last executing test programs: 1.834745523s ago: executing program 3 (id=1933): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="67d0fa27", 0x4}, {0x0, 0x38}], 0x2) 1.593801684s ago: executing program 3 (id=1936): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x2}, @TCA_CAKE_RTT={0x8, 0x7, 0x8b22}]}}]}, 0x44}}, 0x0) 1.380654219s ago: executing program 2 (id=1940): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6ffffffffffffffff000000fff50000070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 1.257489343s ago: executing program 3 (id=1942): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000180)=0x9c) 1.141793512s ago: executing program 2 (id=1945): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)={0x14, r1, 0x311, 0x70bd28, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x20040054) 1.065620968s ago: executing program 4 (id=1947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="2eaaf95a84e43dd65193df97c5799653887879f0405864114a46a4601d5c72d00fa2daead063da3d9f95bbf08f97bfffa4a94bab9d21ac85e2a85e", 0x3b}, {&(0x7f0000000440)="01000000289cb066d1389999822fb51c851d3626ebd23dc86a139638440c62f8af94bb4fbf8ba5af36fe45e5775e819f1f33689e4607000000ee0f678e9a7dc4083e122957765f1b0954e42a981d67198e96beac352f455519e63cdfbed9faa6ad92a639ff93de934ff25efbd2a0b706aab8a4d5e29dbc7693ecb0872bdc92250a227bd584b99213657f36adcfc59ff1cb1511883e1608fe5510bd3220d6277b01acf62a889867dcd2e7ad39afbee4ef922d21fe8a1528f34e1d5291d23a338121c7e1a8a5da5eefbfee961b66b3a44542f5e35800000000", 0xffed}, {&(0x7f0000000140)="d3c78f86784943060b5cdaf2721fb445e866ebc72730930c47dd65c6017702004a822dc4b8de456a3c14cd5ffa325ca06123d2381631b264aaf5d81674bb3b35f5b2000000003b", 0x47}], 0x3) 1.015503642s ago: executing program 0 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) 961.852833ms ago: executing program 1 (id=1949): unshare(0xc040480) r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, 0x0, 0x0) 950.537245ms ago: executing program 2 (id=1950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 878.234914ms ago: executing program 0 (id=1951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) unshare(0x22020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 866.04025ms ago: executing program 1 (id=1952): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000100)={0xa, 0x2, 0x4, @remote, 0xdb}, 0x1c) 792.432249ms ago: executing program 4 (id=1953): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) 753.672197ms ago: executing program 2 (id=1954): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x6e, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0xff, @loopback={0x4000000}, @local, [@fragment={0x1d, 0x0, 0xd, 0x1, 0x0, 0xe, 0x68}]}}}}}}}, 0x0) 742.901712ms ago: executing program 1 (id=1955): unshare(0x22020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000280)=0x7fffffffffffffff, 0x9) 731.923145ms ago: executing program 0 (id=1956): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 651.292953ms ago: executing program 4 (id=1957): r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 594.819996ms ago: executing program 1 (id=1958): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004800)=[{&(0x7f00000016c0)=""/4086, 0xe68}, {&(0x7f00000036c0)=""/4098, 0x1002}, {&(0x7f0000004880)=""/4063, 0xfdf}, {&(0x7f00000001c0)=""/188, 0xbc}, {&(0x7f00000026c0)=""/4080, 0xff0}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f00000005c0)=""/36, 0x24}, {&(0x7f0000004700)=""/58, 0x3a}], 0x8}, 0x2) 536.354454ms ago: executing program 0 (id=1959): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0xc}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x2, 0xff, 0xa, 0x8, 0xd}, 0x20) 484.372507ms ago: executing program 4 (id=1960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 451.003028ms ago: executing program 1 (id=1961): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="c0fbedd8c1c20fb9b8209a08efe4", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 379.449251ms ago: executing program 4 (id=1962): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) 328.5455ms ago: executing program 0 (id=1963): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 305.46653ms ago: executing program 3 (id=1964): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 215.533584ms ago: executing program 2 (id=1965): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) 169.308212ms ago: executing program 3 (id=1966): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2f, &(0x7f0000caaffb), &(0x7f0000cab000)=0x5) 121.850022ms ago: executing program 0 (id=1967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="f3f40000000000000000030000007000018008000300000000000d0001007564703a73797bb100000000440004"], 0x84}}, 0x0) 120.770302ms ago: executing program 4 (id=1968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd29, 0x25dfdbfe, {{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 66.22072ms ago: executing program 1 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 40.384829ms ago: executing program 2 (id=1970): unshare(0x8000400) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000008"], 0x50) poll(&(0x7f0000000000)=[{r0, 0x5000}], 0x1, 0x14) 0s ago: executing program 3 (id=1971): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4124, 0x101c}], 0x1}, 0x406) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 72.955785][ T5612] cgroup: Unknown subsys name 'net' [ 73.077634][ T5612] cgroup: Unknown subsys name 'cpuset' [ 73.087023][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.420388][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.423396][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.437670][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.450710][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.461004][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.470385][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.554936][ T4947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.565634][ T4947] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.573367][ T4947] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.590120][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.598853][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.607280][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.615487][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.623890][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.635001][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.647038][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.654804][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.657823][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.665062][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.670703][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.677716][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.685410][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.696789][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.697349][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.708462][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.718682][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.129489][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.153760][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.163340][ T5624] bridge_slave_0: entered allmulticast mode [ 78.171504][ T5624] bridge_slave_0: entered promiscuous mode [ 