last executing test programs: 1.927198497s ago: executing program 2 (id=1128): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1.529017082s ago: executing program 1 (id=1131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "b39625e03be22ead", "8da0640c9e8f6b81143f1a1a6d81ee2b", "3b0e7088", "19a4216dfdbf6602"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "34368cd7c3d9641d", "78ae58a5fc601ca7df9cc92c6349fa52", "aa2bd2b3", "f34bf4be357cbf2c"}, 0x28) 1.438480684s ago: executing program 1 (id=1132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x4c) 1.386904779s ago: executing program 0 (id=1135): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0xc, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) 1.283954004s ago: executing program 1 (id=1137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x87ff, 0x0, 0x0) 1.228370016s ago: executing program 0 (id=1138): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000004880)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="be58", 0x2}], 0x1}}], 0x1, 0x485c) 1.16872252s ago: executing program 0 (id=1141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) 1.051357829s ago: executing program 0 (id=1144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000e54, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0x4407, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x4, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x6, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x5, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x5, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0x9, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 948.504863ms ago: executing program 2 (id=1145): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 868.154194ms ago: executing program 3 (id=1148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000050601"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 840.025873ms ago: executing program 0 (id=1149): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @any, 0x0, 0x2}, 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) listen(r1, 0x0) 704.38804ms ago: executing program 2 (id=1151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140100001000010000000000000000000100000a"], 0x114}}, 0x0) 704.013135ms ago: executing program 0 (id=1152): socket(0x10, 0x803, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) 697.59722ms ago: executing program 3 (id=1153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 660.649473ms ago: executing program 4 (id=1154): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 572.268852ms ago: executing program 2 (id=1155): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}], 0x1c) bind$inet6(r0, 0x0, 0x0) 571.871631ms ago: executing program 3 (id=1156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0xb, 0x5, 0x0, 0x3}, 0x0, 0x1, 0x2, 0x4, 0x9, 0x20, 0xa, 0x1c, 0x4, 0x7d, {0x0, 0x5d0c9237, 0x9, 0x0, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x0) 544.696056ms ago: executing program 2 (id=1157): bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r0, 0xfffffffffffffea3, &(0x7f0000000080)}, 0x10) 460.925989ms ago: executing program 2 (id=1158): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6ec}, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 364.277827ms ago: executing program 4 (id=1159): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) 364.039045ms ago: executing program 3 (id=1160): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000000880)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000340)=0x40000, 0x4) write(r0, &(0x7f0000000000)="08001800000020a3", 0x8) recvmmsg(r0, &(0x7f0000006f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x4000002}], 0x1, 0x20, 0x0) 345.618734ms ago: executing program 4 (id=1161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf255c00000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) 333.403943ms ago: executing program 1 (id=1162): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44005}, 0x4c014) 208.257165ms ago: executing program 4 (id=1163): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r2, r1}, 0xc) 208.057795ms ago: executing program 1 (id=1164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="6f00000001212100ff010000000000000000000000000001fc0200080000"], 0x149) 207.805662ms ago: executing program 3 (id=1165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x13}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x1, 0x0, @private=0xa010000, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0xf, 0x0, {0x5, 0x4, 0x0, 0x3a, 0x584, 0x65, 0x9, 0x25, 0x4, 0x3313, @empty, @multicast2}}}}, 0x3e) 129.997563ms ago: executing program 4 (id=1166): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 88.84422ms ago: executing program 1 (id=1167): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f00000005c0)=0x700) 219.63µs ago: executing program 3 (id=1168): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010029bd7000fedbdf25fe800000000000000000000000000017ff01000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000030000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000008000000000000060000000000000000000000000000d47e0ac40000000000010002"], 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(r1, 0x0, 0x0) 0s ago: executing program 4 (id=1169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000d0000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000a4000380080001"], 0x178}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. [ 68.712185][ T5815] cgroup: Unknown subsys name 'net' [ 68.839372][ T5815] cgroup: Unknown subsys name 'cpuset' [ 68.848176][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.261698][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.419681][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426131][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.513507][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.524767][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.532747][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.538874][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.540880][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.547744][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.563583][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.572338][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.580467][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.588449][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.601197][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.614000][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.622144][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.626022][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.629872][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.637075][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.651303][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.658997][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.667292][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.675157][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.696638][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.704940][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.713406][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.722788][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.730855][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.334500][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.432214][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 75.506575][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 75.549121][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 75.605590][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.613001][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.620861][ T5828] bridge_slave_0: entered allmulticast mode [ 75.628584][ T5828] bridge_slave_0: entered promiscuous mode [ 75.637409][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.644495][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.651851][ T5828] bridge_slave_1: entered allmulticast mode [ 75.659164][ T5828] bridge_slave_1: entered promiscuous mode [ 75.716996][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 75.781491][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.844990][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.865166][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.872710][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.880602][ T5843] bridge_slave_0: entered allmulticast mode [ 75.888004][ T5843] bridge_slave_0: entered promiscuous mode [ 75.895034][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.902849][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.910240][ T5837] bridge_slave_0: entered allmulticast mode [ 75.917629][ T5837] bridge_slave_0: entered promiscuous mode [ 75.944501][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.951941][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.959681][ T5843] bridge_slave_1: entered allmulticast mode [ 75.967002][ T5843] bridge_slave_1: entered promiscuous mode [ 75.973597][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.980747][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.988256][ T5837] bridge_slave_1: entered allmulticast mode [ 75.995201][ T5837] bridge_slave_1: entered promiscuous mode [ 76.065441][ T5828] team0: Port device team_slave_0 added [ 76.074371][ T5828] team0: Port device team_slave_1 added [ 76.113467][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.120823][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.128162][ T5834] bridge_slave_0: entered allmulticast mode [ 76.135151][ T5834] bridge_slave_0: entered promiscuous mode [ 76.166310][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.178198][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.191949][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.199247][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.206792][ T5834] bridge_slave_1: entered allmulticast mode [ 76.213747][ T5834] bridge_slave_1: entered promiscuous mode [ 76.231412][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.238626][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.245915][ T5825] bridge_slave_0: entered allmulticast mode [ 76.252857][ T5825] bridge_slave_0: entered promiscuous mode [ 76.262887][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.289822][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.332717][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.339830][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.365938][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.377866][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.384996][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.393316][ T5825] bridge_slave_1: entered allmulticast mode [ 76.400475][ T5825] bridge_slave_1: entered promiscuous mode [ 76.432974][ T5837] team0: Port device team_slave_0 added [ 76.450846][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.458008][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.485036][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.516723][ T5843] team0: Port device team_slave_0 added [ 76.524286][ T5837] team0: Port device team_slave_1 added [ 76.532798][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.545355][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.557601][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.568501][ T5843] team0: Port device team_slave_1 added [ 76.577227][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.616766][ T5148] Bluetooth: hci3: command tx timeout [ 76.673569][ T5834] team0: Port device team_slave_0 added [ 76.695928][ T5148] Bluetooth: hci2: command tx timeout [ 76.695935][ T5832] Bluetooth: hci1: command tx timeout [ 76.709292][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.716553][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.742605][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.765359][ T5834] team0: Port device team_slave_1 added [ 76.772145][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.779247][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.786287][ T5148] Bluetooth: hci4: command tx timeout [ 76.805373][ T5832] Bluetooth: hci0: command tx timeout [ 76.811375][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.829322][ T5825] team0: Port device team_slave_0 added [ 76.836280][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.843238][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.869442][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.881321][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.888516][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.914956][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.931853][ T5828] hsr_slave_0: entered promiscuous mode [ 76.938410][ T5828] hsr_slave_1: entered promiscuous mode [ 76.956606][ T5825] team0: Port device team_slave_1 added [ 76.981048][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.988102][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.014272][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.033341][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.040463][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.066421][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.127395][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.134364][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.160858][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.173677][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.180717][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.206664][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.330560][ T5843] hsr_slave_0: entered promiscuous mode [ 77.337478][ T5843] hsr_slave_1: entered promiscuous mode [ 77.343473][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 77.349579][ T5843] Cannot create hsr debugfs directory [ 77.364016][ T5834] hsr_slave_0: entered promiscuous mode [ 77.370639][ T5834] hsr_slave_1: entered promiscuous mode [ 77.376818][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 77.382542][ T5834] Cannot create hsr debugfs directory [ 77.408761][ T5837] hsr_slave_0: entered promiscuous mode [ 77.415144][ T5837] hsr_slave_1: entered promiscuous mode [ 77.421584][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 77.427393][ T5837] Cannot create hsr debugfs directory [ 77.522318][ T5825] hsr_slave_0: entered promiscuous mode [ 77.528818][ T5825] hsr_slave_1: entered promiscuous mode [ 77.534846][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 77.541030][ T5825] Cannot create hsr debugfs directory [ 77.974989][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.999882][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.010277][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.030162][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.094925][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.114287][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.134048][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.153907][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.216626][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.229008][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.253819][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.264792][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.352594][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.365380][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.383016][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.395329][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.515339][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.553540][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.565016][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.578959][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.590718][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.616590][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.655110][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.662433][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.688639][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.695845][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.703884][ T5832] Bluetooth: hci3: command tx timeout [ 78.741521][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.777417][ T5832] Bluetooth: hci2: command tx timeout [ 78.778263][ T5148] Bluetooth: hci1: command tx timeout [ 78.838157][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.858770][ T5148] Bluetooth: hci0: command tx timeout [ 78.859117][ T5832] Bluetooth: hci4: command tx timeout [ 78.870280][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.882089][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.889268][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.903003][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.938381][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.945595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.971985][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.036616][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.043782][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.055006][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.062128][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.109324][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.163496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.170691][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.183108][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.190240][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.215461][ T5834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.229932][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.270705][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.359288][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.383723][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.422627][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.429835][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.559977][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.567174][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.663297][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.696543][ T5828] veth0_vlan: entered promiscuous mode [ 79.724735][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.760430][ T5828] veth1_vlan: entered promiscuous mode [ 79.857395][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.903241][ T5828] veth0_macvtap: entered promiscuous mode [ 79.950592][ T5843] veth0_vlan: entered promiscuous mode [ 79.960582][ T5828] veth1_macvtap: entered promiscuous mode [ 79.984917][ T5843] veth1_vlan: entered promiscuous mode [ 80.050699][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.087770][ T5837] veth0_vlan: entered promiscuous mode [ 80.100100][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.133559][ T5837] veth1_vlan: entered promiscuous mode [ 80.152686][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.170161][ T5843] veth0_macvtap: entered promiscuous mode [ 80.178486][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.188399][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.212942][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.226077][ T5843] veth1_macvtap: entered promiscuous mode [ 80.289169][ T5834] veth0_vlan: entered promiscuous mode [ 80.299512][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.320755][ T5837] veth0_macvtap: entered promiscuous mode [ 80.352715][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.367584][ T5837] veth1_macvtap: entered promiscuous mode [ 80.374560][ T5834] veth1_vlan: entered promiscuous mode [ 80.411045][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.421525][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.430816][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.439960][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.471477][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.480559][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.511356][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.539333][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.549385][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.557431][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.563214][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.605371][ T5834] veth0_macvtap: entered promiscuous mode [ 80.625572][ T62] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.639117][ T62] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.652860][ T5834] veth1_macvtap: entered promiscuous mode [ 80.665433][ T62] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.683283][ T62] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.704459][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.761833][ T5825] veth0_vlan: entered promiscuous mode [ 80.762007][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.777087][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.778475][ T5832] Bluetooth: hci3: command tx timeout [ 80.843371][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.857566][ T5832] Bluetooth: hci1: command tx timeout [ 80.859472][ T5148] Bluetooth: hci2: command tx timeout [ 80.869435][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.891091][ T5825] veth1_vlan: entered promiscuous mode [ 80.928600][ T1087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.937697][ T5148] Bluetooth: hci4: command tx timeout [ 80.946721][ T5148] Bluetooth: hci0: command tx timeout [ 80.955685][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.973922][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.991424][ T1087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.029773][ T1087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.137823][ T1087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.148603][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.172697][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.204775][ T5825] veth0_macvtap: entered promiscuous mode [ 81.271477][ T5825] veth1_macvtap: entered promiscuous mode [ 81.325933][ T3455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.333776][ T3455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.337048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.367422][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.382719][ T5957] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 81.426384][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.452412][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.474421][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.523241][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.557471][ T5957] syzkaller1: entered promiscuous mode [ 81.563256][ T5957] syzkaller1: entered allmulticast mode [ 81.573510][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.642424][ T3455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.691472][ T3455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.736494][ T3455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.745809][ T3455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.883580][ T5972] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.231271][ T5986] tipc: Started in network mode [ 82.238457][ T5986] tipc: Node identity 22317791ff8e, cluster identity 4711 [ 82.250137][ T5986] tipc: Enabled bearer , priority 0 [ 82.260174][ T5989] syzkaller0: entered promiscuous mode [ 82.270984][ T5989] syzkaller0: entered allmulticast mode [ 82.304930][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.336619][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.428101][ T5983] tipc: Resetting bearer [ 82.483777][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.541038][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.761699][ T5975] tipc: Resetting bearer [ 82.797015][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 82.807331][ T5975] tipc: Disabling bearer [ 82.863875][ T5148] Bluetooth: hci3: command tx timeout [ 82.875047][ T6018] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 82.882665][ T6014] netlink: 'syz.2.17': attribute type 21 has an invalid length. [ 82.933140][ T6014] netlink: 'syz.2.17': attribute type 6 has an invalid length. [ 82.936595][ T5148] Bluetooth: hci2: command tx timeout [ 82.946243][ T5148] Bluetooth: hci1: command tx timeout [ 82.967249][ T6014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17'. [ 83.014228][ T6018] syzkaller1: entered promiscuous mode [ 83.020049][ T5832] Bluetooth: hci0: command tx timeout [ 83.020089][ T5832] Bluetooth: hci4: command tx timeout [ 83.035307][ T6018] syzkaller1: entered allmulticast mode [ 83.075215][ T6025] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 83.159675][ T6022] tipc: Started in network mode [ 83.169608][ T6022] tipc: Node identity c6d8759e2f1, cluster identity 4711 [ 83.208334][ T6022] tipc: Enabled bearer , priority 0 [ 83.248561][ T6040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 83.321344][ T6022] tipc: Resetting bearer [ 83.336218][ T43] IPVS: starting estimator thread 0... [ 83.360408][ T6021] tipc: Disabling bearer [ 83.431045][ T6044] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 83.440490][ T6045] IPVS: using max 27 ests per chain, 64800 per kthread [ 83.505593][ T6047] veth0: entered promiscuous mode [ 83.529261][ T6047] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.26'. [ 83.591598][ T6047] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 83.601898][ T6050] netlink: 'syz.1.26': attribute type 24 has an invalid length. [ 83.759229][ T6047] veth0: left promiscuous mode [ 83.848118][ T6049] syzkaller0: entered promiscuous mode [ 83.853665][ T6049] syzkaller0: entered allmulticast mode [ 83.955468][ T6065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 83.962946][ T6065] IPv6: NLM_F_CREATE should be set when creating new route [ 83.970319][ T6065] IPv6: NLM_F_CREATE should be set when creating new route [ 83.977605][ T6065] IPv6: NLM_F_CREATE should be set when creating new route [ 84.027743][ T6069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.054200][ T6069] Zero length message leads to an empty skb [ 84.080295][ T6068] lo speed is unknown, defaulting to 1000 [ 84.088069][ T6068] lo speed is unknown, defaulting to 1000 [ 84.099305][ T6068] lo speed is unknown, defaulting to 1000 [ 84.113123][ T6068] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.137644][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.173562][ T6068] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 84.225669][ T6068] lo speed is unknown, defaulting to 1000 [ 84.235473][ T6068] lo speed is unknown, defaulting to 1000 [ 84.242184][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 84.257323][ T6068] lo speed is unknown, defaulting to 1000 [ 84.266200][ T6068] lo speed is unknown, defaulting to 1000 [ 84.274086][ T6068] lo speed is unknown, defaulting to 1000 [ 84.280479][ T6081] block nbd0: Unsupported socket: should be TCP or UNIX. [ 84.780977][ T6069] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 85.009071][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 85.009127][ T6099] netlink: 'syz.3.39': attribute type 13 has an invalid length. [ 85.026372][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.41'. [ 85.099598][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 85.136303][ T6112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.43'. [ 85.284064][ T6101] netlink: 'syz.3.39': attribute type 3 has an invalid length. [ 85.476614][ T6124] pimreg: entered allmulticast mode [ 85.709078][ T6140] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 85.990181][ T5925] IPVS: starting estimator thread 0... [ 86.096117][ T6153] IPVS: using max 36 ests per chain, 86400 per kthread [ 86.138940][ T5148] Bluetooth: hci0: command 0x0c20 tx timeout [ 86.307001][ T6163] netlink: 'syz.2.62': attribute type 7 has an invalid length. [ 86.379975][ T3455] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.380093][ T6163] netlink: 'syz.2.62': attribute type 7 has an invalid length. [ 86.419744][ T3455] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.464765][ T3455] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.501317][ T3455] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.538168][ T6178] xt_TCPMSS: Only works on TCP SYN packets [ 86.567287][ T6176] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 86.797699][ T9] cfg80211: failed to load regulatory.db [ 86.890476][ T6195] __nla_validate_parse: 8 callbacks suppressed [ 86.890493][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'. [ 86.897448][ T6186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.923839][ T6196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.69'. [ 87.232723][ T6207] syzkaller0: entered promiscuous mode [ 87.248134][ T6207] syzkaller0: entered allmulticast mode [ 87.371874][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.76'. [ 87.400559][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.471865][ T6217] bridge_slave_1 (unregistering): left allmulticast mode [ 87.485008][ T6217] bridge_slave_1 (unregistering): left promiscuous mode [ 87.522115][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.014324][ T6255] netlink: 'syz.4.85': attribute type 1 has an invalid length. [ 88.041387][ T6254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 88.093118][ T6260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.84'. [ 88.127378][ T6255] vlan2: entered allmulticast mode [ 88.130184][ T6264] netlink: 212 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.151401][ T6255] veth1: entered allmulticast mode [ 88.170340][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.4.85'. [ 88.183051][ T6270] netlink: 212 bytes leftover after parsing attributes in process `syz.2.87'. [ 88.207717][ T6256] bridge_slave_0: left allmulticast mode [ 88.214201][ T6256] bridge_slave_0: left promiscuous mode [ 88.221991][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.243955][ T6256] bridge_slave_1: left allmulticast mode [ 88.254270][ T6256] bridge_slave_1: left promiscuous mode [ 88.260634][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.275647][ T6256] bond0: (slave bond_slave_0): Releasing backup interface [ 88.295482][ T6256] bond0: (slave bond_slave_1): Releasing backup interface [ 88.315152][ T6256] team0: Port device team_slave_0 removed [ 88.334435][ T6256] team0: Port device team_slave_1 removed [ 88.352431][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.363780][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.374225][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.383612][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.393407][ T6256] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 88.418547][ T6264] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 89.141256][ T6314] netlink: 'syz.3.99': attribute type 7 has an invalid length. [ 89.168048][ T6314] netlink: 'syz.3.99': attribute type 8 has an invalid length. [ 89.212946][ T6321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.595064][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.105'. [ 89.790196][ T6343] delete_channel: no stack [ 89.958850][ T6357] netlink: 'syz.4.109': attribute type 21 has an invalid length. [ 90.008195][ T6357] netlink: 152 bytes leftover after parsing attributes in process `syz.4.109'. [ 90.073673][ T6357] netlink: 'syz.4.109': attribute type 21 has an invalid length. [ 90.923486][ T6409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 90.979977][ T6417] xfrm1: entered allmulticast mode [ 93.406566][ T6429] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 93.481455][ T6434] __nla_validate_parse: 3 callbacks suppressed [ 93.481471][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.128'. [ 93.515884][ T6434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.128'. [ 93.617418][ T6448] Bluetooth: MGMT ver 1.23 [ 93.707441][ T6448] syzkaller0: entered promiscuous mode [ 93.736173][ T6448] syzkaller0: entered allmulticast mode [ 93.758422][ T6454] netlink: 'syz.1.135': attribute type 2 has an invalid length. [ 93.854244][ T6454] : entered promiscuous mode [ 93.916657][ T6459] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 94.006086][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 94.218787][ T6479] netlink: 'syz.3.142': attribute type 83 has an invalid length. [ 94.489556][ T5835] IPVS: starting estimator thread 0... [ 94.615934][ T6492] IPVS: using max 32 ests per chain, 76800 per kthread [ 94.811268][ T6519] syzkaller1: entered promiscuous mode [ 94.829013][ T6519] syzkaller1: entered allmulticast mode [ 94.840204][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.882955][ T6521] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 94.898745][ T6521] bridge1: port 1(ipvlan2) entered blocking state [ 94.907989][ T6521] bridge1: port 1(ipvlan2) entered disabled state [ 94.914889][ T6521] ipvlan2: entered allmulticast mode [ 94.921247][ T6521] bridge0: entered allmulticast mode [ 94.930281][ T6521] ipvlan2: left allmulticast mode [ 94.935472][ T6521] bridge0: left allmulticast mode [ 94.947206][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 94.957114][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 95.072696][ T6525] macvtap1: entered promiscuous mode [ 95.078153][ T6525] vlan0: entered promiscuous mode [ 95.083469][ T6525] macvtap1: entered allmulticast mode [ 95.089535][ T6525] vlan0: entered allmulticast mode [ 95.094807][ T6525] veth0_vlan: entered allmulticast mode [ 95.157369][ T6525] bond2: Removing last ns target with arp_interval on [ 95.926843][ T6548] netlink: 'syz.3.162': attribute type 13 has an invalid length. [ 96.014371][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 96.038824][ T6558] netlink: 'syz.2.165': attribute type 12 has an invalid length. [ 96.049212][ T6548] netlink: 'syz.3.162': attribute type 3 has an invalid length. [ 96.069549][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 96.273391][ T6569] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 96.336894][ T6573] netlink: 'syz.3.172': attribute type 21 has an invalid length. [ 96.346078][ T6573] netlink: 132 bytes leftover after parsing attributes in process `syz.3.172'. [ 96.373873][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.173'. [ 96.489653][ T6578] syzkaller0: entered promiscuous mode [ 96.509878][ T6578] syzkaller0: entered allmulticast mode [ 96.593698][ T6578] tipc: Started in network mode [ 96.622871][ T6578] tipc: Node identity 86ef944e658a, cluster identity 4711 [ 96.650158][ T6578] tipc: Enabled bearer , priority 0 [ 96.683918][ T6582] can: request_module (can-proto-0) failed. [ 96.739941][ T6577] tipc: Resetting bearer [ 96.827397][ T6577] tipc: Disabling bearer [ 97.067480][ T6615] netlink: 'syz.1.182': attribute type 13 has an invalid length. [ 97.082110][ T6617] netlink: 'syz.3.185': attribute type 23 has an invalid length. [ 97.445282][ T43] lo speed is unknown, defaulting to 1000 [ 97.651428][ T6645] pimreg: left allmulticast mode [ 97.710452][ T6649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.018039][ T6658] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 98.103542][ T6665] openvswitch: netlink: Flow actions attr not present in new flow. [ 98.125701][ T6663] syzkaller1: entered promiscuous mode [ 98.145395][ T6663] syzkaller1: entered allmulticast mode [ 98.607205][ T6691] warning: `syz.1.209' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.618922][ T6690] __nla_validate_parse: 10 callbacks suppressed [ 98.618940][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 98.623216][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 98.668955][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 98.669961][ T6691] tipc: Enabling of bearer rejected, failed to enable media [ 98.708575][ T6688] netlink: 72 bytes leftover after parsing attributes in process `syz.0.207'. [ 98.728088][ T6688] netlink: 2 bytes leftover after parsing attributes in process `syz.0.207'. [ 98.738114][ T6686] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 98.758014][ T6686] netlink: 148 bytes leftover after parsing attributes in process `syz.4.206'. [ 98.832356][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 99.198239][ T6723] x_tables: duplicate underflow at hook 4 [ 99.650040][ T6755] validate_nla: 1 callbacks suppressed [ 99.650058][ T6755] netlink: 'syz.0.226': attribute type 2 has an invalid length. [ 99.858127][ T6760] netlink: 'syz.2.227': attribute type 3 has an invalid length. [ 99.885870][ T6760] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 99.926592][ T6760] netlink: 224 bytes leftover after parsing attributes in process `syz.2.227'. [ 100.044106][ T6797] netlink: 'syz.1.232': attribute type 4 has an invalid length. [ 100.047063][ T6798] syz_tun: entered allmulticast mode [ 100.096374][ T6797] netlink: 'syz.1.232': attribute type 4 has an invalid length. [ 100.109997][ T43] lo speed is unknown, defaulting to 1000 [ 100.123993][ T6813] netlink: 'syz.3.234': attribute type 10 has an invalid length. [ 100.147102][ T43] syz2: Port: 1 Link DOWN [ 100.186803][ T5909] lo speed is unknown, defaulting to 1000 [ 100.193288][ T6827] netlink: 'syz.3.234': attribute type 2 has an invalid length. [ 100.198996][ T6828] netlink: zone id is out of range [ 100.204792][ T5909] syz2: Port: 1 Link ACTIVE [ 100.208612][ T6828] netlink: zone id is out of range [ 100.217013][ T6828] netlink: zone id is out of range [ 100.223012][ T6828] netlink: zone id is out of range [ 100.230175][ T6828] netlink: zone id is out of range [ 100.246221][ T6828] netlink: zone id is out of range [ 100.252862][ T6828] netlink: zone id is out of range [ 100.396772][ T6834] netlink: 52 bytes leftover after parsing attributes in process `syz.4.235'. [ 100.466673][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.237'. [ 100.789446][ T6844] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.829627][ T6852] v: renamed from vlan0 (while UP) [ 100.849446][ T6852] trusted_key: syz.2.242 sent an empty control message without MSG_MORE. [ 100.874701][ T6855] bridge0: port 3(ipvlan2) entered blocking state [ 100.911325][ T6855] bridge0: port 3(ipvlan2) entered disabled state [ 100.926104][ T6855] ipvlan2: entered allmulticast mode [ 100.946820][ T6855] bridge0: entered allmulticast mode [ 100.978911][ T6855] ipvlan2: left allmulticast mode [ 100.997057][ T6855] bridge0: left allmulticast mode [ 101.067533][ T6844] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.343931][ T6844] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.516103][ T6892] sctp: [Deprecated]: syz.4.252 (pid 6892) Use of int in maxseg socket option. [ 101.516103][ T6892] Use struct sctp_assoc_value instead [ 101.603620][ T6899] netlink: 'syz.2.254': attribute type 10 has an invalid length. [ 101.614336][ T6844] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.683418][ T6899] syz_tun: entered promiscuous mode [ 101.706438][ T6899] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 101.742717][ T6901] geneve2: entered promiscuous mode [ 101.996367][ T6808] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.032500][ T6917] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 102.044291][ T6808] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.066775][ T6779] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.120273][ T6779] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.132046][ T6927] Cannot find add_set index 0 as target [ 102.705048][ T6950] vxcan2: entered allmulticast mode [ 103.401307][ T6979] team0 (unregistering): Port device team_slave_0 removed [ 103.412535][ T6979] team0 (unregistering): Port device team_slave_1 removed [ 103.842753][ T7004] netlink: 'syz.2.286': attribute type 13 has an invalid length. [ 103.906912][ T7015] __nla_validate_parse: 14 callbacks suppressed [ 103.906930][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 104.182217][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 104.256877][ T7023] netlink: 'syz.2.286': attribute type 3 has an invalid length. [ 104.308428][ T7034] vlan0: entered allmulticast mode [ 104.313663][ T7034] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 104.335511][ T7040] net_ratelimit: 47 callbacks suppressed [ 104.335529][ T7040] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 104.501669][ T7047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.725103][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 104.783140][ T7064] netlink: 'syz.1.299': attribute type 2 has an invalid length. [ 104.840137][ T7065] netlink: 104 bytes leftover after parsing attributes in process `syz.3.300'. [ 105.064091][ T7081] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 105.116936][ T7086] netlink: 96 bytes leftover after parsing attributes in process `syz.3.305'. [ 105.174894][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.283529][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.311778][ T7085] netlink: 'syz.4.307': attribute type 13 has an invalid length. [ 105.319120][ T7081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.324399][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.342102][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.343390][ T7097] netlink: 'syz.1.310': attribute type 1 has an invalid length. [ 105.366695][ T7097] netlink: 'syz.1.310': attribute type 7 has an invalid length. [ 105.374368][ T7097] netlink: 'syz.1.310': attribute type 8 has an invalid length. [ 105.390963][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 105.419201][ T7085] netlink: 'syz.4.307': attribute type 3 has an invalid length. [ 105.649617][ T7112] bond0: entered promiscuous mode [ 105.664995][ T7112] bond_slave_0: entered promiscuous mode [ 105.677140][ T7112] bond_slave_1: entered promiscuous mode [ 105.725205][ T7112] netlink: 'syz.1.313': attribute type 1 has an invalid length. [ 105.905406][ T7128] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 105.917374][ T7123] tunl0: entered promiscuous mode [ 105.931752][ T7123] netlink: 'syz.3.316': attribute type 3 has an invalid length. [ 106.162232][ T7141] netlink: 'syz.2.322': attribute type 13 has an invalid length. [ 106.471490][ T7148] bond3: entered promiscuous mode [ 106.478678][ T7148] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.486380][ T7149] C: renamed from lo (while UP) [ 106.524496][ T7156] bond3: (slave bridge2): making interface the new active one [ 106.532371][ T7156] bridge2: entered promiscuous mode [ 106.544533][ T7156] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 106.580765][ T7164] syzkaller1: entered promiscuous mode [ 106.595898][ T7164] syzkaller1: entered allmulticast mode [ 106.767374][ T7173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.991559][ T7188] tipc: Enabled bearer , priority 13 [ 107.660767][ T7228] openvswitch: netlink: Unknown