last executing test programs: 2m38.593314855s ago: executing program 3 (id=3753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 2m38.239465248s ago: executing program 3 (id=3758): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) 2m37.940369938s ago: executing program 3 (id=3763): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e"], 0x28}}, 0x0) 2m37.678240559s ago: executing program 3 (id=3768): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="b7010000000000007b1af8ff000000007b1af0ff000000007b1ae8ff000000007b1ae0ff000000007b1ad8ff00000000b701000050000000731af8ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000ecffffffb70300001400000085000000cc000000b70000000200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="0100000500cd960002c85df0e900", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m37.381324906s ago: executing program 3 (id=3772): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 2m37.147597629s ago: executing program 3 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd2c, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m28.626703332s ago: executing program 2 (id=3928): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x2, 0x41c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, 0x0}, 0x494) 2m28.415213153s ago: executing program 2 (id=3931): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) 2m28.190993049s ago: executing program 2 (id=3934): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x1c8, 0x1c8, 0x260, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010101, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x4, 0x36, 0x1d, 0x1c, 0x23, 0x21, 0x2c, 0x7, 0x1e, 0x7, 0x2e, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x451) 2m27.799987627s ago: executing program 2 (id=3937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000280)={{r0}, 0x0, &(0x7f0000000240)}, 0x20) 2m27.547487699s ago: executing program 2 (id=3940): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={0x0}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) 2m27.36754685s ago: executing program 2 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) 2m22.095783372s ago: executing program 32 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd2c, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m12.293128701s ago: executing program 33 (id=3943): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, 0x27, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x484d0) 1m58.125815958s ago: executing program 5 (id=4358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="40020000100001002dbd700000000000fe880000000000000000000000000101fe88000000000000000000000000000100000049460000000000000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x240}}, 0x0) 1m57.744283372s ago: executing program 5 (id=4364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) 1m57.479395818s ago: executing program 5 (id=4370): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m57.287134646s ago: executing program 5 (id=4375): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 1m57.117734501s ago: executing program 5 (id=4379): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x10000, 0x7fff, 0x100, 0xa, 0x3, 0xffffffff, 0x0, 0x5}}) 1m56.008196837s ago: executing program 5 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 1m44.354425647s ago: executing program 6 (id=4534): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) 1m43.913061876s ago: executing program 6 (id=4537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newtaction={0x48, 0x31, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x0, 0x5, 0x9}, @TCA_POLICE_RATE64={0x0, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x0, 0x4, 0x800}], [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0xffffe1ee, 0x7, 0x31, 0x10001, 0x6, 0xd, 0x0, 0x4, 0x80000000, 0xcb4, 0x4, 0xfc0c, 0x0, 0x4, 0xfffffff7, 0x6e, 0x1, 0x10001, 0xf, 0x8, 0xf2d, 0x2, 0x5, 0xff9, 0xb4, 0xb1, 0x9, 0x3, 0x1, 0x6, 0x9, 0x1, 0xfffffff8, 0x800, 0x5d8, 0x7ff, 0x10001, 0x598, 0x430, 0xe, 0x1ff, 0xfffffff9, 0x8c23, 0x2, 0x0, 0x4, 0x7, 0x7fffffff, 0x3, 0x80, 0x1, 0x2, 0xff, 0xcc86, 0x4, 0xc, 0x6, 0x6, 0x5, 0x5, 0x80, 0xffff, 0x8, 0x3, 0x5, 0x7, 0x8, 0x5, 0xfffffff9, 0xc13f, 0x0, 0x81, 0x2, 0x1, 0x1, 0xa68, 0x8, 0x3ff, 0xb, 0x80, 0x5, 0x9, 0x3, 0x4, 0x2, 0x684e, 0x2, 0x2, 0x1, 0x80000000, 0x0, 0x800, 0xe, 0x85b, 0x66b3, 0x0, 0x4, 0xfffc0000, 0x5, 0xc, 0x8000, 0x4, 0x10001, 0x5, 0x3, 0x3c4, 0xa1, 0x3, 0x4, 0x4, 0x685ac84a, 0x7, 0x7a3, 0xfffffffc, 0x7, 0x4, 0x5, 0x3, 0x9, 0x9, 0xfffffffc, 0x1, 0x8, 0x8, 0x80, 0x6, 0x5, 0x8, 0x8, 0x7, 0xcb, 0x2, 0xa, 0x4, 0x6, 0x8, 0xcca3, 0x7, 0x8000, 0x1, 0x2, 0x80000001, 0x6, 0x697, 0x1a, 0x4, 0x0, 0xc250, 0x29a1, 0x9, 0xfffffffc, 0x6fe0, 0x3, 0x5, 0x80000000, 0x9, 0x7fff, 0xfff, 0x6, 0x7, 0xb7d, 0x4, 0x4, 0x0, 0x7, 0x5, 0x7f, 0x1, 0x10000, 0x8, 0xd, 0x401, 0xb9, 0x8, 0x7f, 0x10, 0x6, 0x9, 0x49, 0x5, 0x7ff, 0x8, 0x6, 0x0, 0x8000, 0x1, 0x2, 0xb78300bf, 0x1, 0x400, 0xfff, 0x8, 0xffffffff, 0xe, 0x4, 0x8ab, 0x0, 0x86, 0x6, 0x1, 0x5, 0x6, 0xd, 0xcbde, 0x5, 0x5, 0xf5, 0x4, 0x30, 0x2, 0x84c, 0xa58e, 0x5, 0x5, 0x2, 0x3, 0x1, 0x1, 0x3c94, 0x9, 0x25, 0x9, 0xebe9, 0x5, 0x5f95bc0f, 0x9, 0x0, 0x2, 0xe, 0x3, 0x9, 0xa, 0x4f9e, 0x4, 0x4bed, 0xba83, 0xffff0000, 0x8, 0xd, 0x3, 0x4ee, 0x6, 0x6, 0x8, 0x9708, 0x9, 0x8, 0xd, 0x5, 0x2, 0x5, 0x4, 0x2, 0xd9, 0x7, 0x7]}, @TCA_POLICE_RATE={0x0, 0x2, [0x80000000, 0x7, 0x1, 0x6, 0x693, 0x8, 0x7, 0x10000, 0xc, 0x9, 0x208, 0xd, 0x4, 0x6, 0x7, 0x81, 0x8000, 0x6, 0x7, 0x1, 0x7a8e, 0x5, 0xfa0, 0x8001, 0x4, 0x3, 0x9e, 0x100, 0x6, 0x4, 0x8, 0x7, 0x10, 0xb9e, 0x80000001, 0xfffffccc, 0x6, 0x9027, 0x7, 0x1, 0x80000001, 0x3, 0x6, 0x7fffffff, 0xcaaf, 0x78, 0x7fffffff, 0x8, 0x0, 0x8000, 0x3, 0xcaf, 0xfffffff7, 0x6, 0xfffffffd, 0x7, 0x4, 0x25, 0x9, 0x400, 0x4, 0x35fb, 0x0, 0x1, 0x9, 0x5f, 0x0, 0x8, 0x1, 0x3ff, 0x2, 0xfffffffd, 0xfff, 0x0, 0x6, 0x9, 0x5618, 0xa, 0x7, 0x4ab1, 0x0, 0x5, 0x3, 0x8, 0x60000, 0x7, 0xfffffffd, 0x8, 0x8, 0x9, 0x6, 0x2bf, 0x553, 0x2, 0x8, 0x9, 0xb9, 0xb0, 0x6, 0x2, 0xbb, 0xa5, 0x5c1, 0x0, 0x9, 0x4, 0xe, 0x7, 0xfffffff8, 0x2, 0x4, 0x401, 0xfff, 0x9, 0x10000, 0x4, 0xfffffff6, 0x0, 0x8, 0xdde1, 0x2, 0x2, 0x365, 0x6, 0xbb41, 0xb, 0x9, 0x8, 0x2, 0x6, 0x10, 0x5, 0x4, 0x33, 0x3a, 0x8, 0x9, 0x7, 0x5, 0x1, 0xffffffff, 0x1, 0x4, 0x1, 0x2, 0x9, 0xfffffffa, 0x7, 0x2, 0x61cd, 0x78, 0x9, 0x6, 0x27e, 0xc, 0x3, 0x9, 0xffc9, 0x0, 0xdaea, 0x8001, 0x2048, 0xf, 0x7, 0x1ff, 0x4, 0x3, 0xbf3, 0x81, 0x3, 0x400, 0x2, 0x8000, 0x8001, 0x1, 0x1, 0xc2, 0x0, 0x0, 0x8a, 0x7, 0x4, 0x3, 0x0, 0x223, 0x892a, 0xfffffff9, 0x2, 0x5, 0x5c, 0xb0f4, 0x8, 0x8, 0x101, 0x0, 0x0, 0x6, 0xe7, 0xffffffff, 0x3, 0x8, 0x3, 0x2, 0x3, 0x3, 0x0, 0x4, 0x6, 0x101, 0x4, 0x1, 0xa1d2, 0x8, 0x0, 0x0, 0x78, 0x400, 0x7, 0x0, 0x9, 0x6, 0xaf3, 0x1ae, 0x89fd5ad, 0x7, 0x1, 0x200, 0x8001, 0x3d, 0x3, 0x1000, 0x9, 0x5, 0x0, 0xffffff00, 0x5, 0x3, 0x7, 0x9d, 0x4, 0x2000, 0x1, 0x5, 0x10c6, 0xd1, 0x3, 0x563, 0xb31, 0xffffffff, 0x0, 0x1, 0x1, 0x10001, 0x8, 0xaf, 0xffff]}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x1}], [@TCA_POLICE_RESULT={0x0, 0x5, 0x1}, @TCA_POLICE_RATE={0x0, 0x2, [0x8, 0x80000001, 0x3, 0x8, 0x1, 0x4, 0x5, 0x7, 0x0, 0x6, 0x8d, 0x1000, 0x5, 0x772c, 0x1, 0x3, 0x1, 0x7, 0x3, 0xf5, 0xc, 0x0, 0x9, 0x2, 0x70, 0x7, 0x8000, 0x10001, 0x4, 0x1, 0x85, 0x8, 0x6, 0xfffffffc, 0x6, 0x80000001, 0x3, 0x3, 0xfffffff7, 0x8, 0x2, 0x7, 0xe9a, 0xab5, 0xb, 0x3, 0x9, 0x0, 0x3, 0x6, 0x9, 0x3, 0x8, 0x4, 0x7fffffff, 0xfffffff8, 0x5, 0x42, 0x6, 0x1, 0x1, 0x8, 0x6, 0x7, 0xa, 0x5, 0x7, 0x7f, 0x8, 0x8001, 0x9, 0x4, 0x8, 0x6, 0x60f, 0x400, 0x8, 0x5, 0x7, 0x401, 0x8, 0xe5, 0x7, 0x6, 0x3, 0xc, 0x5, 0x1c0000, 0x9, 0x4, 0x9, 0x10001, 0x6d55, 0x7ff, 0xfff, 0x3, 0xff, 0x0, 0x10001, 0x1, 0x1, 0x8204, 0x6, 0x4, 0x5, 0x35, 0x8, 0x2, 0x81, 0x4, 0x2, 0x1, 0x5, 0x9, 0x3, 0x9, 0x53, 0x3, 0x5, 0x0, 0x80, 0xfffffffb, 0x5, 0x1, 0x2, 0x0, 0x6, 0xfffffff7, 0x5, 0x44b, 0xffff19af, 0x1, 0xb1b, 0x3, 0x401, 0x3, 0x5, 0x2, 0x5, 0x1, 0x188c1b1b, 0x7, 0x6, 0x2, 0x7, 0x7ff, 0xc000, 0x0, 0x7, 0x4586, 0x6, 0x1ff, 0x8, 0x4, 0x800, 0x9, 0x1, 0x22, 0x5ad, 0x0, 0x3ff, 0x8000, 0x3, 0x1, 0x942, 0x7fffffff, 0x633, 0xdf, 0x10, 0x9, 0x7f, 0x3, 0xa258, 0x8, 0x75, 0x5, 0x7, 0x9, 0x2, 0x43, 0xb, 0x401, 0xfffffeff, 0x5, 0x7, 0x80, 0x10, 0x1, 0x800, 0x3ff, 0x4, 0x67f, 0x2, 0x1, 0x0, 0x5, 0x6, 0xbf, 0x3, 0x4, 0x5, 0x6, 0x2, 0x2, 0x60, 0x9, 0x3, 0x3, 0x8, 0x51a, 0xa5bb, 0x2, 0xffff74c4, 0x1, 0x8, 0x4, 0x5, 0x1, 0xffff2eb1, 0x2, 0x9, 0x7a4, 0x7fff, 0x0, 0x0, 0x4, 0x1, 0x3ff, 0x8, 0x89, 0x10, 0x6, 0x9539, 0x5, 0x8, 0x3, 0x7, 0x8, 0x7, 0xa00, 0x2, 0x6, 0x5, 0x4, 0x3, 0x6, 0x400, 0x8, 0x3, 0x6, 0x0, 0x1389, 0xda6, 0x6, 0x4d6a, 0x2]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x7fffffffffffffff}], [@TCA_POLICE_PEAKRATE={0x0, 0x3, [0x8, 0xd, 0x0, 0x6, 0x8, 0xfffffeff, 0x10000, 0x1, 0x5, 0x5, 0xd, 0x6, 0xd, 0x24000000, 0x6, 0x2, 0x5, 0x0, 0x10001, 0x4, 0xfffffffe, 0xffff, 0x1, 0x9, 0x2ec, 0x1, 0x2, 0x5, 0x3, 0xaf4c, 0x3ff, 0x2, 0x6, 0x5, 0xffff0c2f, 0xfffffffe, 0x8, 0x7, 0x4, 0x5, 0x7fffffff, 0x7, 0x7, 0xffff, 0x7fff, 0x6, 0x5, 0x6cc4, 0x1, 0xca4, 0xffffffff, 0x9, 0x1000, 0x0, 0x9, 0x4, 0x8, 0x200, 0xc8bf, 0x8, 0x2, 0x6, 0x8000, 0x7, 0xe6, 0x60, 0xfffffffb, 0x47d9, 0x1970, 0x4, 0x5, 0x1, 0x9, 0x3, 0x4, 0x4f0, 0x1, 0x0, 0x5, 0x0, 0x5, 0x0, 0x3, 0xff, 0x3, 0x7, 0xfffffffa, 0x9, 0x9, 0x1, 0x3, 0x6, 0x5, 0x0, 0x3, 0x760c, 0x10000, 0x4, 0x7, 0x1, 0x9a0, 0x3ff, 0x3, 0x3, 0x9, 0x9, 0xac, 0x891b, 0x81, 0x4, 0xb, 0x5, 0x56, 0x0, 0x1000, 0x1ff, 0x1, 0x7, 0x1, 0x1fc57566, 0xb4, 0xffff, 0x40, 0x4, 0x9, 0x3ff, 0x5, 0xf, 0xfff, 0x0, 0x40, 0x800, 0x40, 0x1, 0x10, 0xffffffff, 0x5, 0x80000000, 0x0, 0x1000, 0x6, 0x17084ac9, 0x5, 0x5, 0x5, 0xc, 0x4, 0x8, 0xfffff60b, 0xfffffffe, 0xa8c00000, 0x745, 0x5, 0x8, 0x60b6, 0x3, 0x7, 0x9, 0xfffff5df, 0x8000, 0x7, 0x9, 0x9, 0xffff1093, 0x2, 0x5, 0x1ff, 0x9, 0x3, 0x4, 0x3f, 0x3, 0x8, 0x6, 0x80000000, 0x8001, 0xffffffff, 0x7ff, 0x9, 0x5, 0x7, 0x1, 0x5, 0x4, 0xf4, 0x2, 0x0, 0xf, 0x1ff, 0x80, 0xfffffff9, 0x1, 0x6, 0x4, 0x38, 0x2, 0x5, 0x3ff, 0x3, 0x80000001, 0x3ff, 0x8, 0xb9c2, 0x80000000, 0x8000, 0x6, 0x35a, 0x400, 0x80000001, 0x10000, 0x6, 0x0, 0x9, 0x1, 0x1, 0x0, 0x8, 0x10, 0x5, 0x7, 0x8000, 0x244c, 0x2c, 0x7, 0x1, 0x7, 0x80, 0x9, 0x0, 0x7fffffff, 0x0, 0x101, 0x6, 0xfffff801, 0x80, 0xfffffffc, 0x33, 0xffffff81, 0x10001, 0xa, 0x7, 0x2, 0x2, 0x5, 0x6, 0x9, 0xfffffff9, 0xfff, 0x4, 0xfffffffb, 0x101, 0xdbf5, 0x30d, 0xfffffffe, 0x7f18, 0xf]}]]}, {0x4, 0x6, "454cef0e31641ba142336e4e696328383f4b9f1b0bdf40c2acf35abb054a4f0c185b8340471f7d2e9f26a25921b8c209f3712c4f7094163037f9c260ca4fc07bc1d37ef713d4e647341ab577d06a186e6d8d70976e4930055bb03f22401d4805d86ad15ed8806dc300488dbd002d476f2a0ae50a362531eb75b1012640e8c5626e6249fceb6c819f268096c458a95fbd47078ac205d2eb25e6d7d7e805ce394743"}, {0xc, 0x3, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8a}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m43.44197341s ago: executing program 6 (id=4543): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x0, 0x2b}, @in6=@mcast2, {}, {0x20000, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x2, 0x4}, [@coaddr={0x14}]}, 0x104}}, 0x0) 1m42.962310543s ago: executing program 6 (id=4549): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @ptr]}, {0x0, [0x2e, 0x5f, 0x61, 0x61, 0x0, 0x30, 0xc8110402d49b9cdc, 0x30]}}, 0x0, 0x3a}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xf, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x93549f2b}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x0, 0x2, 0x8, 0x6}], 0x10, 0x10001}, 0x94) 1m42.276512527s ago: executing program 6 (id=4554): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) 1m41.727206832s ago: executing program 6 (id=4558): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 1m40.413725331s ago: executing program 34 (id=4400): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 1m26.347555054s ago: executing program 35 (id=4558): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 33.927992041s ago: executing program 0 (id=4803): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) 33.856107813s ago: executing program 8 (id=4804): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 29.009809477s ago: executing program 8 (id=4807): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT6_TABLE(r0, 0x29, 0xd1, &(0x7f0000000040)=0xfe, 0x4) 28.596715213s ago: executing program 0 (id=4809): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0xf0, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x1d, 0x3e8, 0x5, 0x8, 0x40, 0x3e8, 0x3e8}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffffffffffff}}}}, 0x280) syz_emit_ethernet(0x22, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x2, 0x33, 0x0, @private=0xa010102, @loopback}}}}}, 0x0) 23.019986807s ago: executing program 8 (id=4811): r0 = socket(0x2d, 0x2, 0x0) setsockopt(r0, 0x11d, 0x1, &(0x7f0000000200)="01000000", 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000400"}, 0x80, 0x0}, 0x0) 21.312063728s ago: executing program 0 (id=4812): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="59095004000000000000080000001000048009000500"], 0x24}}, 0x0) 19.035918068s ago: executing program 4 (id=4815): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, 0x0, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbf}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}}, 0x4004811) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0009"], 0x30}}, 0x0) 17.941877738s ago: executing program 8 (id=4816): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x29}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) 14.362265028s ago: executing program 0 (id=4819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x37}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 14.137472908s ago: executing program 4 (id=4820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x4c, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4e20, 0xfffc, @loopback, 0xeffffffd}, 0x1c) 11.663663128s ago: executing program 8 (id=4821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x24}}, 0x0) 11.568682096s ago: executing program 0 (id=4823): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000440), 0x4) sendto$inet6(r0, 0x0, 0x0, 0xbb8, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @local}, 0x1c) 9.16548938s ago: executing program 4 (id=4825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 7.588427148s ago: executing program 0 (id=4826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 6.986149765s ago: executing program 7 (id=4827): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x58, 0x42, 0x1, 0x70bd2a, 0x25dfdbfc, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00", @nested={0x4, 0xcd}]}, 0x58}}, 0x0) 6.917634811s ago: executing program 8 (id=4828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.62938601s