78.212227][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.219884][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.227183][ T5624] bridge_slave_1: entered allmulticast mode [ 78.235049][ T5624] bridge_slave_1: entered promiscuous mode [ 78.334969][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.381526][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.490520][ T5624] team0: Port device team_slave_0 added [ 78.501347][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.508799][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.515987][ T5637] bridge_slave_0: entered allmulticast mode [ 78.522981][ T5637] bridge_slave_0: entered promiscuous mode [ 78.538425][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.545630][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.552772][ T5632] bridge_slave_0: entered allmulticast mode [ 78.559985][ T5632] bridge_slave_0: entered promiscuous mode [ 78.566366][ T5635] Bluetooth: hci0: command tx timeout [ 78.571044][ T5624] team0: Port device team_slave_1 added [ 78.591209][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.598351][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.606013][ T5637] bridge_slave_1: entered allmulticast mode [ 78.612895][ T5637] bridge_slave_1: entered promiscuous mode [ 78.628077][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.635456][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.642806][ T5632] bridge_slave_1: entered allmulticast mode [ 78.649934][ T5632] bridge_slave_1: entered promiscuous mode [ 78.693294][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.700595][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.707867][ T5636] bridge_slave_0: entered allmulticast mode [ 78.715280][ T5636] bridge_slave_0: entered promiscuous mode [ 78.724329][ T5626] Bluetooth: hci1: command tx timeout [ 78.730424][ T5635] Bluetooth: hci4: command tx timeout [ 78.748575][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.755722][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.781806][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.793301][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.800556][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.808022][ T5635] Bluetooth: hci3: command tx timeout [ 78.808034][ T5626] Bluetooth: hci2: command tx timeout [ 78.808381][ T5630] bridge_slave_0: entered allmulticast mode [ 78.825990][ T5630] bridge_slave_0: entered promiscuous mode [ 78.841047][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.848211][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.855527][ T5636] bridge_slave_1: entered allmulticast mode [ 78.862684][ T5636] bridge_slave_1: entered promiscuous mode [ 78.874426][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.884426][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.891463][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.917416][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.928699][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.935961][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.943119][ T5630] bridge_slave_1: entered allmulticast mode [ 78.950281][ T5630] bridge_slave_1: entered promiscuous mode [ 78.959403][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.971498][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.991262][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.087264][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.098239][ T5632] team0: Port device team_slave_0 added [ 79.114726][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.125760][ T5637] team0: Port device team_slave_0 added [ 79.134211][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.145883][ T5632] team0: Port device team_slave_1 added [ 79.156382][ T5624] hsr_slave_0: entered promiscuous mode [ 79.162714][ T5624] hsr_slave_1: entered promiscuous mode [ 79.171663][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.182551][ T5637] team0: Port device team_slave_1 added [ 79.260595][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.267677][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.294513][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.314098][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.321074][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.346991][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.359629][ T5636] team0: Port device team_slave_0 added [ 79.371541][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.378789][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.405002][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.418121][ T5630] team0: Port device team_slave_0 added [ 79.424897][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.431851][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.457831][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.480654][ T5636] team0: Port device team_slave_1 added [ 79.510363][ T5630] team0: Port device team_slave_1 added [ 79.567575][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.574688][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.600643][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.613305][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.620337][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.646427][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.658076][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.665071][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.691173][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.736956][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.743975][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.770157][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.810371][ T5632] hsr_slave_0: entered promiscuous mode [ 79.816908][ T5632] hsr_slave_1: entered promiscuous mode [ 79.823100][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 79.829009][ T5632] Cannot create hsr debugfs directory [ 79.846179][ T5637] hsr_slave_0: entered promiscuous mode [ 79.852371][ T5637] hsr_slave_1: entered promiscuous mode [ 79.859150][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 79.864988][ T5637] Cannot create hsr debugfs directory [ 80.019356][ T5630] hsr_slave_0: entered promiscuous mode [ 80.025808][ T5630] hsr_slave_1: entered promiscuous mode [ 80.031960][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 80.038292][ T5630] Cannot create hsr debugfs directory [ 80.048977][ T5636] hsr_slave_0: entered promiscuous mode [ 80.056436][ T5636] hsr_slave_1: entered promiscuous mode [ 80.062782][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 80.068893][ T5636] Cannot create hsr debugfs directory [ 80.372330][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.384823][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.392754][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.402615][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.448795][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.458575][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.495613][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.505434][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.569158][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.582397][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.592242][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.603176][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.611765][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.622809][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.630637][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.639705][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.654266][ T5635] Bluetooth: hci0: command tx timeout [ 80.741758][ T5637] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.752649][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.768675][ T5637] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.777734][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.791259][ T5637] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.801139][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.813746][ T5635] Bluetooth: hci4: command tx timeout [ 80.814040][ T5626] Bluetooth: hci1: command tx timeout [ 80.830895][ T5637] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.841143][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.884887][ T5626] Bluetooth: hci3: command tx timeout [ 80.884930][ T5635] Bluetooth: hci2: command tx timeout [ 80.921382][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.936252][ T5636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.946994][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.963971][ T5636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.973064][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.981647][ T5636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.991554][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.010156][ T5636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.021453][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.034919][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.086361][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.093978][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.127892][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.135105][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.170985][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.181955][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.192542][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.201957][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.219601][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.228288][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.239458][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.254070][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.263461][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.318586][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.358095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.365218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.374942][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.382055][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.468718][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.530548][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.567686][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.608397][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.618856][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.626061][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.689178][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.696340][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.705830][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.712946][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.748525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.755767][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.812085][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.884701][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.920920][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.928153][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.978506][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.985716][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.202671][ T5630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.259143][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.458194][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.501215][ T5624] veth0_vlan: entered promiscuous mode [ 82.567016][ T5624] veth1_vlan: entered promiscuous mode [ 82.677977][ T5632] veth0_vlan: entered promiscuous mode [ 82.692851][ T5624] veth0_macvtap: entered promiscuous mode [ 82.722570][ T5624] veth1_macvtap: entered promiscuous mode [ 82.725487][ T5635] Bluetooth: hci0: command tx timeout [ 82.750948][ T5632] veth1_vlan: entered promiscuous mode [ 82.831060][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.878750][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.883886][ T5635] Bluetooth: hci4: command tx timeout [ 82.888654][ T5626] Bluetooth: hci1: command tx timeout [ 82.945158][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.961210][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.972174][ T5626] Bluetooth: hci2: command tx timeout [ 82.972188][ T5635] Bluetooth: hci3: command tx timeout [ 82.985036][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019710][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.076829][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.112653][ T5632] veth0_macvtap: entered promiscuous mode [ 83.142643][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.160711][ T5632] veth1_macvtap: entered promiscuous mode [ 83.203416][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.220047][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.241104][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.280425][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.347859][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.356759][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.369822][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.378068][ T5636] veth0_vlan: entered promiscuous mode [ 83.399969][ T157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.420208][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.448590][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.470334][ T157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.498999][ T5624] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.521498][ T5636] veth1_vlan: entered promiscuous mode [ 83.586527][ T5637] veth0_vlan: entered promiscuous mode [ 83.677113][ T5637] veth1_vlan: entered promiscuous mode [ 83.707640][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.717717][ T5636] veth0_macvtap: entered promiscuous mode [ 83.740333][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.760724][ T5636] veth1_macvtap: entered promiscuous mode [ 83.846433][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.856311][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.873855][ T5630] veth0_vlan: entered promiscuous mode [ 83.887379][ T5637] veth0_macvtap: entered promiscuous mode [ 83.919377][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.931362][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.965126][ T5637] veth1_macvtap: entered promiscuous mode [ 83.983928][ T5630] veth1_vlan: entered promiscuous mode [ 84.028357][ T157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.049632][ T157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.074045][ T157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.099109][ T157] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.177501][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.231877][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.285408][ T1121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.298051][ T1121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.326592][ T1121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.344343][ T1121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.398824][ T5630] veth0_macvtap: entered promiscuous mode [ 84.441881][ T5630] veth1_macvtap: entered promiscuous mode [ 84.572858][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.604524][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.639260][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.686215][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.768481][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.776548][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.790971][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.797933][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.812716][ T5635] Bluetooth: hci0: command tx timeout [ 84.852244][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.887894][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.930351][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.943955][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.964427][ T5635] Bluetooth: hci4: command tx timeout [ 84.964766][ T5626] Bluetooth: hci1: command tx timeout [ 84.986016][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.026850][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.045178][ T5626] Bluetooth: hci2: command tx timeout [ 85.045190][ T5635] Bluetooth: hci3: command tx timeout [ 85.145729][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.178219][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.280973][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.328793][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.684792][ T5862] netlink: 332 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.727410][ T5862] netlink: 'syz.1.23': attribute type 9 has an invalid length. [ 85.774153][ T5862] netlink: 108 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.834224][ T5862] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 86.032405][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 86.290264][ T5793] IPVS: starting estimator thread 0... [ 86.394256][ T5888] IPVS: using max 40 ests per chain, 96000 per kthread [ 86.661677][ T24] cfg80211: failed to load regulatory.db [ 87.418641][ T5928] syz.1.54 uses obsolete (PF_INET,SOCK_PACKET) [ 87.727763][ T5940] netlink: 268 bytes leftover after parsing attributes in process `syz.1.60'. [ 87.766019][ T5940] netlink: 136 bytes leftover after parsing attributes in process `syz.1.60'. [ 87.806468][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 88.034264][ T5952] Bluetooth: MGMT ver 1.23 [ 88.253139][ T5964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.379081][ T5969] netlink: 'syz.1.73': attribute type 30 has an invalid length. [ 88.437714][ T5972] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 89.067871][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 90.062560][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 90.276235][ T6057] netlink: 'syz.4.113': attribute type 1 has an invalid length. [ 90.387888][ T6059] atomic_op ffff88802717f998 conn xmit_atomic 0000000000000000 [ 90.435740][ T6064] syz_tun: entered allmulticast mode [ 92.292940][ T6127] tipc: Started in network mode [ 92.330386][ T6127] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 92.394470][ T6127] tipc: Enabled bearer , priority 10 [ 92.951361][ T6150] tipc: Enabling of bearer rejected, failed to enable media [ 93.360080][ T6169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.165'. [ 93.383945][ T6169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.165'. [ 93.417507][ T6169] netlink: 'syz.3.165': attribute type 5 has an invalid length. [ 93.427347][ T6169] netlink: 43 bytes leftover after parsing attributes in process `syz.3.165'. [ 93.484754][ T5752] tipc: Node number set to 4269801491 [ 94.872779][ T6242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.201'. [ 95.052897][ T6253] netlink: 'syz.0.205': attribute type 49 has an invalid length. [ 95.773668][ T6289] netlink: 'syz.3.222': attribute type 7 has an invalid length. [ 95.802788][ T6289] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.222'. [ 96.308559][ T5752] IPVS: starting estimator thread 0... [ 96.402004][ T6316] block nbd0: not configured, cannot reconfigure [ 96.432992][ T6314] IPVS: using max 33 ests per chain, 79200 per kthread [ 97.383419][ T6368] netlink: 104 bytes leftover after parsing attributes in process `syz.4.260'. [ 97.478353][ T6371] netlink: 'syz.3.261': attribute type 9 has an invalid length. [ 97.513735][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 97.596462][ T6371] gretap0: entered promiscuous mode [ 97.629319][ T6371] macvlan2: entered promiscuous mode [ 97.647670][ T6371] macvlan2: entered allmulticast mode [ 97.669659][ T6371] gretap0: entered allmulticast mode [ 97.941353][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.273'. [ 97.966596][ T6393] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 98.347185][ T6416] Bluetooth: MGMT ver 1.23 [ 98.700751][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.290'. [ 99.378121][ T6461] netlink: 'syz.2.304': attribute type 1 has an invalid length. [ 99.991221][ T6493] netlink: 'syz.2.319': attribute type 1 has an invalid length. [ 100.103331][ T6497] netlink: 240 bytes leftover after parsing attributes in process `syz.0.321'. [ 100.288695][ T6504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.324'. [ 103.340829][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 103.834850][ T6667] IPVS: Error connecting to the multicast addr [ 104.260438][ T6692] sch_tbf: burst 0 is lower than device sit0 mtu (1480) ! [ 104.479354][ T1121] tipc: Subscription rejected, illegal request [ 105.192723][ T6734] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.428'. [ 105.562445][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.438'. [ 105.990148][ T6769] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 106.452887][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.452'. [ 106.461989][ T6786] netlink: 304 bytes leftover after parsing attributes in process `syz.1.452'. [ 106.817617][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 106.840076][ T6798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 107.056928][ T6806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 107.623284][ T6832] warning: `syz.4.475' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.678795][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 108.186987][ T994] IPVS: starting estimator thread 0... [ 108.243717][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 108.306185][ T6866] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.367010][ T6862] bond2: option lacp_rate: invalid value (128) [ 108.398452][ T6862] bond2 (unregistering): Released all slaves [ 108.677869][ T6885] nbd: socks must be embedded in a SOCK_ITEM attr [ 109.134999][ T6905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.509'. [ 109.188556][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 109.415027][ T6921] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 109.713200][ T6934] netlink: 