiscuous mode [ 133.893452][ T6712] netlink: 3 bytes leftover after parsing attributes in process `syz.0.217'. [ 133.942196][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 133.978786][ T6712] netlink: 3 bytes leftover after parsing attributes in process `syz.0.217'. [ 134.048780][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 134.118781][ T6712] netlink: 3 bytes leftover after parsing attributes in process `syz.0.217'. [ 134.635231][ T6733] syzkaller1: entered promiscuous mode [ 134.676987][ T6733] syzkaller1: entered allmulticast mode [ 134.831760][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 136.297068][ T6782] netlink: 'syz.1.232': attribute type 10 has an invalid length. [ 136.371236][ T6782] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.441642][ T6782] bond0: (slave team0): Enslaving as an active interface with an up link [ 137.304720][ T6800] syzkaller1: entered promiscuous mode [ 137.499040][ T6800] syzkaller1: entered allmulticast mode [ 137.733140][ T6807] __nla_validate_parse: 3 callbacks suppressed [ 137.733161][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.238'. [ 138.151424][ T6816] lo speed is unknown, defaulting to 1000 [ 138.721286][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.759639][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.779982][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.835016][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.880739][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.895032][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.939080][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 138.977238][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 139.012008][ T6830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'. [ 139.210782][ T6816] IPVS: set_ctl: invalid protocol: 133 172.20.20.34:21 [ 139.218223][ T6816] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 141.692676][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.701183][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.260029][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.301034][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.462712][ T6894] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.478412][ T6894] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.497668][ T6894] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.509178][ T6894] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.606919][ T6894] vlan3: left promiscuous mode [ 142.614879][ T6894] batadv0: left promiscuous mode [ 142.622778][ T6894] gtp0: left promiscuous mode [ 142.627708][ T6894] gtp0: left allmulticast mode [ 142.640746][ T6894] vlan4: left promiscuous mode [ 142.645848][ T6894] gretap0: left promiscuous mode [ 142.662305][ T6912] tipc: Disabling bearer [ 142.713498][ T6911] tipc: New replicast peer: 255.255.255.255 [ 142.723263][ T6911] tipc: Enabled bearer , priority 10 [ 142.733428][ T6900] lo speed is unknown, defaulting to 1000 [ 143.013720][ T6928] __nla_validate_parse: 59 callbacks suppressed [ 143.013742][ T6928] netlink: 68 bytes leftover after parsing attributes in process `syz.0.273'. [ 143.531630][ T6944] x_tables: duplicate underflow at hook 2 [ 143.554691][ T6944] x_tables: duplicate underflow at hook 2 [ 143.849484][ T6960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 144.281834][ T6970] netlink: 'syz.3.286': attribute type 21 has an invalid length. [ 144.299909][ T6970] netlink: 156 bytes leftover after parsing attributes in process `syz.3.286'. [ 144.403036][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 144.844347][ T6983] tun0: tun_chr_ioctl cmd 1074025677 [ 144.856581][ T6983] tun0: linktype set to 804 [ 145.166121][ T6992] can: request_module (can-proto-0) failed. [ 145.252599][ T6999] netlink: 68 bytes leftover after parsing attributes in process `syz.3.294'. [ 145.355440][ T7002] netlink: 'syz.2.295': attribute type 1 has an invalid length. [ 145.388157][ T7002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.295'. [ 145.566977][ T7005] netlink: 'syz.4.296': attribute type 10 has an invalid length. [ 145.686528][ T7005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 145.748196][ T7004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.075973][ T7016] netlink: 'syz.1.299': attribute type 3 has an invalid length. [ 146.240981][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.299'. [ 146.331356][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 146.378815][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.299'. [ 146.410126][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.302'. [ 148.819610][ T7051] __nla_validate_parse: 1 callbacks suppressed [ 148.819632][ T7051] netlink: 68 bytes leftover after parsing attributes in process `syz.4.311'. [ 149.261862][ T7054] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.372648][ T7081] openvswitch: netlink: Flow key attribute not present in set flow. [ 151.596982][ T7118] netlink: 76 bytes leftover after parsing attributes in process `syz.2.330'. [ 151.621895][ T7120] netlink: 68 bytes leftover after parsing attributes in process `syz.0.329'. [ 151.706229][ T7118] syz.2.330 (7118) used