last executing test programs: 3.278741361s ago: executing program 0 (id=1018): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000000)="7c9d271545992f82853daa5b87bf3c336b89613dcba24ca31b628e76f08c91d8648b172778c7d8c383551d61d7415d26d1f75337f75e2b14e57e96634f65b867a2af901340f35849c55818d7fd75565d1fe965cc6b610e35b6a8295f5b749b26f6fe7b") (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000080)='\x00', 0x2000, &(0x7f00000000c0)={@align=0x8, {0x2, 0x0, 0xa, 0x8}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x64e}) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f00000001c0)={'wg2\x00', 0x200, 0x7}) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='nr0\x00', 0x10) (async) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x2380, @empty, 0x304}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1800e12}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xa, 0x6c}}}}, ["", "", "", "", ""]}, 0x30}}, 0x8804) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfeb1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000005c0)=0x1, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@gettaction={0x1c, 0x32, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4008041) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000700)={0x0}, &(0x7f0000000740)=0xc) r5 = syz_open_procfs$namespace(r4, &(0x7f0000000780)='ns/time\x00') setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f00000007c0)=0x1, 0x4) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000800)={0x77359400}, 0x10) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, 0xc, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000980)={0x6, [0xc13, 0xc0, 0x5, 0xbb63, 0xfffb, 0xfffc]}, &(0x7f00000009c0)=0x10) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$XFS_IOC_SCRUB_METADATA(r6, 0xc040583c, &(0x7f0000000a00)={0x0, 0x121, 0x5, 0x6, 0x4}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x1b0, r7, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5b}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x24, 0xfc, "104e981f5073e1867d285ed0cb0a61ffc8ee6417ac0db12e4f9d807cd6598c33"}, @NL80211_ATTR_FILS_ERP_REALM={0x74, 0xfa, "4944c280d1c6e7817955d674feadf93d049b2372aed76b88d6394becb821a8c9a26e871bc459d55c9a3dbaeebbdd16903658b61ac6e44575cdac7cab5cac7754d0187b21e90d9f199f4a436b798cc6338282a5bcd8e8b87b9219c8baf2e0324e3a9a3767c499bb4a2c523855ef820164"}, @NL80211_ATTR_FILS_ERP_REALM={0xe8, 0xfa, "6e77afa9b1458d091196687a2b81d85252e57ff810b724a055b80f6de4e415ded62053b1281dd376a52480d00ed2ae4b423b016d62be5d4d84c1db6a4334a17e811a43903fed4d800f5669295d50a7dc46653b247e02d025ddbc80e5750e75c72996b9a039a479411992330c4677179a29db2f53c73e1100653ccdc0bcc164bd05eb447951778ac53b0739485cd0cb12735cf976973830f0f39c5e70ed90ff5599f7184b1f9d998a280dd2172ed15e3eaf8d3568bc1b5d0939cbf8c7e634ca0a268768cf6abb31edb2143e419a1e106ddfceaa7ec01ab6aa2b9c6078fb9459848871ab4e"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xfbff}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x99b8}]]}, 0x1b0}, 0x1, 0x0, 0x0, 0x804}, 0x20048880) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000d00)={0x0, 0x56, "e8102ba57ca7ba48423c86e9f381dabc9177b768e884e48a32705a66857eec88d5cf9507aad4d81c13b5000ef9de7769c821e93451f8452349b36af897ee27dec357cf56e59fd4825833411b15a7037102aca9f1d6a7"}, &(0x7f0000000d80)=0x5e) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000dc0)={r8, @in={{0x2, 0x4e21, @loopback}}, 0x3, 0xbe54}, &(0x7f0000000e80)=0x90) (async) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000ec0)=""/20, &(0x7f0000000f00)=0x14) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000f40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001140)={"016eae43e7771a74e123f8cd5b410501", r9, 0x0, {0x8, 0x2}, {0x4, 0xb2d}, 0x8, [0x5, 0x4f35, 0x0, 0x7fffffff, 0x5014, 0x6, 0x3, 0x0, 0x7, 0x0, 0x9, 0x100000001, 0x9, 0xf800000000000000, 0x6, 0x3]}) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000001240), &(0x7f0000001280)=0x4) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) read(0xffffffffffffffff, &(0x7f00000012c0)=""/65, 0x41) 2.96606003s ago: executing program 0 (id=1022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x19}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xde, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c84, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) r6 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0xff, 0x8, 0xd21c, 0x81, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r9, 0x1}, &(0x7f0000000380)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000780)='syzkaller0\x00', 0xb) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10) 2.566127961s ago: executing program 0 (id=1027): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.667824452s ago: executing program 2 (id=1036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x46854}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x8, 0x3000000000002, 0x0, 0x48000}, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) bind(r2, &(0x7f0000000800)=@can={0x1d, r3, 0x1, 0x2}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg$unix(r2, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)=""/146, 0x92}, {0x0}, {&(0x7f0000000a00)=""/103, 0x67}], 0x3}}], 0x40000eb, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=0x0, @ANYBLOB="eaab958e8a2b4264e754792df45246473f7df6a54148cb7dcb718e642d3d67ba6cc619756967821059dda8af53e9b33857121da6a3fa1d777b71c7a804d5c3d5095a7cf92c312ef6dcdd02c100390f76abdfef960003ba061ecf37fbe01c0292431793909c972febf92e5e8315f09259f326ca6b811b4f38482c87a40e9a3bea4c8b79730cf6a6442ccc5a9f1018bb346f6a1d0937350d40"], 0x1c}}, 0x0) connect(r2, &(0x7f0000000d00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x3, 0x4, "ddbbe7f1f26fdea88b92ff6f8aceb250f678fc92c6c25bd1a0fcab733fec870e30a622f9593811044d81f261a119c6cd1e1ab02f6f7087741d64a37215a949", 0x35}, 0x80) sendmsg$can_raw(r4, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1d, r3}, 0x10, &(0x7f0000000b00)={&(0x7f0000000b40)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, "0100"}, 0x10}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time_for_children\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', r3, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd2b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000440)={0x3}, 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000004c0), 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x8, 0x4300c962}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x6c}}, 0x0) sendto$inet6(r7, &(0x7f0000000180)='_', 0x1, 0x4000004, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @mcast1, 0x80}, 0x1c) r11 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r11, &(0x7f0000000500)=[{{&(0x7f0000000580)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000600)='/', 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000006c0)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000025c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) close(r0) 1.290742511s ago: executing program 2 (id=1038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e21, 0x4, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="1a", 0x1, 0x4000840, &(0x7f0000000600)={0xa, 0x4ea3, 0xfffffffe, @loopback}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)="11", 0xfffd}], 0x1}}], 0x1, 0x8015) 1.275478464s ago: executing program 0 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x2f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @fd=r0}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendto(r1, &(0x7f0000000180)="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", 0xa9, 0x11, 0x0, 0x26) 1.262314355s ago: executing program 2 (id=1040): r0 = socket(0x10, 0x2, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1}, 0x4) mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.126419501s ago: executing program 4 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x80000000, 0x5, {{0x1f, 0x4, 0x1, 0x3f, 0x7c, 0x65, 0x0, 0x5, 0x4, 0x0, @empty, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x1, [{@remote, 0xf}, {@multicast2, 0x4}, {@empty, 0x33f1}]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "3e8ab1cca30d0aef70a91b16f74082"}, @lsrr={0x83, 0xf, 0x9c, [@dev={0xac, 0x14, 0x14, 0x2b}, @local, @dev={0xac, 0x14, 0x14, 0x10}]}, @noop, @timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x7, [{@multicast2, 0x7}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xb7, [@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, @multicast2]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x80000000, 0x5, {{0x1f, 0x4, 0x1, 0x3f, 0x7c, 0x65, 0x0, 0x5, 0x4, 0x0, @empty, @private=0xa010100, {[@timestamp_prespec={0x44, 0x1c, 0x1d, 0x3, 0x1, [{@remote, 0xf}, {@multicast2, 0x4}, {@empty, 0x33f1}]}, @ra={0x94, 0x4}, @generic={0x83, 0x11, "3e8ab1cca30d0aef70a91b16f74082"}, @lsrr={0x83, 0xf, 0x9c, [@dev={0xac, 0x14, 0x14, 0x2b}, @local, @dev={0xac, 0x14, 0x14, 0x10}]}, @noop, @timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x7, [{@multicast2, 0x7}, {@loopback, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xb7, [@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010100, @multicast2]}]}}}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', r1, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.124294568s ago: executing program 1 (id=1042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r0, @ANYBLOB="0000000004000000b7050000080000006608f0ff76000000cf4900000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 1.116158963s ago: executing program 0 (id=1043): r0 = socket(0xa, 0x3, 0xff) shutdown(r0, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000200)={r0, &(0x7f0000000040)='\x00', 0x40000, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x5fbb]}, {0x400, 0x2496, 0xfffffff9, 0x7}}, 0x1, &(0x7f00000000c0), &(0x7f00000001c0)=0x2}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x0, 0xf3, &(0x7f0000000240)="58fc529570855796abad0462af7898433be1f7f4dd7fad18f2ceae9ec4790ea008672c37f04fcab6b684cd45d059044b4a8d9c9ab4fafb316906e98d3de1cdb72720f6c4fe6ebc2a74c625e94d4daea4410e2b6381bf9ce4909cb2365c30c3140b79115555a0e3701a238ca783ea9b114b0b93f6e6cc1dafcc086b71d033223e201b3b5798171e27976e78840d35e787d175d9acdce71ea5be43fa696f309365dd794a6dd38512ea9cdbdad69552888d4af7fe5e16f50d5157e624c0cb00b409a8467816c72b4579f239b8c82858c9ccc4a62e0a8aa544af07ee908bc110c9879ce2e271cfbbc49f785041af1b1b86de8e1a57", 0x9, 0x3, 0x80, 0x8000, 0x2, 0x0, 0x0, 'syz0\x00'}) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x7}, {&(0x7f0000000180)="9e91d91a92dc7c8f06c24fbe79d9284d0c66c92c658bb539e2ffb332c99223a7df", 0x21}], 0x2}, 0x20008b88) 1.074333113s ago: executing program 2 (id=1044): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 951.460922ms ago: executing program 2 (id=1045): r0 = syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @empty}}}}}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, r1, 0x44001, 0x1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 950.017954ms ago: executing program 1 (id=1046): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000780)='./cgroup/cgroup.procs\x00', &(0x7f00000007c0)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000800)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000840)=r2, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={r3, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x3, &(0x7f0000000580)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa3}}, &(0x7f00000005c0)='GPL\x00'}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x9, 0x140, 0xb, 0x368, 0x250, 0x250, 0x368, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xf8, 0x140, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x8, 0x8727aef2dab6f0c4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 912.227085ms ago: executing program 2 (id=1047): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) 901.466897ms ago: executing program 0 (id=1048): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/107, 0x6b}], 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000dc0)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40800) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000bc0)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x6, 0xa00, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x3ff, 0x6, 0xfffffffb}}]}]}}}]}, 0x6c}}, 0x4000080) bind$packet(r1, &(0x7f0000000c40)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000c80)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000ec0)="fb0eb91e436f636eca1a09c4022119941729541329c3c466e0021e7f5e68a19d5bd625dc24585cf0f98009751b27a405e162e66f631b59803d8ab5649ea2bde7253634abed83", 0x46}, {&(0x7f0000000280)="1902e902d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5c2df6b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000600050003"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @sk_skb}, 0x94) 839.375817ms ago: executing program 3 (id=1049): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000280)=0x84, 0xfde1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r1, r2, 0x0, 0x800) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000000c0), 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x1e5, &(0x7f0000000480)={&(0x7f00000004c0)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$inet6(r0, 0x0, 0xfffffe8b, 0x4, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000440), 0x4) 836.94308ms ago: executing program 4 (id=1050): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x34, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20005004}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0x22, 0x0, &(0x7f0000000800)="00000000000000000000000008004500002800000000400600007f0000017f000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 742.798297ms ago: executing program 3 (id=1051): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x81}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xdb7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8}]}]}, 0xa4}}, 0x8c0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x30, r3, 0x501, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040800}, 0x8040) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}], @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8914}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}]]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x3, 'netdevsim0\x00', {}, 0x4}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x44840}, 0x20040040) 704.574756ms ago: executing program 4 (id=1052): r0 = socket$kcm(0x10, 0x2, 0x0) tee(r0, r0, 0x4, 0x6) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000000)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000001c0)="01", 0x1}], 0x1}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="b8", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x200480e0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c40)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="300000001c00010029bd7000fadbdf2507000000", @ANYRES32=r11, @ANYBLOB="4000ac0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x48088) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x38, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000b40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000005c0)={0x50c, r5, 0x600, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x32}}}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0xd9}, {0x8}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_IE={0x40, 0x2a, [@tim={0x5, 0x3a, {0xe2, 0xee, 