'syz.1.523': attribute type 12 has an invalid length. [ 109.751818][ T6934] netlink: 'syz.1.523': attribute type 11 has an invalid length. [ 110.495258][ T6969] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 110.526044][ T6969] __nla_validate_parse: 2 callbacks suppressed [ 110.526061][ T6969] netlink: 96 bytes leftover after parsing attributes in process `syz.4.541'. [ 110.576205][ T6969] netlink: 1 bytes leftover after parsing attributes in process `syz.4.541'. [ 110.609152][ T6969] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 110.645441][ T6969] netlink: 'syz.4.541': attribute type 8 has an invalid length. [ 110.962694][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.3.551'. [ 111.773352][ T7024] netlink: 256 bytes leftover after parsing attributes in process `syz.1.563'. [ 111.785944][ T7022] xt_hashlimit: size too large, truncated to 1048576 [ 111.849891][ T7024] netlink: 72 bytes leftover after parsing attributes in process `syz.1.563'. [ 111.884025][ T7031] netlink: 220 bytes leftover after parsing attributes in process `syz.4.566'. [ 111.903962][ T7031] netlink: 'syz.4.566': attribute type 2 has an invalid length. [ 112.232824][ T7047] tipc: Failed to obtain node identity [ 112.256799][ T7047] tipc: Enabling of bearer rejected, failed to enable media [ 112.910718][ T7083] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 112.946296][ T7083] netlink: 96 bytes leftover after parsing attributes in process `syz.3.590'. [ 112.969582][ T7083] netlink: 1 bytes leftover after parsing attributes in process `syz.3.590'. [ 113.004318][ T7083] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 113.024244][ T7083] netlink: 634 bytes leftover after parsing attributes in process `syz.3.590'. [ 114.195364][ T7130] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 115.160038][ T7171] smc: net device hsr0 applied user defined pnetid SYZ2 [ 115.510115][ T7189] netlink: 32 bytes leftover after parsing attributes in process `syz.3.640'. [ 115.582310][ T7190] tipc: Enabling of bearer rejected, failed to enable media [ 116.355694][ T7227] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.653'. [ 116.590666][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 116.612499][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 117.257456][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 117.634674][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 117.703199][ T7291] macvtap1: entered promiscuous mode [ 117.726804][ T7291] team0: entered promiscuous mode [ 117.749596][ T7291] team_slave_0: entered promiscuous mode [ 117.775033][ T7291] team_slave_1: entered promiscuous mode [ 117.798994][ T7291] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 117.819137][ T7291] team0: Device macvtap1 is already an upper device of the team interface [ 117.843459][ T7291] team0: left promiscuous mode [ 118.015543][ T29] team_slave_0: left promiscuous mode [ 118.021672][ T29] team_slave_1: left promiscuous mode [ 119.007804][ T7356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.701'. [ 119.018102][ T7356] netlink: 7 bytes leftover after parsing attributes in process `syz.3.701'. [ 119.853904][ T7387] vlan3: entered promiscuous mode [ 119.887757][ T7387] bridge0: entered promiscuous mode [ 120.332099][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 120.374218][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 120.616603][ T7422] tipc: Started in network mode [ 120.631548][ T7422] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 120.658407][ T7422] tipc: Enabled bearer , priority 31 [ 121.237292][ T7453] nbd: must specify a size in bytes for the device [ 121.774946][ T29] tipc: Node number set to 10136234 [ 121.924714][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 122.095847][ T7494] tipc: Started in network mode [ 122.119530][ T7494] tipc: Node identity 0000000000000000010000000000008, cluster identity 4711 [ 122.151169][ T7498] tipc: Started in network mode [ 122.170938][ T7498] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 122.190419][ T7498] tipc: Enabled bearer , priority 10 [ 122.883630][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 123.139354][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 123.266347][ T7548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.769313][ T994] tipc: Node number set to 10463914 [ 124.912233][ T7620] netlink: 36 bytes leftover after parsing attributes in process `syz.2.809'. [ 125.509717][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 125.710768][ T7663] netlink: 208 bytes leftover after parsing attributes in process `syz.0.829'. [ 125.781161][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.832'. [ 126.510921][ T7700] tipc: MTU too low for tipc bearer [ 126.532903][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 126.548613][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 126.562398][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 126.571804][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.849'. [ 126.747027][ T7711] Zero length message leads to an empty skb [ 127.234671][ T7734] __nla_validate_parse: 1 callbacks suppressed [ 127.234688][ T7734] netlink: 104 bytes leftover after parsing attributes in process `syz.1.863'. [ 127.319804][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 127.360030][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 128.001286][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 128.030568][ T7765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.876'. [ 130.460871][ T7862] netlink: 'syz.0.911': attribute type 5 has an invalid length. [ 131.724341][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 132.315662][ T7951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.727323][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.738396][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.255323][ T8075] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1013'. [ 135.298169][ T8075] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 135.323270][ T8075] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1013'. [ 135.940863][ T8101] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.139320][ T8101] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.182561][ T8112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1029'. [ 136.319918][ T8101] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.542047][ T8101] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.676381][ T8138] x_tables: ip_tables: time.0 match: invalid size 24 (kernel) != (user) 40 [ 136.920665][ T157] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.023077][ T157] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.085099][ T157] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.191161][ T157] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.464336][ T8227] netlink: 'syz.1.1086': attribute type 298 has an invalid length. [ 138.524993][ T8231] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1088'. [ 138.591305][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1087'. [ 139.148645][ T8260] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1101'. [ 139.251614][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1105'. [ 139.284557][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'. [ 139.300033][ T8270] netlink: 'syz.3.1105': attribute type 14 has an invalid length. [ 139.317031][ T8270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'. [ 139.339571][ T8267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 139.641832][ T8288] netlink: ct family unspecified [ 139.664889][ T8288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.964898][ T8307] tipc: Enabling of bearer rejected, failed to enable media [ 140.690308][ T8340] __nla_validate_parse: 2 callbacks suppressed [ 140.690328][ T8340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 141.166398][ T8366] netlink: 'syz.4.1151': attribute type 4 has an invalid length. [ 142.152374][ T8392] "syz.0.1164" (8392) uses obsolete ecb(arc4) skcipher [ 142.197248][ T8405] netlink: 'syz.1.1169': attribute type 6 has an invalid length. [ 142.948330][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 143.067800][ T8447] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1190'. [ 143.086495][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 143.095930][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1190'. [ 143.177861][ T8440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.971429][ T8491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.795014][ T8530] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1228'. [ 145.016412][ T8537] ipvlan2: entered promiscuous mode [ 145.330451][ T8558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.518999][ T8564] nbd: must specify at least one socket [ 145.668165][ T8572] netlink: 'syz.4.1247': attribute type 2 has an invalid length. [ 147.260806][ T8649] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 147.275351][ T8649] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1284'. [ 147.297287][ T8649] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 147.318413][ T8649] netlink: 634 bytes leftover after parsing attributes in process `syz.3.1284'. [ 147.344426][ T8649] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1284'. [ 147.633100][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 147.951265][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 148.020261][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 148.380606][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 149.777019][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1327'. [ 150.154966][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1334'. [ 150.405345][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1342'. [ 152.396201][ T8862] __nla_validate_parse: 4 callbacks suppressed [ 152.396219][ T8862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1387'. [ 152.931065][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 154.227449][ T8958] netlink: 'syz.0.1434': attribute type 3 has an invalid length. [ 154.263454][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1434'. [ 154.291517][ T8962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1436'. [ 154.366955][ T8964] tipc: Enabled bearer , priority 10 [ 155.100592][ T9004] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 155.282954][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1461'. [ 155.327686][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 155.475835][ T9024] netlink: 'syz.0.1466': attribute type 2 has an invalid length. [ 155.490231][ T9025] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 155.500271][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 155.512659][ T9025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.653246][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 155.683659][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1471'. [ 155.743639][ T9033] netlink: 'syz.0.1471': attribute type 15 has an invalid length. [ 156.638929][ T9085] netlink: 'syz.0.1496': attribute type 10 has an invalid length. [ 156.876133][ T9094] gretap0: entered promiscuous mode [ 156.914886][ T9094] vlan3: entered promiscuous mode [ 157.189241][ T9113] netlink: 'syz.3.1510': attribute type 27 has an invalid length. [ 157.318072][ T5626] Bluetooth: hci4: link tx timeout [ 157.324262][ T5626] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.468011][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 157.515506][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 157.565006][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 157.596262][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 157.607251][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1517'. [ 158.153303][ T9162] netlink: 'syz.2.1535': attribute type 3 has an invalid length. [ 158.256402][ T9167] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1537'. [ 158.329030][ T29] IPVS: starting estimator thread 0... [ 158.434090][ T9170] IPVS: using max 31 ests per chain, 74400 per kthread [ 158.688411][ T9191] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1549'. [ 159.363972][ T5635] Bluetooth: hci4: command 0x0405 tx timeout [ 159.953103][ T9258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 160.226633][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1589'. [ 160.382858][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1591'. [ 160.804383][ T1121] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.273102][ T9308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.750367][ T9341] xt_socket: unknown flags 0x50 [ 162.396658][ T9370] rdma_op ffff88802ddaa9f0 conn xmit_rdma 0000000000000000 [ 162.749151][ T9380] netlink: 'syz.0.1642': attribute type 66 has an invalid length. [ 162.811024][ T9386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1643'. [ 162.981452][ T9393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1646'. [ 163.561232][ T5638] IPVS: starting estimator thread 0... [ 163.693749][ T9420] IPVS: using max 33 ests per chain, 79200 per kthread [ 163.753035][ T9427] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1660'. [ 163.823902][ T9433] netem: change failed [ 163.946464][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1666'. [ 164.026172][ T9442] netlink: 'syz.2.1667': attribute type 1 has an invalid length. [ 164.203135][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1671'. [ 164.396388][ T9458] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1675'. [ 164.818774][ T9482] netlink: 'syz.2.1686': attribute type 1 has an invalid length. [ 164.847823][ T9482] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1686'. [ 165.060099][ T9488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.085869][ T9491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1690'. [ 165.254795][ T9488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.417608][ T9510] pim6reg: entered allmulticast mode [ 165.505316][ T9488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.561337][ T9510] pim6reg: left allmulticast mode [ 165.600182][ T9516] netlink: 'syz.0.1702': attribute type 10 has an invalid length. [ 165.636115][ T9516] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1702'. [ 165.735279][ T9488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.821502][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1706'. [ 166.076672][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.145785][ T157] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.210929][ T157] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.256084][ T9542] ipvlan3: entered promiscuous mode [ 166.266301][ T9542] bridge0: port 3(ipvlan3) entered blocking state [ 166.283906][ T9542] bridge0: port 3(ipvlan3) entered disabled state [ 166.299779][ T9542] ipvlan3: entered allmulticast mode [ 166.306527][ T9542] bridge0: entered allmulticast mode [ 166.316371][ T9542] ipvlan3: left allmulticast mode [ 166.321680][ T9542] bridge0: left allmulticast mode [ 166.367020][ T1121] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.550669][ T9558] netlink: 'syz.3.1722': attribute type 18 has an invalid length. [ 167.293259][ T9583] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.474383][ T9583] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.718499][ T9583] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.920769][ T9583] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.195895][ T91] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.260509][ T91] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.359276][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.405327][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.834083][ T9652] __nla_validate_parse: 4 callbacks suppressed [ 168.834100][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 168.891922][ T9652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1768'. [ 169.011923][ T9657] sch_fq: defrate 4294967293 ignored. [ 169.110125][ T9661] macsec1: entered promiscuous mode [ 169.122932][ T9661] bridge0: entered promiscuous mode [ 170.679119][ T9744] netlink: 'syz.1.1811': attribute type 3 has an invalid length. [ 170.757735][ T9747] žÿ: renamed from team_slave_1 (while UP) [ 170.846009][ T9751] nftables ruleset with unbound set [ 171.222197][ T9772] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 ! [ 171.243293][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1826'. [ 172.345066][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1852'. [ 173.170059][ T9860] nbd: couldn't find device at index 0 [ 173.348976][ T9864] vlan3: entered allmulticast mode [ 173.364013][ T9864] bond0: entered allmulticast mode [ 173.369206][ T9864] bond_slave_0: entered allmulticast mode [ 173.384559][ T9864] bond_slave_1: entered allmulticast mode [ 173.912410][ T9885] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1880'. [ 173.938688][ T9885] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1880'. [ 173.948089][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1878'. [ 174.000835][ T9886] netlink: 'syz.1.1878': attribute type 5 has an invalid length. [ 174.029577][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 174.041100][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1878'. [ 174.250284][ T9892] bond2: (slave bond_slave_1): Device is not our slave [ 174.312826][ T9892] bond2: option active_slave: invalid value (bond_slave_1) [ 174.367360][ T9892] bond2 (unregistering): Released all slaves [ 174.482513][ T9898] ip6tnl1: entered allmulticast mode [ 175.085268][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 175.331466][ T9930] Bluetooth: MGMT ver 1.23 [ 175.346887][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1902'. [ 175.370856][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1902'. [ 175.815486][ T9936] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.860254][ T30] audit: type=1800 audit(1778492052.323:2): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1907" name="memory.events" dev="tmpfs" ino=1815 res=0 errno=0 [ 175.969679][ T30] audit: type=1804 audit(1778492052.373:3): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1907" name="/newroot/359/memory.events" dev="tmpfs" ino=1815 res=1 errno=0 [ 176.206288][ T9957] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.1913'. [ 176.308951][ T9962] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1914'. [ 176.356030][ T9962] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.456233][ T9968] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 177.845992][T10007] netlink: 'syz.2.1937': attribute type 4 has an invalid length. [ 178.636806][T10044] xt_hashlimit: size too large, truncated to 1048576 [ 179.015862][T10062] pim6reg: entered allmulticast mode [ 179.041213][T10062] pim6reg: left allmulticast mode [ 179.275457][T10072] __nla_validate_parse: 2 callbacks suppressed [ 179.275476][T10072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 179.277926][T10074] ------------[ cut here ]------------ [ 179.297195][T10074] 1 [ 179.297225][T10074] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.4.1968/10074 [ 179.308921][T10074] Modules linked in: [ 179.312434][T10072] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1967'. [ 179.313043][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.4.1968 Not tainted syzkaller #0 PREEMPT(full) [ 179.331444][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.342127][T10074] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 179.347157][T10074] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a ff b8 f7 66 90 e8 53 ff b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 54 7f 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 179.366850][T10074] RSP: 0018:ffffc9000202f1c0 EFLAGS: 00010286 [ 179.371478][T10072] tipc: Invalid UDP bearer configuration [ 179.372936][T10074] RAX: a42d19fb24e63500 RBX: ffff88805a6a63c0 RCX: 0000000000000401 [ 179.372957][T10074] RDX: 0000000000000002 RSI: ffffffff8dfaab66 RDI: ffffffff8c28ade0 [ 179.372971][T10074] RBP: ffffc9000202f4c0 R08: ffffffff9030dcf7 R09: 1ffffffff2061b9e [ 179.396952][T10072] tipc: Enabling of bearer rejected, failed to enable media [ 179.402598][T10074] R10: dffffc0000000000 R11: fffffbfff2061b9f R12: dffffc0000000000 [ 179.402619][T10074] R13: 0000000000000000 R14: ffff88805a6a63c0 R15: dffffc0000000000 [ 179.402634][T10074] FS: 00007f374a0666c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 179.435905][T10074] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.442505][T10074] CR2: 0000001b34922ff8 CR3: 000000007fa40000 CR4: 00000000003526f0 [ 179.450540][T10074] Call Trace: [ 179.453890][T10074] [ 179.456840][T10074] ip_push_pending_frames+0x8b/0x110 [ 179.462155][T10074] __icmp_send+0x11e4/0x1690 [ 179.466823][T10074] ? __icmp_send+0x22b/0x1690 [ 179.471540][T10074] ? __pfx___icmp_send+0x10/0x10 [ 179.476591][T10074] ? ip_route_input_noref+0xad/0x270 [ 179.481914][T10074] ? __pfx_ip_route_input_noref+0x10/0x10 [ 179.487731][T10074] ? tcp_v4_early_demux+0x465/0x9c0 [ 179.492959][T10074] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 179.498253][T10074] ip_options_compile+0x80/0xb0 [ 179.503143][T10074] ip_rcv_finish_core+0xaa2/0x1c00 [ 179.508356][T10074] ip_rcv_finish+0x14c/0x2a0 [ 179.512972][T10074] NF_HOOK+0x336/0x3c0 [ 179.517141][T10074] ? sock_wfree+0x26e/0x750 [ 179.521674][T10074] ? __pfx_ip_rcv_finish+0x10/0x10 [ 179.526829][T10074] ? NF_HOOK+0x9e/0x3c0 [ 179.530999][T10074] ? __pfx_NF_HOOK+0x10/0x10 [ 179.535635][T10074] ? __pfx_ip_rcv_finish+0x10/0x10 [ 179.540778][T10074] ? netif_receive_skb+0x102/0xbf0 [ 179.545971][T10074] ? __pfx_ip_rcv+0x10/0x10 [ 179.550501][T10074] netif_receive_skb+0x45b/0xbf0 [ 179.555525][T10074] ? __pfx_netif_receive_skb+0x10/0x10 [ 179.561016][T10074] ? tun_rx_batched+0x185/0x790 [ 179.565957][T10074] tun_rx_batched+0x1de/0x790 [ 179.570661][T10074] ? __build_skb+0x62/0x440 [ 179.575254][T10074] ? __pfx_tun_rx_batched+0x10/0x10 [ 179.580737][T10074] ? tun_get_user+0x2787/0x43e0 [ 179.585662][T10074] ? tun_get_user+0x2787/0x43e0 [ 179.590545][T10074] ? tun_get_user+0x2394/0x43e0 [ 179.595456][T10074] ? tun_get_user+0x2394/0x43e0 [ 