ago: executing program 4 (id=4830): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r0) 5.757382311s ago: executing program 4 (id=4831): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 5.40293839s ago: executing program 7 (id=4833): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) 4.930053246s ago: executing program 4 (id=4834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) 4.158491818s ago: executing program 7 (id=4836): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="e607ffff", 0x4) 3.117025404s ago: executing program 7 (id=4838): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 2.880870933s ago: executing program 1 (id=4839): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 2.139477717s ago: executing program 1 (id=4840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 2.079322632s ago: executing program 7 (id=4841): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x800}, 0x0) 1.381023255s ago: executing program 1 (id=4842): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000002d0007012abd7000ffdbdf250a7c000008000180040006000c00028008000200", @ANYRES32=r0, @ANYBLOB='\f\x00\t'], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.277835808s ago: executing program 7 (id=4843): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x4}, 0x38) 803.641756ms ago: executing program 1 (id=4844): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, r1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x4c}, 0x8, 0x3000000000002}, 0x0) 392.599266ms ago: executing program 1 (id=4845): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="5b000000080011aaaaaac2aa0114", 0xe) 0s ago: executing program 1 (id=4846): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 77.988390][ T5607] cgroup: Unknown subsys name 'net' [ 78.063638][ T5607] cgroup: Unknown subsys name 'cpuset' [ 78.067010][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.672172][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.256096][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.256780][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.276343][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.277957][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.278850][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.281684][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.282574][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.286509][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.289980][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.302438][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.304503][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.306873][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.308152][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.309430][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.311447][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.316703][ T4936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.322096][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.330214][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.341548][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.354586][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.460710][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.464760][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.465465][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.472925][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.480946][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.562832][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.564305][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.569428][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.592960][ T5619] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.596880][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.624827][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.645026][ T5631] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.138887][ T5620] infiniband rxe0: set active [ 88.140362][ T5620] infiniband rxe0: added rxe_eth0 [ 88.181593][ T5620] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 88.181635][ T5620] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 88.181677][ T5620] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 88.206027][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.303563][ T5620] RDS/IB: rxe0: added [ 88.309234][ T5620] smc: adding ib device rxe0 with port count 1 [ 88.309328][ T5620] smc: ib device rxe0 port 1 has no pnetid [ 88.334943][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.377614][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.404310][ T52] Bluetooth: hci1: command tx timeout [ 88.404429][ T52] Bluetooth: hci2: command tx timeout [ 88.404604][ T5623] Bluetooth: hci0: command tx timeout [ 88.480393][ T5623] Bluetooth: hci3: command tx timeout [ 88.559977][ T5623] Bluetooth: hci4: command tx timeout [ 88.642340][ T189] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.692012][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.930152][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.236106][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.313731][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.314315][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.314526][ T5617] bridge_slave_0: entered allmulticast mode [ 89.316714][ T5617] bridge_slave_0: entered promiscuous mode [ 89.380953][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.381070][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.381218][ T5617] bridge_slave_1: entered allmulticast mode [ 89.383259][ T5617] bridge_slave_1: entered promiscuous mode [ 89.437074][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.437181][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.437302][ T5618] bridge_slave_0: entered allmulticast mode [ 89.450232][ T5618] bridge_slave_0: entered promiscuous mode [ 89.495598][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.495710][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.495846][ T5619] bridge_slave_0: entered allmulticast mode [ 89.499557][ T5619] bridge_slave_0: entered promiscuous mode [ 89.528188][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.528342][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.528732][ T5618] bridge_slave_1: entered allmulticast mode [ 89.536439][ T5618] bridge_slave_1: entered promiscuous mode [ 89.577809][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.578637][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.578744][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.579170][ T5619] bridge_slave_1: entered allmulticast mode [ 89.612299][ T5619] bridge_slave_1: entered promiscuous mode [ 89.634798][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.636903][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.637064][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.637490][ T5631] bridge_slave_0: entered allmulticast mode [ 89.666284][ T5631] bridge_slave_0: entered promiscuous mode [ 89.678132][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.719025][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.719154][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.719287][ T5631] bridge_slave_1: entered allmulticast mode [ 89.742596][ T5631] bridge_slave_1: entered promiscuous mode [ 89.796373][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.841779][ T5617] team0: Port device team_slave_0 added [ 89.846083][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.864812][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.892821][ T5617] team0: Port device team_slave_1 added [ 89.896290][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.923758][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.996153][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.997074][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.997088][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.997114][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.055600][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.055621][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.055641][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.105272][ T5618] team0: Port device team_slave_0 added [ 90.144427][ T5619] team0: Port device team_slave_0 added [ 90.146619][ T5618] team0: Port device team_slave_1 added [ 90.166555][ T5631] team0: Port device team_slave_0 added [ 90.175859][ T5619] team0: Port device team_slave_1 added [ 90.192296][ T5620] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.215499][ T5631] team0: Port device team_slave_1 added [ 90.269422][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.269442][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.269467][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.372323][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.372342][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.372369][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.374242][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.374257][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.374283][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.472320][ T5617] hsr_slave_0: entered promiscuous mode [ 90.473769][ T5617] hsr_slave_1: entered promiscuous mode [ 90.476407][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.476422][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.476449][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.480546][ T5624] Bluetooth: hci2: command tx timeout [ 90.480640][ T5624] Bluetooth: hci1: command tx timeout [ 90.481022][ T5623] Bluetooth: hci0: command tx timeout [ 90.481575][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.481606][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.481680][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.519082][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.519148][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.519210][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.561199][ T5623] Bluetooth: hci3: command tx timeout [ 90.640915][ T5623] Bluetooth: hci4: command tx timeout [ 90.758853][ T5618] hsr_slave_0: entered promiscuous mode [ 90.765764][ T5618] hsr_slave_1: entered promiscuous mode [ 90.766360][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 90.766597][ T5618] Cannot create hsr debugfs directory [ 90.848971][ T5631] hsr_slave_0: entered promiscuous mode [ 90.853307][ T5631] hsr_slave_1: entered promiscuous mode [ 90.855342][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 90.855394][ T5631] Cannot create hsr debugfs directory [ 90.874743][ T5619] hsr_slave_0: entered promiscuous mode [ 90.876042][ T5619] hsr_slave_1: entered promiscuous mode [ 90.876595][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 90.876609][ T5619] Cannot create hsr debugfs directory [ 91.416196][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.441015][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.442201][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.447682][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.471530][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.478155][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.512162][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.515609][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.641712][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.645994][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.647063][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.665638][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.670600][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.670866][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.671215][ T5620] bridge_slave_0: entered allmulticast mode [ 91.686710][ T5620] bridge_slave_0: entered promiscuous mode [ 91.698462][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.715720][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.727485][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.727629][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.727763][ T5620] bridge_slave_1: entered allmulticast mode [ 91.737822][ T5620] bridge_slave_1: entered promiscuous mode [ 91.765033][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.768506][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.817035][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.845110][ T10] cfg80211: failed to load regulatory.db [ 91.848386][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.909877][ T5620] team0: Port device team_slave_0 added [ 91.935379][ T5620] team0: Port device team_slave_1 added [ 91.947186][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.955890][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.992359][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.992377][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.992403][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.992873][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.996345][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.062851][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.062864][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.062883][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.063506][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.066766][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.067548][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.088231][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.238493][ T5620] hsr_slave_0: entered promiscuous mode [ 92.239294][ T5620] hsr_slave_1: entered promiscuous mode [ 92.251876][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 92.251899][ T5620] Cannot create hsr debugfs directory [ 92.310458][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.313750][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.314893][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.318458][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.362887][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.366183][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.403758][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.407033][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.546664][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.560709][ T52] Bluetooth: hci1: command tx timeout [ 92.560742][ T52] Bluetooth: hci2: command tx timeout [ 92.561103][ T5623] Bluetooth: hci0: command tx timeout [ 92.589244][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.639382][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.639958][ T5623] Bluetooth: hci3: command tx timeout [ 