0x7, "2581b918ed1f2d8a0fec01d341210b2a8ca6eb663e613bca658c03602568fedefe6eacca09e39027523b86ddc6e4ad4d58c5ff290d1390"}}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="729fcbdc5c87"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x6}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}, @NL80211_ATTR_SCAN_FREQUENCIES={0x2c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfffffff0}, {0x8, 0x0, 0x8}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x101}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x94, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x27, 0x0, "d2f0967f368735b037cb98c16585abdb311689fb8bae18c0c66384b3ecebc4026ebe55"}, @NL80211_BAND_5GHZ={0x65, 0x1, "7437e143905706338456242b0be08f2e8ec4493e9fb89dae05b798e71683e5b78b499c7a10d074551a6f93e899bd6d0801c765e60f5f33dbdc3556ca167371f19ba0d5199982290a77460af16ecb78181f999ed7fbe7755a6ecf9d555310c52066"}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x390, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x24, 0x0, "3783437cbb7b29e226c64b9cddb7fb2008d041ca5a1274218764aaf693b2ba1f"}, @NL80211_BAND_5GHZ={0xc6, 0x1, "53d22995cff38e9e4bfbb02e54258ae88f13a4a7f467540baf858e814462241a336f875cc2d0cbe66f85baafa9a90c502502a92a096a28b7e0d4fbb9135926c150e2110de2f0f1083444834f1ede15bf9c75b66575310e7dd87651906360c3dd671f94c9f177280c2116946828448cd1f9eb9f809adedfb1d3716aea51f488e23b1dc75fd825b467a49dbd9feaed3157889fcb695acbe09e13267765684dd6f2be4ff7b1871b59323da68799f9250956e2035a80ac46448e3c62884e75f8b326cbc8"}, @NL80211_BAND_6GHZ={0x5b, 0x3, "514797fbd1207ad98c035fa3d2462cc0f6cba97a95450dc6be90b14b8d8a6a9d7008d9afb1d0f41d7bb5e1bba45935a911349ed4ae91b7e989f42cdfa378ac33784aa794e3029949e1805d3882d0c6d0c056263cd43f8c"}, @NL80211_BAND_60GHZ={0x37, 0x2, "f7c87973ad648cf0f02d2efdc496d99849ae92ca1cd21375a9d21964b6016b05cec0a546a0469b85efb5ad05c28b1349a0d0a6"}, @NL80211_BAND_2GHZ={0xba, 0x0, "651b16ede48295a8afad37ba4989cf7346658ebb25b810ce044a0077886f14220ba1377c1131bceb589fdfdbbb565e5c314b33296fca141189992363567ec3bddec7d6be2700199297785f79ac2240996360ee49fe10724e7fdde529924b9c68e35f14581f03130ebb7c707ff3e054a87c094af7d3b00dc25ee8a18fe7509980263272731ae3898ad2755d70dc79efea607d5aa62a6fb8958b3102571838e38cad297446cc542d96f5d57e2bcd20fdb908fef37b63f8"}, @NL80211_BAND_5GHZ={0x54, 0x1, "458e093d7068e737d46dfda237ee9e4e893a5b75270107cb627e230ddf509aaa30a809ab6c5610248be1767500aab2d3ed14ddcfbb473beb1aab6298807bc4b5018f1ce1b209802e585b06d83f1ba212"}, @NL80211_BAND_5GHZ={0xf9, 0x1, "2fba95d9eaeab35e33c53b8eecf38d7ad41617e889dcb473d0bb273218207231a3e1a61a9ce5a23874db95ceb0841e812e453652bb051abedda7b2745cd97c7a3d8c249c32270f70efb0090f830477cb7f8212ef889a5aa1f37992ba902939dd4bb4d9bae1f2c08eeddb6944d5dd8ab8271256acd6c22902865e2ed13dcad7afd13ddc74af6928e59cd4d644c6c5dd1ecc5158b28a12c8c9d88af0115eede28f2dcec6799b72243138077a4219b1e0d4c6c3faf6c77c13e98d694b17af8316fd6b47daa7b329632dba48c91f7f693ce691b817ef098eab4f58735ae178fdc9e80cf2e02f3bab1f12de50a79ca595b9453b67cbbd24"}]}]}, 0x50c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000002c0)={0x0, 0xfffe}, 0x8) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40) 627.483955ms ago: executing program 1 (id=1053): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000000000007111ab00000000008510000002000000850000002a00000095000000000000009500a505000000008d8d72a4d2b0e866647a5563580154525990a711faae6b5efa82c515c097c645d4a49869490531e6fc004371de6a0e2aeb39db28a841fee433ca770c6799b28945ba973ff15b71d81a48f65b229efa31eb19c4d6945c8db59bf97ce0d74761c6ededcdebebfcd90759bd2cfe8b4253a9468fe5b0759b99a37a189ddd91f7bf447837"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 576.389384ms ago: executing program 3 (id=1054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x400, 0x70bd27, 0x1, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x5c, 0x8001, 0x3, 0x5, 0xfffffff8}, @multicast1, @multicast1, 0xffffff00, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 575.809081ms ago: executing program 1 (id=1055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd1100000000000007785040000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4008050, &(0x7f0000000100)={0x11, 0x9, r3, 0x1, 0x4, 0x6, @broadcast}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000400)="c2", 0x1, 0x4050, &(0x7f0000000440)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f00000004c0)=0xc) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newae={0x70, 0x1e, 0x399, 0x0, 0x0, {{@in6=@mcast1}, @in6=@local}, [@lifetime_val={0x24}, @mark={0xc}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex=r3, r1, 0x16, 0x2004, 0x0, @value=r5}, 0x20) 536.509443ms ago: executing program 4 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) 391.010934ms ago: executing program 3 (id=1057): r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x7, r0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000001500)={&(0x7f0000000500)=""/4096, 0x16000, 0x1800, 0x800, 0x1}, 0x20) 355.467622ms ago: executing program 3 (id=1058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000017340005800c0001007061796c6f6164002400028008000340400000920800024000000000080004400000000008000140000000110800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f0000000300)=0x68) 281.763847ms ago: executing program 1 (id=1059): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='][\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x2]}, {0x7, 0x2, 0x1, 0x7}}, 0xffff, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(r0, 0x84, 0x84, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x7f58000, @loopback, 0x21}}, 0x4e20}, 0x90) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x200400a1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r3) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000440)={0x2e0, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ID={0x72, 0x3, "3bf640d484c9846864658ecf0eaed1842f136f9db8b77eae515131778b8ec8cd4817e20a2badfc9cc5918966f1d1b9a00fd8e542f8b27b1ea54e7a0e5c158ba9274ba07db140751170a87b8c3baf2d204ec6a9f7d82ae8a1bf6245c9f8d29332061322fefcc7f7dced6a0be4a181"}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfb, @remote, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff55e9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x91, @empty, 0x18f9a51e}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x83}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "55d665d8e2332f11f78b6224dd263da5e568d5e6fc5961046f14540b484019"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a30c367bd8192971cf41f5e727a9cc8fec6889156593"}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4040090) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000b80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b40)={&(0x7f00000008c0)={0x244, r6, 0x10, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="021dcb88636a368f4f5eb08457510f1d"}]}, @NL80211_ATTR_REKEY_DATA={0x80, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "db75a99aa3d3e306"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1023b075c629b084"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="02ca28df07ae572c615a7bd0964c7414"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a37cc6b1081a530854048abe6ea4e3e5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4a111daeca02d852"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3ff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7fe82a17edd18709"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4d95c07b928ac2b4c31a58354567098f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9c60aa812fe8c16fc1cee6636dd5281f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="055225da12bd6e95f26ce397631d1780"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4e6793d664f392bb"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b19412af97cfbea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f082e8cf3f58f3ea"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d7cef5ec9b802d4e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a7bd947f8eb35596"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c3930540bf6d544b2787f3614ca1c85b5d5362be018f5e6e"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a0109f47a5126920"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="f91125b2b90adac26d217a784b5ea7cd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "c2812d878c5f0718"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="49ea81c4d1721eece691e958fd1aae3d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6f54154ca6796633"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6472fc0e1c243b1e3d47dbf85733aeca"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="54de2873fb217e461167a4760dd2bb76b43334df003595f1"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f3fb300fc2103964"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "31fce40ada28814c"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ac03c4cb7fb0a314"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="139abb75f32d8306948873fca696ddac"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="68b97cec7e705857d7a0eea65697c172d76b653a2476496c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="22d0a96028eae61e9740a1fce252d27c"}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x840}, 0x40) (async, rerun: 64) ioctl$XFS_IOC_SCRUB_METADATA(r3, 0xc040583c, &(0x7f0000000bc0)={0xd, 0x48, 0x1c5, 0x10, 0x2}) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@cgroup=r0, 0x1d, 0x1, 0x2, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000e00)={'syztnl2\x00', &(0x7f0000000d80)={'tunl0\x00', 0x0, 0x80, 0x700, 0x101, 0x7, {{0x9, 0x4, 0x2, 0x1, 0x24, 0x64, 0x0, 0x81, 0x4, 0x0, @loopback, @local, {[@end, @generic={0x89, 0xd, "a596db41d6c410e0a0cca4"}]}}}}}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@ifindex=r9, 0xffffffffffffffff, 0x17, 0x20, r0, @void, @void, @void, @value, r8}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1, 0x69}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x82}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c810}, 0x8010) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001000), r3) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x6, 0x8, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x20, 0x1ff, 0xe8b}}) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001180)={'ip6tnl0\x00', &(0x7f0000001100)={'syztnl1\x00', r9, 0x29, 0x7, 0x9, 0xeb7, 0xef75c80d28b91af3, @mcast1, @mcast2, 0x1, 0x7, 0x0, 0x6}}) (rerun: 32) sendmsg$ETHTOOL_MSG_STATS_GET(r0, &(0x7f0000001380)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={&(0x7f00000011c0)={0x168, r11, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STATS_SRC={0x8, 0x3, 0x3}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STATS_GROUPS={0x54, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5e}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\\!{}\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'eth'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_GROUPS={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'gcm(aes)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'batadv0\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-/^*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '[-^)&v\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'[\xe0/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.!-/\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}]}, @ETHTOOL_A_STATS_SRC={0x8}, @ETHTOOL_A_STATS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_STATS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r4, 0x8010671f, &(0x7f0000001480)={&(0x7f00000013c0)=""/139, 0x8b}) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001500)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_INTERFACE(r14, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb271ca874d19f6d}, 0x1) (async) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000001700)={&(0x7f0000001600), 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x44, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x27}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) sendmsg$nl_generic(r4, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001880)={&(0x7f0000001780)={0xc8, 0x23, 0x410, 0x70bd29, 0x25dfdbfc, {0xe}, [@generic="a50063957c91bbeafd7f09dfd5e111ff938db6176e99217aa21e532c6445ff4f1955be63508f345bfd28865d7c97bc985fea6598683cd5bbdeb52c5fb8d5dbf2f19fd104cd80a58e3dade5ab4c52c69c447d006ce28d9e515f2a891616290e9303bc887f022078d82fe552cfb32ff092cc7e3cd77586a26f07693144d3b36a70be", @typed={0x8, 0x23, 0x0, 0x0, @fd=r7}, @typed={0x27, 0x99, 0x0, 0x0, @binary="e796f836ea815ea3eba9ad92077924712ebb15d7c824c84cad797f760e14a88d9eb775"}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet_sctp6_SCTP_ASCONF_SUPPORTED(r0, 0x84, 0x80, &(0x7f0000001900)={r1, 0x1000}, 0x8) 207.552289ms ago: executing program 4 (id=1060): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000002c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x2, [{{0x2, 0x0, @rand_addr=0x64010102}}, {{0x2, 0x0, @dev}}]}, 0x190) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7fffffff, 0xd5bc, 0x981b}) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f00000001c0)=0x2) (async) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f00000001c0)=0x2) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000b20400000024db64bd73af30407cf467861000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000003062000020001280080001006774700014000280080004000100000008000100", @ANYRES32=r1, @ANYBLOB="0a0003003a712f0756b80000"], 0x4c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 207.264109ms ago: executing program 3 (id=1061): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) 89.070445ms ago: executing program 4 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) nanosleep(&(0x7f0000000080)={r1, r2+60000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="05a002000000000028001edf383fcaf5fd6a26e2128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500bb57", @ANYRES32=0x0, @ANYBLOB="926c7b94e1b094d20795d58ff224971afbf65a0d6b1fb17b1cc5d3fa0b997a51ec15152403f1c6b7afb0467aa911d6fa8cb02c1dec4be7bd999fe2e661d7c8b7f22c1d6ec36cb22d0db2142cc1bf47cf22bdc38d8a1057870f964502c0c84388e5f1221b228f415817b9546efca2acfee1466d6bc2805eedc416f6f009eac9ac76060841a810f295834fcc6685f38b8bd1341ee7aaf2235fbf0398fea7d28aded1031f9bc62499ed0b65b0b815117b421a70027881cc4e9a610411c100"/203], 0x50}, 0x1, 0xba01}, 0x0) 0s ago: executing program 1 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001b40)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x48000009, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x1e}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x1f, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001b80)={'bridge_slave_0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001cc0)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x3, {@ip4=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 76.835130][ T5624] cgroup: Unknown subsys name 'net' [ 76.976292][ T5624] cgroup: Unknown subsys name 'cpuset' [ 76.984869][ T5624] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.705677][ T5624] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.997510][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.998414][ T5644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.999708][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.999799][ T5644] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.000317][ T5644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.000565][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.001951][ T5643] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.004267][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.004889][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.032272][ T4955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.033540][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.036267][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.043352][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.059991][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.067004][ T5643] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.116211][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.119158][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.120294][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.122164][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.123044][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.124385][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.125381][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.126036][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.140156][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.142490][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.118241][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.124918][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.126412][ T5638] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.142695][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.301514][ T5636] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.312478][ T5634] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.456205][ T5645] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 82.948884][ T5635] infiniband rxe0: set active [ 82.948907][ T5635] infiniband rxe0: added rxe_eth0 [ 82.985572][ T5635] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 82.985611][ T5635] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 82.985649][ T5635] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 83.045592][ T5635] RDS/IB: rxe0: added [ 83.045905][ T5635] smc: adding ib device rxe0 with port count 1 [ 83.045990][ T5635] smc: ib device rxe0 port 1 has no pnetid [ 83.070108][ T2248] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.079012][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.092714][ T5637] Bluetooth: hci0: command tx timeout [ 83.092836][ T5637] Bluetooth: hci2: command tx timeout [ 83.092911][ T5637] Bluetooth: hci1: command tx timeout [ 83.141361][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.143765][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.182659][ T5643] Bluetooth: hci4: command tx timeout [ 83.182856][ T5643] Bluetooth: hci3: command tx timeout [ 83.359245][ T30] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.446127][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.865376][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.122256][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.123386][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.123567][ T5638] bridge_slave_0: entered allmulticast mode [ 84.126043][ T5638] bridge_slave_0: entered promiscuous mode [ 84.176943][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.177068][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.177190][ T5638] bridge_slave_1: entered allmulticast mode [ 84.178827][ T5638] bridge_slave_1: entered promiscuous mode [ 84.208553][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.344352][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.376596][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.376824][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.376954][ T5634] bridge_slave_0: entered allmulticast mode [ 84.379612][ T5634] bridge_slave_0: entered promiscuous mode [ 84.396905][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.397031][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.397149][ T5636] bridge_slave_0: entered allmulticast mode [ 84.404332][ T5636] bridge_slave_0: entered promiscuous mode [ 84.416092][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.448635][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.448835][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.449414][ T5645] bridge_slave_0: entered allmulticast mode [ 84.451513][ T5645] bridge_slave_0: entered promiscuous mode [ 84.482148][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.482246][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.482365][ T5634] bridge_slave_1: entered allmulticast mode [ 84.484242][ T5634] bridge_slave_1: entered promiscuous mode [ 84.501245][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.501354][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.501794][ T5636] bridge_slave_1: entered allmulticast mode [ 84.504402][ T5636] bridge_slave_1: entered promiscuous mode [ 84.538870][ T5638] team0: Port device team_slave_0 added [ 84.543111][ T5638] team0: Port device team_slave_1 added [ 84.563957][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.564043][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.564145][ T5645] bridge_slave_1: entered allmulticast mode [ 84.566967][ T5645] bridge_slave_1: entered promiscuous mode [ 84.650343][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.663773][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.694040][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.694108][ T5635] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.698204][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.717908][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.734858][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.734876][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.734899][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.739690][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.773628][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.773645][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.773683][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.791649][ T5634] team0: Port device team_slave_0 added [ 84.798737][ T5636] team0: Port device team_slave_0 added [ 84.860233][ T5634] team0: Port device team_slave_1 added [ 84.863444][ T5636] team0: Port device team_slave_1 added [ 84.875515][ T5645] team0: Port device team_slave_0 added [ 84.879312][ T5645] team0: Port device team_slave_1 added [ 85.033720][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.033740][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.033766][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.035323][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.035338][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.035364][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.039357][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.039373][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.039399][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.126738][ T5638] hsr_slave_0: entered promiscuous mode [ 85.128127][ T5638] hsr_slave_1: entered promiscuous mode [ 85.129900][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.129914][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.129936][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.135099][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.135115][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.135139][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.146707][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.146723][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.146746][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.177772][ T5637] Bluetooth: hci1: command tx timeout [ 85.177810][ T5637] Bluetooth: hci2: command tx timeout [ 85.177833][ T5637] Bluetooth: hci0: command tx timeout [ 85.268868][ T5643] Bluetooth: hci3: command tx timeout [ 85.268906][ T5643] Bluetooth: hci4: command tx timeout [ 85.381602][ T5634] hsr_slave_0: entered promiscuous mode [ 85.382938][ T5634] hsr_slave_1: entered promiscuous mode [ 85.383771][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 85.383786][ T5634] Cannot create hsr debugfs directory [ 85.426106][ T5636] hsr_slave_0: entered promiscuous mode [ 85.426808][ T5636] hsr_slave_1: entered promiscuous mode [ 85.427365][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 85.427385][ T5636] Cannot create hsr debugfs directory [ 85.495728][ T5645] hsr_slave_0: entered promiscuous mode [ 85.496481][ T5645] hsr_slave_1: entered promiscuous mode [ 85.496984][ T5645] debugfs: 'hsr0' already exists in 'hsr' [ 85.497001][ T5645] Cannot create hsr debugfs directory [ 86.117072][ T5638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.124002][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.152866][ T5638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.157079][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.175564][ T5638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.181080][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.208424][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.208559][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.208657][ T5635] bridge_slave_0: entered allmulticast mode [ 86.209737][ T5635] bridge_slave_0: entered promiscuous mode [ 86.214038][ T5638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.228796][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.233350][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.233485][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.233932][ T5635] bridge_slave_1: entered allmulticast mode [ 86.238412][ T5635] bridge_slave_1: entered promiscuous mode [ 86.295161][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.300000][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.359492][ T5635] team0: Port device team_slave_0 added [ 86.374565][ T5635] team0: Port device team_slave_1 added [ 86.387359][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.397413][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.400279][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.410042][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.428509][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.428529][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.428553][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.429972][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.437144][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.438324][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.445438][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.449968][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.449984][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.450007][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.584226][ T5635] hsr_slave_0: entered promiscuous mode [ 86.585011][ T5635] hsr_slave_1: entered promiscuous mode [ 86.585463][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 86.585480][ T5635] Cannot create hsr debugfs directory [ 86.597123][ T5636] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.611375][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.634026][ T5636] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.639313][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.666546][ T5636] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.670180][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.718354][ T5636] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.720901][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.861646][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.866563][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.867767][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.876091][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.904373][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.907220][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.925251][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.930103][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.965973][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.055079][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.079486][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.079585][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.108267][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.147956][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.148158][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.150443][ T5635] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.157675][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.174784][ T5635] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.186594][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.205719][ T5635] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.208712][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.219638][ T5635] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.230694][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.261561][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.262154][ T5643] Bluetooth: hci2: command tx timeout [ 87.262186][ T5643] Bluetooth: hci1: command tx timeout [ 87.262323][ T5637] Bluetooth: hci0: command tx timeout [ 87.303267][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.303335][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.304834][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.304895][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.335754][ T55] Bluetooth: hci3: command tx timeout [ 87.335853][ T5637] Bluetooth: hci4: command tx timeout [ 87.357864][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.417402][ T1591] cfg80211: failed to load regulatory.db [ 87.457656][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.507558][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.507678][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.551750][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.551816][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.571445][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.640102][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.697990][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.698144][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.739285][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.739406][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.848348][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.935153][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.976272][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.976391][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.021320][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.021461][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.819802][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.989012][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.011180][ T5638] veth0_vlan: entered promiscuous mode [ 89.081089][ T5638] veth1_vlan: entered promiscuous mode [ 89.273566][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.284300][ T5634] veth0_vlan: entered promiscuous mode [ 89.296166][ T5634] veth1_vlan: entered promiscuous mode [ 89.341263][ T5638] veth0_macvtap: entered promiscuous mode [ 89.355154][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.355233][ T5637] Bluetooth: hci0: command tx timeout [ 89.355265][ T5637] Bluetooth: hci1: command tx timeout [ 89.355288][ T5637] Bluetooth: hci2: command tx timeout [ 89.386138][ T5638] veth1_macvtap: entered promiscuous mode [ 89.422873][ T5637] Bluetooth: hci3: command tx timeout [ 89.422928][ T55] Bluetooth: hci4: command tx timeout [ 89.428472][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.488388][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.515965][ T5634] veth0_macvtap: entered promiscuous mode [ 89.556151][ T5634] veth1_macvtap: entered promiscuous mode [ 89.700884][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.706905][ T5645] veth0_vlan: entered promiscuous mode [ 89.718353][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.755265][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.774995][ T5645] veth1_vlan: entered promiscuous mode [ 89.887323][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.887347][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.902419][ T1117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903457][ T1117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903495][ T1117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903529][ T1117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903563][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903596][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.903630][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.015791][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.015817][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.043830][ T47] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.088074][ T5645] veth0_macvtap: entered promiscuous mode [ 90.107864][ T5635] veth0_vlan: entered promiscuous mode [ 90.158386][ T5645] veth1_macvtap: entered promiscuous mode [ 90.170929][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.170951][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.196327][ T5635] veth1_vlan: entered promiscuous mode [ 90.237491][ T5636] veth0_vlan: entered promiscuous mode [ 90.300934][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.300957][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.329202][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.351705][ T5636] veth1_vlan: entered promiscuous mode [ 90.353406][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.375301][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.402370][ T1117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402425][ T1117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402463][ T1117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.430354][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.444944][ T5635] veth0_macvtap: entered promiscuous mode [ 90.514882][ T5635] veth1_macvtap: entered promiscuous mode [ 90.585101][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.634102][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.681373][ T5636] veth0_macvtap: entered promiscuous mode [ 90.720692][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.720716][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.749630][ T5636] veth1_macvtap: entered promiscuous mode [ 90.793737][ T1117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.843436][ T1174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.843460][ T1174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.901996][ T1117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.903125][ T1117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.903167][ T1117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.946566][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.989176][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.044859][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045853][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045899][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045956][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.161392][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.161416][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.323072][ T5862] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 91.355897][ T5862] bond0: (slave bond_slave_0): Releasing backup interface [ 91.373488][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8'. [ 91.400392][ T5862] bond_slave_0: entered promiscuous mode [ 91.400410][ T5862] bond_slave_0: entered allmulticast mode [ 91.428366][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.428389][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.528104][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.528127][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.750166][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.750190][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.110446][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.110587][ T5884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.152869][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.169954][ T5883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.252205][ T5886] Zero length message leads to an empty skb [ 92.481269][ T5894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'. [ 92.808258][ T5909] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17'. [ 92.839438][ T5905] ip_tables: iptables: counters copy to user failed while replacing table [ 92.884266][ T5913] netlink: 64 bytes leftover after parsing attributes in process `syz.0.17'. [ 92.968044][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 93.318226][ T5929] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 93.352977][ T5931] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 93.378530][ T5937] FAULT_INJECTION: forcing a failure. [ 93.378530][ T5937] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.378563][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 93.378586][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 93.378599][ T5937] Call Trace: [ 93.378607][ T5937] [ 93.378620][ T5937] dump_stack_lvl+0xe8/0x150 [ 93.378662][ T5937] should_fail_ex+0x3eb/0x540 [ 93.378694][ T5937] _copy_from_user+0x2d/0xb0 [ 93.378722][ T5937] ___sys_sendmsg+0x1fc/0x3d0 [ 93.378747][ T5937] ? __lock_acquire+0x747/0x2de0 [ 93.378790][ T5937] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.378854][ T5937] ? __fget_files+0x3a2/0x420 [ 93.378879][ T5937] ? __fget_files+0x2a/0x420 [ 93.378915][ T5937] __x64_sys_sendmsg+0x1b1/0x290 [ 93.378943][ T5937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.378994][ T5937] do_syscall_64+0x16a/0x530 [ 93.379022][ T5937] ? trace_irq_disable+0x3b/0x140 [ 93.379051][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.379072][ T5937] ? clear_bhb_loop+0x70/0xc0 [ 93.379100][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.379121][ T5937] RIP: 0033:0x7f6b2d7a94d9 [ 93.379142][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.379159][ T5937] RSP: 002b:00007f6b2e5c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.379183][ T5937] RAX: ffffffffffffffda RBX: 00007f6b2da25fa0 RCX: 00007f6b2d7a94d9 [ 93.379198][ T5937] RDX: 0000000000000040 RSI: 0000200000002380 RDI: 0000000000000003 [ 93.379211][ T5937] RBP: 00007f6b2e5c5090 R08: 0000000000000000 R09: 0000000000000000 [ 93.379224][ T5937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.379237][ T5937] R13: 00007f6b2da26038 R14: 00007f6b2da25fa0 R15: 00007ffeb16a2438 [ 93.379271][ T5937] [ 93.698314][ T5938] syzkaller1: entered promiscuous mode [ 93.698340][ T5938] syzkaller1: entered allmulticast mode [ 94.046077][ T5962] netlink: 'syz.1.28': attribute type 1 has an invalid length. [ 94.219582][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.246160][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.322707][ T5966] xt_limit: Overflow, try lower: 536871034/0 [ 94.323094][ T5966] netlink: 'syz.2.29': attribute type 16 has an invalid length. [ 94.323112][ T5966] netlink: 'syz.2.29': attribute type 17 has an invalid length. [ 94.391320][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.391469][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.411826][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.412021][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.893195][ T5994] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 95.408717][ T6017] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 95.697878][ T6021] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 95.719011][ T6020] can: request_module (can-proto-0) failed. [ 96.095688][ T1591] rxe_eth0 speed is unknown, defaulting to 1000 [ 96.194644][ T64] IPVS: starting estimator thread 0... [ 96.282402][ T6039] IPVS: using max 49 ests per chain, 117600 per kthread [ 96.685463][ T6023] infiniband syz2: set active [ 96.686640][ T6023] infiniband syz2: added bridge_slave_1 [ 96.693895][ T6023] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 96.701549][ T6023] infiniband syz2: Couldn't open port 1 [ 96.701814][ T6023] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 96.704105][ T6023] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 96.704146][ T6023] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 96.793702][ T6023] RDS/IB: syz2: added [ 96.793766][ T6023] smc: adding ib device syz2 with port count 1 [ 96.793786][ T6023] smc: ib device syz2 port 1 has no pnetid [ 97.101833][ T6071] __nla_validate_parse: 6 callbacks suppressed [ 97.102044][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.106284][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.165704][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.174940][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.190929][ T6071] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.191033][ T6071] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.55'. [ 97.263312][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.58'. [ 98.349994][ T6126] ip_tables: iptables: counters copy to user failed while replacing table [ 98.492809][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.70'. [ 98.599568][ T6132] netlink: 'syz.2.71': attribute type 3 has an invalid length. [ 98.835149][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'. [ 98.879290][ T6153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.75'. [ 98.931558][ T6156] gretap0: entered promiscuous mode [ 100.272356][ T64] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.272406][ T64] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.283322][ T64] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.284287][ T64] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.574718][ T6216] : renamed from bond0 (while UP) [ 100.783978][ T32] audit: type=1107 audit(1794609131.277:2): pid=6223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')5?Ú¤\5ᑯm8ZˆY,ŽS=#W¹é’LPn¯#®5!è‹EŒdÐ"Ø•ôêÓÑu©iKó' [ 100.972403][ T6229] xt_hashlimit: size too large, truncated to 1048576 [ 101.011388][ T6235] netlink: 'syz.4.102': attribute type 3 has an invalid length. [ 101.011413][ T6235] netlink: 'syz.4.102': attribute type 2 has an invalid length. [ 101.150928][ T6246] netlink: 'syz.0.103': attribute type 32 has an invalid length. [ 101.418761][ T6246] bond1: option coupled_control: invalid value (192) [ 101.455595][ T6246] bond1 (unregistering): Released all slaves [ 102.238695][ T6286] syz_tun: entered allmulticast mode [ 102.254226][ T6292] __nla_validate_parse: 13 callbacks suppressed [ 102.254265][ T6292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.113'. [ 102.300849][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 102.323524][ T6285] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.363833][ T6278] warning: `syz.4.111' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.374271][ T6292] netlink: 32 bytes leftover after parsing attributes in process `syz.3.113'. [ 102.641418][ T6307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 102.876656][ T6323] bond_slave_0: Caught tx_queue_len zero misconfig [ 103.133354][ T6334] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.882409][ T6369] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 103.909372][ T6377] --map-set only usable from mangle table [ 103.981802][ T6383] netlink: 912 bytes leftover after parsing attributes in process `syz.2.139'. [ 104.047264][ T6390] netlink: 'syz.1.140': attribute type 11 has an invalid length. [ 104.047289][ T6390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.140'. [ 104.537585][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.142'. [ 104.557290][ T6405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'. [ 104.602560][ T6410] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 104.866903][ T6419] netlink: 'syz.4.145': attribute type 1 has an invalid length. [ 104.866926][ T6419] netlink: 244 bytes leftover after parsing attributes in process `syz.4.145'. [ 104.907449][ T6419] xt_limit: Overflow, try lower: 536871034/0 [ 105.014310][ T6425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.066460][ T6428] ip_tables: iptables: counters copy to user failed while replacing table [ 105.119063][ T6425] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.318468][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.150'. [ 105.444650][ T6440] bond1: entered allmulticast mode [ 105.447912][ T6440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.248300][ T6487] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 106.555096][ T6510] Bluetooth: MGMT ver 1.23 [ 107.350315][ T6539] __nla_validate_parse: 8 callbacks suppressed [ 107.350330][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.169'. [ 109.310009][ T6494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.394404][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.170'. [ 109.555161][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.174'. [ 109.583798][ T6549] netlink: 104 bytes leftover after parsing attributes in process `syz.2.171'. [ 109.598743][ T6550] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 109.607373][ T6550] bond2 (unregistering): Released all slaves [ 109.634402][ T6549] Driver unsupported XDP return value 0 on prog (id 43) dev N/A, expect packet loss! [ 109.690687][ T6553] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 109.690802][ T6553] syzkaller1: linktype set to 823 [ 109.743580][ T55] block nbd0: Receive control failed (result -32) [ 109.744576][ T5637] block nbd0: Receive control failed (result -32) [ 109.930269][ T6568] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 109.930633][ T6568] batadv0: Caught tx_queue_len zero misconfig [ 110.012997][ T6574] netlink: 546 bytes leftover after parsing attributes in process `syz.3.180'. [ 110.035251][ T6576] ip_tables: iptables: counters copy to user failed while replacing table [ 110.200679][ T6585] sctp: [Deprecated]: syz.4.184 (pid 6585) Use of int in max_burst socket option. [ 110.200679][ T6585] Use struct sctp_assoc_value instead [ 110.233241][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 112.824367][ T6561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.141370][ T6606] netlink: 'syz.1.191': attribute type 1 has an invalid length. [ 113.420603][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 113.420636][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 113.420657][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 113.454070][ T6626] netlink: 'syz.2.195': attribute type 33 has an invalid length. [ 113.536789][ T6633] nft_compat: unsupported protocol 0 [ 113.553865][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'. [ 113.734801][ T6642] batadv0: entered promiscuous mode [ 113.738847][ T6642] macsec2: entered promiscuous mode [ 113.743558][ T6642] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 113.759464][ T6642] batadv0: left promiscuous mode [ 113.836606][ T6647] netlink: 'syz.3.201': attribute type 2 has an invalid length. [ 113.864169][ T6644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 113.870240][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 