179.600321][T10074] ? __local_bh_enable_ip+0xd0/0x130 [ 179.605659][T10074] tun_get_user+0x2bbc/0x43e0 [ 179.610351][T10074] ? tun_get_user+0x2787/0x43e0 [ 179.615300][T10074] ? aa_file_perm+0x50e/0x15e0 [ 179.620081][T10074] ? __pfx_tun_get_user+0x10/0x10 [ 179.625500][T10074] ? __lock_acquire+0x6b5/0x2cf0 [ 179.630468][T10074] ? ref_tracker_alloc+0x35c/0x4c0 [ 179.635626][T10074] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 179.641104][T10074] ? tun_get+0x1c/0x2f0 [ 179.645314][T10074] ? tun_get+0x1c/0x2f0 [ 179.649485][T10074] ? tun_get+0x1c/0x2f0 [ 179.653695][T10074] ? tun_get+0x1c/0x2f0 [ 179.657873][T10074] tun_chr_write_iter+0x113/0x200 [ 179.662892][T10074] vfs_write+0x61d/0xb90 [ 179.667200][T10074] ? __pfx_vfs_write+0x10/0x10 [ 179.671986][T10074] ? __fget_files+0x2a/0x420 [ 179.676626][T10074] ksys_write+0x150/0x270 [ 179.680972][T10074] ? __pfx_ksys_write+0x10/0x10 [ 179.685896][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.691974][T10074] do_syscall_64+0x15f/0xf80 [ 179.696610][T10074] ? trace_irq_disable+0x3b/0x140 [ 179.701663][T10074] ? clear_bhb_loop+0x40/0x90 [ 179.706391][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.712294][T10074] RIP: 0033:0x7f374915d60e [ 179.716778][T10074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 179.736449][T10074] RSP: 002b:00007f374a065fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 179.744908][T10074] RAX: ffffffffffffffda RBX: 00007f374a0666c0 RCX: 00007f374915d60e [ 179.752897][T10074] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 179.760927][T10074] RBP: 00007f3749232d69 R08: 0000000000000000 R09: 0000000000000000 [ 179.768963][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.777027][T10074] R13: 00007f3749416038 R14: 00007f3749415fa0 R15: 00007fffe7389778 [ 179.785112][T10074] [ 179.788144][T10074] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.795415][T10074] CPU: 0 UID: 0 PID: 10074 Comm: syz.4.1968 Not tainted syzkaller #0 PREEMPT(full) [ 179.804770][T10074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.814821][T10074] Call Trace: [ 179.818114][T10074] [ 179.821053][T10074] vpanic+0x56c/0xa60 [ 179.825030][T10074] ? __pfx__printk+0x10/0x10 [ 179.829632][T10074] ? __pfx_vpanic+0x10/0x10 [ 179.834122][T10074] ? is_bpf_text_address+0x292/0x2b0 [ 179.839406][T10074] ? is_bpf_text_address+0x26/0x2b0 [ 179.844598][T10074] panic+0xc5/0xd0 [ 179.848315][T10074] ? __pfx_panic+0x10/0x10 [ 179.852730][T10074] __warn+0x315/0x4c0 [ 179.856703][T10074] ? ip_rt_bug+0x2d/0x140 [ 179.861031][T10074] ? ip_rt_bug+0x2d/0x140 [ 179.865375][T10074] __report_bug+0x29a/0x540 [ 179.869870][T10074] ? NF_HOOK+0x336/0x3c0 [ 179.874116][T10074] ? netif_receive_skb+0x45b/0xbf0 [ 179.879213][T10074] ? tun_rx_batched+0x1de/0x790 [ 179.884058][T10074] ? ip_rt_bug+0x2d/0x140 [ 179.888382][T10074] ? __pfx___report_bug+0x10/0x10 [ 179.893422][T10074] ? ip_rt_bug+0x2d/0x140 [ 179.897744][T10074] report_bug+0x16a/0x220 [ 179.902077][T10074] ? ip_rt_bug+0x2d/0x140 [ 179.906395][T10074] ? ip_rt_bug+0x2f/0x140 [ 179.910721][T10074] handle_bug+0x9c/0x200 [ 179.914982][T10074] exc_invalid_op+0x1a/0x50 [ 179.919487][T10074] asm_exc_invalid_op+0x1a/0x20 [ 179.924335][T10074] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 179.929262][T10074] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 5a ff b8 f7 66 90 e8 53 ff b8 f7 31 ff 48 89 de ba 02 00 00 00 e8 54 7f 68 ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 179.948861][T10074] RSP: 0018:ffffc9000202f1c0 EFLAGS: 00010286 [ 179.954923][T10074] RAX: a42d19fb24e63500 RBX: ffff88805a6a63c0 RCX: 0000000000000401 [ 179.962890][T10074] RDX: 0000000000000002 RSI: ffffffff8dfaab66 RDI: ffffffff8c28ade0 [ 179.970869][T10074] RBP: ffffc9000202f4c0 R08: ffffffff9030dcf7 R09: 1ffffffff2061b9e [ 179.978831][T10074] R10: dffffc0000000000 R11: fffffbfff2061b9f R12: dffffc0000000000 [ 179.986791][T10074] R13: 0000000000000000 R14: ffff88805a6a63c0 R15: dffffc0000000000 [ 179.994767][T10074] ip_push_pending_frames+0x8b/0x110 [ 180.000050][T10074] __icmp_send+0x11e4/0x1690 [ 180.004632][T10074] ? __icmp_send+0x22b/0x1690 [ 180.009317][T10074] ? __pfx___icmp_send+0x10/0x10 [ 180.014272][T10074] ? ip_route_input_noref+0xad/0x270 [ 180.019551][T10074] ? __pfx_ip_route_input_noref+0x10/0x10 [ 180.025262][T10074] ? tcp_v4_early_demux+0x465/0x9c0 [ 180.030452][T10074] ? tcp_v4_early_demux+0x5a7/0x9c0 [ 180.035649][T10074] ip_options_compile+0x80/0xb0 [ 180.040507][T10074] ip_rcv_finish_core+0xaa2/0x1c00 [ 180.045636][T10074] ip_rcv_finish+0x14c/0x2a0 [ 180.050250][T10074] NF_HOOK+0x336/0x3c0 [ 180.054310][T10074] ? sock_wfree+0x26e/0x750 [ 180.058810][T10074] ? __pfx_ip_rcv_finish+0x10/0x10 [ 180.063916][T10074] ? NF_HOOK+0x9e/0x3c0 [ 180.068063][T10074] ? __pfx_NF_HOOK+0x10/0x10 [ 180.072653][T10074] ? __pfx_ip_rcv_finish+0x10/0x10 [ 180.077761][T10074] ? netif_receive_skb+0x102/0xbf0 [ 180.082862][T10074] ? __pfx_ip_rcv+0x10/0x10 [ 180.087352][T10074] netif_receive_skb+0x45b/0xbf0 [ 180.092284][T10074] ? __pfx_netif_receive_skb+0x10/0x10 [ 180.097744][T10074] ? tun_rx_batched+0x185/0x790 [ 180.102623][T10074] tun_rx_batched+0x1de/0x790 [ 180.107328][T10074] ? __build_skb+0x62/0x440 [ 180.111862][T10074] ? __pfx_tun_rx_batched+0x10/0x10 [ 180.117123][T10074] ? tun_get_user+0x2787/0x43e0 [ 180.121999][T10074] ? tun_get_user+0x2787/0x43e0 [ 180.126869][T10074] ? tun_get_user+0x2394/0x43e0 [ 180.131709][T10074] ? tun_get_user+0x2394/0x43e0 [ 180.136563][T10074] ? __local_bh_enable_ip+0xd0/0x130 [ 180.141865][T10074] tun_get_user+0x2bbc/0x43e0 [ 180.146567][T10074] ? tun_get_user+0x2787/0x43e0 [ 180.151432][T10074] ? aa_file_perm+0x50e/0x15e0 [ 180.156218][T10074] ? __pfx_tun_get_user+0x10/0x10 [ 180.161258][T10074] ? __lock_acquire+0x6b5/0x2cf0 [ 180.166195][T10074] ? ref_tracker_alloc+0x35c/0x4c0 [ 180.171305][T10074] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 180.176763][T10074] ? tun_get+0x1c/0x2f0 [ 180.180932][T10074] ? tun_get+0x1c/0x2f0 [ 180.185100][T10074] ? tun_get+0x1c/0x2f0 [ 180.189252][T10074] ? tun_get+0x1c/0x2f0 [ 180.193399][T10074] tun_chr_write_iter+0x113/0x200 [ 180.198420][T10074] vfs_write+0x61d/0xb90 [ 180.202673][T10074] ? __pfx_vfs_write+0x10/0x10 [ 180.207457][T10074] ? __fget_files+0x2a/0x420 [ 180.212038][T10074] ksys_write+0x150/0x270 [ 180.216358][T10074] ? __pfx_ksys_write+0x10/0x10 [ 180.221203][T10074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.227259][T10074] do_syscall_64+0x15f/0xf80 [ 180.231835][T10074] ? trace_irq_disable+0x3b/0x140 [ 180.236850][T10074] ? clear_bhb_loop+0x40/0x90 [ 180.241522][T10074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.247414][T10074] RIP: 0033:0x7f374915d60e [ 180.251846][T10074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 180.271464][T10074] RSP: 002b:00007f374a065fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 180.279908][T10074] RAX: ffffffffffffffda RBX: 00007f374a0666c0 RCX: 00007f374915d60e [ 180.287903][T10074] RDX: 0000000000000046 RSI: 0000200000000400 RDI: 00000000000000c8 [ 180.295893][T10074] RBP: 00007f3749232d69 R08: 0000000000000000 R09: 0000000000000000 [ 180.303882][T10074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.311865][T10074] R13: 00007f3749416038 R14: 00007f3749415fa0 R15: 00007fffe7389778 [ 180.319848][T10074] [ 180.323315][T10074] Kernel Offset: disabled [ 180.327629][T10074] Rebooting in 86400 seconds..