92.704662][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.704797][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.726105][ T5623] Bluetooth: hci4: command tx timeout [ 92.732171][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.762555][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.762632][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.764569][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.764637][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.774415][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.794154][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.795831][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.827040][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.842728][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.842980][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.843750][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.848015][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.891302][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.894105][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.897058][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.003937][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.031071][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.031143][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.058592][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.058671][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.085712][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.154543][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.245603][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.245713][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.283737][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.283841][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.491481][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.567169][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.612830][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.612992][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.685076][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.685187][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.385562][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.464115][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.638550][ T5617] veth0_vlan: entered promiscuous mode [ 94.645311][ T5624] Bluetooth: hci2: command tx timeout [ 94.645343][ T5624] Bluetooth: hci1: command tx timeout [ 94.645395][ T5623] Bluetooth: hci0: command tx timeout [ 94.681709][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.702083][ T5617] veth1_vlan: entered promiscuous mode [ 94.721091][ T5623] Bluetooth: hci3: command tx timeout [ 94.808667][ T5623] Bluetooth: hci4: command tx timeout [ 94.876607][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.945099][ T5617] veth0_macvtap: entered promiscuous mode [ 94.988693][ T5618] veth0_vlan: entered promiscuous mode [ 94.998653][ T5617] veth1_macvtap: entered promiscuous mode [ 95.049074][ T5618] veth1_vlan: entered promiscuous mode [ 95.114565][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.146299][ T5631] veth0_vlan: entered promiscuous mode [ 95.148539][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.167824][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.192568][ T5631] veth1_vlan: entered promiscuous mode [ 95.282428][ T5619] veth0_vlan: entered promiscuous mode [ 95.312750][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312894][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312935][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312973][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.373586][ T5618] veth0_macvtap: entered promiscuous mode [ 95.406067][ T5618] veth1_macvtap: entered promiscuous mode [ 95.422172][ T5619] veth1_vlan: entered promiscuous mode [ 95.427840][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.427864][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.486612][ T5620] veth0_vlan: entered promiscuous mode [ 95.487856][ T5631] veth0_macvtap: entered promiscuous mode [ 95.545978][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.546000][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.562890][ T5631] veth1_macvtap: entered promiscuous mode [ 95.578707][ T5620] veth1_vlan: entered promiscuous mode [ 95.605741][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.628914][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.668582][ T5619] veth0_macvtap: entered promiscuous mode [ 95.689325][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.704035][ T5619] veth1_macvtap: entered promiscuous mode [ 95.724772][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.758572][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.791041][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.791093][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.821558][ T1368] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853193][ T5620] veth0_macvtap: entered promiscuous mode [ 95.872130][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.916169][ T5620] veth1_macvtap: entered promiscuous mode [ 95.934593][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.941033][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941164][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941255][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.944663][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.946474][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.072262][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.115346][ T1368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.148012][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.161674][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.161694][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.322031][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.322054][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.367476][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.367495][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.506224][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.506246][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.518626][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.614731][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.614754][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.704475][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.704496][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.768334][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.768355][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.796446][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.796927][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900642][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900693][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900731][ T1162] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.900786][ T1162] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.984415][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.984436][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.418317][ T5863] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 98.654911][ T189] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.016224][ T5623] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 101.520138][ T5623] Bluetooth: hci4: command tx timeout [ 102.495550][ T6161] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 108.409754][ T6538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.932382][ T5623] Bluetooth: hci4: unexpected cc 0x2060 length: 8 > 7 [ 113.347197][ T6856] rxe_eth0 speed is unknown, defaulting to 1000 [ 116.205172][ T5623] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 116.205230][ T5623] Bluetooth: unknown link type 48 [ 116.205284][ T5623] Bluetooth: hci1: connection err: -111 [ 121.140204][ T5623] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 122.182912][ T5623] Bluetooth: hci4: Malformed Event: 0x13 [ 123.212812][ T5623] Bluetooth: hci4: Unexpected cc 0x2753 with no status [ 124.238619][ T5623] Bluetooth: hci1: unexpected event 0x13 length: 321 > 255 [ 125.456889][ T7635] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 125.658448][ T5623] Bluetooth: hci0: ACL packet too small [ 126.584539][ T5623] Bluetooth: hci0: ACL packet for unknown connection handle 3484 [ 126.701537][ T5623] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 127.770601][ T7769] IPv6: addrconf: prefix option has invalid lifetime [ 132.321037][ T5623] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 132.321111][ T5623] Bluetooth: hci2: Injecting HCI hardware error event [ 132.323719][ T5623] Bluetooth: hci2: hardware error 0x00 [ 132.803426][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.803512][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.399975][ T5623] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 135.159387][ T8187] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 143.299302][ T8707] IPv6: addrconf: prefix option has invalid lifetime [ 143.299322][ T8707] IPv6: addrconf: prefix option has invalid lifetime [ 143.728953][ T8731] can: request_module (can-proto-0) failed. [ 152.363611][ T9298] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.846954][ T9332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1730'. [ 152.935032][ T9335] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.054265][ T9344] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1735'. [ 153.771879][ T9386] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 153.965466][ T9399] Cannot find add_set index 4 as target [ 154.138510][ T9412] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 154.139018][ T9410] Unsupported ieee802154 address type: 0 [ 154.223556][ T9414] netlink: zone id is out of range [ 154.223573][ T9414] netlink: zone id is out of range [ 154.223582][ T9414] netlink: zone id is out of range [ 154.223591][ T9414] netlink: zone id is out of range [ 154.223600][ T9414] netlink: zone id is out of range [ 154.223608][ T9414] netlink: zone id is out of range [ 154.223615][ T9414] netlink: zone id is out of range [ 154.223624][ T9414] netlink: zone id is out of range [ 154.223632][ T9414] netlink: zone id is out of range [ 154.294713][ T9416] syz.3.1772 uses obsolete (PF_INET,SOCK_PACKET) [ 154.615822][ T9434] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 155.090138][ T9458] warning: `syz.4.1794' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.292591][ T9468] netlink: 'syz.4.1798': attribute type 1 has an invalid length. [ 155.677503][ T9488] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 156.857473][ T9564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1846'. [ 156.882601][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 157.214028][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1856'. [ 157.455452][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1859'. [ 157.558214][ T9599] netlink: 'syz.2.1863': attribute type 1 has an invalid length. [ 157.558249][ T9599] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1863'. [ 157.579719][ T9595] bond1: option xmit_hash_policy: invalid value (64) [ 157.609346][ T9595] bond1 (unregistering): Released all slaves [ 158.203698][ T9638] IPv6: NLM_F_CREATE should be specified when creating new route [ 158.203823][ T9638] netlink: 'syz.1.1882': attribute type 1 has an invalid length. [ 158.204236][ T9637] netlink: 516 bytes leftover after parsing attributes in process `syz.3.1879'. [ 158.422650][ T9645] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.632147][ T9663] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1892'. [ 158.976881][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 158.976951][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 159.123124][ T9688] netlink: 'syz.2.1903': attribute type 1 has an invalid length. [ 159.649170][ T9721] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.785877][ T9729] xt_socket: unknown flags 0xc [ 160.045580][ T9745] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1928'. [ 160.117517][ T9742] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 160.133143][ T9742] bond1 (unregistering): Released all slaves [ 160.317230][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 161.583464][ T9834] bond1: entered promiscuous mode [ 161.583537][ T9834] bond1: entered allmulticast mode [ 161.584024][ T9834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.952765][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 162.783584][ T9915] net_ratelimit: 6 callbacks suppressed [ 162.783606][ T9915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.912868][ T9923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2014'. [ 162.912892][ T9923] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2014'. [ 163.055906][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 163.055933][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2018'. [ 163.055981][ T9928] netlink: 'syz.2.2018': attribute type 3 has an invalid length. [ 163.417836][ T9952] xt_HMARK: proto mask must be zero with L3 mode [ 163.488672][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 163.843149][ T9978] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 163.944967][ T9984] xt_l2tp: invalid flags combination: 8 [ 164.098883][ T9996] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 164.412528][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 164.412552][T10014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2055'. [ 164.412591][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2055'. [ 164.860727][T10045] netlink: 'syz.2.2071': attribute type 3 has an invalid length. [ 164.935077][T10047] xt_recent: Unsupported userspace flags (000000b1) [ 165.092689][T10057] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 165.092873][T10057] xt_SECMARK: invalid mode: 9 [ 165.522098][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2092'. [ 165.872278][T10107] netlink: 'syz.1.2102': attribute type 5 has an invalid length. [ 166.141597][T10125] x_tables: duplicate underflow at hook 2 [ 166.216600][T10131] netlink: 'syz.1.2114': attribute type 1 has an invalid length. [ 166.373185][T10140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.905429][T10178] wg0 speed is unknown, defaulting to 1000 [ 166.905505][T10178] wg0 speed is unknown, defaulting to 1000 [ 166.908741][T10178] wg0 speed is unknown, defaulting to 1000 [ 166.940491][T10178] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 166.941465][T10178] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 166.941523][T10178] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 