nsh attribute 0 [ 107.683031][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.108836][ T5893] tipc: Node number set to 3815085134 [ 108.214272][ T7252] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 108.377586][ T7255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.482805][ T7256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.495469][ T7256] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 108.508248][ T7256] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 108.587146][ T7266] team0: Port device dummy0 added [ 108.593909][ T7265] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.631389][ T7269] gretap1: entered promiscuous mode [ 108.650448][ T7269] bond1: (slave gretap1): making interface the new active one [ 108.667970][ T7269] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 108.694353][ T7271] team0: Failed to send options change via netlink (err -105) [ 108.720787][ T7271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 108.739349][ T7271] team0: Port device dummy0 removed [ 108.764922][ T7271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.977586][ T7287] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 109.028205][ T7287] bond1 (unregistering): Released all slaves [ 109.053038][ T7297] __nla_validate_parse: 15 callbacks suppressed [ 109.053055][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.369'. [ 109.539135][ T7309] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 109.579203][ T7309] bond2 (unregistering): Released all slaves [ 110.253359][ T7346] erspan0: entered promiscuous mode [ 110.269233][ T7346] vlan2: entered promiscuous mode [ 110.475375][ T7351] validate_nla: 7 callbacks suppressed [ 110.475392][ T7351] netlink: 'syz.2.384': attribute type 13 has an invalid length. [ 110.574112][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 110.590216][ T7354] netlink: 'syz.2.384': attribute type 3 has an invalid length. [ 110.829892][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.391'. [ 110.947655][ T7387] IPv6: sit2: Disabled Multicast RS [ 110.954310][ T7387] sit2: entered allmulticast mode [ 111.290705][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 111.338324][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.399'. [ 111.521748][ T7420] netlink: 'syz.0.401': attribute type 13 has an invalid length. [ 111.626367][ T7440] netlink: 'syz.4.404': attribute type 4 has an invalid length. [ 111.634056][ T7440] netlink: 152 bytes leftover after parsing attributes in process `syz.4.404'. [ 111.650428][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 111.660033][ T5148] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.667896][ T5148] Bluetooth: hci0: command 0x0c20 tx timeout [ 111.675243][ T7442] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 111.680964][ T7440] `: renamed from bond0 (while UP) [ 111.722053][ T7420] netlink: 'syz.0.401': attribute type 3 has an invalid length. [ 111.759219][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.1.405'. [ 111.994288][ T7458] sock: sock_set_timeout: `syz.0.409' (pid 7458) tries to set negative timeout [ 112.021503][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 112.080461][ T7458] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 112.105073][ T7458] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 112.143847][ T7458] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 112.176523][ T7458] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 112.184803][ T7458] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 112.324401][ T7466] bond0: Caught tx_queue_len zero misconfig [ 112.470535][ T7485] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 112.687739][ T7493] bond0 (unregistering): Released all slaves [ 113.090435][ T7521] team0: Port device geneve0 added [ 113.422960][ T7541] lo speed is unknown, defaulting to 1000 [ 114.269908][ T7558] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 114.363532][ T7562] __nla_validate_parse: 4 callbacks suppressed [ 114.363548][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.438'. [ 114.375990][ T7571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.434'. [ 114.479019][ T7561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 114.896975][ T7590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.062497][ T7591] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.345914][ T7617] sctp: [Deprecated]: syz.3.450 (pid 7617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.345914][ T7617] Use struct sctp_sack_info instead [ 115.374198][ T7627] syzkaller0: entered promiscuous mode [ 115.379873][ T7627] syzkaller0: entered allmulticast mode [ 115.607228][ T7639] validate_nla: 52 callbacks suppressed [ 115.607246][ T7639] netlink: 'syz.0.454': attribute type 13 has an invalid length. [ 115.683693][ T7645] Illegal XDP return value 498420125 on prog (id 92) dev N/A, expect packet loss! [ 115.707539][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.454'. [ 115.750004][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 115.761089][ T7639] netlink: 'syz.0.454': attribute type 3 has an invalid length. [ 115.778203][ T7648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 115.891113][ T7657] netlink: 'syz.2.456': attribute type 4 has an invalid length. [ 116.124162][ T7662] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.572157][ T7674] netlink: zone id is out of range [ 116.585623][ T7674] netlink: zone id is out of range [ 116.595246][ T7674] netlink: zone id is out of range [ 116.600927][ T7674] netlink: zone id is out of range [ 116.608652][ T7674] netlink: zone id is out of range [ 116.616360][ T7674] netlink: zone id is out of range [ 116.621629][ T7674] netlink: zone id is out of range [ 116.627597][ T7674] netlink: zone id is out of range [ 116.632995][ T7674] netlink: zone id is out of range [ 116.763764][ T5893] IPVS: starting estimator thread 0... [ 116.778002][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.465'. [ 116.809608][ T7682] nbd: must specify a size in bytes for the device [ 116.856437][ T7683] IPVS: using max 26 ests per chain, 62400 per kthread [ 116.879616][ T7687] netlink: 'syz.2.468': attribute type 4 has an invalid length. [ 116.895810][ T7687] netlink: 17 bytes leftover after parsing attributes in process `syz.2.468'. [ 116.902826][ T7689] netlink: 'syz.0.470': attribute type 10 has an invalid length. [ 116.989208][ T7689] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 117.233694][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.474'. [ 117.707153][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 117.894914][ T7744] netlink: 'syz.1.486': attribute type 10 has an invalid length. [ 117.964029][ T7746] batadv_slave_1: entered promiscuous mode [ 118.001704][ T7745] batadv_slave_1: left promiscuous mode [ 118.172289][ T7765] netlink: 'syz.3.492': attribute type 7 has an invalid length. [ 118.198348][ T7765] netlink: 'syz.3.492': attribute type 23 has an invalid length. [ 118.367346][ T7781] xt_cluster: node mask cannot exceed total number of nodes [ 118.524326][ T7791] delete_channel: no stack [ 118.542816][ T7793] netlink: 'syz.0.501': attribute type 9 has an invalid length. [ 119.318837][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.422903][ T7824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.466738][ T7824] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 119.502075][ T7824] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 119.604274][ T7842] net_ratelimit: 46 callbacks suppressed [ 119.604293][ T7842] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.640965][ T7826] __nla_validate_parse: 6 callbacks suppressed [ 119.640983][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 119.660991][ T7842] netlink: 'syz.0.513': attribute type 13 has an invalid length. [ 119.675343][ T7843] syzkaller0: entered promiscuous mode [ 119.683713][ T7843] syzkaller0: entered allmulticast mode [ 119.698303][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 119.707308][ T7848] netlink: 28 bytes leftover after parsing attributes in process `syz.2.516'. [ 119.741977][ T7842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.767802][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.515'. [ 119.801746][ T7849] dummy0: entered promiscuous mode [ 119.837140][ T7849] bridge0: port 3(dummy0) entered blocking state [ 119.873408][ T7849] bridge0: port 3(dummy0) entered disabled state [ 119.888876][ T7849] dummy0: entered allmulticast mode [ 119.908848][ T7849] bridge0: port 3(dummy0) entered blocking state [ 119.915372][ T7849] bridge0: port 3(dummy0) entered forwarding state [ 119.972639][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 120.120841][ T7863] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 120.184260][ T7869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 121.401640][ T7880] validate_nla: 3 callbacks suppressed [ 121.401657][ T7880] netlink: 'syz.2.526': attribute type 2 has an invalid length. [ 121.415094][ T7878] netlink: 576 bytes leftover after parsing attributes in process `syz.3.525'. [ 121.468511][ T7886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.526'. [ 121.480019][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 121.498985][ T7885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.710220][ T7894] openvswitch: netlink: Missing valid actions attribute. [ 121.755935][ T7894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.859000][ T9] hid-generic 0005:0006:0006.0001: item fetching failed at offset 10/11 [ 121.911809][ T9] hid-generic 0005:0006:0006.0001: probe with driver hid-generic failed with error -22 [ 122.051535][ T7925] sctp: [Deprecated]: syz.2.538 (pid 7925) Use of int in max_burst socket option deprecated. [ 122.051535][ T7925] Use struct sctp_assoc_value instead [ 122.116786][ T7925] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 122.682736][ T7955] netlink: 'syz.3.550': attribute type 13 has an invalid length. [ 122.712783][ T7955] netlink: 'syz.3.550': attribute type 3 has an invalid length. [ 122.976803][ T7972] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 122.995670][ T7971] vlan0: entered promiscuous mode [ 123.001343][ T7971] geneve1: entered promiscuous mode [ 123.007533][ T7971] vlan0: entered allmulticast mode [ 123.012965][ T7971] geneve1: entered allmulticast mode [ 123.635428][ T8001] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 123.669266][ T8001] bond4 (unregistering): Released all slaves [ 123.740037][ T8013] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 123.809482][ T8013] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 124.121264][ T8040] netlink: 'syz.4.573': attribute type 21 has an invalid length. [ 124.145903][ T8040] netlink: 