113.967900][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.202'. [ 114.079046][ T6652] netlink: 'syz.4.203': attribute type 3 has an invalid length. [ 114.079070][ T6652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.203'. [ 114.149032][ T6655] netlink: 32 bytes leftover after parsing attributes in process `syz.3.205'. [ 114.151408][ T6655] netlink: 'syz.3.205': attribute type 10 has an invalid length. [ 114.197525][ T6655] team0: Device wg2 is of different type [ 114.210396][ T6659] netlink: 36 bytes leftover after parsing attributes in process `syz.0.204'. [ 115.446645][ T6721] team0: No ports can be present during mode change [ 116.167451][ T6766] bridge_slave_1: left allmulticast mode [ 116.167483][ T6766] bridge_slave_1: left promiscuous mode [ 116.167780][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.180943][ T6766] bridge_slave_0: left allmulticast mode [ 116.180972][ T6766] bridge_slave_0: left promiscuous mode [ 116.181261][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.744614][ T6799] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.769415][ T6801] openvswitch: netlink: Actions may not be safe on all matching packets [ 116.931710][ T6809] tipc: Failed to remove unknown binding: 66,0,0/0:3648382407/3648382408 [ 116.943211][ T6809] tipc: Failed to remove unknown binding: 66,0,0/0:3648382407/3648382408 [ 117.076872][ T6812] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.091088][ T6812] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.126575][ T6812] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.155666][ T6812] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.210550][ T6812] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.235987][ T6812] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.267298][ T6812] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.326961][ T6812] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.337571][ T6823] ip_tables: iptables: counters copy to user failed while replacing table [ 117.369846][ T6818] macsec2: entered allmulticast mode [ 117.371581][ T6818] batman_adv: batadv0: Adding interface: macsec2 [ 117.371598][ T6818] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.371627][ T6818] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active [ 117.405894][ T6812] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.450578][ T6812] bridge10: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.505337][ T6812] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.528116][ T6812] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.551742][ T6812] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.571641][ T6812] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.604387][ T6812] bridge15: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.623677][ T6812] bridge16: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.680262][ T6812] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.712580][ T6812] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.735611][ T6812] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.760664][ T6812] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.781217][ T6812] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.805294][ T6812] bridge22: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.825304][ T6812] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 117.845735][ T6812] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 118.123010][ T1174] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.143548][ T6859] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 118.468946][ T6876] __nla_validate_parse: 12 callbacks suppressed [ 118.468972][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.470578][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.470956][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.471238][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.471508][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.255'. [ 118.616650][ T6873] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 118.665802][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.256'. [ 118.767348][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 118.838522][ T6886] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 118.858842][ T6886] bond0 (unregistering): Released all slaves [ 118.871456][ T6887] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 118.995663][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.099628][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 119.220618][ T6911] smc: removing ib device rxe0 [ 119.455933][ T6911] smbdirect: ib_dev[rxe0] removed [ 119.481454][ T6918] ip_tables: iptables: counters copy to user failed while replacing table [ 119.505019][ T6915] netlink: 'syz.4.265': attribute type 21 has an invalid length. [ 119.505046][ T6915] netlink: 128 bytes leftover after parsing attributes in process `syz.4.265'. [ 119.505123][ T6915] netlink: 'syz.4.265': attribute type 5 has an invalid length. [ 120.008026][ T122] IPVS: starting estimator thread 0... [ 120.022009][ T6934] netlink: 'syz.1.271': attribute type 58 has an invalid length. [ 120.058060][ T6937] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 120.101996][ T6936] IPVS: using max 26 ests per chain, 62400 per kthread [ 120.586847][ T6952] lo: Caught tx_queue_len zero misconfig [ 121.066731][ T6957] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 121.091671][ T6957] bond0 (unregistering): Released all slaves [ 122.432667][ T6994] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 122.679655][ T7000] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 122.870259][ T7006] netlink: 'syz.1.292': attribute type 1 has an invalid length. [ 122.915587][ T7006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.945977][ T7006] bond1: (slave veth3): Enslaving as an active interface with a down link [ 122.946075][ T7009] 8021q: VLANs not supported on wg0 [ 122.948021][ T7006] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 122.949520][ T7006] dummy0: entered promiscuous mode [ 123.619887][ T7033] FAULT_INJECTION: forcing a failure. [ 123.619887][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.619921][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.3.299 Not tainted syzkaller #0 PREEMPT(full) [ 123.619944][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 123.619956][ T7033] Call Trace: [ 123.619965][ T7033] [ 123.619974][ T7033] dump_stack_lvl+0xe8/0x150 [ 123.620014][ T7033] should_fail_ex+0x3eb/0x540 [ 123.620047][ T7033] _copy_from_user+0x2d/0xb0 [ 123.620075][ T7033] ___sys_sendmsg+0x1fc/0x3d0 [ 123.620098][ T7033] ? __lock_acquire+0x747/0x2de0 [ 123.620130][ T7033] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.620198][ T7033] ? __fget_files+0x3a2/0x420 [ 123.620224][ T7033] ? __fget_files+0x2a/0x420 [ 123.620260][ T7033] __x64_sys_sendmsg+0x1b1/0x290 [ 123.620288][ T7033] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.620337][ T7033] do_syscall_64+0x16a/0x530 [ 123.620366][ T7033] ? trace_irq_disable+0x3b/0x140 [ 123.620396][ T7033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.620418][ T7033] ? clear_bhb_loop+0x70/0xc0 [ 123.620445][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.620465][ T7033] RIP: 0033:0x7f1e5a7a94d9 [ 123.620485][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.620503][ T7033] RSP: 002b:00007f1e5b5b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.620526][ T7033] RAX: ffffffffffffffda RBX: 00007f1e5aa25fa0 RCX: 00007f1e5a7a94d9 [ 123.620541][ T7033] RDX: 0000000000000040 RSI: 0000200000002380 RDI: 0000000000000003 [ 123.620554][ T7033] RBP: 00007f1e5b5b8090 R08: 0000000000000000 R09: 0000000000000000 [ 123.620567][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.620579][ T7033] R13: 00007f1e5aa26038 R14: 00007f1e5aa25fa0 R15: 00007ffedd76a528 [ 123.620615][ T7033] [ 123.961133][ T7048] __nla_validate_parse: 8 callbacks suppressed [ 123.961159][ T7048] netlink: 156 bytes leftover after parsing attributes in process `syz.2.303'. [ 124.137030][ T7055] netlink: 52 bytes leftover after parsing attributes in process `syz.1.304'. [ 124.190768][ T7056] Bluetooth: hci0: unsupported parameter 5161 [ 124.190805][ T7056] Bluetooth: hci0: unsupported parameter 8192 [ 124.190819][ T7056] Bluetooth: hci0: unsupported parameter 5161 [ 124.190830][ T7056] Bluetooth: hci0: unsupported parameter 8192 [ 124.467995][ T7061] ip_tables: iptables: counters copy to user failed while replacing table [ 124.717113][ T7071] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.720856][ T7070] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.310'. [ 124.742525][ T7073] FAULT_INJECTION: forcing a failure. [ 124.742525][ T7073] name failslab, interval 1, probability 0, space 0, times 1 [ 124.742557][ T7073] CPU: 1 UID: 0 PID: 7073 Comm: syz.2.312 Not tainted syzkaller #0 PREEMPT(full) [ 124.742578][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 124.742589][ T7073] Call Trace: [ 124.742597][ T7073] [ 124.742606][ T7073] dump_stack_lvl+0xe8/0x150 [ 124.742645][ T7073] should_fail_ex+0x3eb/0x540 [ 124.742673][ T7073] ? __alloc_skb+0x1db/0x7a0 [ 124.742694][ T7073] should_failslab+0xa8/0x100 [ 124.742727][ T7073] ? __alloc_skb+0x1db/0x7a0 [ 124.742744][ T7073] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 124.742770][ T7073] ? __alloc_skb+0x18d/0x7a0 [ 124.742789][ T7073] ? __alloc_skb+0x1db/0x7a0 [ 124.742817][ T7073] __alloc_skb+0x1db/0x7a0 [ 124.742840][ T7073] netlink_sendmsg+0x5cd/0xb20 [ 124.742866][ T7073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.742883][ T7073] ? __lock_acquire+0x747/0x2de0 [ 124.742912][ T7073] ? aa_sock_msg_perm+0x144/0x210 [ 124.742949][ T7073] ? apparmor_socket_sendmsg+0x98/0x360 [ 124.742978][ T7073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.742995][ T7073] sock_sendmsg_nosec+0x14e/0x190 [ 124.743025][ T7073] ____sys_sendmsg+0x49f/0x790 [ 124.743057][ T7073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.743091][ T7073] ? import_iovec+0x73/0xa0 [ 124.743120][ T7073] ___sys_sendmsg+0x2f8/0x3d0 [ 124.743141][ T7073] ? __lock_acquire+0x747/0x2de0 [ 124.743172][ T7073] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.743236][ T7073] ? __fget_files+0x3a2/0x420 [ 124.743261][ T7073] ? __fget_files+0x2a/0x420 [ 124.743293][ T7073] __x64_sys_sendmsg+0x1b1/0x290 [ 124.743321][ T7073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.743381][ T7073] do_syscall_64+0x16a/0x530 [ 124.743408][ T7073] ? trace_irq_disable+0x3b/0x140 [ 124.743437][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.743459][ T7073] ? clear_bhb_loop+0x70/0xc0 [ 124.743486][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.743507][ T7073] RIP: 0033:0x7f1ede7a94d9 [ 124.743532][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.743549][ T7073] RSP: 002b:00007f1edf6ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.743573][ T7073] RAX: ffffffffffffffda RBX: 00007f1edea25fa0 RCX: 00007f1ede7a94d9 [ 124.743588][ T7073] RDX: 0000000000000040 RSI: 0000200000002380 RDI: 0000000000000003 [ 124.743601][ T7073] RBP: 00007f1edf6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 124.743613][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.743626][ T7073] R13: 00007f1edea26038 R14: 00007f1edea25fa0 R15: 00007ffd64db6bb8 [ 124.743661][ T7073] [ 125.150216][ T7092] ipvlan1: Caught tx_queue_len zero misconfig [ 125.158373][ T7090] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20003 [ 125.465913][ T7102] sctp: [Deprecated]: syz.1.318 (pid 7102) Use of int in max_burst socket option deprecated. [ 125.465913][ T7102] Use struct sctp_assoc_value instead [ 125.491718][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 125.491744][ T7098] netlink: 50 bytes leftover after parsing attributes in process `syz.4.317'. [ 125.491763][ T7098] netlink: 50 bytes leftover after parsing attributes in process `syz.4.317'. [ 125.493391][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 125.493409][ T7101] netlink: 50 bytes leftover after parsing attributes in process `syz.4.317'. [ 125.493424][ T7101] netlink: 50 bytes leftover after parsing attributes in process `syz.4.317'. [ 126.027767][ T7127] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 126.249583][ T7135] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 126.335293][ T7142] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 126.410299][ T7138] Bluetooth: MGMT ver 1.23 [ 126.436168][ T7145] lo speed is unknown, defaulting to 1000 [ 126.436248][ T7145] lo speed is unknown, defaulting to 1000 [ 126.438936][ T7145] lo speed is unknown, defaulting to 1000 [ 126.440086][ T7145] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 126.450328][ T7145] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 126.450382][ T7145] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 126.471459][ T7142] xt_hashlimit: size too large, truncated to 1048576 [ 126.531777][ T7145] lo speed is unknown, defaulting to 1000 [ 126.540030][ T7145] lo speed is unknown, defaulting to 1000 [ 126.548933][ T7145] lo speed is unknown, defaulting to 1000 [ 126.550904][ T7145] lo speed is unknown, defaulting to 1000 [ 126.564838][ T7145] lo speed is unknown, defaulting to 1000 [ 126.594388][ T7151] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 126.681756][ T7151] sctp: [Deprecated]: syz.2.332 (pid 7151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.681756][ T7151] Use struct sctp_sack_info instead [ 127.618923][ T7185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.800956][ T7202] openvswitch: netlink: IP tunnel TTL not specified. [ 128.135513][ T7195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.438285][ T7195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.557169][ T7226] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 128.664706][ T7195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.725156][ T7225] xt_ecn: cannot match TCP bits for non-tcp packets [ 128.940993][ T7195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.204266][ T1174] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.282772][ T122] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.373069][ T1174] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.435933][ T7196] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.540273][ T7196] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.562743][ T7266] FAULT_INJECTION: forcing a failure. [ 129.562743][ T7266] name failslab, interval 1, probability 0, space 0, times 0 [ 129.562774][ T7266] CPU: 1 UID: 0 PID: 7266 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT(full) [ 129.562796][ T7266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 129.562807][ T7266] Call Trace: [ 129.562815][ T7266] [ 129.562823][ T7266] dump_stack_lvl+0xe8/0x150 [ 129.562861][ T7266] should_fail_ex+0x3eb/0x540 [ 129.562890][ T7266] should_failslab+0xa8/0x100 [ 129.562923][ T7266] __kmalloc_noprof+0xf9/0x710 [ 129.562949][ T7266] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 129.562974][ T7266] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 129.563007][ T7266] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 129.563041][ T7266] genl_family_rcv_msg_doit+0xda/0x340 [ 129.563072][ T7266] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 129.563106][ T7266] ? apparmor_capable+0x126/0x170 [ 129.563131][ T7266] ? bpf_lsm_capable+0x9/0x20 [ 129.563149][ T7266] ? security_capable+0x7e/0x2c0 [ 129.563184][ T7266] genl_rcv_msg+0x614/0x7a0 [ 129.563216][ T7266] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.563238][ T7266] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 129.563265][ T7266] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 129.563286][ T7266] ? __pfx_nl80211_post_doit+0x10/0x10 [ 129.563326][ T7266] netlink_rcv_skb+0x226/0x4a0 [ 129.563356][ T7266] ? __pfx_genl_rcv_msg+0x10/0x10 [ 129.563381][ T7266] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 129.563427][ T7266] ? down_read+0x2b9/0x320 [ 129.563462][ T7266] genl_rcv+0x28/0x40 [ 129.563483][ T7266] netlink_unicast+0x8ef/0xa80 [ 129.563530][ T7266] netlink_sendmsg+0x7f0/0xb20 [ 129.563556][ T7266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.563573][ T7266] ? __lock_acquire+0x747/0x2de0 [ 129.563601][ T7266] ? aa_sock_msg_perm+0x144/0x210 [ 129.563636][ T7266] ? apparmor_socket_sendmsg+0x98/0x360 [ 129.563665][ T7266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.563683][ T7266] sock_sendmsg_nosec+0x14e/0x190 [ 129.563714][ T7266] ____sys_sendmsg+0x49f/0x790 [ 129.563788][ T7266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.563822][ T7266] ? import_iovec+0x73/0xa0 [ 129.563850][ T7266] ___sys_sendmsg+0x2f8/0x3d0 [ 129.563871][ T7266] ? __lock_acquire+0x747/0x2de0 [ 129.563900][ T7266] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.563965][ T7266] ? __fget_files+0x3a2/0x420 [ 129.563988][ T7266] ? __fget_files+0x2a/0x420 [ 129.564024][ T7266] __x64_sys_sendmsg+0x1b1/0x290 [ 129.564050][ T7266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.564099][ T7266] do_syscall_64+0x16a/0x530 [ 129.564124][ T7266] ? trace_irq_disable+0x3b/0x140 [ 129.564150][ T7266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.564171][ T7266] ? clear_bhb_loop+0x70/0xc0 [ 129.564196][ T7266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.564215][ T7266] RIP: 0033:0x7f326dba94d9 [ 129.564233][ T7266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.564248][ T7266] RSP: 002b:00007f326e987028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.564269][ T7266] RAX: ffffffffffffffda RBX: 00007f326de25fa0 RCX: 00007f326dba94d9 [ 129.564283][ T7266] RDX: 0000000000000040 RSI: 0000200000002380 RDI: 0000000000000003 [ 129.564295][ T7266] RBP: 00007f326e987090 R08: 0000000000000000 R09: 0000000000000000 [ 129.564307][ T7266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.564319][ T7266] R13: 00007f326de26038 R14: 00007f326de25fa0 R15: 00007ffcd473e518 [ 129.564354][ T7266] [ 129.624218][ T7196] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.698704][ T7305] syzkaller0: entered promiscuous mode [ 130.698729][ T7305] syzkaller0: entered allmulticast mode [ 130.731033][ T7303] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 131.246852][ T7325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.364674][ T7327] netlink: 'syz.4.371': attribute type 1 has an invalid length. [ 131.456718][ T7327] bond0: entered promiscuous mode [ 131.460251][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.482547][ T7327] __nla_validate_parse: 2 callbacks suppressed [ 131.482571][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 131.638670][ T7338] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.678961][ T7339] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 131.888534][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 132.138222][ T7349] batadv_slave_0: Caught tx_queue_len zero misconfig [ 132.140188][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.378'. [ 132.154970][ T7351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.379'. [ 132.314040][ T7360] vlan2: entered allmulticast mode [ 132.314064][ T7360] veth0_vlan: entered allmulticast mode [ 132.361075][ T7363] ip6tnl0: Caught tx_queue_len zero misconfig [ 132.361108][ T7363] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 132.363410][ T7363] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 132.542789][ T7368] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.565738][ T7368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.746323][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.746355][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.750542][ T7370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.750566][ T7370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.763927][ T7374] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 132.775508][ T5637] Bluetooth: hci3: command tx timeout [ 132.903616][ T5637] block nbd296: Receive control failed (result -32) [ 133.047674][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 133.288333][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 133.295625][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 133.423917][ T7398] ip6gre1: entered promiscuous mode [ 133.469420][ T7398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.395'. [ 133.497179][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.497249][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.659549][ T7411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.399'. [ 134.069831][ T1174] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.102115][ T1174] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.151969][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.162155][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.206454][ T7427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.414354][ T7433] netlink: 'syz.4.404': attribute type 4 has an invalid length. [ 134.719907][ T7455] netlink: 'syz.0.411': attribute type 15 has an invalid length. [ 135.086596][ T7470] ip_tables: iptables: counters copy to user failed while replacing table [ 135.655557][ T7491] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 135.759926][ T7491] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.669718][ T7527] bond3: entered allmulticast mode [ 136.671575][ T7527] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.693087][ T7533] vcan0: tx drop: invalid sa for name 0x0102030405060708 [ 136.745427][ T7539] bridge_slave_1: left allmulticast mode [ 136.745457][ T7539] bridge_slave_1: left promiscuous mode [ 136.745748][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.789517][ T7539] bridge_slave_0: left allmulticast mode [ 136.789550][ T7539] bridge_slave_0: left promiscuous mode [ 136.789811][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.819495][ T7543] xt_ipcomp: unknown flags 1D [ 136.828760][ T7543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.981578][ T7549] raw_sendmsg: syz.2.437 forgot to set AF_INET. Fix it! [ 137.203960][ T7567] __nla_validate_parse: 13 callbacks suppressed [ 137.203985][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 137.246042][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.441'. [ 137.379461][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.443'. [ 137.462170][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.462543][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.465507][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.506844][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.507265][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.507615][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.510327][ T7582] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 137.588789][ T7589] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 137.671696][ T5778] lo speed is unknown, defaulting to 1000 [ 137.812863][ T7605] bond0: Caught tx_queue_len zero misconfig [ 137.815422][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.447'. [ 137.858904][ T7599] 8021q: VLANs not supported on sit0 [ 137.866206][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.114752][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.451'. [ 138.115016][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.451'. [ 138.241718][ T122] IPVS: starting estimator thread 0... [ 138.332039][ T7622] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.373671][ T7630] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 138.639495][ T7632] xt_hashlimit: size too large, truncated to 1048576 [ 138.681526][ T7645] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 138.750962][ T7642] netlink: 108 bytes leftover after parsing attributes in process `syz.4.456'. [ 139.078879][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 139.320410][ T7674] netlink: 'syz.3.463': attribute type 3 has an invalid length. [ 139.320440][ T7674] netlink: 'syz.3.463': attribute type 3 has an invalid length. [ 139.328030][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 139.396458][ T7678] sit0: Caught tx_queue_len zero misconfig [ 139.493552][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.496674][ T7557] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 139.496702][ T7557] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 139.630621][ T7684] net_ratelimit: 29 callbacks suppressed [ 139.630644][ T7684] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 139.655240][ T7693] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 139.710952][ T7698] netlink: 'syz.0.469': attribute type 83 has an invalid length. [ 140.101790][ T7557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.104650][ T7557] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 140.146942][ T7557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.146971][ T7557] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 140.233522][ T7557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.233549][ T7557] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 140.323193][ T7557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 140.323223][ T7557] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 141.207617][ T7751] netlink: 'syz.4.483': attribute type 13 has an invalid length. [ 141.676767][ T7781] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 141.944966][ T7790] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 141.994033][ T7790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.141383][ T7800] bridge_slave_0: left allmulticast mode [ 142.141414][ T7800] bridge_slave_0: left promiscuous mode [ 142.141664][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.206955][ T7800] bridge_slave_1: left allmulticast mode [ 142.206984][ T7800] bridge_slave_1: left promiscuous mode [ 142.207248][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.286398][ T7800] bond0: (slave bond_slave_0): Releasing backup interface [ 142.361070][ T7800] bond0: (slave bond_slave_1): Releasing backup interface [ 142.440725][ T7800] team0: Port device team_slave_0 removed [ 142.475996][ T7800] team0: Port device team_slave_1 removed [ 142.480139][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.480167][ T7800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.509899][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.509927][ T7800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.513879][ T7822] ip_tables: iptables: counters copy to user failed while replacing table [ 142.547273][ T7800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.629858][ T7804] team0: Port device xfrm0 added [ 142.630436][ T7809] tipc: Started in network mode [ 142.630465][ T7809] tipc: Node identity 76a29aafd01d, cluster identity 4711 [ 142.640818][ T7809] tipc: Enabled bearer , priority 0 [ 142.808899][ T7836] __nla_validate_parse: 8 callbacks suppressed [ 142.808923][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'. [ 142.945817][ T7838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.503'. [ 143.189975][ T7851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.504'. [ 143.190002][ T7851] netlink: 21 bytes leftover after parsing attributes in process `syz.4.504'. [ 143.190020][ T7851] netlink: 21 bytes leftover after parsing attributes in process `syz.4.504'. [ 143.228724][ T7851] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 143.228752][ T7851] netlink: 'syz.4.504': attribute type 3 has an invalid length. [ 143.228765][ T7851] netlink: 224 bytes leftover after parsing attributes in process `syz.4.504'. [ 143.755777][ T5778] tipc: Node number set to 2797574831 [ 143.841331][ T7889] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 143.930847][ T7891] netlink: 104 bytes leftover after parsing attributes in process `syz.4.512'. [ 143.936023][ T7887] netlink: 96 bytes leftover after parsing attributes in process `syz.4.512'. [ 144.551137][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 144.551183][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.517'. [ 144.597312][ T7922] netlink: 'syz.4.519': attribute type 4 has an invalid length. [ 144.666611][ T7922] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 144.759275][ T7929] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 144.818304][ T7922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.136425][ T7946] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 146.304041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.724655][ T7929] macvlan1: entered promiscuous mode [ 146.724685][ T7929] macvlan1: entered allmulticast mode [ 146.810736][ T7929] veth1_vlan: entered allmulticast mode [ 146.821773][ T7929] : (slave macvlan1): Enslaving as an active interface with an up link [ 147.589624][ T7990] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 147.592933][ T7980] syzkaller0: entered promiscuous mode [ 147.592955][ T7980] syzkaller0: entered allmulticast mode [ 147.660949][ T8000] ebt_among: dst integrity fail: 200 [ 148.031101][ T8010] __nla_validate_parse: 7 callbacks suppressed [ 148.031124][ T8010] netlink: 64 bytes leftover after parsing attributes in process `syz.0.539'. [ 148.121620][ T8010] syzkaller1: entered promiscuous mode [ 148.121647][ T8010] syzkaller1: entered allmulticast mode [ 148.261959][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.544'. [ 148.535179][ T8044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 148.539616][ T8044] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 148.580745][ T8052] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 148.580764][ T8047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.547'. [ 148.733293][ T8010] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 149.453661][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 149.949621][ T8116] ip_tables: iptables: counters copy to user failed while replacing table [ 149.976469][ T8114] netlink: 104 bytes leftover after parsing attributes in process `syz.2.564'. [ 149.981279][ T8114] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 149.986857][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 150.044679][ T8114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 150.491261][ T8135] netlink: 'syz.0.570': attribute type 9 has an invalid length. [ 150.508650][ T8141] pimreg3: entered allmulticast mode [ 150.810120][ T8138] syzkaller1: entered promiscuous mode [ 150.810147][ T8138] syzkaller1: entered allmulticast mode [ 150.895718][ T8152] mac80211_hwsim hwsim11 wlan1: Caught tx_queue_len zero misconfig [ 151.110055][ T8167] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 151.713479][ T8208] ip6t_rt: address list match requested but addrnr is 0 [ 151.747974][ T8208] vxcan0: tx address claim with dest, not broadcast [ 152.230483][ T8237] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 152.234730][ T8237] ip_tables: iptables: counters copy to user failed while replacing table [ 152.277291][ T8237] tipc: Enabling of bearer rejected, failed to enable media [ 152.530497][ T8254] syz_tun: entered allmulticast mode [ 152.669713][ T8269] xt_l2tp: missing protocol rule (udp|l2tpip) [ 155.648887][ T8281] ip6tnl0: Caught