166.995089][T10178] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.046899][T10178] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.100715][T10178] wg0 speed is unknown, defaulting to 1000 [ 167.107305][T10178] wg0 speed is unknown, defaulting to 1000 [ 167.135855][T10178] wg0 speed is unknown, defaulting to 1000 [ 167.153186][T10178] wg0 speed is unknown, defaulting to 1000 [ 167.168328][T10178] wg0 speed is unknown, defaulting to 1000 [ 167.218609][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 167.538807][T10207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2151'. [ 167.633798][T10210] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2154'. [ 167.634140][T10210] 8021q: VLANs not supported on gre0 [ 167.711687][T10215] netlink: 'syz.4.2155': attribute type 11 has an invalid length. [ 167.781148][T10219] netlink: zone id is out of range [ 167.781165][T10219] netlink: zone id is out of range [ 167.781174][T10219] netlink: set zone limit has 4 unknown bytes [ 168.129773][ T1393] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.612760][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 168.612787][T10271] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2179'. [ 168.612807][T10271] netlink: 50 bytes leftover after parsing attributes in process `syz.0.2179'. [ 168.684412][T10274] netlink: 'syz.4.2180': attribute type 32 has an invalid length. [ 168.684436][T10274] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2180'. [ 168.857706][T10283] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2184'. [ 168.912978][T10287] openvswitch: netlink: IP tunnel TTL not specified. [ 168.913014][T10287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.028865][T10294] netlink: 3080 bytes leftover after parsing attributes in process `syz.3.2192'. [ 169.028890][T10294] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2192'. [ 169.423276][T10318] ip6t_srh: unknown srh invflags 4000 [ 169.852956][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 169.852986][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 169.853086][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2216'. [ 170.042724][T10360] netlink: 'syz.0.2221': attribute type 3 has an invalid length. [ 170.355096][T10381] netlink: 'syz.4.2234': attribute type 29 has an invalid length. [ 170.467369][T10385] xt_TCPMSS: Only works on TCP SYN packets [ 170.551522][T10392] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 171.023307][T10419] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 171.791195][T10468] openvswitch: netlink: Invalid VLAN frame [ 172.256416][T10493] bond1: Removing last ns target with arp_interval on [ 172.296880][T10500] xt_ecn: cannot match TCP bits for non-tcp packets [ 172.828228][T10538] openvswitch: netlink: EtherType 101 is less than min 600 [ 173.146673][T10557] openvswitch: netlink: Multiple metadata blocks provided [ 173.352780][T10568] netlink: 'syz.0.2327': attribute type 1 has an invalid length. [ 173.550231][T10582] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 173.759869][T10594] netlink: 'syz.0.2337': attribute type 28 has an invalid length. [ 173.759894][T10594] netlink: 'syz.0.2337': attribute type 3 has an invalid length. [ 173.759907][T10594] __nla_validate_parse: 4 callbacks suppressed [ 173.759920][T10594] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2337'. [ 174.154195][T10617] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2348'. [ 174.906853][T10669] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 175.114450][T10680] xt_TCPMSS: Only works on TCP SYN packets [ 175.342052][T10692] No such timeout policy "s" [ 175.342073][T10692] netlink: Failed to associated timeout policy 's' [ 175.617317][T10709] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2386'. [ 175.828169][T10720] IPv6: sit1: Disabled Multicast RS [ 175.880847][T10725] netlink: 'syz.4.2395': attribute type 23 has an invalid length. [ 176.194282][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2405'. [ 176.906403][T10791] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 177.071533][T10798] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2431'. [ 177.178808][T10808] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.253031][T10812] netlink: 'syz.2.2438': attribute type 4 has an invalid length. [ 178.055795][ T5623] Bluetooth: hci4: unexpected event 0x04 length: 17 > 10 [ 178.055821][ T5623] Bluetooth: unknown link type 128 [ 178.473444][T10880] xt_CT: No such helper "netbios-ns" [ 178.577077][T10889] netlink: 'syz.2.2473': attribute type 3 has an invalid length. [ 178.904298][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2487'. [ 178.904366][T10913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2487'. [ 178.945602][T10911] netlink: Conntrack attr has 8 unknown bytes [ 178.945642][T10911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.107646][T10925] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 179.379746][T10943] netlink: 3604 bytes leftover after parsing attributes in process `syz.4.2500'. [ 179.590488][T10952] Cannot find add_set index 0 as target [ 179.948269][T10977] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2517'. [ 180.081278][ T5623] Bluetooth: hci4: command tx timeout [ 180.087108][T10985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2523'. [ 180.391081][T11000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.537897][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2535'. [ 180.631589][T11020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 180.790295][T11029] netlink: 'syz.4.2542': attribute type 2 has an invalid length. [ 181.007254][T11044] netlink: 'syz.0.2548': attribute type 21 has an invalid length. [ 181.007283][T11044] IPv6: NLM_F_CREATE should be specified when creating new route [ 181.192730][T11054] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.381514][T11063] ip6gre1: entered promiscuous mode [ 181.472295][ T59] IPVS: starting estimator thread 0... [ 181.559849][T11073] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.661644][T11080] x_tables: duplicate entry at hook 1 [ 181.668834][T11083] netlink: 'syz.2.2569': attribute type 4 has an invalid length. [ 181.929386][T11098] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 181.947480][T11098] bond2 (unregistering): Released all slaves [ 182.569841][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 182.569864][T11141] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2594'. [ 182.718772][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 182.854419][T11106] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.687324][T11202] netlink: 'syz.1.2626': attribute type 2 has an invalid length. [ 184.088095][T11216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.899286][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2652'. [ 184.928469][T11256] netlink: 'syz.3.2651': attribute type 1 has an invalid length. [ 184.928491][T11256] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2651'. [ 185.340327][T11274] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2660'. [ 185.340354][T11274] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2660'. [ 185.381025][T11277] x_tables: unsorted entry at hook 4 [ 185.475868][T11274] veth3: entered promiscuous mode [ 186.065319][T11306] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2675'. [ 186.564196][T11327] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2686'. [ 186.564225][T11327] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2686'. [ 187.375190][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2704'. [ 187.375282][T11364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.375294][T11364] IPv6: NLM_F_CREATE should be set when creating new route [ 187.375326][T11364] IPv6: NLM_F_CREATE should be set when creating new route [ 187.558558][T11370] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 187.558596][T11370] netlink: 'syz.0.2707': attribute type 1 has an invalid length. [ 187.945986][T11384] xt_l2tp: missing protocol rule (udp|l2tpip) [ 188.064006][T11387] geneve2: entered allmulticast mode [ 188.364686][T11403] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 188.553877][T11408] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ [ 188.918189][T11423] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 189.175347][T11433] netlink: Unknown conntrack attr (0) [ 189.524786][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 189.754778][T11459] netlink: 'syz.2.2751': attribute type 12 has an invalid length. [ 189.979193][T11459] bond2: option primary_reselect: invalid value (255) [ 190.057967][T11459] bond2 (unregistering): Released all slaves [ 191.065948][T11508] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 191.620345][T11531] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 191.620846][T11531] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 191.829791][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2789'. [ 192.564869][T11568] netlink: 'syz.2.2804': attribute type 9 has an invalid length. [ 193.341935][T11592] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 193.578068][T11607] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2824'. [ 193.590148][T11605] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2821'. [ 193.702961][T11597] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 193.811756][T11597] bond2 (unregistering): Released all slaves [ 194.243849][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.244105][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.994276][T11663] netlink: 'syz.2.2850': attribute type 6 has an invalid length. [ 195.928782][T11677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 195.948690][T11677] ip6gre1: left promiscuous mode [ 196.012515][T11687] netlink: 'syz.2.2863': attribute type 12 has an invalid length. [ 196.030556][ T1368] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 196.174305][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.267514][T11698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.133965][T11732] netlink: 'syz.4.2885': attribute type 8 has an invalid length. [ 197.186482][T11736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.203168][T11738] x_tables: duplicate underflow at hook 1 [ 197.325761][T11742] netlink: 872 bytes leftover after parsing attributes in process `syz.1.2891'. [ 198.485650][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'. [ 200.038049][T11850] netlink: 'syz.2.2944': attribute type 21 has an invalid length. [ 200.038078][T11850] IPv6: NLM_F_CREATE should be specified when creating new route [ 200.038163][T11850] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 200.038174][T11850] IPv6: NLM_F_CREATE should be set when creating new route [ 200.038217][T11850] IPv6: NLM_F_CREATE should be set when creating new route [ 200.038243][T11850] IPv6: NLM_F_CREATE should be set when creating new route [ 200.249832][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 200.417458][T11860] ieee802154 phy0 wpan0: encryption failed: -90 [ 200.759467][T11874] netlink: 'syz.3.2956': attribute type 3 has an invalid length. [ 202.021340][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2976'. [ 202.049442][T11925] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2978'. [ 202.685070][T11940] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.136963][T11954] veth3: entered promiscuous mode [ 203.136988][T11954] veth3: entered allmulticast mode [ 203.439029][T11968] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 (while UP) [ 203.834232][T11984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3007'. [ 204.080238][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3014'. [ 204.679414][T12017] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 205.017903][T12036] netlink: 'syz.3.3031': attribute type 4 has an invalid length. [ 205.167760][T12041] netlink: 'syz.1.3035': attribute type 11 has an invalid length. [ 205.167803][T12041] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3035'. [ 205.323508][T12049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3038'. [ 205.928626][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3047'. [ 206.033452][T12074] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3050'. [ 207.148882][T12118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3070'. [ 207.148911][T12118] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3070'. [ 207.409315][T12128] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 207.438744][T12128] bond1 (unregistering): Released all slaves [ 207.599684][T12137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.141392][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 208.141433][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3089'. [ 208.665264][T12178] : renamed from bond_slave_0 (while UP) [ 208.878852][T12181] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 208.922757][T12186] netlink: 'syz.1.3104': attribute type 1 has an invalid length. [ 208.969816][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 209.186789][T12192] x_tables: unsorted underflow at hook 3 [ 209.545550][T12206] __nla_validate_parse: 2 callbacks suppressed [ 209.545570][T12206] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3115'. [ 210.251552][T12230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.251579][T12230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.273569][T12233] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 210.306394][T12230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.306420][T12230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.826053][T12249] netlink: 'syz.4.3135': attribute type 6 has an invalid length. [ 211.686420][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 211.686478][ T5623] Bluetooth: hci1: command 0x0406 tx timeout [ 211.839482][T12287] hsr0: entered allmulticast mode [ 211.839508][T12287] hsr_slave_0: entered allmulticast mode [ 211.839526][T12287] hsr_slave_1: entered allmulticast mode [ 212.069334][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3156'. [ 212.179204][T12302] openvswitch: netlink: IPv4 tun info is not correct [ 213.209121][T12345] netlink: 'syz.3.3179': attribute type 21 has an invalid length. [ 213.209225][T12345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3179'. [ 213.210474][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 213.811489][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3193'. [ 214.524575][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 214.752034][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3204'. [ 214.917005][T12416] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 215.420835][T12442] sctp: [Deprecated]: syz.4.3223 (pid 12442) Use of int in maxseg socket option. [ 215.420835][T12442] Use struct