'syz.4.573': attribute type 6 has an invalid length. [ 124.971128][ T8086] __nla_validate_parse: 9 callbacks suppressed [ 124.971145][ T8086] netlink: 56 bytes leftover after parsing attributes in process `syz.0.585'. [ 125.254663][ T8093] dvmrp0: entered allmulticast mode [ 125.319265][ T8098] dvmrp0: left allmulticast mode [ 125.469679][ T8111] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.591'. [ 125.526698][ T8111] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.591'. [ 125.893692][ T8121] bond4: entered promiscuous mode [ 125.900308][ T8121] bond4: entered allmulticast mode [ 125.900323][ T8127] netlink: 104 bytes leftover after parsing attributes in process `syz.3.594'. [ 125.918812][ T8121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.999591][ T8134] netlink: 'syz.4.598': attribute type 64 has an invalid length. [ 126.025876][ T8134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.598'. [ 126.152892][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 126.303224][ T8145] 8021q: VLANs not supported on tunl0 [ 126.636479][ T8159] netlink: 'syz.1.608': attribute type 13 has an invalid length. [ 126.673801][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.608'. [ 126.906753][ T8187] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 127.013766][ T8187] netlink: 'syz.2.618': attribute type 1 has an invalid length. [ 127.036907][ T8197] netlink: 13 bytes leftover after parsing attributes in process `syz.3.622'. [ 127.420353][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 127.455411][ T8216] erspan0: entered promiscuous mode [ 127.743961][ T8226] bridge3: entered promiscuous mode [ 127.763680][ T8226] bridge3: entered allmulticast mode [ 128.136702][ T8253] : renamed from hsr0 (while UP) [ 128.167235][ T8251] syz_tun: left promiscuous mode [ 128.223012][ T8257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.434528][ T8273] netlink: 'syz.4.647': attribute type 23 has an invalid length. [ 128.596528][ T8279] x_tables: duplicate underflow at hook 1 [ 128.691443][ T8285] netlink: 'syz.0.653': attribute type 1 has an invalid length. [ 128.701313][ T8284] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.650'. [ 129.424224][ T8301] netlink: 'syz.3.657': attribute type 13 has an invalid length. [ 129.457800][ T8301] netlink: 'syz.3.657': attribute type 17 has an invalid length. [ 129.479159][ T8301] tunl0: left promiscuous mode [ 129.692528][ T8316] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 129.815536][ T8301] xfrm1: left allmulticast mode [ 129.832080][ T8301] geneve2: left promiscuous mode [ 129.848571][ T8301] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.859450][ T8301] 8021q: adding VLAN 0 to HW filter on device bond3 [ 129.869973][ T8301] bond4: left promiscuous mode [ 129.874775][ T8301] bond4: left allmulticast mode [ 129.883032][ T8301] bridge3: left promiscuous mode [ 129.888296][ T8301] bridge3: left allmulticast mode [ 130.016497][ T8326] __nla_validate_parse: 1 callbacks suppressed [ 130.016514][ T8326] netlink: 16 bytes leftover after parsing attributes in process `syz.0.665'. [ 130.053114][ T8327] ip6t_rpfilter: unknown options [ 132.110517][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 132.403559][ T8440] : renamed from hsr0 (while UP) [ 132.473254][ T8442] netlink: 'syz.4.701': attribute type 3 has an invalid length. [ 132.507734][ T8442] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 132.516625][ T8442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.701'. [ 132.859756][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.867130][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.005092][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 133.180897][ T8481] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 133.214531][ T8481] netlink: 228 bytes leftover after parsing attributes in process `syz.4.715'. [ 133.917365][ T8515] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 134.004671][ T8534] macvlan2: entered promiscuous mode [ 134.044069][ T8542] macvlan3: entered promiscuous mode [ 134.071497][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 134.112222][ T8545] macvlan3: entered promiscuous mode [ 134.137961][ T8541] syzkaller0: entered promiscuous mode [ 134.143622][ T8541] syzkaller0: entered allmulticast mode [ 134.154852][ T8540] tipc: Enabled bearer , priority 0 [ 134.177152][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 134.312588][ T8556] tipc: Enabling of bearer rejected, failed to enable media [ 134.344280][ T8540] tipc: Resetting bearer [ 134.362005][ T8562] netlink: 'syz.4.740': attribute type 13 has an invalid length. [ 134.380266][ T8562] netlink: 'syz.4.740': attribute type 17 has an invalid length. [ 134.445472][ T8540] tipc: Disabling bearer [ 134.595668][ T8562] 8021q: adding VLAN 0 to HW filter on device ` [ 134.620551][ T8562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.703681][ T8578] netlink: 156 bytes leftover after parsing attributes in process `syz.2.744'. [ 134.829464][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 134.848092][ T8583] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 134.876233][ T8583] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 134.897761][ T8583] netlink: 'syz.2.746': attribute type 2 has an invalid length. [ 134.917239][ T8583] netlink: 68 bytes leftover after parsing attributes in process `syz.2.746'. [ 135.193153][ T8598] netlink: 'syz.3.749': attribute type 13 has an invalid length. [ 135.254415][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 135.308278][ T8598] netlink: 'syz.3.749': attribute type 3 has an invalid length. [ 135.363924][ T8610] bond4: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 135.384977][ T8610] bond4 (unregistering): Released all slaves [ 135.422519][ T8608] netem: change failed [ 135.630871][ T8622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.686976][ T8622] bond0: (slave rose0): Enslaving as an active interface with an up link [ 135.987984][ T8646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.763'. [ 135.997252][ T5893] IPVS: starting estimator thread 0... [ 136.003391][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 136.042827][ T8646] nbd: must specify at least one socket [ 136.086163][ T8648] IPVS: using max 32 ests per chain, 76800 per kthread [ 136.380750][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.766'. [ 136.731022][ T8675] syzkaller0: entered promiscuous mode [ 136.741348][ T8675] syzkaller0: entered allmulticast mode [ 138.679182][ T8695] lo speed is unknown, defaulting to 1000 [ 138.852181][ T8755] validate_nla: 3 callbacks suppressed [ 138.852200][ T8755] netlink: 'syz.0.783': attribute type 13 has an invalid length. [ 138.912297][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 139.010033][ T8766] netlink: 'syz.3.784': attribute type 7 has an invalid length. [ 139.023823][ T8755] netlink: 'syz.0.783': attribute type 3 has an invalid length. [ 139.060639][ T6815] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.071267][ T8766] netlink: 'syz.3.784': attribute type 7 has an invalid length. [ 139.090231][ T6815] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.164465][ T6815] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.210551][ T6815] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.362804][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.788'. [ 139.372489][ T8781] netlink: 'syz.3.788': attribute type 7 has an invalid length. [ 139.382472][ T8783] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.391792][ T8781] netlink: 'syz.3.788': attribute type 8 has an invalid length. [ 139.415949][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.788'. [ 139.473835][ T8781] bond0: entered promiscuous mode [ 139.506290][ T8781] bond_slave_0: entered promiscuous mode [ 139.514399][ T8781] bond_slave_1: entered promiscuous mode [ 139.532120][ T8781] bond0: left promiscuous mode [ 139.539646][ T8781] bond_slave_0: left promiscuous mode [ 139.549996][ T8781] bond_slave_1: left promiscuous mode [ 139.597725][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 139.609495][ T8797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.791'. [ 139.623696][ T8788] lo: Caught tx_queue_len zero misconfig [ 139.719617][ T8792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 139.742053][ T8788] syzkaller0: entered promiscuous mode [ 139.751927][ T8788] syzkaller0: entered allmulticast mode [ 140.192448][ T5917] lo speed is unknown, defaulting to 1000 [ 140.200818][ T5917] syz2: Port: 1 Link DOWN [ 140.242366][ T8833] vlan2: entered allmulticast mode [ 140.250374][ T8833] : entered allmulticast mode [ 140.257954][ T8833] hsr_slave_0: entered allmulticast mode [ 140.264549][ T8833] hsr_slave_1: entered allmulticast mode [ 140.486333][ T8854] __nla_validate_parse: 1 callbacks suppressed [ 140.486351][ T8854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 141.291880][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 141.470531][ T8882] netlink: 'syz.1.815': attribute type 24 has an invalid length. [ 141.605163][ T8892] syzkaller1: entered promiscuous mode [ 141.618461][ T8892] syzkaller1: entered allmulticast mode [ 141.934088][ T8906] delete_channel: no stack [ 141.939501][ T8906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.825'. [ 142.120316][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 142.145846][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 142.198775][ T8918] netlink: 'syz.4.831': attribute type 33 has an invalid length. [ 142.210314][ T8926] syzkaller1: entered promiscuous mode [ 142.218513][ T8926] syzkaller1: entered allmulticast mode [ 142.387115][ T8932] netlink: 'syz.2.836': attribute type 6 has an invalid length. [ 142.421448][ T8918] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 142.460769][ T8918] bond3 (unregistering): Released all slaves [ 142.841296][ T8958] syzkaller0: entered promiscuous mode [ 142.866848][ T8958] syzkaller0: entered allmulticast mode [ 143.085159][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.851'. [ 143.132044][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.851'. [ 143.174882][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 143.205865][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.851'. [ 143.239722][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'. [ 143.259042][ T8983] netlink: 'syz.2.852': attribute type 10 has an invalid length. [ 143.267820][ T8983] ip6tnl0: Caught tx_queue_len zero misconfig [ 143.421229][ T8989] syzkaller1: entered promiscuous mode [ 143.470582][ T8989] syzkaller1: entered allmulticast mode [ 143.647770][ T8999] lo speed is unknown, defaulting to 1000 [ 143.909009][ T9011] netlink: 'syz.4.861': attribute type 11 