greatest stack depth: 18360 bytes left [ 151.951695][ T7123] lo speed is unknown, defaulting to 1000 [ 152.627980][ T7147] macvtap1: entered allmulticast mode [ 152.662122][ T7147] veth0_macvtap: entered allmulticast mode [ 152.712459][ T7146] macvtap2: entered allmulticast mode [ 152.927775][ T7156] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 152.998987][ T7156] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 153.095218][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 153.225864][ T7166] vxcan1: entered allmulticast mode [ 153.463024][ T7156] lo speed is unknown, defaulting to 1000 [ 154.074365][ T7186] sctp: [Deprecated]: syz.1.351 (pid 7186) Use of int in max_burst socket option deprecated. [ 154.074365][ T7186] Use struct sctp_assoc_value instead [ 154.153649][ T7186] netlink: 48 bytes leftover after parsing attributes in process `syz.1.351'. [ 154.374433][ T7194] netlink: 68 bytes leftover after parsing attributes in process `syz.4.354'. [ 154.744923][ T7203] lo speed is unknown, defaulting to 1000 [ 154.826876][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.360'. [ 155.716327][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 156.640559][ T7284] tun0: tun_chr_ioctl cmd 1074025675 [ 156.663787][ T7284] tun0: persist enabled [ 156.680515][ T7284] tun0: tun_chr_ioctl cmd 1074025675 [ 156.700861][ T7284] tun0: persist enabled [ 157.164826][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.179539][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.187005][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.211775][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.221053][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.229066][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x0 [ 157.236560][ T5853] hid-generic 0005:16C0:5505.0002: unknown main item tag 0x3 [ 157.244206][ T5853] hid-generic 0005:16C0:5505.0002: item fetching failed at offset 36/37 [ 157.259081][ T5853] hid-generic 0005:16C0:5505.0002: probe with driver hid-generic failed with error -22 [ 157.456506][ T7314] netlink: 24 bytes leftover after parsing attributes in process `syz.3.390'. [ 158.608191][ T7344] bridge_slave_0: left allmulticast mode [ 158.688917][ T7344] bridge_slave_0: left promiscuous mode [ 158.723275][ T7344] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.743741][ T7344] bridge_slave_1: left allmulticast mode [ 158.749598][ T7344] bridge_slave_1: left promiscuous mode [ 158.755735][ T7344] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.780538][ T7344] bond0: (slave bond_slave_0): Releasing backup interface [ 158.853474][ T7344] bond0: (slave bond_slave_1): Releasing backup interface [ 158.925116][ T7344] team0: Port device team_slave_0 removed [ 158.972925][ T7344] team0: Port device team_slave_1 removed [ 158.982919][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.991143][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.001022][ T7344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.009419][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.063973][ T7359] vlan0: entered allmulticast mode [ 159.069607][ T7359] bond0: entered allmulticast mode [ 159.075620][ T7359] bridge0: port 1(vlan0) entered blocking state [ 159.082850][ T7359] bridge0: port 1(vlan0) entered disabled state [ 159.286562][ T7370] sctp: [Deprecated]: syz.0.409 (pid 7370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.286562][ T7370] Use struct sctp_sack_info instead [ 159.702233][ T7348] ------------[ cut here ]------------ [ 159.708021][ T7348] WARNING: CPU: 1 PID: 7348 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 159.719005][ T7348] Modules linked in: [ 159.723319][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.4.405 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 159.735946][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.747942][ T7348] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 159.755674][ T7348] Code: 00 00 e8 d6 04 2f f7 48 c1 e5 04 48 8d b5 60 b3 c5 9a ba 10 00 00 00 4c 89 ff e8 7e 30 99 f7 e9 ce 00 00 00 e8 b4 04 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 df 08 2f f7 85 ed [ 159.776016][ T7348] RSP: 0018:ffffc9001ad0fc48 EFLAGS: 00010293 [ 159.784671][ T7348] RAX: ffffffff8a94521c RBX: 0000000000000002 RCX: ffff888035519e00 [ 159.793443][ T7348] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 159.801570][ T7348] RBP: 0000000000000001 R08: ffffffff8a944efe R09: 1ffffffff20bef8e [ 159.809999][ T7348] R10: dffffc0000000000 R11: fffffbfff20bef8f R12: ffffffff86dabc10 [ 159.818028][ T7348] R13: dffffc0000000000 R14: ffff88803452f500 R15: 0000000000000000 [ 159.826644][ T7348] FS: 00005555724bd500(0000) GS:ffff8881250b0000(0000) knlGS:0000000000000000 [ 159.835707][ T7348] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.842779][ T7348] CR2: 00002000000010c0 CR3: 0000000032c06000 CR4: 00000000003526f0 [ 159.851506][ T7348] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 159.859989][ T7348] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 159.868014][ T7348] Call Trace: [ 159.872059][ T7348] [ 159.875028][ T7348] udpv6_destroy_sock+0x212/0x270 [ 159.880157][ T7348] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 159.885752][ T7348] sk_common_release+0x71/0x2e0 [ 159.890750][ T7348] inet_release+0x17d/0x200 [ 159.895304][ T7348] sock_close+0xbc/0x240 [ 159.900004][ T7348] ? __pfx_sock_close+0x10/0x10 [ 159.904913][ T7348] __fput+0x3e9/0x9f0 [ 159.909049][ T7348] task_work_run+0x251/0x310 [ 159.913698][ T7348] ? _raw_spin_unlock+0x28/0x50 [ 159.918702][ T7348] ? __pfx_task_work_run+0x10/0x10 [ 159.923878][ T7348] ? syscall_exit_to_user_mode+0xa3/0x340 [ 159.930830][ T7348] syscall_exit_to_user_mode+0x13f/0x340 [ 159.936540][ T7348] do_syscall_64+0x100/0x230 [ 159.941276][ T7348] ? clear_bhb_loop+0x45/0xa0 [ 159.946004][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.952027][ T7348] RIP: 0033:0x7fac2818d169 [ 159.956493][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.977209][ T7348] RSP: 002b:00007fff2982b348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 159.986139][ T7348] RAX: 0000000000000000 RBX: 00007fac283a7ba0 RCX: 00007fac2818d169 [ 159.994256][ T7348] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 160.002685][ T7348] RBP: 00007fac283a7ba0 R08: 00000000000000b4 R09: 000000092982b63f [ 160.010845][ T7348] R10: 00000000003ffd28 R11: 0000000000000246 R12: 0000000000026ef3 [ 160.018897][ T7348] R13: 00007fac283a6160 R14: ffffffffffffffff R15: 00007fff2982b460 [ 160.026934][ T7348] [ 160.030385][ T7348] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 160.037703][ T7348] CPU: 1 UID: 0 PID: 7348 Comm: syz.4.405 Not tainted 6.15.0-rc1-syzkaller-00220-g6a325aed130b #0 PREEMPT(full) [ 160.049603][ T7348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.059668][ T7348] Call Trace: [ 160.062958][ T7348] [ 160.065895][ T7348] dump_stack_lvl+0x241/0x360 [ 160.070597][ T7348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.075813][ T7348] ? __pfx__printk+0x10/0x10 [ 160.080421][ T7348] ? vscnprintf+0x5d/0x90 [ 160.084761][ T7348] panic+0x349/0x880 [ 160.088673][ T7348] ? __warn+0x174/0x4d0 [ 160.092840][ T7348] ? __pfx_panic+0x10/0x10 [ 160.097282][ T7348] __warn+0x344/0x4d0 [ 160.101277][ T7348] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 160.107110][ T7348] report_bug+0x2b3/0x500 [ 160.111451][ T7348] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 160.117278][ T7348] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 160.123125][ T7348] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 160.128946][ T7348] handle_bug+0x89/0x170 [ 160.133204][ T7348] exc_invalid_op+0x1a/0x50 [ 160.137723][ T7348] asm_exc_invalid_op+0x1a/0x20 [ 160.142583][ T7348] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 160.149014][ T7348] Code: 00 00 e8 d6 04 2f f7 48 c1 e5 04 48 8d b5 60 b3 c5 9a ba 10 00 00 00 4c 89 ff e8 7e 30 99 f7 e9 ce 00 00 00 e8 b4 04 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 df 08 2f f7 85 ed [ 160.168632][ T7348] RSP: 0018:ffffc9001ad0fc48 EFLAGS: 00010293 [ 160.174711][ T7348] RAX: ffffffff8a94521c RBX: 0000000000000002 RCX: ffff888035519e00 [ 160.182689][ T7348] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 160.190669][ T7348] RBP: 0000000000000001 R08: ffffffff8a944efe R09: 1ffffffff20bef8e [ 160.198649][ T7348] R10: dffffc0000000000 R11: fffffbfff20bef8f R12: ffffffff86dabc10 [ 160.206627][ T7348] R13: dffffc0000000000 R14: ffff88803452f500 R15: 0000000000000000 [ 160.214608][ T7348] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 160.220082][ T7348] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 160.225820][ T7348] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 160.231651][ T7348] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 160.237476][ T7348] udpv6_destroy_sock+0x212/0x270 [ 160.242519][ T7348] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 160.248079][ T7348] sk_common_release+0x71/0x2e0 [ 160.252949][ T7348] inet_release+0x17d/0x200 [ 160.257464][ T7348] sock_close+0xbc/0x240 [ 160.261715][ T7348] ? __pfx_sock_close+0x10/0x10 [ 160.266584][ T7348] __fput+0x3e9/0x9f0 [ 160.270628][ T7348] task_work_run+0x251/0x310 [ 160.275236][ T7348] ? _raw_spin_unlock+0x28/0x50 [ 160.280112][ T7348] ? __pfx_task_work_run+0x10/0x10 [ 160.285244][ T7348] ? syscall_exit_to_user_mode+0xa3/0x340 [ 160.290977][ T7348] syscall_exit_to_user_mode+0x13f/0x340 [ 160.296626][ T7348] do_syscall_64+0x100/0x230 [ 160.301231][ T7348] ? clear_bhb_loop+0x45/0xa0 [ 160.306053][ T7348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.311958][ T7348] RIP: 0033:0x7fac2818d169 [ 160.316382][ T7348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.336015][ T7348] RSP: 002b:00007fff2982b348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 160.344443][ T7348] RAX: 0000000000000000 RBX: 00007fac283a7ba0 RCX: 00007fac2818d169 [ 160.352425][ T7348] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 160.360404][ T7348] RBP: 00007fac283a7ba0 R08: 00000000000000b4 R09: 000000092982b63f [ 160.368390][ T7348] R10: 00000000003ffd28 R11: 0000000000000246 R12: 0000000000026ef3 [ 160.376899][ T7348] R13: 00007fac283a6160 R14: ffffffffffffffff R15: 00007fff2982b460 [ 160.384914][ T7348] [ 160.388289][ T7348] Kernel Offset: disabled [ 160.392623][ T7348] Rebooting in 86400 seconds..