sctp_assoc_value instead [ 215.697042][T12455] xt_HMARK: spi-set and port-set can't be combined [ 217.035253][T12497] netlink: 'syz.2.3250': attribute type 4 has an invalid length. [ 217.275233][T12507] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.445170][T12515] xt_CT: You must specify a L4 protocol and not use inversions on it [ 217.882021][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.159441][T12549] netlink: 768 bytes leftover after parsing attributes in process `syz.0.3276'. [ 218.375433][T12559] netlink: 'syz.0.3282': attribute type 21 has an invalid length. [ 218.375521][T12559] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3282'. [ 218.487006][T12567] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3284'. [ 218.603728][T12571] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.062024][T12591] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 219.650964][T12619] Cannot find add_set index 4 as target [ 220.520091][T12653] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3326'. [ 220.522235][T12653] 0·: renamed from hsr0 (while UP) [ 220.546487][T12653] 0·: entered allmulticast mode [ 220.546513][T12653] hsr_slave_0: entered allmulticast mode [ 220.546776][T12653] hsr_slave_1: entered allmulticast mode [ 220.560989][T12653] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 220.701527][T12657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3331'. [ 220.759633][T12659] netlink: 'syz.0.3329': attribute type 24 has an invalid length. [ 220.858398][T12635] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 220.937705][T12665] bond2: invalid ARP target 0.0.0.0 specified for addition [ 220.937738][T12665] bond2: option arp_ip_target: invalid value (0) [ 220.970638][T12665] bond2 (unregistering): Released all slaves [ 221.069268][T12672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3336'. [ 221.196812][T12676] netlink: 'syz.4.3337': attribute type 1 has an invalid length. [ 221.196837][T12676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3337'. [ 221.196874][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3337'. [ 221.552246][T12692] netlink: 'syz.3.3345': attribute type 10 has an invalid length. [ 221.552543][T12692] veth1_macvtap: left promiscuous mode [ 221.555378][T12692] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 221.568246][T12694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.698580][T12698] netlink: 'syz.4.3350': attribute type 3 has an invalid length. [ 222.298389][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 222.725486][T12745] netlink: 'syz.0.3370': attribute type 3 has an invalid length. [ 223.389142][T12776] ipt_REJECT: ECHOREPLY no longer supported. [ 223.520010][T12782] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 223.553857][T12780] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 223.553904][T12780] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 223.553926][T12780] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 223.685133][T12788] netlink: 'syz.1.3387': attribute type 3 has an invalid length. [ 224.075724][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'. [ 224.075753][T12804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3396'. [ 224.259399][T12808] xt_CT: No such helper "pptp" [ 225.175483][T12849] netlink: 'syz.1.3418': attribute type 1 has an invalid length. [ 225.175508][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 225.175524][T12849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 225.423673][T12853] gre1: entered promiscuous mode [ 225.423697][T12853] gre1: entered allmulticast mode [ 225.698610][T12871] ieee802154 phy0 wpan0: encryption failed: -22 [ 226.171994][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3438'. [ 226.172077][T12889] openvswitch: netlink: nsh attr 94 is out of range max 3 [ 226.520819][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3445'. [ 226.713433][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3450'. [ 226.713464][T12912] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3450'. [ 226.879847][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 227.835911][T12964] netlink: 'syz.4.3475': attribute type 11 has an invalid length. [ 227.835936][T12964] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3475'. [ 228.225379][T12979] openvswitch: netlink: EtherType 500 is less than min 600 [ 228.542243][T12991] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.017068][T13014] netlink: 'syz.2.3498': attribute type 64 has an invalid length. [ 229.986307][T13045] xt_CT: No such helper "snmp_trap" [ 230.064441][T13053] netlink: 'syz.2.3515': attribute type 3 has an invalid length. [ 230.064464][T13053] netlink: 'syz.2.3515': attribute type 1 has an invalid length. [ 231.201398][T13093] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.391394][T13100] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 231.714996][T13111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.715017][T13111] IPv6: NLM_F_CREATE should be set when creating new route [ 232.123212][T13117] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3546'. [ 232.123240][T13117] veth0_to_bond: default FDB implementation only supports local addresses [ 232.156886][T13119] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3548'. [ 233.094379][T13147] netlink: Conntrack attr has 1 unknown bytes [ 233.094417][T13147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.125889][T13145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.058960][T13173] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 234.099291][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3574'. [ 234.979156][T13203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3589'. [ 235.116581][ T1368] IPVS: starting estimator thread 0... [ 235.240523][T13212] IPVS: using max 27 ests per chain, 64800 per kthread [ 235.616108][T13224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.655091][T13222] set match dimension is over the limit! [ 235.820069][T13226] openvswitch: netlink: Duplicate key (type 6). [ 235.948321][T13232] netlink: 'syz.2.3603': attribute type 2 has an invalid length. [ 236.620327][T13252] netlink: 'syz.0.3614': attribute type 21 has an invalid length. [ 236.620354][T13252] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3614'. [ 236.620429][T13252] netlink: 'syz.0.3614': attribute type 5 has an invalid length. [ 236.620454][T13252] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3614'. [ 237.066347][T13262] ieee802154 phy0 wpan0: encryption failed: -22 [ 238.167984][T13299] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3637'. [ 238.683222][T13316] netlink: 'syz.1.3646': attribute type 1 has an invalid length. [ 238.683247][T13316] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3646'. [ 238.683284][T13316] NCSI netlink: No device for ifindex 0 [ 239.148157][T13331] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.412979][T13338] netlink: 'syz.3.3656': attribute type 4 has an invalid length. [ 240.058096][T13365] netlink: 'syz.2.3670': attribute type 23 has an invalid length. [ 240.247458][T13373] netlink: 'syz.0.3674': attribute type 3 has an invalid length. [ 240.907171][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3689'. [ 240.943416][T13402] veth4: entered promiscuous mode [ 240.943441][T13402] veth4: entered allmulticast mode [ 241.394662][T13421] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3697'. [ 241.615694][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3701'. [ 241.615992][T13429] openvswitch: netlink: Message has 4 unknown bytes. [ 241.938073][T13441] netlink: 'syz.1.3707': attribute type 2 has an invalid length. [ 242.540374][T13469] openvswitch: netlink: Multiple metadata blocks provided [ 242.590287][T13472] xt_hashlimit: invalid interval [ 243.497425][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3744'. [ 243.512874][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3745'. [ 243.806513][T13526] netlink: 'syz.0.3747': attribute type 4 has an invalid length. [ 243.854703][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3751'. [ 244.440346][T13546] ipt_REJECT: TCP_RESET invalid for non-tcp [ 244.522774][T13551] ebt_among: dst integrity fail: 300 [ 244.784347][T13561] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3766'. [ 244.784622][T13561] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3766'. [ 245.526187][T13590] nft_compat: unsupported protocol 0 [ 245.874207][T13599] netlink: 404 bytes leftover after parsing attributes in process `syz.4.3785'. [ 245.874235][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'. [ 245.874255][T13599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3785'. [ 245.874271][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3785'. [ 245.947979][T13603] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3787'. [ 246.003291][T13603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.146895][T13603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.187076][T13603] bond0 (unregistering): Released all slaves [ 246.624854][T13623] openvswitch: netlink: Missing key (keys=40, expected=100) [ 246.670394][T13627] ebt_among: wrong size: 2080 against expected 1044, rounded to 1048 [ 247.198518][T13649] ipt_ah: unknown flags FF [ 247.424618][T13647] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.384745][T13700] Cannot find del_set index 4 as target [ 248.776373][T13716] netlink: 'syz.4.3841': attribute type 21 has an invalid length. [ 248.832549][T13716] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 248.835555][T13716] bond1 (unregistering): Released all slaves [ 249.193139][T13731] __nla_validate_parse: 1 callbacks suppressed [ 249.193161][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3848'. [ 249.395582][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'. [ 250.150298][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 250.554813][T13784] bridge_slave_0: left allmulticast mode [ 250.554842][T13784] bridge_slave_0: left promiscuous mode [ 250.571857][T13784] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.623140][T13784] bridge_slave_1: left allmulticast mode [ 250.623171][T13784] bridge_slave_1: left promiscuous mode [ 250.623422][T13784] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.684248][T13784] bond0: (slave bond_slave_0): Releasing backup interface [ 250.727734][T13784] bond0: (slave bond_slave_1): Releasing backup interface [ 250.835112][T13784] team0: Port device team_slave_0 removed [ 250.904527][T13784] team0: Port device team_slave_1 removed [ 250.907413][T13784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.907438][T13784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.938498][T13784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.938523][T13784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.970729][T13784] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.197449][T13798] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 251.403768][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'. [ 251.403813][T13805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3883'. [ 251.624557][T13811] ebt_among: dst integrity fail: 301 [ 251.691533][T13817] tc_dump_action: action bad kind [ 251.782513][T13814] xt_connbytes: Forcing CT accounting to be enabled [ 251.889800][T13820] lo: entered promiscuous mode [ 251.889990][T13820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.921838][T13821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3891'. [ 252.137919][T13827] geneve2: entered promiscuous mode [ 252.138128][T13827] geneve2: entered allmulticast mode [ 252.235464][T13833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3897'. [ 252.235499][T13833] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 252.467612][T13843] netlink: 'syz.2.3903': attribute type 7 has an invalid length. [ 252.796257][T13858] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3908'. [ 252.804480][T13858] gre0: Master is either lo or non-ether device [ 253.115348][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3914'. [ 253.560683][T13893] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 253.796458][T13899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3927'. [ 254.098776][T13907] netlink: 'syz.2.3931': attribute type 21 has an invalid length. [ 254.255571][T13909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3932'. [ 254.314125][T13912] smbdirect: ib_dev[rxe0] renamed to [syz2] [ 255.028712][T13926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 255.105190][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.105312][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.119472][ T1393] ip6_tunnel:  xmit: Local address not yet configured! [ 255.193194][ T1162] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.193253][ T1162] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.193287][ T1162] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.193319][ T1162] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.405040][T13942] netlink: 'syz.0.3949': attribute type 10 has an invalid length. [ 255.438595][T13942] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.458495][T13942] bond0: (slave team0): Enslaving as an active interface with an up link [ 255.683003][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.683245][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.735642][T13956] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3954'. [ 255.931448][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3958'. [ 256.039357][T13964] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3959'. [ 256.064569][T13966] dvmrp1: entered allmulticast mode [ 256.211937][T13972] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3962'. [ 256.746911][T13993] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3971'. [ 257.027810][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3977'. [ 257.622015][T14028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3990'. [ 258.002512][T14040] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.646170][T14055] x_tables: duplicate underflow at hook 4 [ 258.880006][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 259.309441][ T49] IPVS: starting estimator thread 0... [ 259.400442][T14082] IPVS: using max 23 ests per chain, 55200 per kthread [ 259.586730][T14096] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 260.048150][T14110] bond0: Error: Cannot enslave bond to itself. [ 260.212221][T14112] bond3 (unregistering): Released all slaves [ 260.744143][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.746178][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.746825][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.784940][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.789540][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.810594][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 