has an invalid length. [ 144.279000][ T9029] nbd: nbd64 already in use [ 144.451499][ T9040] --map-set only usable from mangle table [ 144.549855][ T9046] validate_nla: 4 callbacks suppressed [ 144.549873][ T9046] netlink: 'syz.3.870': attribute type 11 has an invalid length. [ 144.620194][ T7154] udevd[7154]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 145.194165][ T9084] IPVS: set_ctl: invalid protocol: 33 172.20.20.20:20002 [ 145.207080][ T9082] bond4 (unregistering): Released all slaves [ 145.522579][ T9107] __nla_validate_parse: 10 callbacks suppressed [ 145.522598][ T9107] netlink: 68 bytes leftover after parsing attributes in process `syz.2.890'. [ 145.558006][ T9107] netlink: 'syz.2.890': attribute type 3 has an invalid length. [ 145.594359][ T9107] netlink: 244 bytes leftover after parsing attributes in process `syz.2.890'. [ 145.642824][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 145.686109][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.3.893'. [ 146.077975][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 146.480021][ T9148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 146.576848][ T9152] netlink: 'syz.0.905': attribute type 7 has an invalid length. [ 147.266552][ T9192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 147.287815][ T9192] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 147.374351][ T9197] netlink: 'syz.3.920': attribute type 2 has an invalid length. [ 147.384771][ T9192] team1: entered promiscuous mode [ 147.391476][ T9192] team1: entered allmulticast mode [ 147.431408][ T9197] netlink: 'syz.3.920': attribute type 2 has an invalid length. [ 147.474143][ T9197] netlink: 'syz.3.920': attribute type 2 has an invalid length. [ 147.488328][ T9200] geneve2: entered promiscuous mode [ 147.501589][ T9200] geneve2: entered allmulticast mode [ 147.555946][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.923'. [ 147.556662][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 147.614261][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 147.729386][ T9214] ip6t_srh: unknown srh match flags 4000 [ 147.866230][ T6809] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 149.294622][ T9260] netlink: 'syz.3.934': attribute type 178 has an invalid length. [ 149.424434][ T9265] netlink: 'syz.3.934': attribute type 10 has an invalid length. [ 149.819722][ T9284] xt_hashlimit: size too large, truncated to 1048576 [ 149.828661][ T9282] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 149.833202][ T9285] xt_hashlimit: size too large, truncated to 1048576 [ 150.420537][ T9310] tipc: Enabled bearer , priority 2 [ 150.443591][ T9312] vlan2: entered promiscuous mode [ 150.462473][ T9312] bridge0: entered promiscuous mode [ 150.602514][ T9327] __nla_validate_parse: 5 callbacks suppressed [ 150.602534][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 150.692138][ T9329] Bluetooth: MGMT ver 1.23 [ 150.700947][ T9329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 150.756207][ T9331] syzkaller0: entered promiscuous mode [ 150.761917][ T9331] syzkaller0: entered allmulticast mode [ 150.792480][ T9338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.960'. [ 151.370378][ T9353] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 151.408851][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 151.480276][ T9363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.963'. [ 151.507265][ T9364] netlink: 'syz.0.968': attribute type 16 has an invalid length. [ 151.537635][ T9364] netlink: 'syz.0.968': attribute type 17 has an invalid length. [ 151.831384][ T9364] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.003854][ T5925] tipc: Node number set to 3922228638 [ 152.124829][ T9391] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 152.737114][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 153.802188][ T9432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.981'. [ 154.018963][ T9445] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 154.031428][ T9446] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.987'. [ 154.280568][ T9464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.284157][ T9459] bridge_slave_0: left allmulticast mode [ 154.319919][ T9459] bridge_slave_0: left promiscuous mode [ 154.326669][ T9459] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.342135][ T9459] bond0: (slave bond_slave_0): Releasing backup interface [ 154.370009][ T9459] bond_slave_0: left promiscuous mode [ 154.413337][ T9459] bond0: (slave bond_slave_1): Releasing backup interface [ 154.422414][ T9459] bond_slave_1: left promiscuous mode [ 154.432895][ T9459] team0: Port device team_slave_0 removed [ 154.442614][ T9459] team0: Port device team_slave_1 removed [ 154.449060][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.456803][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.467121][ T9459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.474536][ T9459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.487554][ T9459] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.593168][ T9481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.997'. [ 154.623890][ T9481] netlink: 'syz.2.997': attribute type 7 has an invalid length. [ 154.672883][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 154.848176][ T9462] vlan0 (unregistering): left allmulticast mode [ 154.854476][ T9462] veth0_vlan (unregistering): left allmulticast mode [ 154.868309][ T9462] vlan0 (unregistering): left promiscuous mode [ 154.956912][ T9476] syzkaller0: entered promiscuous mode [ 154.963331][ T9476] syzkaller0: entered allmulticast mode [ 155.113559][ T9503] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 155.787771][ T9537] netlink: 'syz.1.1016': attribute type 32 has an invalid length. [ 155.810800][ T9537] __nla_validate_parse: 5 callbacks suppressed [ 155.810816][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1016'. [ 155.838113][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1019'. [ 155.853324][ T9549] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:21 [ 155.923332][ T9537] bond4: Setting coupled_control to off (0) [ 155.960243][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1020'. [ 156.116571][ T9560] netlink: 'syz.0.1022': attribute type 6 has an invalid length. [ 156.156857][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 156.167350][ T9561] openvswitch: netlink: IP tunnel TTL not specified. [ 156.602729][ T9594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 156.676115][ T9600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1035'. [ 156.725594][ T9604] bond5: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 156.739760][ T9604] bond5: entered promiscuous mode [ 156.744885][ T9604] bond5: entered allmulticast mode [ 156.751241][ T9604] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.819895][ T9609] x_tables: unsorted underflow at hook 4 [ 157.542383][ T6820] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.553288][ T6820] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.694759][ T6820] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.704040][ T6820] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.882068][ T9644] syz.3.1049 (9644) used greatest stack depth: 17720 bytes left [ 158.275597][ T9681] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 158.419858][ T9690] netlink: 'syz.2.1064': attribute type 12 has an invalid length. [ 158.479129][ T9694] Cannot find add_set index 2 as target [ 158.486891][ T9695] Cannot find add_set index 2 as target [ 158.685931][ T9706] netlink: 'syz.4.1068': attribute type 16 has an invalid length. [ 158.694043][ T9706] netlink: 'syz.4.1068': attribute type 17 has an invalid length. [ 158.739440][ T9706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.172932][ T30] audit: type=1804 audit(1764687413.097:2): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1073" name="/newroot/221/cgroup.controllers" dev="tmpfs" ino=1142 res=1 errno=0 [ 159.179764][ T9725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1073'. [ 159.198761][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1075'. [ 159.230350][ T30] audit: type=1800 audit(1764687413.097:3): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1073" name="cgroup.controllers" dev="tmpfs" ino=1142 res=0 errno=0 [ 159.393894][ T9739] Cannot find del_set index 4 as target [ 159.460479][ T9742] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 159.500704][ T9742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1079'. [ 159.563474][ T9742] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 159.655104][ T9754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.699696][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1084'. [ 159.750133][ T9758] syzkaller0: entered promiscuous mode [ 159.756484][ T9758] syzkaller0: entered allmulticast mode [ 159.833510][ T9767] xt_l2tp: missing protocol rule (udp|l2tpip) [ 159.860830][ T9765] xt_cgroup: invalid path, errno=-2 [ 159.877313][ T9767] netlink: 'syz.2.1086': attribute type 21 has an invalid length. [ 159.885166][ T9767] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.326475][ T9795] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 160.351630][ T9798] netlink: 'syz.1.1095': attribute type 15 has an invalid length. [ 160.378032][ T9795] syzkaller0: entered promiscuous mode [ 160.383513][ T9795] syzkaller0: entered allmulticast mode [ 160.829292][ T9809] __nla_validate_parse: 6 callbacks suppressed [ 160.829319][ T9809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1099'. [ 160.885925][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 160.895106][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1099'. [ 161.661342][ T5148] Bluetooth: hci4: command tx timeout [ 161.908221][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1103'. [ 161.933004][ T9819] tc_dump_action: action bad kind [ 161.975142][ T9822] tipc: MTU too low for tipc bearer [ 162.088611][ T9826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1107'. [ 162.184769][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 162.230539][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1104'. [ 162.698329][ T9859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1118'. [ 163.822131][ T9887] tipc: Started in network mode [ 163.845315][ T9887] tipc: Node identity ac14140f, cluster identity 4711 [ 163.858550][ T9887] tipc: New replicast peer: 255.255.255.255 [ 163.867601][ T9887] tipc: Enabled bearer , priority 10 [ 163.873955][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 163.885370][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 164.975912][ T43] tipc: Node number set to 2886997007 [ 165.118502][ T9958] syzkaller0: entered promiscuous mode [ 