last executing test programs: 2.082796862s ago: executing program 2 (id=9): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@newsa={0x180, 0x2, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x22}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x1, 0x1}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}, @algo_crypt={0x48, 0x2, {{'cipher_null\x00'}}}]}, 0x180}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x1234, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x5678, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x13c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.93490813s ago: executing program 2 (id=10): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello\x00', 0x6}], 0x1, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvfrom(r0, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r3, &(0x7f0000000300), 0x20) read(r2, &(0x7f0000000700), 0x20) write(r3, &(0x7f0000000500)="0200", 0x2) read(r2, &(0x7f0000000314), 0x2) write(r3, &(0x7f0000000600)="00020000000000010000000000000001090101", 0x13) read(r2, &(0x7f000000031c), 0x13) sendto$inet(r0, &(0x7f0000000300), 0x2f, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000800)={0x0, 0x2faf080}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/256, 0x100}], 0x1}, 0x40) getsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000a00), &(0x7f0000000a20)=0x4) 1.702317833s ago: executing program 2 (id=11): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x34, &(0x7f0000000800)=ANY=[@ANYBLOB="001f000000000000"], 0x8) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.49488329s ago: executing program 4 (id=5): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='mount_timeout\x00', &(0x7f0000000150)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 1.434654693s ago: executing program 1 (id=2): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 1.418975665s ago: executing program 2 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca2100003800000028010000010100000200"/58, 0x3c) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca2200003800000028010000010100000200"/58, 0x3c) nanosleep(&(0x7f0000000700)={0x0, 0x989680}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca2000003800000028010000010100000200"/58, 0x3c) 1.261943277s ago: executing program 1 (id=16): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @loopback}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010103, @loopback}}}}}}, 0x0) 1.062528029s ago: executing program 1 (id=18): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='addr\x00', &(0x7f00000002c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='vers\x00', &(0x7f0000000340)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='proto\x00', &(0x7f00000003c0)='tcp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='port\x00', &(0x7f0000000440)='2049\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='mountport\x00', &(0x7f00000004c0)='2049\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 974.071955ms ago: executing program 0 (id=1): close(0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aa", 0x17) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000440)={0xfffc, 0x813, 0x5, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0xd, @rand_addr=' \x01\x00', 0x4}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0xfffffff7, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @loopback, [], "17c1ff2bbd7f66270b45655866973408"}}}}}}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x178, 0x8, 0xfa04, 0x178, 0x6c02, 0x278, 0x194, 0x194, 0x278, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x74020000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x39d, 0x3, 0xfff, 'netbios-ns\x00', {0x2}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0xffffff00, 'macvlan1\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x24}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xef, 0xa, {0x9}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2020}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0xa4}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) read$char_usb(r6, &(0x7f0000000540)=""/149, 0xffffffffffffff3c) pipe2$watch_queue(0x0, 0x80) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r6) eventfd2(0xb, 0x1) 902.586425ms ago: executing program 1 (id=20): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1000, 0x1, 0x10}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1000, 0x1, 0x10}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 855.541756ms ago: executing program 3 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0xffff, 0x2}}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x1, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="00112233445566778899", 0xa, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) 847.961863ms ago: executing program 2 (id=22): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='source\x00', &(0x7f0000000200)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='mon_addr\x00', &(0x7f0000000400)='127.0.0.1:6789\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) 689.928401ms ago: executing program 1 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) r1 = socket(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="240000001400050000000000000000002d000000020000000500020008000000", 0x20}], 0x1}, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) ioctl(r2, 0x89e2, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00') sendmsg(r2, &(0x7f0000000700)={&(0x7f0000000800)=@generic={0x2d, "0000000008190200"}, 0x20, &(0x7f0000000900)=[{&(0x7f0000000a00)="01020304", 0x4}], 0x1}, 0x0) 656.691383ms ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x92e0, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x8000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2000, 0x40000, 0x801f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x1, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, &(0x7f0000005280), &(0x7f00000052c0), 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000104, 0x0, 0x2}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x214, 0xb0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x180, 0xffffff7a, 0xffffffff, 0x180, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x39, "1e39b07d3e1b520ee8d840a0ffdd469f99bd9073a5b2e3fdb72891625714"}}}, {{@ip={@local, @multicast1, 0xffffff00, 0xffffffff, 'veth1_to_batadv\x00', 'syz_tun\x00', {0xff}, {0xff}, 0x33, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x7f00, 0x7f00, 0x7f00], 0x10}, {0xffff, [0x7f00, 0x1, 0x1, 0x3, 0x1d]}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x270) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r9], 0x40}}, 0x8080) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 647.328564ms ago: executing program 3 (id=25): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000001001000001000000010000000000000010000000000000001001000003000000"], 0x28}, 0x0) 476.374617ms ago: executing program 4 (id=26): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 452.043001ms ago: executing program 1 (id=27): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='hello', 0x5}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}], 0x18}, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x2faf080}, 0x0) sendmsg(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x14, 0x110, 0x2, "01000000"}], 0x2c}, 0x0) recvmsg(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001000), 0x100}], 0x1}, 0x40) nanosleep(&(0x7f0000001100)={0x0, 0x5f5e100}, 0x0) close(r0) nanosleep(&(0x7f0000001200)={0x3}, 0x0) 341.697438ms ago: executing program 3 (id=28): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000002900010000000000000000000a01010100000000000000000000000012340000020032000a0101030000000000000000000000000a01010400000000000000000000000000000000000000000a0101010000000000000000000000000a010102000000000000000000000000000000000000000002002020320000000000000000000000000000000200000002000000"], 0x94}}, 0x0) 298.992214ms ago: executing program 4 (id=29): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 262.09731ms ago: executing program 3 (id=30): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newsa={0x104, 0x10, 0x601, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x3c}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0x9, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x104}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000200)=@dstopts={0x11, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x18) sendto$inet6(r1, &(0x7f0000000300)="1122334455667788", 0x8, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) 132.68342ms ago: executing program 3 (id=31): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f0000000200)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x114}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0xb, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x54}}, 0x0) 0s ago: executing program 3 (id=32): r0 = socket$netlink(0x10, 0x3, 0x6) write(r0, &(0x7f0000000000)="500100001000050401000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000123432000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000000102030405060708090a0b0c0d0e0f00010203", 0x150) write(r0, &(0x7f0000000000)="fc0000001300050402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064000000000000000100000000000000440010000000000000000000000000000000000000001234320000000a0000000000000000000000000000000100000000000000ffffffffffffffffffffffff", 0xfc) r1 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 70.405440][ T5612] cgroup: Unknown subsys name 'net' [ 70.491707][ T5612] cgroup: Unknown subsys name 'cpuset' [ 70.500136][ T5612] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.430815][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.437311][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.881476][ T5612] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.056281][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.066268][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.068237][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.074075][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.088983][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.091782][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.104413][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.104566][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.128759][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.140533][ T5631] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.149205][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.156798][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.160846][ T4942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.172014][ T4942] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.177820][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.180861][ T4942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.188785][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.196718][ T4942] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.203032][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.209207][ T4942] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.217572][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.226090][ T4942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.237416][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.247131][ T4942] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.258206][ T4942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.235552][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.243928][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.251199][ T5640] bridge_slave_0: entered allmulticast mode [ 75.258548][ T5640] bridge_slave_0: entered promiscuous mode [ 75.294472][ T5639] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.301687][ T5639] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.308913][ T5639] bridge_slave_0: entered allmulticast mode [ 75.315899][ T5639] bridge_slave_0: entered promiscuous mode [ 75.323308][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.330447][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.337606][ T5640] bridge_slave_1: entered allmulticast mode [ 75.344807][ T5640] bridge_slave_1: entered promiscuous mode [ 75.371203][ T5639] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.378385][ T5639] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.385731][ T5639] bridge_slave_1: entered allmulticast mode [ 75.392806][ T5639] bridge_slave_1: entered promiscuous mode [ 75.476873][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.513064][ T5639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.524303][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.533968][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.541357][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.548580][ T5642] bridge_slave_0: entered allmulticast mode [ 75.555548][ T5642] bridge_slave_0: entered promiscuous mode [ 75.562979][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.570114][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.577241][ T5644] bridge_slave_0: entered allmulticast mode [ 75.584900][ T5644] bridge_slave_0: entered promiscuous mode [ 75.603395][ T5639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.622475][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.629789][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.637040][ T5642] bridge_slave_1: entered allmulticast mode [ 75.644356][ T5642] bridge_slave_1: entered promiscuous mode [ 75.651653][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.658921][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.666231][ T5644] bridge_slave_1: entered allmulticast mode [ 75.673451][ T5644] bridge_slave_1: entered promiscuous mode [ 75.722122][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.729586][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.736798][ T5641] bridge_slave_0: entered allmulticast mode [ 75.744201][ T5641] bridge_slave_0: entered promiscuous mode [ 75.762765][ T5640] team0: Port device team_slave_0 added [ 75.787456][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.794904][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.802598][ T5641] bridge_slave_1: entered allmulticast mode [ 75.809715][ T5641] bridge_slave_1: entered promiscuous mode [ 75.821407][ T5639] team0: Port device team_slave_0 added [ 75.829299][ T5640] team0: Port device team_slave_1 added [ 75.837103][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.849058][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.868102][ T5639] team0: Port device team_slave_1 added [ 75.895346][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.917197][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.976323][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.987133][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.994309][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.020802][ T5639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.033472][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.040669][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.066711][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.079995][ T5642] team0: Port device team_slave_0 added [ 76.096970][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.106980][ T5639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.114198][ T5639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.140189][ T5639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.154003][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.161084][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.187009][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.199785][ T5642] team0: Port device team_slave_1 added [ 76.207271][ T5644] team0: Port device team_slave_0 added [ 76.249475][ T5641] team0: Port device team_slave_0 added [ 76.267273][ T5644] team0: Port device team_slave_1 added [ 76.294775][ T5641] team0: Port device team_slave_1 added [ 76.309359][ T5634] Bluetooth: hci3: command tx timeout [ 76.311048][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.319178][ T5634] Bluetooth: hci4: command tx timeout [ 76.322145][ T4942] Bluetooth: hci2: command tx timeout [ 76.328003][ T5628] Bluetooth: hci1: command tx timeout [ 76.333684][ T5624] Bluetooth: hci0: command tx timeout [ 76.340482][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.371232][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.384115][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.391502][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.417724][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.435977][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.443008][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.469084][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.520725][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.527757][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.553677][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.599390][ T5640] hsr_slave_0: entered promiscuous mode [ 76.605863][ T5640] hsr_slave_1: entered promiscuous mode [ 76.621320][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.628307][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.654256][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.671095][ T5639] hsr_slave_0: entered promiscuous mode [ 76.677687][ T5639] hsr_slave_1: entered promiscuous mode [ 76.683983][ T5639] debugfs: 'hsr0' already exists in 'hsr' [ 76.689865][ T5639] Cannot create hsr debugfs directory [ 76.710446][ T5642] hsr_slave_0: entered promiscuous mode [ 76.716781][ T5642] hsr_slave_1: entered promiscuous mode [ 76.723222][ T5642] debugfs: 'hsr0' already exists in 'hsr' [ 76.729479][ T5642] Cannot create hsr debugfs directory [ 76.736971][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.744012][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.770237][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.813905][ T5644] hsr_slave_0: entered promiscuous mode [ 76.820249][ T5644] hsr_slave_1: entered promiscuous mode [ 76.826301][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 76.832117][ T5644] Cannot create hsr debugfs directory [ 76.923049][ T5641] hsr_slave_0: entered promiscuous mode [ 76.929391][ T5641] hsr_slave_1: entered promiscuous mode [ 76.935495][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 76.941465][ T5641] Cannot create hsr debugfs directory [ 77.411496][ T5639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.427453][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.435365][ T5639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.445824][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.455180][ T5639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.464643][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.473356][ T5639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.483934][ T5639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.557792][ T5640] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.568874][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.577918][ T5640] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.587066][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.595539][ T5640] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.604893][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.615898][ T5640] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.629184][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.727686][ T5644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.737307][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.754169][ T5644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.763724][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.773432][ T5644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.784117][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.792509][ T5644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.802837][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.900250][ T5639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.907601][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.917649][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.941142][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.951104][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.974814][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.984360][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.992555][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.003348][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.054650][ T5639] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.107481][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.115181][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.132412][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.151410][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.158654][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.175018][ T5641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.185304][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.194757][ T5641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.204208][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.212573][ T5641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.222024][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.243095][ T5641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.252267][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.272806][ T5640] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.307701][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.314858][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.358121][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.365300][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.389701][ T4942] Bluetooth: hci1: command tx timeout [ 78.389946][ T5628] Bluetooth: hci0: command tx timeout [ 78.395386][ T5624] Bluetooth: hci4: command tx timeout [ 78.400669][ T5629] Bluetooth: hci2: command tx timeout [ 78.411851][ T5634] Bluetooth: hci3: command tx timeout [ 78.463799][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.554333][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.567709][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.583126][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.590345][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.611298][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.619099][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.651184][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.682008][ T5639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.694592][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.723503][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.730761][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.756434][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.763587][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.821974][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.903317][ T5639] veth0_vlan: entered promiscuous mode [ 78.920035][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.934640][ T5640] veth0_vlan: entered promiscuous mode [ 78.944828][ T5639] veth1_vlan: entered promiscuous mode [ 78.973160][ T1358] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.980328][ T1358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.998209][ T5640] veth1_vlan: entered promiscuous mode [ 79.021006][ T1358] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.028126][ T1358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.041741][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.063545][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.122414][ T5639] veth0_macvtap: entered promiscuous mode [ 79.137614][ T5639] veth1_macvtap: entered promiscuous mode [ 79.183809][ T5640] veth0_macvtap: entered promiscuous mode [ 79.216984][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.228987][ T5640] veth1_macvtap: entered promiscuous mode [ 79.243315][ T5644] veth0_vlan: entered promiscuous mode [ 79.256775][ T5639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.274607][ T5642] veth0_vlan: entered promiscuous mode [ 79.295016][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.305114][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.323423][ T5644] veth1_vlan: entered promiscuous mode [ 79.330021][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.341478][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.365785][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.376082][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.386979][ T5642] veth1_vlan: entered promiscuous mode [ 79.423291][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.452090][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.463828][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.483306][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.494176][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.563934][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.575120][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.586513][ T5644] veth0_macvtap: entered promiscuous mode [ 79.638193][ T5644] veth1_macvtap: entered promiscuous mode [ 79.653296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.662881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.665855][ T5641] veth0_vlan: entered promiscuous mode [ 79.687041][ T5642] veth0_macvtap: entered promiscuous mode [ 79.728052][ T5641] veth1_vlan: entered promiscuous mode [ 79.746609][ T5642] veth1_macvtap: entered promiscuous mode [ 79.763353][ T5639] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.778617][ T1358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.788331][ T1358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.821312][ T5639] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.832238][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.839982][ T5639] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.852657][ T5639] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.866447][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.869675][ T5639] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 79.878877][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.935663][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.985060][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.990128][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.998960][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.004638][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.033119][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.042977][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.067107][ T1009] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.077913][ T1009] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.113044][ T1009] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.131698][ T1009] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.181010][ T5641] veth0_macvtap: entered promiscuous mode [ 80.241204][ T5641] veth1_macvtap: entered promiscuous mode [ 80.420009][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.438274][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.451477][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.468708][ T5628] Bluetooth: hci0: command tx timeout [ 80.474556][ T5634] Bluetooth: hci3: command tx timeout [ 80.476112][ T4942] Bluetooth: hci1: command tx timeout [ 80.480377][ T5629] Bluetooth: hci2: command tx timeout [ 80.485474][ T5624] Bluetooth: hci4: command tx timeout [ 80.495340][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 80.535667][ T5731] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.575894][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.590316][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.599539][ T5731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.612182][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.620298][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.635522][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.644506][ T5731] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8'. [ 80.667728][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.677170][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703093][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.714471][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734219][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.742476][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.770466][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.782383][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.893292][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 80.946618][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 81.127061][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.156114][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.265522][ T5753] tipc: Started in network mode [ 81.272582][ T5753] tipc: Node identity 1000001, cluster identity 4711 [ 81.279870][ T5753] tipc: Node number set to 16777217 [ 81.291316][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.294197][ T5755] syz_tun: entered allmulticast mode [ 81.313612][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.323274][ T5750] tipc: Enabled bearer , priority 1 [ 81.377664][ T5754] syz_tun: left allmulticast mode [ 81.394369][ T5749] tipc: Resetting bearer [ 81.451686][ T5749] tipc: Disabling bearer [ 81.931748][ T5776] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.330882][ T5800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 82.539550][ T5804] [ 82.542323][ T5804] ============================= [ 82.547204][ T5804] WARNING: suspicious RCU usage [ 82.552311][ T5624] Bluetooth: hci2: command tx timeout [ 82.552344][ T5624] Bluetooth: hci0: command tx timeout [ 82.552365][ T5624] Bluetooth: hci3: command tx timeout [ 82.562011][ T4942] Bluetooth: hci4: command tx timeout [ 82.564143][ T5804] syzkaller #0 Not tainted [ 82.569670][ T5624] Bluetooth: hci1: command tx timeout [ 82.586919][ T5804] ----------------------------- [ 82.592483][ T5804] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 82.601165][ T5804] [ 82.601165][ T5804] other info that might help us debug this: [ 82.601165][ T5804] [ 82.611766][ T5804] [ 82.611766][ T5804] rcu_scheduler_active = 2, debug_locks = 1 [ 82.620075][ T5804] 1 lock held by syz.4.29/5804: [ 82.624910][ T5804] #0: ffff888076cfead0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 82.636015][ T5804] [ 82.636015][ T5804] stack backtrace: [ 82.641966][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(full) [ 82.641982][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.641994][ T5804] Call Trace: [ 82.641999][ T5804] [ 82.642003][ T5804] dump_stack_lvl+0xe8/0x150 [ 82.642025][ T5804] lockdep_rcu_suspicious+0x13f/0x1d0 [ 82.642044][ T5804] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 82.642057][ T5804] xfrm_send_migrate_state+0x870/0xae0 [ 82.642079][ T5804] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 82.642097][ T5804] ? xfrm_state_migrate_install+0x192/0x630 [ 82.642109][ T5804] xfrm_do_migrate_state+0x1703/0x1e50 [ 82.642127][ T5804] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 82.642150][ T5804] ? __nla_parse+0x40/0x60 [ 82.642166][ T5804] xfrm_user_rcv_msg+0x7a8/0xf30 [ 82.642180][ T5804] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.642209][ T5804] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 82.642220][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 82.642235][ T5804] netlink_rcv_skb+0x226/0x4a0 [ 82.642250][ T5804] ? __mutex_lock+0x5d4/0x1550 [ 82.642262][ T5804] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 82.642273][ T5804] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 82.642291][ T5804] ? netlink_deliver_tap+0x2e/0x1b0 [ 82.642303][ T5804] ? netlink_deliver_tap+0x2e/0x1b0 [ 82.642315][ T5804] xfrm_netlink_rcv+0x79/0x90 [ 82.642326][ T5804] netlink_unicast+0x7bb/0x940 [ 82.642341][ T5804] netlink_sendmsg+0x813/0xb40 [ 82.642357][ T5804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.642371][ T5804] ? aa_sock_msg_perm+0xf1/0x1b0 [ 82.642385][ T5804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.642396][ T5804] sock_sendmsg_nosec+0x13a/0x180 [ 82.642412][ T5804] ____sys_sendmsg+0x54e/0x850 [ 82.642428][ T5804] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.642446][ T5804] ___sys_sendmsg+0x2a5/0x360 [ 82.642457][ T5804] ? __lock_acquire+0x683/0x2cf0 [ 82.642472][ T5804] ? __pfx____sys_sendmsg+0x10/0x10 [ 82.642487][ T5804] ? do_raw_spin_lock+0x12b/0x2f0 [ 82.642510][ T5804] ? __fget_files+0x2a/0x420 [ 82.642523][ T5804] ? __fget_files+0x3a2/0x420 [ 82.642541][ T5804] __sys_sendmsg+0x177/0x240 [ 82.642552][ T5804] ? _raw_spin_unlock_irq+0x2e/0x50 [ 82.642562][ T5804] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.642582][ T5804] __do_fast_syscall_32+0x23e/0x6f0 [ 82.642595][ T5804] ? do_fast_syscall_32+0x33/0x70 [ 82.642607][ T5804] ? lockdep_hardirqs_on+0x7a/0x110 [ 82.642619][ T5804] ? irqentry_exit+0x10f/0x8f0 [ 82.642629][ T5804] ? trace_irq_disable+0x3b/0x140 [ 82.642644][ T5804] do_fast_syscall_32+0x33/0x70 [ 82.642657][ T5804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.642669][ T5804] RIP: 0023:0xf708f0ec [ 82.642684][ T5804] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 82.642692][ T5804] RSP: 002b:00000000f545c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 82.642704][ T5804] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 82.642711][ T5804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.642718][ T5804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.642723][ T5804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.642729][ T5804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.642750][ T5804] [ 83.104483][ T5811] netlink: 100 bytes leftover after parsing attributes in process `syz.3.32'. [ 83.149326][ T810] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.234331][ T5779] gtp0: entered promiscuous mode [ 83.240411][ T5779] gtp0: entered allmulticast mode [ 83.309995][ T810] usb 1-1: Using ep0 maxpacket: 32 [ 83.323767][ T810] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 83.345266][ T810] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 83.354915][ T810] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 83.364228][ T810] usb 1-1: Product: syz [ 83.368933][ T810] usb 1-1: Manufacturer: syz [ 83.374393][ T810] usb 1-1: SerialNumber: syz [ 83.397647][ T810] usb 1-1: config 0 descriptor?? [ 83.411432][ T5772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 85.141300][ T5718] usb 1-1: USB disconnect, device number 2 [ 91.916485][ T10] cfg80211: failed to load regulatory.db