261.104644][T14145] netlink: 'syz.0.4042': attribute type 2 has an invalid length. [ 261.648400][T14168] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 261.648424][T14168] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4050'. [ 261.733504][T14129] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.024981][T14129] wg0 speed is unknown, defaulting to 1000 [ 262.097336][T14177] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 262.097367][T14177] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 262.391374][T14188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.690712][T14129] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.690900][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.691039][T14129] bridge_slave_0: entered allmulticast mode [ 262.693133][T14129] bridge_slave_0: entered promiscuous mode [ 262.725168][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.725348][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.725502][T14129] bridge_slave_1: entered allmulticast mode [ 262.727831][T14129] bridge_slave_1: entered promiscuous mode [ 262.793091][T14129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.796288][T14129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.855634][T14129] team0: Port device team_slave_0 added [ 262.858657][T14129] team0: Port device team_slave_1 added [ 262.879760][ T52] Bluetooth: hci5: command tx timeout [ 262.915478][T14129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.915495][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.915522][T14129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.918586][T14129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.918598][T14129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.918621][T14129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.410804][T14129] hsr_slave_0: entered promiscuous mode [ 263.414714][T14129] hsr_slave_1: entered promiscuous mode [ 263.416496][T14129] debugfs: 'hsr0' already exists in 'hsr' [ 263.416517][T14129] Cannot create hsr debugfs directory [ 263.810955][T14219] netlink: 'syz.0.4073': attribute type 30 has an invalid length. [ 263.908146][T14219] bond2: option arp_missed_max: invalid value (0) [ 263.908173][T14219] bond2: option arp_missed_max: allowed values 1 - 255 [ 263.936276][T14219] bond2 (unregistering): Released all slaves [ 264.312734][T14129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 264.337496][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.350736][T14129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 264.381043][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.392806][T14129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 264.433488][T14238] netlink: 'syz.4.4083': attribute type 9 has an invalid length. [ 264.458573][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.470504][T14129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.521196][T14129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.730328][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 264.965638][ T52] Bluetooth: hci5: command tx timeout [ 265.024569][T14129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.073678][T14129] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.114096][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.114210][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.171440][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.171549][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.641969][T14258] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 265.808597][T14283] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 266.188241][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4106'. [ 266.559783][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 266.579310][T14317] xt_l2tp: v2 doesn't support IP mode [ 266.668390][T14323] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4116'. [ 267.014846][T14129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.040742][ T52] Bluetooth: hci5: command tx timeout [ 267.426555][T14350] xt_LOG: level 8 >= 8 [ 267.698279][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4129'. [ 267.698322][T14359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.857301][T14129] veth0_vlan: entered promiscuous mode [ 267.881802][T14129] veth1_vlan: entered promiscuous mode [ 267.916517][T14129] veth0_macvtap: entered promiscuous mode [ 267.993154][T14129] veth1_macvtap: entered promiscuous mode [ 268.006706][T14365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4132'. [ 268.070617][T14129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.130906][T14129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.191955][ T1393] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.230771][ T1393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.237582][ T32] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.353158][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.354088][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.354108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.574005][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.574031][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.119917][ T52] Bluetooth: hci5: command tx timeout [ 269.601470][T14411] netlink: 'syz.0.4152': attribute type 26 has an invalid length. [ 269.720848][T14417] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 269.845974][T14419] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 269.845999][T14419] netlink: 'syz.0.4156': attribute type 2 has an invalid length. [ 270.108352][T14427] geneve0: entered allmulticast mode [ 270.230158][T14430] xt_CONNSECMARK: invalid mode: 0 [ 270.275239][T14434] ip6t_srh: unknown srh match flags 4000 [ 270.479389][T14438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4165'. [ 270.733122][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.734878][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.735543][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.736543][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.737171][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.779965][T14447] ip6t_srh: unknown srh match flags 5F28 [ 271.446024][T14470] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'. [ 271.794142][T14484] netlink: 'syz.4.4185': attribute type 10 has an invalid length. [ 271.878890][T14484] team0: Device wg2 is of different type [ 272.078910][T14494] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4190'. [ 272.523395][T14444] rxe_eth0 speed is unknown, defaulting to 1000 [ 272.583388][T14510] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.799904][ T52] Bluetooth: hci6: command tx timeout [ 273.127512][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4201'. [ 273.127552][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4201'. [ 273.129530][T14444] wg0 speed is unknown, defaulting to 1000 [ 273.691101][T14536] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4210'. [ 273.696061][T14537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.775637][T14566] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4221'. [ 274.834777][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.834961][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.835121][T14444] bridge_slave_0: entered allmulticast mode [ 274.836980][T14444] bridge_slave_0: entered promiscuous mode [ 274.868986][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.869172][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.869350][T14444] bridge_slave_1: entered allmulticast mode [ 274.884957][ T52] Bluetooth: hci6: command tx timeout [ 274.898307][T14444] bridge_slave_1: entered promiscuous mode [ 274.980370][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.985078][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.051831][T14444] team0: Port device team_slave_0 added [ 275.054977][T14444] team0: Port device team_slave_1 added [ 275.097955][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.097972][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.097999][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.151203][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.151220][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.151247][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.440698][T14444] hsr_slave_0: entered promiscuous mode [ 275.446559][T14444] hsr_slave_1: entered promiscuous mode [ 275.448446][T14444] debugfs: 'hsr0' already exists in 'hsr' [ 275.448467][T14444] Cannot create hsr debugfs directory [ 276.606708][T14615] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4245'. [ 276.750275][T14621] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 276.935009][T14630] xt_hashlimit: size too large, truncated to 1048576 [ 276.959805][ T52] Bluetooth: hci6: command tx timeout [ 277.010544][T14444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 277.058437][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 277.073293][T14444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 277.106360][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 277.124895][T14444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 277.167536][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 277.178251][T14444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 277.192788][T14444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 277.578327][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.653720][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.686634][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.686743][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.755928][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.756035][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.685665][T14683] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4274'. [ 279.039838][ T52] Bluetooth: hci6: command tx timeout [ 279.557312][T14715] netlink: 'syz.4.4287': attribute type 6 has an invalid length. [ 279.929748][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.914653][T14444] veth0_vlan: entered promiscuous mode [ 280.934287][T14444] veth1_vlan: entered promiscuous mode [ 281.270749][T14444] veth0_macvtap: entered promiscuous mode [ 281.329770][T14444] veth1_macvtap: entered promiscuous mode [ 281.451338][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.507051][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.606490][T14778] ip6t_hbh: unknown flags 38 [ 281.798866][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.801082][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.811492][ T1368] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.813857][ T1393] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.920737][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 282.076021][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.076046][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.315636][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.315660][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.786456][T14815] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4161'. [ 283.913933][T14862] netlink: 'syz.5.4353': attribute type 16 has an invalid length. [ 283.913959][T14862] netlink: 'syz.5.4353': attribute type 3 has an invalid length. [ 283.913974][T14862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4353'. [ 284.182265][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 284.182300][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 284.182335][T14867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4355'. [ 284.307060][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4358'. [ 284.781948][T14891] netlink: 'syz.5.4364': attribute type 1 has an invalid length. [ 285.295502][T14915] netlink: 'syz.6.4377': attribute type 2 has an invalid length. [ 285.295528][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4377'. [ 285.458807][T14922] netdevsim netdevsim5: Direct firmware load for ÿ failed with error -2 [ 285.458838][T14922] netdevsim netdevsim5: Falling back to sysfs fallback for: ÿ [ 285.877215][T14942] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4387'. [ 286.041454][T14948] unsupported nlmsg_type 40 [ 286.577308][T14969] netlink: zone id is out of range [ 286.577330][T14969] netlink: del zone limit has 4 unknown bytes [ 286.601009][T14970] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.894301][T14982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.244544][T14993] netlink: 'syz.0.4414': attribute type 7 has an invalid length. [ 287.244569][T14993] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4414'. [ 287.398660][T14999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4417'. [ 288.128706][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4430'. [ 288.445065][T15036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.728834][T15048] openvswitch: netlink: Flow key attribute not present in set flow. [ 289.157184][T15060] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4448'. [ 289.173802][T15063] No such timeout policy "syz0" [ 289.903471][T15089] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4462'. [ 290.098594][T15097] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 290.153816][ T1014] IPVS: starting estimator thread 0... [ 290.226285][T15104] x_tables: unsorted underflow at hook 4 [ 290.280494][T15100] IPVS: using max 25 ests per chain, 60000 per kthread [ 290.451586][T15113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4471'. [ 290.701844][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 290.801114][T15127] xt_l2tp: v2 doesn't support IP mode [ 291.135935][T15138] openvswitch: netlink: IP tunnel dst address not specified [ 291.296184][T15142] netlink: 'syz.0.4487': attribute type 2 has an invalid length. [ 291.360400][T15144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4488'. [ 293.491419][T15186] netlink: 'syz.1.4508': attribute type 8 has an invalid length. [ 294.203662][T15199] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 295.851995][T15214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4522'. [ 297.371551][T15226] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 297.717728][T15230] netlink: 'syz.6.4530': attribute type 3 has an invalid length. [ 297.717754][T15230] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4530'. [ 297.902362][T15234] netlink: 'syz.0.4531': attribute type 9 has an invalid length. [ 297.902387][T15234] netlink: 'syz.0.4531': attribute type 4 has an invalid length. [ 298.708958][T15247] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 