165.138235][ T9958] syzkaller0: entered allmulticast mode [ 165.686024][ T9990] ------------[ cut here ]------------ [ 165.691829][ T9990] WARNING: CPU: 0 PID: 9990 at net/ipv4/route.c:1275 ip_rt_bug+0x2c/0x110 [ 165.700461][ T9990] Modules linked in: [ 165.704636][ T9990] CPU: 0 UID: 0 PID: 9990 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) [ 165.713997][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.724139][ T9990] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 165.729162][ T9990] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 cb 02 0f f8 66 90 e8 c4 02 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 a5 03 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 91 93 98 01 cc f3 0f [ 165.748856][ T9990] RSP: 0018:ffffc90005387180 EFLAGS: 00010286 [ 165.754953][ T9990] RAX: 2e33f64531e1f000 RBX: ffff8880237e1000 RCX: 2e33f64531e1f000 [ 165.763002][ T9990] RDX: 0000000000000002 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0 [ 165.771066][ T9990] RBP: 0000000000000001 R08: ffffffff8f7cf477 R09: 1ffffffff1ef9e8e [ 165.779137][ T9990] R10: dffffc0000000000 R11: fffffbfff1ef9e8f R12: dffffc0000000000 [ 165.781044][ T9993] syzkaller0: entered promiscuous mode [ 165.787190][ T9990] R13: dffffc0000000000 R14: ffff8880237e1000 R15: ffff8881446c1e00 [ 165.787250][ T9990] FS: 00007f6387e536c0(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 165.787267][ T9990] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.787280][ T9990] CR2: 00007f6387e52f98 CR3: 0000000077a98000 CR4: 00000000003526f0 [ 165.787299][ T9990] Call Trace: [ 165.787307][ T9990] [ 165.787321][ T9990] ip_push_pending_frames+0xbe/0x150 [ 165.787364][ T9990] __icmp_send+0xfc3/0x1320 [ 165.787398][ T9990] ? __icmp_send+0x1b9/0x1320 [ 165.787426][ T9990] ? __pfx___icmp_send+0x10/0x10 [ 165.787474][ T9990] ? ip_route_input_noref+0x98/0x250 [ 165.787504][ T9990] ? __pfx_ip_route_input_noref+0x10/0x10 [ 165.822642][ T9993] syzkaller0: entered allmulticast mode [ 165.824498][ T9990] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 165.824534][ T9990] ip_options_compile+0x80/0xb0 [ 165.876851][ T9990] ip_rcv_finish_core+0xaa2/0x1c00 [ 165.882006][ T9990] ip_rcv_finish+0x14c/0x2f0 [ 165.886700][ T9990] NF_HOOK+0x30c/0x3a0 [ 165.890787][ T9990] ? __pfx_ip_rcv_finish+0x10/0x10 [ 165.895972][ T9990] ? NF_HOOK+0x9a/0x3a0 [ 165.900138][ T9990] ? __pfx_NF_HOOK+0x10/0x10 [ 165.904742][ T9990] ? ip_rcv_core+0x7f7/0xd00 [ 165.909416][ T9990] ? __pfx_ip_rcv_finish+0x10/0x10 [ 165.914553][ T9990] ? __pfx_ip_rcv+0x10/0x10 [ 165.919138][ T9990] __netif_receive_skb+0x143/0x380 [ 165.924276][ T9990] ? netif_receive_skb+0x115/0x790 [ 165.929574][ T9990] netif_receive_skb+0x1cb/0x790 [ 165.934542][ T9990] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 165.940434][ T9990] ? __pfx_netif_receive_skb+0x10/0x10 [ 165.945960][ T9990] ? tun_rx_batched+0x160/0x730 [ 165.950836][ T9990] tun_rx_batched+0x1b9/0x730 [ 165.955531][ T9990] ? __lock_acquire+0xab9/0xd20 [ 165.960461][ T9990] ? __pfx_tun_rx_batched+0x10/0x10 [ 165.965683][ T9990] ? tun_get_user+0x272f/0x3e90 [ 165.970629][ T9990] tun_get_user+0x2b65/0x3e90 [ 165.975350][ T9990] ? tun_get_user+0x6f6/0x3e90 [ 165.980183][ T9990] ? tun_get_user+0x272f/0x3e90 [ 165.985064][ T9990] ? aa_file_perm+0x44d/0x1550 [ 165.989911][ T9990] ? __pfx_tun_get_user+0x10/0x10 [ 165.994957][ T9990] ? __futex_wait+0x34a/0x3d0 [ 165.999740][ T9990] ? __pfx___futex_wait+0x10/0x10 [ 166.004795][ T9990] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.010787][ T9990] ? ref_tracker_alloc+0x318/0x460 [ 166.015954][ T9990] ? __lock_acquire+0xab9/0xd20 [ 166.020995][ T9990] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.026529][ T9990] ? tun_get+0x1c/0x2f0 [ 166.030741][ T9990] ? tun_get+0x1c/0x2f0 [ 166.034891][ T9990] ? tun_get+0x1c/0x2f0 [ 166.039162][ T9990] tun_chr_write_iter+0x113/0x200 [ 166.044307][ T9990] vfs_write+0x5c9/0xb30 [ 166.048605][ T9990] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.054170][ T9990] ? __pfx_vfs_write+0x10/0x10 [ 166.059000][ T9990] ? __fget_files+0x2a/0x420 [ 166.063605][ T9990] ksys_write+0x145/0x250 [ 166.067998][ T9990] ? __pfx_ksys_write+0x10/0x10 [ 166.072886][ T9990] ? do_syscall_64+0xbe/0xfa0 [ 166.077640][ T9990] do_syscall_64+0xfa/0xfa0 [ 166.082166][ T9990] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.087436][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.093526][ T9990] ? clear_bhb_loop+0x60/0xb0 [ 166.098547][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.104451][ T9990] RIP: 0033:0x7f6386f8e1ff [ 166.108934][ T9990] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.128599][ T9990] RSP: 002b:00007f6387e53000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.137077][ T9990] RAX: ffffffffffffffda RBX: 00007f63871e5fa0 RCX: 00007f6386f8e1ff [ 166.145063][ T9990] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 166.153111][ T9990] RBP: 00007f6387013f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.161167][ T9990] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 166.169188][ T9990] R13: 00007f63871e6038 R14: 00007f63871e5fa0 R15: 00007ffd58f7cb88 [ 166.177215][ T9990] [ 166.180243][ T9990] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 166.187512][ T9990] CPU: 0 UID: 0 PID: 9990 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) [ 166.196779][ T9990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.206822][ T9990] Call Trace: [ 166.210094][ T9990] [ 166.213016][ T9990] dump_stack_lvl+0x99/0x250 [ 166.217616][ T9990] ? __asan_memcpy+0x40/0x70 [ 166.222214][ T9990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.227495][ T9990] ? __pfx__printk+0x10/0x10 [ 166.232083][ T9990] vpanic+0x237/0x6d0 [ 166.236061][ T9990] ? __pfx_vpanic+0x10/0x10 [ 166.240585][ T9990] panic+0xb9/0xc0 [ 166.244303][ T9990] ? __pfx_panic+0x10/0x10 [ 166.248723][ T9990] __warn+0x31b/0x4b0 [ 166.252693][ T9990] ? ip_rt_bug+0x2c/0x110 [ 166.257015][ T9990] ? ip_rt_bug+0x2c/0x110 [ 166.261345][ T9990] report_bug+0x2be/0x4f0 [ 166.265670][ T9990] ? ip_rt_bug+0x2c/0x110 [ 166.270004][ T9990] ? ip_rt_bug+0x2c/0x110 [ 166.274344][ T9990] ? ip_rt_bug+0x2e/0x110 [ 166.278665][ T9990] handle_bug+0x84/0x160 [ 166.282900][ T9990] exc_invalid_op+0x1a/0x50 [ 166.287410][ T9990] asm_exc_invalid_op+0x1a/0x20 [ 166.292255][ T9990] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 166.297191][ T9990] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 cb 02 0f f8 66 90 e8 c4 02 0f f8 31 ff 48 89 de ba 02 00 00 00 e8 a5 03 6f ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f e9 91 93 98 01 cc f3 0f [ 166.316798][ T9990] RSP: 0018:ffffc90005387180 EFLAGS: 00010286 [ 166.322861][ T9990] RAX: 2e33f64531e1f000 RBX: ffff8880237e1000 RCX: 2e33f64531e1f000 [ 166.330822][ T9990] RDX: 0000000000000002 RSI: ffffffff8d70ed5a RDI: ffffffff8bbf08e0 [ 166.338784][ T9990] RBP: 0000000000000001 R08: ffffffff8f7cf477 R09: 1ffffffff1ef9e8e [ 166.346746][ T9990] R10: dffffc0000000000 R11: fffffbfff1ef9e8f R12: dffffc0000000000 [ 166.354708][ T9990] R13: dffffc0000000000 R14: ffff8880237e1000 R15: ffff8881446c1e00 [ 166.362720][ T9990] ip_push_pending_frames+0xbe/0x150 [ 166.368005][ T9990] __icmp_send+0xfc3/0x1320 [ 166.372505][ T9990] ? __icmp_send+0x1b9/0x1320 [ 166.377173][ T9990] ? __pfx___icmp_send+0x10/0x10 [ 166.382133][ T9990] ? ip_route_input_noref+0x98/0x250 [ 166.387422][ T9990] ? __pfx_ip_route_input_noref+0x10/0x10 [ 166.393146][ T9990] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 166.398340][ T9990] ip_options_compile+0x80/0xb0 [ 166.403186][ T9990] ip_rcv_finish_core+0xaa2/0x1c00 [ 166.408296][ T9990] ip_rcv_finish+0x14c/0x2f0 [ 166.412884][ T9990] NF_HOOK+0x30c/0x3a0 [ 166.416944][ T9990] ? __pfx_ip_rcv_finish+0x10/0x10 [ 166.422041][ T9990] ? NF_HOOK+0x9a/0x3a0 [ 166.426188][ T9990] ? __pfx_NF_HOOK+0x10/0x10 [ 166.430764][ T9990] ? ip_rcv_core+0x7f7/0xd00 [ 166.435345][ T9990] ? __pfx_ip_rcv_finish+0x10/0x10 [ 166.440555][ T9990] ? __pfx_ip_rcv+0x10/0x10 [ 166.445051][ T9990] __netif_receive_skb+0x143/0x380 [ 166.450164][ T9990] ? netif_receive_skb+0x115/0x790 [ 166.455267][ T9990] netif_receive_skb+0x1cb/0x790 [ 166.460201][ T9990] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 166.465999][ T9990] ? __pfx_netif_receive_skb+0x10/0x10 [ 166.471472][ T9990] ? tun_rx_batched+0x160/0x730 [ 166.476344][ T9990] tun_rx_batched+0x1b9/0x730 [ 166.481035][ T9990] ? __lock_acquire+0xab9/0xd20 [ 166.485889][ T9990] ? __pfx_tun_rx_batched+0x10/0x10 [ 166.491098][ T9990] ? tun_get_user+0x272f/0x3e90 [ 166.495957][ T9990] tun_get_user+0x2b65/0x3e90 [ 166.500637][ T9990] ? tun_get_user+0x6f6/0x3e90 [ 166.505419][ T9990] ? tun_get_user+0x272f/0x3e90 [ 166.510282][ T9990] ? aa_file_perm+0x44d/0x1550 [ 166.515041][ T9990] ? __pfx_tun_get_user+0x10/0x10 [ 166.520053][ T9990] ? __futex_wait+0x34a/0x3d0 [ 166.524733][ T9990] ? __pfx___futex_wait+0x10/0x10 [ 166.529746][ T9990] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.535645][ T9990] ? ref_tracker_alloc+0x318/0x460 [ 166.540748][ T9990] ? __lock_acquire+0xab9/0xd20 [ 166.545595][ T9990] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 166.551048][ T9990] ? tun_get+0x1c/0x2f0 [ 166.555205][ T9990] ? tun_get+0x1c/0x2f0 [ 166.559358][ T9990] ? tun_get+0x1c/0x2f0 [ 166.563517][ T9990] tun_chr_write_iter+0x113/0x200 [ 166.568541][ T9990] vfs_write+0x5c9/0xb30 [ 166.572783][ T9990] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.578322][ T9990] ? __pfx_vfs_write+0x10/0x10 [ 166.583089][ T9990] ? __fget_files+0x2a/0x420 [ 166.587680][ T9990] ksys_write+0x145/0x250 [ 166.592104][ T9990] ? __pfx_ksys_write+0x10/0x10 [ 166.596953][ T9990] ? do_syscall_64+0xbe/0xfa0 [ 166.601631][ T9990] do_syscall_64+0xfa/0xfa0 [ 166.606130][ T9990] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.611361][ T9990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.617415][ T9990] ? clear_bhb_loop+0x60/0xb0 [ 166.622086][ T9990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.627969][ T9990] RIP: 0033:0x7f6386f8e1ff [ 166.632375][ T9990] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.652071][ T9990] RSP: 002b:00007f6387e53000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.660489][ T9990] RAX: ffffffffffffffda RBX: 00007f63871e5fa0 RCX: 00007f6386f8e1ff [ 166.668501][ T9990] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 166.676465][ T9990] RBP: 00007f6387013f91 R08: 0000000000000000 R09: 0000000000000000 [ 166.684427][ T9990] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000000 [ 166.692401][ T9990] R13: 00007f63871e6038 R14: 00007f63871e5fa0 R15: 00007ffd58f7cb88 [ 166.700391][ T9990] [ 166.703962][ T9990] Kernel Offset: disabled [ 166.708274][ T9990] Rebooting in 86400 seconds..