tx_queue_len zero misconfig [ 155.669806][ T8250] syz_tun: left allmulticast mode [ 155.900375][ T8291] __nla_validate_parse: 43 callbacks suppressed [ 155.900399][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 155.920717][ T8290] netlink: 'syz.0.617': attribute type 1 has an invalid length. [ 183.115554][ T8325] netlink: 'syz.4.627': attribute type 2 has an invalid length. [ 183.139632][ T8326] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 183.240636][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.629'. [ 183.278789][ T8326] bond2: entered promiscuous mode [ 183.279534][ T8326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.470229][ T8326] bond2: (slave bridge5): making interface the new active one [ 183.472924][ T8326] bridge5: entered promiscuous mode [ 183.479005][ T8326] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 183.715518][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.635'. [ 183.835048][ T8374] netlink: 'syz.2.640': attribute type 3 has an invalid length. [ 183.835072][ T8374] netlink: 666 bytes leftover after parsing attributes in process `syz.2.640'. [ 183.836073][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 184.119918][ T8385] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 184.120910][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.645'. [ 184.239843][ T8392] batman_adv: batadv0: Adding interface: veth0 [ 184.239862][ T8392] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.239893][ T8392] batman_adv: batadv0: Interface activated: veth0 [ 184.287939][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.287967][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.291013][ T8392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.291038][ T8392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.309378][ T8392] batman_adv: batadv0: Removing interface: macsec2 [ 184.316757][ T8392] batman_adv: batadv0: Interface deactivated: veth0 [ 184.316778][ T8392] batman_adv: batadv0: Removing interface: veth0 [ 184.395203][ T8396] netlink: 'syz.2.648': attribute type 1 has an invalid length. [ 184.434686][ T8396] bond1: (slave veth0_to_bond): making interface the new active one [ 184.437864][ T8396] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 184.439503][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 184.445712][ T8396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.450142][ T8396] netlink: 'syz.2.648': attribute type 13 has an invalid length. [ 184.450160][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 184.471171][ T8396] netlink: 'syz.2.648': attribute type 13 has an invalid length. [ 184.471193][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.648'. [ 184.482522][ T47] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.482568][ T47] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.482599][ T47] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.482638][ T47] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.725898][ T8413] ip_tables: iptables: counters copy to user failed while replacing table [ 185.248661][ T8438] netlink: 'syz.1.656': attribute type 7 has an invalid length. [ 185.248688][ T8438] netlink: 'syz.1.656': attribute type 5 has an invalid length. [ 185.248701][ T8438] netlink: 17 bytes leftover after parsing attributes in process `syz.1.656'. [ 185.708207][ T8457] 0: reclassify loop, rule prio 0, protocol 03 [ 186.023469][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.664'. [ 186.491862][ T8494] gre1: entered promiscuous mode [ 186.491890][ T8494] gre1: entered allmulticast mode [ 186.622779][ T8505] sctp: [Deprecated]: syz.4.675 (pid 8505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.622779][ T8505] Use struct sctp_sack_info instead [ 186.625445][ T8506] sctp: [Deprecated]: syz.4.675 (pid 8506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.625445][ T8506] Use struct sctp_sack_info instead [ 186.641125][ T8505] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 186.717042][ T8510] sctp: [Deprecated]: syz.3.676 (pid 8510) Use of int in max_burst socket option. [ 186.717042][ T8510] Use struct sctp_assoc_value instead [ 187.773689][ T8559] netlink: 'syz.3.686': attribute type 5 has an invalid length. [ 187.803193][ T8559] geneve2: entered promiscuous mode [ 187.803219][ T8559] geneve2: entered allmulticast mode [ 187.825527][ T8553] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 187.825589][ T8553] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 187.825625][ T8553] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 188.283202][ T8585] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 188.283469][ T8584] netlink: 'syz.4.694': attribute type 10 has an invalid length. [ 188.317078][ T8585] team0: Port device dummy0 added [ 188.716371][ T8593] netlink: 'syz.2.695': attribute type 18 has an invalid length. [ 188.716396][ T8593] __nla_validate_parse: 6 callbacks suppressed [ 188.716408][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 188.716674][ T8593] netlink: 'syz.2.695': attribute type 18 has an invalid length. [ 188.716689][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 188.738394][ T8598] lo: Caught tx_queue_len zero misconfig [ 188.738418][ T8598] netlink: 'syz.4.697': attribute type 3 has an invalid length. [ 188.801274][ T8598] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 188.934938][ T8600] ip_tables: iptables: counters copy to user failed while replacing table [ 189.077304][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.700'. [ 189.403168][ T8628] TCP: TCP_TX_DELAY enabled [ 189.649388][ T8641] Cannot find set identified by id 4 to match [ 189.748179][ T8647] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 189.748203][ T8647] netlink: 224 bytes leftover after parsing attributes in process `syz.4.710'. [ 189.751485][ T8649] netlink: 22960 bytes leftover after parsing attributes in process `syz.4.710'. [ 189.774381][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.0.709'. [ 190.157542][ T8665] netlink: 36 bytes leftover after parsing attributes in process `syz.4.714'. [ 190.204165][ T8665] netlink: 'syz.4.714': attribute type 4 has an invalid length. [ 190.204190][ T8665] netlink: 152 bytes leftover after parsing attributes in process `syz.4.714'. [ 190.238913][ T8665] .`: renamed from  (while UP) [ 190.316015][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 190.512247][ T8677] bond4 (unregistering): Released all slaves [ 190.686625][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 191.134060][ T8702] syzkaller0: entered promiscuous mode [ 191.134088][ T8702] syzkaller0: entered allmulticast mode [ 191.463350][ T8722] xt_ecn: cannot match TCP bits for non-tcp packets [ 191.616581][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616605][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616617][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616627][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616637][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616647][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616658][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616668][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616679][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616689][ T8729] tc action pedit 'at' offset 5 out of bounds [ 191.616713][ T8729] 0: reclassify loop, rule prio 0, protocol 800 [ 191.897188][ T8745] netlink: 'syz.2.740': attribute type 1 has an invalid length. [ 191.928208][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.928952][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.218277][ T8766] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 192.309982][ T8766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.437301][ T8769] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.450251][ T8756] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 192.469452][ T8756] bond2: (slave wlan1): Opening slave failed [ 193.741302][ T8852] bond_slave_1: entered promiscuous mode [ 194.012858][ T8859] vlan0: mtu less than device minimum [ 194.242856][ T8875] netlink: 'syz.4.774': attribute type 32 has an invalid length. [ 194.242879][ T8875] __nla_validate_parse: 11 callbacks suppressed [ 194.242891][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 194.271645][ T8875] bond4: option coupled_control: invalid value (192) [ 194.303329][ T8875] bond4 (unregistering): Released all slaves [ 194.303944][ T8873] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 194.878561][ T8896] pimreg: entered allmulticast mode [ 194.914894][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.914930][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.914954][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.914977][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915010][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915033][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915056][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915080][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915103][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915125][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915148][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915170][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915192][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915215][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915238][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915261][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915283][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915305][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915326][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915347][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915368][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915390][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915412][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915434][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915454][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915475][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915495][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915517][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915540][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915561][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915582][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915604][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.915626][ T8896] IPVS: ip_vs_edit_dest(): server weight less than zero [ 194.917362][ T8903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.780'. [ 194.935478][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.935553][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.044760][ T8906] netlink: 60 bytes leftover after parsing attributes in process `syz.2.780'. [ 195.881433][ T8957] ip_tables: iptables: counters copy to user failed while replacing table [ 196.021112][ T8963] FAULT_INJECTION: forcing a failure. [ 196.021112][ T8963] name failslab, interval 1, probability 0, space 0, times 0 [ 196.021143][ T8963] CPU: 0 UID: 0 PID: 8963 Comm: syz.3.799 Not tainted syzkaller #0 PREEMPT(full) [ 196.021166][ T8963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.021178][ T8963] Call Trace: [ 196.021187][ T8963] [ 196.021195][ T8963] dump_stack_lvl+0xe8/0x150 [ 196.021235][ T8963] should_fail_ex+0x3eb/0x540 [ 196.021265][ T8963] ? __alloc_skb+0x1db/0x7a0 [ 196.021285][ T8963] should_failslab+0xa8/0x100 [ 196.021319][ T8963] ? __alloc_skb+0x1db/0x7a0 [ 196.021337][ T8963] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 196.021363][ T8963] ? __alloc_skb+0x18d/0x7a0 [ 196.021383][ T8963] ? __alloc_skb+0x1db/0x7a0 [ 196.021409][ T8963] __alloc_skb+0x1db/0x7a0 [ 196.021435][ T8963] netlink_sendmsg+0x5cd/0xb20 [ 196.021461][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.021477][ T8963] ? __lock_acquire+0x747/0x2de0 [ 196.021506][ T8963] ? aa_sock_msg_perm+0x144/0x210 [ 196.021542][ T8963] ? apparmor_socket_sendmsg+0x98/0x360 [ 196.021572][ T8963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.021596][ T8963] sock_sendmsg_nosec+0x14e/0x190 [ 196.021629][ T8963] ____sys_sendmsg+0x49f/0x790 [ 196.021663][ T8963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.021698][ T8963] ? import_iovec+0x73/0xa0 [ 196.021727][ T8963] ___sys_sendmsg+0x2f8/0x3d0 [ 196.021748][ T8963] ? __lock_acquire+0x747/0x2de0 [ 196.021777][ T8963] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.021838][ T8963] ? __fget_files+0x3a2/0x420 [ 196.021863][ T8963] ? __fget_files+0x2a/0x420 [ 196.021897][ T8963] __x64_sys_sendmsg+0x1b1/0x290 [ 196.021925][ T8963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.021981][ T8963] do_syscall_64+0x16a/0x530 [ 196.022008][ T8963] ? trace_irq_disable+0x3b/0x140 [ 196.022036][ T8963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.022056][ T8963] ? clear_bhb_loop+0x70/0xc0 [ 196.022083][ T8963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.022103][ T8963] RIP: 0033:0x7f1e5a7a94d9 [ 196.022123][ T8963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.022139][ T8963] RSP: 002b:00007f1e5b5b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.022163][ T8963] RAX: ffffffffffffffda RBX: 00007f1e5aa25fa0 RCX: 00007f1e5a7a94d9 [ 196.022177][ T8963] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000003 [ 196.022191][ T8963] RBP: 00007f1e5b5b8090 R08: 0000000000000000 R09: 0000000000000000 [ 196.022203][ T8963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.022216][ T8963] R13: 00007f1e5aa26038 R14: 00007f1e5aa25fa0 R15: 00007ffedd76a528 [ 196.022251][ T8963] [ 196.352071][ T8976] netlink: 24 bytes leftover after parsing attributes in process `syz.0.805'. [ 196.393741][ T8979] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 196.432628][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.875981][ T9003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'. [ 197.026831][ T9010] syzkaller1: entered promiscuous mode [ 197.026858][ T9010] syzkaller1: entered allmulticast mode [ 197.056962][ T9012] xt_bpf: check failed: parse error [ 197.104673][ T9018] xt_hashlimit: size too large, truncated to 1048576 [ 197.104869][ T9018] xt_hashlimit: max too large, truncated to 1048576 [ 197.104951][ T9018] xt_hashlimit: invalid rate [ 197.150967][ T9018] netlink: 872 bytes leftover after parsing attributes in process `syz.4.816'. [ 197.579439][ T9022] netlink: 32 bytes leftover after parsing attributes in process `syz.0.817'. [ 197.914517][ T9040] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 197.914542][ T9040] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'. [ 197.990044][ T9042] netlink: 'syz.1.819': attribute type 1 has an invalid length. [ 197.990067][ T9042] netlink: 'syz.1.819': attribute type 3 has an invalid length. [ 197.990080][ T9042] netlink: 224 bytes leftover after parsing attributes in process `syz.1.819'. [ 200.249590][ T9088] netlink: zone id is out of range [ 200.249634][ T9088] netlink: set zone limit has 4 unknown bytes [ 200.339688][ T9093] ip_tables: iptables: counters copy to user failed while replacing table [ 200.363212][ T9093] syzkaller1: entered promiscuous mode [ 200.363239][ T9093] syzkaller1: entered allmulticast mode [ 200.444962][ T9097] x_tables: duplicate underflow at hook 3 [ 200.751241][ T9110] bond1 (unregistering): Released all slaves [ 200.863733][ T9120] netlink: 'syz.0.837': attribute type 12 has an invalid length. [ 200.904639][ T9120] bond4: option