298.734142][T15246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4537'. [ 300.882481][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4556'. [ 302.305213][T15308] ieee802154 phy0 wpan0: encryption failed: -22 [ 302.662765][ T5624] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.664324][ T5624] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 302.665765][ T5624] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 302.668453][ T5624] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 302.715736][ T5624] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.618672][T15351] netlink: 'syz.0.4585': attribute type 21 has an invalid length. [ 304.688082][T15354] 8021q: VLANs not supported on lo [ 304.801385][ T5624] Bluetooth: hci7: command tx timeout [ 305.160950][T15310] rxe_eth0 speed is unknown, defaulting to 1000 [ 306.893605][ T52] Bluetooth: hci7: command tx timeout [ 308.013780][T15310] wg0 speed is unknown, defaulting to 1000 [ 308.274788][T15384] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4599'. [ 308.969685][ T52] Bluetooth: hci7: command tx timeout [ 308.969721][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 310.011230][T15410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4609'. [ 310.401970][T15413] ip_tables: iptables: counters copy to user failed while replacing table [ 310.832559][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'. [ 310.891534][T15310] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.892038][T15310] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.924011][T15310] bridge_slave_0: entered allmulticast mode [ 310.927517][T15310] bridge_slave_0: entered promiscuous mode [ 311.045750][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.046253][T15310] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.046615][T15310] bridge_slave_1: entered allmulticast mode [ 311.057651][T15310] bridge_slave_1: entered promiscuous mode [ 311.062512][ T5624] Bluetooth: hci7: command tx timeout [ 311.516827][T15425] netlink: 'syz.1.4614': attribute type 12 has an invalid length. [ 311.600337][T15310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.645882][T15310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.672421][T15428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4615'. [ 312.331159][T15310] team0: Port device team_slave_0 added [ 312.378636][T15310] team0: Port device team_slave_1 added [ 312.578920][T15310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.578942][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.578972][T15310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.607742][T15310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.607790][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.607872][T15310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.420405][T15310] hsr_slave_0: entered promiscuous mode [ 313.432042][T15310] hsr_slave_1: entered promiscuous mode [ 313.436055][T15310] debugfs: 'hsr0' already exists in 'hsr' [ 313.436075][T15310] Cannot create hsr debugfs directory [ 313.920234][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 314.805381][T15461] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4629'. [ 315.321754][T15310] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 315.447199][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.480933][T15310] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 315.568950][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.606087][T15310] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 315.707054][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.719572][T15310] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 315.750180][T15310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.156499][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.156761][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.661623][T15310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.267499][T15310] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.380071][ T4936] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 318.381804][ T4936] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 318.385398][ T4936] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 318.387576][ T4936] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 318.388968][ T4936] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 318.753252][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.753363][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.950604][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.950713][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.952747][T15310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.482941][ T5624] Bluetooth: hci8: command tx timeout [ 321.230284][T15519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4648'. [ 321.230319][T15519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4648'. [ 321.944397][T15527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4650'. [ 321.944426][T15527] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4650'. [ 321.944443][T15527] netlink: 'syz.4.4650': attribute type 6 has an invalid length. [ 321.944457][T15527] netlink: 'syz.4.4650': attribute type 5 has an invalid length. [ 321.944470][T15527] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4650'. [ 322.579645][ T5624] Bluetooth: hci8: command tx timeout [ 322.746736][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4653'. [ 323.392071][T15543] Zero length message leads to an empty skb [ 323.688129][T15491] rxe_eth0 speed is unknown, defaulting to 1000 [ 324.639845][ T5624] Bluetooth: hci8: command tx timeout [ 325.286868][T15310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.346440][T15491] wg0 speed is unknown, defaulting to 1000 [ 326.722521][ T5624] Bluetooth: hci8: command tx timeout [ 327.369965][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 328.669262][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.677562][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.677907][T15491] bridge_slave_0: entered allmulticast mode [ 328.793597][T15491] bridge_slave_0: entered promiscuous mode [ 329.044778][T15491] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.045283][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.045667][T15491] bridge_slave_1: entered allmulticast mode [ 329.120657][T15491] bridge_slave_1: entered promiscuous mode [ 329.715474][T15491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.869744][T15491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.989829][T15310] veth0_vlan: entered promiscuous mode [ 330.908978][T15491] team0: Port device team_slave_0 added [ 330.933428][T15491] team0: Port device team_slave_1 added [ 331.164700][T15491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.164720][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.164748][T15491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.232881][T15491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.232897][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.232920][T15491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.552415][T15310] veth1_vlan: entered promiscuous mode [ 332.112604][T15491] hsr_slave_0: entered promiscuous mode [ 332.117757][T15491] hsr_slave_1: entered promiscuous mode [ 332.142115][T15491] debugfs: 'hsr0' already exists in 'hsr' [ 332.142140][T15491] Cannot create hsr debugfs directory [ 332.810886][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4686'. [ 333.360919][T15631] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4687'. [ 333.895524][T15310] veth0_macvtap: entered promiscuous mode [ 334.044968][T15496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.047345][T15496] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.062188][ T5744] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.316985][T15310] veth1_macvtap: entered promiscuous mode [ 334.562242][ T30] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 334.720798][ T988] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 335.042758][T15310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.127009][T15310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.275472][ T1393] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.290660][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.290728][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.290767][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.863626][T15491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 336.923288][T15656] Bluetooth: MGMT ver 1.23 [ 337.004818][T15491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.007092][T15491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 337.108754][T15491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.361264][T15491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 337.564591][T15491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.930214][T15491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.131353][T15491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.240353][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 338.249176][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.249199][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.113873][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.113898][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.169005][T15491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.598011][T15491] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.797986][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.798104][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.022374][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.022491][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.117139][T15704] ip_tables: iptables: counters copy to user failed while replacing table [ 345.613087][T15720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4720'. [ 346.559779][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 348.412455][T15491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.778183][T15782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4743'. [ 353.756591][T15491] veth0_vlan: entered promiscuous mode [ 353.826973][T15491] veth1_vlan: entered promiscuous mode [ 355.120729][T15797] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4750'. [ 355.562153][T15491] veth0_macvtap: entered promiscuous mode [ 355.672415][T15491] veth1_macvtap: entered promiscuous mode [ 356.031638][T15491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.157740][T15803] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 356.157771][T15803] nbd: error processing sock list [ 356.216218][T15491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.264714][ T1162] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.280177][T15496] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.280232][T15496] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.451613][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.738695][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.738719][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.984019][T15825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4762'. [ 358.076931][T15825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.143622][T15825] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4762'. [ 358.590156][T15496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.590181][T15496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.081084][T15841] Bluetooth: MGMT ver 1.23 [ 361.650621][T15854] sctp: [Deprecated]: syz.4.4775 (pid 15854) Use of int in max_burst socket option deprecated. [ 361.650621][T15854] Use struct sctp_assoc_value instead [ 362.559818][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 363.075527][T15866] Bluetooth: hci0: unsupported parameter 5135 [ 363.075552][T15866] Bluetooth: hci0: unsupported parameter 8192 [ 363.075593][T15866] Bluetooth: hci0: unsupported parameter 5135 [ 363.075608][T15866] Bluetooth: hci0: unsupported parameter 8192 [ 363.833806][T15869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4782'. [ 365.302695][T15886] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4787'. [ 369.969565][ C0] sched: DL replenish lagged too much [ 378.622160][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.622412][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.811265][T15940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4810'. [ 383.684129][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 385.775060][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 394.560096][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 394.978913][T15975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'. [ 395.258429][T15976] netlink: 'syz.4.4825': attribute type 29 has an invalid length. [ 395.258455][T15976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 395.405773][T15977] netlink: 'syz.4.4825': attribute type 29 has an invalid length. [ 395.405800][T15977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4825'. [ 395.999945][ T52] Bluetooth: hci6: command 0x0406 tx timeout [ 396.462107][T15985] netlink: Unknown conntrack attr (type=205, max=9) [ 396.468725][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 401.371738][T16015] netlink: 'syz.1.4842': attribute type 1 has an invalid length. [ 405.440734][ T33] INFO: task syz.2.3943:13936 blocked for more than 143 seconds. [ 405.440763][ T33] Not tainted syzkaller #0 [ 405.440775][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.440786][ T33] task:syz.2.3943 state:D stack:27040 pid:13936 tgid:13935 ppid:5618 task_flags:0x400140 flags:0x00080002 [ 405.440872][ T33] Call Trace: [ 405.440953][ T33] [ 405.441026][ T33] __schedule+0x17db/0x58f0 [ 405.441323][ T33] ? __pfx___schedule+0x10/0x10 [ 405.441389][ T33] ? schedule+0x90/0x2b0 [ 405.441417][ T33] schedule+0x164/0x2b0 [ 405.441445][ T33] schedule_preempt_disabled+0x13/0x30 [ 405.444393][ T33] __mutex_lock+0x7c1/0x1550 [ 405.444437][ T33] ? __mutex_lock+0x5d4/0x1550 [ 405.444469][ T33] ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 405.444635][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 405.444681][ T33] ? net_generic+0x1e/0x240 [ 405.444711][ T33] ? net_generic+0x1e/0x240 [ 405.444749][ T33] nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 405.444784][ T33] ? __kmalloc_noprof+0x36b/0x720 [ 405.444840][ T33] ? __asan_memset+0x22/0x50 [ 405.444866][ T33] ? __nla_validate_parse+0x2429/0x2d50 [ 405.444947][ T33] ? do_syscall_64+0x166/0x520 [ 405.445002][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.445084][ T33] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 405.445135][ T33] ? __pfx___nla_validate_parse+0x10/0x10 [ 405.445177][ T33] ? rcu_is_watching+0x16/0xb0 [ 405.445230][ T33] ? trace_kmalloc+0x2a/0xf0 [ 405.445259][ T33] ? __kmalloc_noprof+0x38c/0x720 [ 405.445289][ T33] ? __nla_parse+0x40/0x60 [ 405.445315][ T33] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 405.445431][ T33] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 405.445478][ T33] genl_family_rcv_msg_doit+0x233/0x340 [ 405.445524][ T33] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 SYZFAIL: failed to recv rpc [ 405.445575][ T33] ? bpf_lsm_capable+0x9/0x20 [ 405.445620][ T33] ? security_capable+0x7e/0x2c0 [ 405.445731][ T33] genl_rcv_msg+0x614/0x7a0 [ 405.445775][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.445811][ T33] ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10 [ 405.445851][ T33] ? __asan_memcpy+0x40/0x70 [ 405.445876][ T33] ? __skb_clone+0x5c/0x6c0 [ 405.445964][ T33] netlink_rcv_skb+0x226/0x4a0 [ 405.445994][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 405.446039][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 405.446086][ T33] ? down_read+0x2be/0x330 [ 405.446120][ T33] genl_rcv+0x28/0x40 [ 405.446153][ T33] netlink_unicast+0x8ef/0xa80 [ 405.446199][ T33] netlink_sendmsg+0x813/0xb40 [ 405.446241][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.446280][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 405.446361][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.446389][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 405.446473][ T33] ____sys_sendmsg+0x54e/0x850 [ 405.446506][ T33] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.446543][ T33] ? import_iovec+0x73/0xa0 [ 405.446641][ T33] ___sys_sendmsg+0x2a5/0x360 [ 405.446665][ T33] ? __lock_acquire+0x747/0x2de0 [ 405.446708][ T33] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.446737][ T33] ? futex_wait+0x2a2/0x390 [ 405.446806][ T33] ? __fget_files+0x2a/0x420 [ 405.446838][ T33] ? __fget_files+0x3a2/0x420 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 405.446872][ T33] __x64_sys_sendmsg+0x1b1/0x290 [ 405.446902][ T33] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 405.446953][ T33] do_syscall_64+0x166/0x520 [ 405.446980][ T33] ? trace_irq_disable+0x3b/0x140 [ 405.447012][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.447043][ T33] ? clear_bhb_loop+0x70/0xc0 [ 405.447072][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.447096][ T33] RIP: 0033:0x7f41b5f9e559 [ 405.447153][ T33] RSP: 002b:00007f41b6e29028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.447185][ T33] RAX: ffffffffffffffda RBX: 00007f41b6225fa0 RCX: 00007f41b5f9e559 [ 405.447202][ T33] RDX: 00000000000484d0 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.447217][ T33] RBP: 00007f41b6035ab8 R08: 0000000000000000 R09: 0000000000000000 [ 405.447232][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.447246][ T33] R13: 00007f41b6226038 R14: 00007f41b6225fa0 R15: 00007ffc092d5868 [ 405.447284][ T33] [ 405.447335][ T33] [ 405.447335][ T33] Showing all locks held in the system: [ 405.447347][ T33] locks held by kworker/0:1/10: 3, last CPU#0: [ 405.447422][ T33] #0: ffff88801c069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.447530][ T33] #1: ffffc900000f7c40 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.447594][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x1890 [ 405.447686][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 405.447702][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 405.447777][ T33] locks held by kworker/u8:4/59: 3, last CPU#0: [ 405.447792][ T33] #0: ffff8880325d2140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.447855][ T33] #1: ffffc9000200fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.447920][ T33] #2: ffff8880582d3098 (&p->tcfa_lock){+.-.}-{3:3}, at: try_to_wake_up+0x67/0x14d0 [ 405.447979][ T33] locks held by kworker/u8:7/1014: 3, on CPU#1: [ 405.447995][ T33] #0: ffff8880328d5140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.448064][ T33] #1: ffffc90004d1fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.448124][ T33] #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 405.448242][ T33] locks held by getty/5376: 2, on CPU#1: [ 405.448258][ T33] #0: ffff888036e7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 405.448384][ T33] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 405.448450][ T33] locks held by kworker/u9:3/5624: 7, on CPU#1: [ 405.448464][ T33] #0: ffff888034ab1140 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.448525][ T33] #1: ffffc900043b7c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 405.448588][ T33] #2: ffff88807ee8cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x242/0x430 [ 405.448710][ T33] #3: ffff88807ee8c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 405.448794][ T33] #4: ffffffff913dcc40 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 405.939708][ T33] #5: ffff88807880d2f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 405.939812][ T33] #6: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 405.939886][ T33] locks held by kworker/0:5/5757: 1, last CPU#0: [ 405.939910][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 405.939977][ T33] locks held by syz.3.3777/13582: 2, on CPU#1: [ 405.939993][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 405.940058][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 405.940158][ T33] locks held by syz.2.3943/13936: 2, on CPU#0: [ 405.940174][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 405.940238][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480 [ 405.940307][ T33] locks held by syz.5.4400/14964: 2, on CPU#1: [ 405.940323][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 405.940394][ T33] #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xd20 [ 405.940459][ T33] locks held by syz.6.4558/15287: 3, on CPU#1: [ 405.940474][ T33] #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 405.940537][ T33] #1: ffff88802a5f46e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 405.940595][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 405.940664][ T33] locks held by syz.0.4826/15979: 2, on CPU#1: [ 405.940680][ T33] #0: ffff88807ef6f4e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 405.940768][ T33] #1: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 405.941098][ T33] locks held by syz.8.4828/15983: 1, on CPU#1: [ 405.941116][ T33] #0: ffff888057d5e4e0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 405.941176][ T33] locks held by syz.4.4834/15996: 1, on CPU#1: [ 405.941192][ T33] #0: ffff8880332dbce0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3e/0x100 [ 405.941249][ T33] locks held by syz.1.4846/16021: 1, on CPU#1: [ 405.941264][ T33] #0: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 405.941432][ T33] [ 405.941439][ T33] ============================================= [ 405.941439][ T33] [ 405.941456][ T33] NMI backtrace for cpu 1 [ 405.941484][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 405.941523][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 405.941542][ T33] Call Trace: [ 405.941551][ T33] [ 405.941562][ T33] dump_stack_lvl+0xe8/0x150 [ 405.941609][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 405.941676][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 405.941727][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 405.941766][ T33] sys_info+0x135/0x170 [ 405.941821][ T33] watchdog+0xfd7/0x1030 [ 405.941867][ T33] ? watchdog+0x1c7/0x1030 [ 405.941900][ T33] kthread+0x38b/0x480 [ 405.941923][ T33] ? __pfx_watchdog+0x10/0x10 [ 405.941945][ T33] ? __pfx_kthread+0x10/0x10 [ 405.941969][ T33] ret_from_fork+0x514/0xb70 [ 405.942012][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 405.942035][ T33] ? __switch_to+0xc89/0x1420 [ 405.942070][ T33] ? __pfx_kthread+0x10/0x10 [ 405.942094][ T33] ret_from_fork_asm+0x1a/0x30 [ 405.942133][ T33] [ 405.942142][ T33] Sending NMI from CPU 1 to CPUs 0: [ 405.942179][ C0] NMI backtrace for cpu 0 [ 405.942194][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 405.942228][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 405.942246][ C0] Workqueue: bat_events batadv_dat_purge [ 405.942358][ C0] RIP: 0010:__kernel_text_address+0x17/0x30 [ 405.942383][ C0] Code: 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 53 48 89 fb e8 33 00 00 00 48 81 fb 00 a0 ee 92 0f 93 c1 <48> 81 fb 60 f9 06 93 0f 92 c2 20 ca 08 c2 0f b6 c2 5b c3 cc cc cc [ 405.942398][ C0] RSP: 0018:ffffc90000006e98 EFLAGS: 00000283 [ 405.942414][ C0] RAX: 0000000000000001 RBX: ffffffff8a0d85e5 RCX: 8000000000000100 [ 405.942427][ C0] RDX: ffffc90000006f01 RSI: ffffffff8e6f1e7e RDI: ffffffff8a0d85e5 [ 405.942441][ C0] RBP: ffffc90000006f50 R08: ffffc90000007330 R09: 0000000000000000 [ 405.942454][ C0] R10: ffffc90000006f18 R11: fffff52000000de5 R12: ffff88801d741f40 [ 405.942468][ C0] R13: 00000000000000f0 R14: dffffc0000000000 R15: 1ffff92000000de2 [ 405.942481][ C0] FS: 0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000 [ 405.942496][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.942509][ C0] CR2: 00007f00915556c8 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 405.942525][ C0] Call Trace: [ 405.942532][ C0] [ 405.942539][ C0] unwind_get_return_address+0x4d/0x90 [ 405.942563][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 405.942590][ C0] arch_stack_walk+0xfb/0x150 [ 405.942615][ C0] ? synproxy_send_client_synack+0x175/0xde0 [ 405.942659][ C0] stack_trace_save+0xa9/0x100 [ 405.942678][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 405.942698][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 405.942724][ C0] kasan_save_track+0x3e/0x80 [ 405.942747][ C0] ? kasan_save_track+0x3e/0x80 [ 405.942767][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 405.942790][ C0] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 405.942810][ C0] ? __alloc_skb+0x1db/0x7a0 [ 405.942872][ C0] __kasan_slab_alloc+0x6c/0x80 [ 405.942897][ C0] kmem_cache_alloc_node_noprof+0x354/0x610 [ 405.942919][ C0] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 405.942938][ C0] ? __alloc_skb+0x1db/0x7a0 [ 405.942964][ C0] ? __alloc_skb+0x1db/0x7a0 [ 405.942995][ C0] __alloc_skb+0x1db/0x7a0 [ 405.943025][ C0] synproxy_send_client_synack+0x175/0xde0 [ 405.943044][ C0] ? lock_acquire+0x115/0x350 [ 405.943064][ C0] ? synproxy_pernet+0x45/0x270 [ 405.943119][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 405.943171][ C0] ? nft_tproxy_eval+0x1124/0x1c80 [ 405.943189][ C0] ? synproxy_pernet+0x45/0x270 [ 405.943212][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 405.943235][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 405.943257][ C0] ? nf_ip_checksum+0x13c/0x510 [ 405.943300][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 405.943323][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 405.943346][ C0] ? arch_stack_walk+0x11b/0x150 [ 405.943373][ C0] nft_do_chain+0x48d/0x1b10 [ 405.943395][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 405.943416][ C0] ? stack_depot_save_flags+0x33/0x7f0 [ 405.943472][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 405.943496][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 405.943521][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 405.943559][ C0] nft_do_chain_ipv4+0x195/0x290 [ 405.943600][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 405.943649][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 405.943671][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 405.943717][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 405.943738][ C0] nf_hook_slow+0xc5/0x220 [ 405.943789][ C0] NF_HOOK+0x21f/0x3c0 [ 405.943836][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 405.943864][ C0] ? NF_HOOK+0x9e/0x3c0 [ 405.943882][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 405.943903][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 405.943928][ C0] ? ip_local_deliver+0x113/0x190 [ 405.943949][ C0] NF_HOOK+0x336/0x3c0 [ 405.943970][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 405.943989][ C0] ? NF_HOOK+0x9e/0x3c0 [ 405.944008][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 405.944028][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 405.944048][ C0] ? ip_rcv_core+0x88d/0xd50 [ 405.944070][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 405.944089][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 405.944109][ C0] process_backlog+0xa6b/0x18b0 [ 405.944184][ C0] ? process_backlog+0x3de/0x18b0 [ 405.944218][ C0] __napi_poll+0xaa/0x330 [ 405.944246][ C0] net_rx_action+0x61d/0xf50 [ 405.944279][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 405.944322][ C0] handle_softirqs+0x226/0x860 [ 405.944349][ C0] ? do_softirq+0x77/0xd0 [ 405.944376][ C0] ? batadv_dat_purge+0x2d7/0x3c0 [ 405.944402][ C0] do_softirq+0x77/0xd0 [ 405.944426][ C0] [ 405.944432][ C0] [ 405.944438][ C0] __local_bh_enable_ip+0x100/0x140 [ 405.944463][ C0] batadv_dat_purge+0x2d7/0x3c0 [ 405.944491][ C0] ? process_scheduled_works+0x97a/0x1630 [ 405.944517][ C0] process_scheduled_works+0xc3d/0x1630 [ 405.944559][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 405.944589][ C0] ? assign_work+0x3cf/0x5d0 [ 405.944615][ C0] worker_thread+0xa47/0xfb0 [ 405.944656][ C0] kthread+0x38b/0x480 [ 405.944674][ C0] ? __pfx_worker_thread+0x10/0x10 [ 405.944698][ C0] ? __pfx_kthread+0x10/0x10 [ 405.944717][ C0] ret_from_fork+0x514/0xb70 [ 405.944736][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 405.944754][ C0] ? __switch_to+0xc89/0x1420 [ 405.944781][ C0] ? __pfx_kthread+0x10/0x10 [ 405.944799][ C0] ret_from_fork_asm+0x1a/0x30 [ 405.944825][ C0] [ 405.945190][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 407.039937][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 407.049252][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 407.059356][ T33] Call Trace: [ 407.062664][ T33] [ 407.065641][ T33] vpanic+0x56d/0xa60 [ 407.069673][ T33] ? __pfx_vpanic+0x10/0x10 [ 407.074223][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 407.079814][ T33] panic+0xc5/0xd0 [ 407.083583][ T33] ? __pfx_panic+0x10/0x10 [ 407.088046][ T33] ? wq_watchdog_touch+0xf9/0x160 [ 407.093128][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 407.099333][ T33] watchdog+0x1030/0x1030 [ 407.103709][ T33] ? watchdog+0x1c7/0x1030 [ 407.108168][ T33] kthread+0x38b/0x480 [ 407.112275][ T33] ? __pfx_watchdog+0x10/0x10 [ 407.116988][ T33] ? __pfx_kthread+0x10/0x10 [ 407.121616][ T33] ret_from_fork+0x514/0xb70 [ 407.126244][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 407.131391][ T33] ? __switch_to+0xc89/0x1420 [ 407.136118][ T33] ? __pfx_kthread+0x10/0x10 [ 407.140747][ T33] ret_from_fork_asm+0x1a/0x30 [ 407.145564][ T33] [ 407.149256][ T33] Kernel Offset: disabled [ 407.153597][ T33] Rebooting in 86400 seconds..