primary_reselect: invalid value (255) [ 200.911518][ T9120] bond4 (unregistering): Released all slaves [ 200.980873][ T9120] netlink: 'syz.0.837': attribute type 12 has an invalid length. [ 201.094463][ T9120] bond4: option primary_reselect: invalid value (255) [ 201.096319][ T9120] bond4 (unregistering): Released all slaves [ 201.196427][ T9120] netlink: 'syz.0.837': attribute type 12 has an invalid length. [ 201.320050][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 201.429194][ T9120] bond4: option primary_reselect: invalid value (255) [ 201.436900][ T9120] bond4 (unregistering): Released all slaves [ 201.554454][ T9120] netlink: 'syz.0.837': attribute type 12 has an invalid length. [ 201.659694][ T9120] bond4: option primary_reselect: invalid value (255) [ 201.688619][ T9120] bond4 (unregistering): Released all slaves [ 202.028285][ T9171] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 202.028312][ T9171] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.850'. [ 202.042104][ T9171] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 202.068238][ T9177] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 202.090214][ T9177] netlink: 'syz.1.851': attribute type 9 has an invalid length. [ 202.090239][ T9177] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.851'. [ 202.193783][ T9174] bond1: (slave geneve3): making interface the new active one [ 202.194749][ T9174] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 202.243424][ T8554] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 202.244527][ T8554] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 202.244582][ T8554] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 202.419503][ T9189] vlan2: entered allmulticast mode [ 202.423409][ T9189] bond0: entered allmulticast mode [ 202.625485][ T9198] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 202.634198][ T9204] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.699195][ T9204] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 202.705048][ T9204] bond5 (unregistering): Released all slaves [ 203.057983][ T9225] x_tables: duplicate underflow at hook 4 [ 203.333611][ T9236] openvswitch: netlink: Flow actions attr not present in new flow. [ 203.466073][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 203.519822][ T9244] x_tables: unsorted underflow at hook 1 [ 203.562016][ T9246] netlink: 196 bytes leftover after parsing attributes in process `syz.0.872'. [ 203.871697][ T9267] Bluetooth: hci0: unsupported parameter 5135 [ 203.871724][ T9267] Bluetooth: hci0: unsupported parameter 8192 [ 203.871737][ T9267] Bluetooth: hci0: unsupported parameter 5135 [ 203.871749][ T9267] Bluetooth: hci0: unsupported parameter 8192 [ 204.079411][ T14] IPVS: starting estimator thread 0... [ 204.161914][ T9277] IPVS: using max 27 ests per chain, 64800 per kthread [ 204.506179][ T9308] netlink: 92 bytes leftover after parsing attributes in process `syz.4.888'. [ 204.506209][ T9308] nbd: must specify at least one socket [ 204.863906][ T9315] netlink: 36 bytes leftover after parsing attributes in process `syz.3.889'. [ 205.039709][ T9325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 205.039738][ T9325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.891'. [ 205.449360][ T9335] x_tables: duplicate underflow at hook 2 [ 205.727714][ T9355] netlink: 'syz.1.901': attribute type 11 has an invalid length. [ 205.727740][ T9355] netlink: 224 bytes leftover after parsing attributes in process `syz.1.901'. [ 206.519272][ T9392] __nla_validate_parse: 3 callbacks suppressed [ 206.519293][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 206.528645][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 206.600893][ T9396] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 206.952516][ T9410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 206.952564][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.916'. [ 208.884566][ T9430] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 208.889499][ T9430] ip_tables: iptables: counters copy to user failed while replacing table [ 208.917557][ T9430] xt_hashlimit: size too large, truncated to 1048576 [ 209.108096][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.924'. [ 209.144673][ T8608] IPVS: starting estimator thread 0... [ 209.245591][ T9460] IPVS: using max 25 ests per chain, 60000 per kthread [ 209.756719][ T9482] netlink: 20 bytes leftover after parsing attributes in process `syz.2.931'. [ 210.158123][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 210.301127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.370082][ T9522] netlink: 'syz.2.941': attribute type 3 has an invalid length. [ 210.370109][ T9522] netlink: 244 bytes leftover after parsing attributes in process `syz.2.941'. [ 210.856911][ T9531] tipc: Enabling of bearer rejected, media not registered [ 210.879964][ T9531] tipc: Enabling of bearer rejected, media not registered [ 210.935796][ T9539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.949'. [ 211.266962][ T9552] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 211.285568][ T9547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.952'. [ 211.285605][ T9547] netlink: 'syz.3.952': attribute type 7 has an invalid length. [ 211.285619][ T9547] netlink: 'syz.3.952': attribute type 8 has an invalid length. [ 211.297198][ T9550] netlink: 'syz.2.953': attribute type 2 has an invalid length. [ 211.448390][ T9555] veth0: entered promiscuous mode [ 211.548061][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.548425][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.548781][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.549123][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.591640][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.602968][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.603391][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.603733][ T9556] ip_tables: iptables: counters copy to user failed while replacing table [ 211.760337][ T9570] __nla_validate_parse: 1 callbacks suppressed [ 211.760357][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 211.760383][ T9570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 211.771432][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.958'. [ 211.771464][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 212.114992][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.960'. [ 212.299654][ T9566] veth0: left promiscuous mode [ 212.443040][ T9588] syzkaller0: entered promiscuous mode [ 212.443067][ T9588] syzkaller0: entered allmulticast mode [ 212.669214][ T9597] netlink: 164 bytes leftover after parsing attributes in process `syz.3.965'. [ 212.669406][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.965'. [ 213.068757][ T9602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'. [ 213.308202][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.308348][ T9625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.308684][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.308804][ T9625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.456602][ T9627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.976'. [ 213.456629][ T9627] tipc: Invalid UDP bearer configuration [ 213.456677][ T9627] tipc: Enabling of bearer rejected, failed to enable media [ 213.544582][ T9631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.977'. [ 213.601065][ T9629] gretap0: left promiscuous mode [ 213.945269][ T9645] bond5: option all_slaves_active: invalid value (179) [ 213.965237][ T9645] bond5 (unregistering): Released all slaves [ 214.026933][ T9664] xt_LOG: prefix is not null-terminated [ 214.658017][ T9705] netlink: 'syz.3.994': attribute type 1 has an invalid length. [ 214.734469][ T9705] bond2: (slave bridge26): making interface the new active one [ 214.735103][ T9705] bond2: (slave bridge26): Enslaving as an active interface with an up link [ 215.309393][ T9737] x_tables: unsorted entry at hook 4 [ 215.310491][ T9735] x_tables: unsorted entry at hook 4 [ 215.451105][ T9740] wg2: Caught tx_queue_len zero misconfig [ 216.822947][ T9812] __nla_validate_parse: 9 callbacks suppressed [ 216.822970][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 217.046270][ T9821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 217.048288][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 217.230164][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 217.241275][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 217.304401][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 218.538286][ T9878] netlink: 'syz.2.1040': attribute type 28 has an invalid length. [ 218.538314][ T9878] netlink: 'syz.2.1040': attribute type 3 has an invalid length. [ 218.538327][ T9878] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1040'. [ 218.549018][ T9880] netlink: 'syz.0.1039': attribute type 1 has an invalid length. [ 218.896249][ T9895] xt_addrtype: ipv6 does not support BROADCAST matching [ 218.918067][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 218.918094][ T9903] netlink: 'syz.3.1049': attribute type 3 has an invalid length. [ 218.918110][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1049'. [ 218.918381][ T9903] netlink: 'syz.3.1049': attribute type 3 has an invalid length. [ 218.956354][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 219.075705][ T9913] netlink: 'syz.4.1052': attribute type 10 has an invalid length. [ 219.736995][ C1] ------------[ cut here ]------------ [ 219.737013][ C1] !rcu_read_lock_held() [ 219.737028][ C1] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#1: ksoftirqd/1/24 [ 219.757444][ C1] Modules linked in: [ 219.761400][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 219.770797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 219.781075][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 219.787181][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 219.806969][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 219.813141][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6b5dc0 [ 219.821157][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 219.829242][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 219.837302][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 219.845382][ C1] R13: ffff8880494a7558 R14: ffff88807e639890 R15: ffff888056cea900 [ 219.853462][ C1] FS: 0000000000000000(0000) GS:ffff888123508000(0000) knlGS:0000000000000000 [ 219.862660][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.869383][ C1] CR2: 00007fe3b83556c8 CR3: 0000000061126000 CR4: 00000000003526f0 [ 219.877460][ C1] Call Trace: [ 219.880885][ C1] [ 219.883961][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 219.889563][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 219.894879][ C1] ? __asan_memset+0x22/0x50 [ 219.899522][ C1] ? xfrm_output+0xa03/0x1ca0 [ 219.904317][ C1] iptfs_delay_timer+0x3803/0x4310 [ 219.909693][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 219.915275][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 219.920356][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.926222][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.932140][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 219.937665][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 219.943039][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 219.948212][ C1] handle_softirqs+0x265/0x8d0 [ 219.953140][ C1] run_ksoftirqd+0x36/0x60 [ 219.957628][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 219.962669][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 219.967775][ C1] kthread+0x38b/0x480 [ 219.971931][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 219.977444][ C1] ? __pfx_kthread+0x10/0x10 [ 219.982120][ C1] ret_from_fork+0x514/0xb70 [ 219.986759][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 219.991977][ C1] ? __switch_to+0xc78/0x1410 [ 219.996711][ C1] ? __pfx_kthread+0x10/0x10 [ 220.001363][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.006258][ C1] [ 220.009320][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 220.016643][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 220.025902][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 220.036174][ C1] Call Trace: [ 220.039496][ C1] [ 220.042466][ C1] vpanic+0x26f/0x710 [ 220.046507][ C1] panic+0xc5/0xd0 [ 220.050274][ C1] ? __pfx_panic+0x10/0x10 [ 220.054750][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 220.059743][ C1] __warn+0x315/0x4c0 [ 220.063858][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 220.069415][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 220.075036][ C1] __report_bug+0x276/0x570 [ 220.079593][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 220.085098][ C1] ? __pfx___report_bug+0x10/0x10 [ 220.090173][ C1] ? lock_acquire+0x115/0x350 [ 220.094996][ C1] ? netlink_has_listeners+0x77/0x3f0 [ 220.100425][ C1] ? xfrm_aevent_is_on+0x18/0x230 [ 220.105509][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 220.110946][ C1] report_bug+0x16b/0x220 [ 220.115357][ C1] ? xfrm_output_resume+0x41d9/0x64e0 [ 220.120876][ C1] ? xfrm_output_resume+0x41db/0x64e0 [ 220.126334][ C1] handle_bug+0x9c/0x200 [ 220.130636][ C1] exc_invalid_op+0x1a/0x50 [ 220.135184][ C1] asm_exc_invalid_op+0x1a/0x20 [ 220.140081][ C1] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 220.146211][ C1] Code: be b5 01 00 00 48 c7 c2 a0 f7 53 8d e8 70 94 06 f7 e9 aa fc ff ff e8 f6 3f 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 e8 3f 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 07 cc 51 fa 84 c0 0f 84 e1 00 [ 220.165934][ C1] RSP: 0018:ffffc900001e7660 EFLAGS: 00010246 [ 220.172056][ C1] RAX: ffffffff8a9de0f8 RBX: 0000000000000000 RCX: ffff88801f6b5dc0 [ 220.180072][ C1] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 220.188068][ C1] RBP: ffffc900001e78f0 R08: 0000000000000100 R09: 1ffffffff237c017 [ 220.196668][ C1] R10: dffffc0000000000 R11: fffffbfff237c018 R12: dffffc0000000000 [ 220.204771][ C1] R13: ffff8880494a7558 R14: ffff88807e639890 R15: ffff888056cea900 [ 220.212787][ C1] ? xfrm_output_resume+0x41d8/0x64e0 [ 220.218248][ C1] ? __pfx_xfrm_output_resume+0x10/0x10 [ 220.223847][ C1] ? iptfs_get_inner_mtu+0xa0/0x210 [ 220.229295][ C1] ? __asan_memset+0x22/0x50 [ 220.233933][ C1] ? xfrm_output+0xa03/0x1ca0 [ 220.238699][ C1] iptfs_delay_timer+0x3803/0x4310 [ 220.243906][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 220.249421][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 220.254479][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 220.259901][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.266016][ C1] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 220.271606][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 220.276890][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 220.282182][ C1] handle_softirqs+0x265/0x8d0 [ 220.287195][ C1] run_ksoftirqd+0x36/0x60 [ 220.291832][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 220.296910][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 220.301977][ C1] kthread+0x38b/0x480 [ 220.306079][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 220.311551][ C1] ? __pfx_kthread+0x10/0x10 [ 220.316422][ C1] ret_from_fork+0x514/0xb70 [ 220.321035][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 220.326159][ C1] ? __switch_to+0xc78/0x1410 [ 220.330865][ C1] ? __pfx_kthread+0x10/0x10 [ 220.335496][ C1] ret_from_fork_asm+0x1a/0x30 [ 220.340481][ C1] [ 220.343953][ C1] Kernel Offset: disabled [ 220.348293][ C1] Rebooting in 86400 seconds..