last executing test programs: 2.45838624s ago: executing program 0 (id=1257): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.998136474s ago: executing program 0 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x23, 0x2, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400072100000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.991971813s ago: executing program 4 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140040be", @ANYRES16=r1, @ANYBLOB="0100040000000000000009000000"], 0x14}}, 0x200008c5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x118, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xf8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x78}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1b8}}, 0x0) r3 = socket(0x18, 0x2, 0x56) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00f0ff", @ANYRES16=r1, @ANYBLOB="080027bd7000fedbdf250d0000000800040076000000080005000800000020000180060001000a0000000800090030000000090006006e6f6e650000000008000400ffff0000"], 0x4c}}, 0x4000000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000006c0)={0x0, 0x2341}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240440a4}, 0x4890) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @broadcast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000040000009500000004000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x7, 0x9, 0x2, 0x8005, 0x40a, 0x1}) 1.949220977s ago: executing program 1 (id=1267): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/uts\x00') ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f0000000a00)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x66a1, 0x0, 0x0, 0x0, 0x10001}, [@alu={0x7, 0x0, 0x1, 0x7, 0x6, 0xfffffffffffffff0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x7, 0x86, &(0x7f0000000500)=""/134, 0x41100, 0x50, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x5, 0x6decf213, 0x2}, 0x10, 0xffffffffffffffff, r6, 0x3, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x3, 0x8}, {0x5, 0x4, 0x3, 0x2}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@fallback=r7, 0x10, 0x0, 0xac8, &(0x7f0000000780)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x2, 0x8a1, 0x0, 0x4000, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@map=r10, r8, 0x15, 0x18, 0x0, @void, @value, @void, @void, r9}, 0x20) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r13 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r13, 0x0, 0x17, &(0x7f00000001c0), &(0x7f0000000040)=0x3) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r11, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.826233684s ago: executing program 0 (id=1268): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x11, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x4, 0x1, 0x1, 0x1}, 0x0, 0x3, 0x0, 0x0, "e212c8449cc3850d"}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x24000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5d}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x502e}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0xc0d2}, 0x10) write(r1, &(0x7f0000000000)="08015e2fbc14a1690235dfb3975536fef8274ea662f307dba2c344b7db64d7376cbe8c636caf0c909a7f95303678bd735f437da824084694bcdca49a451826120857554ba0a048c9c0cad8f55c1660", 0x4f) 1.78025794s ago: executing program 2 (id=1269): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6, 0x5}, {0x0, 0x7}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0x3, 0x58f, [{0x0, 0x20008000, 0x3}]}}, @TCA_U32_LINK={0x8, 0x3, 0x2}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000884}, 0x24040084) 1.682014593s ago: executing program 4 (id=1271): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000026e4297b00000000000000000000000000004e200000000000000a"], 0xb8}}, 0x24000080) 1.546712208s ago: executing program 1 (id=1272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x80000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) sendmsg$xdp(r1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r4, 0x18}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.433825328s ago: executing program 4 (id=1273): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r4, 0x401, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x40, 0x2c}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x42}, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac141424ac1414aa0100000002000000640101010a01b2bb89ded0fdc215d9f5b3f101009ff097bea1f4c1ba92540ca0f9de11fd3284320652b02745e0bf5bd6965f1bf686f6b7c2de9e07eafdd1196eb0adbd0b973f3543ba53b8368593bec22bdf"], 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f00000000c0)={{0x2c, @loopback, 0x4e20, 0x1, 'lc\x00', 0x30, 0x81, 0x1d}, {@multicast1, 0x4e22, 0x1, 0x6, 0x8abc, 0xffff8001}}, 0x44) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.433447853s ago: executing program 2 (id=1274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000c0f3343d800000000020000000000"], 0x0, 0x1a}, 0x28) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 1.431974283s ago: executing program 0 (id=1275): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000429bd7000fddbdf251e0000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044025}, 0x4024800) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="040026bd7000fbdbdf250f00000005000f00020000000c00"/34], 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x4000040) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r6, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) close(0x4) 1.370593823s ago: executing program 2 (id=1276): r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x3, 0x7, 0x801, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_PKTS={0xc}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xb393}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0xc001}, 0x200000c0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf250900000005000800010000000800010001000000050007"], 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) 1.275127922s ago: executing program 1 (id=1277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x0, 0x0, 0x6, 0x2008, 0xfffd}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5], 0x44}}, 0x2000800) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, 0x0, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048014}, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000003000000000000071122a000000000095ffffff7f0000cccaf0bbb51b115c10f342a72666829ec22a21c56be06f6d81f07200b4cf71def779a122457505c2f30882d0215c80cb10db151e01a4fbcf3f79f6212ae79426f702ccb62057d139c4cbc5896538e5ac572a1644cd5ff373679e50109053a5d565ffae81092ebdaf70ecc93f3d179e3e81640e8914c7ced948e583b59f328f540148cfa90dd297895f6dd259238c239cd2040e125fef6033da459cb250b88f63496f108a7eb9f7f746564d5fd07d4c9463cc88ead91cf925e30c"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.15441506s ago: executing program 3 (id=1278): r0 = socket(0x21, 0x6, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe744}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8000, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe744}, 0x1c) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000040)={0xffffffff, 0x8000, 0x3, 0x80000000, 0x3, 0x3, 0x0, 0x3}) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) 1.153893544s ago: executing program 2 (id=1279): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket(0x2a, 0x4, 0x0) close(0x4) 1.120362446s ago: executing program 3 (id=1280): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25040117800c0003"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 943.279037ms ago: executing program 3 (id=1281): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061102000000000009500000004000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3fb, 0x20, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000002060100060000060005000000000000000003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000ab9bf000500020000000500010006000000"], 0x6c}}, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x3, 0x1}, &(0x7f0000000340)=0xc) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061102000000000009500000004000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x3fb, 0x20, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x40010) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c00000002060100060000060005000000000000000003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140000000000800064000000ab9bf000500020000000500010006000000"], 0x6c}}, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x3, 0x1}, &(0x7f0000000340)=0xc) (async) close(0x4) (async) 762.386444ms ago: executing program 3 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x5}]}, 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000080)={0x0, 0xc6cec7743db1b7bf, &(0x7f0000000800)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044815}, 0x20004004) 712.237613ms ago: executing program 3 (id=1283): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) socket$unix(0x1, 0x5, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) (async) 580.066514ms ago: executing program 3 (id=1284): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="b4b851647e3c24394117ac456f272e66d2", 0x11}, {&(0x7f00000000c0)="2697e39e42a6b5a2bfaaec11c10b3b14b3aadecc7270eabde86283c3071341436d5fc9695cc900ce6fdbe358c18b041e7d9100710da4e67850915bd87c42575ecee412641ebcc0c39431bbdf2b1589b1b7d54ede7108c0d21e096e87c86d0500c8750d0ea43cbb8cb92c2dbc29832b8425f2d7ea6c251d89b8833753c3e6c069e860", 0x82}, {&(0x7f00000001c0)="a57a24ff351fefdb8923275f", 0xc}, {&(0x7f0000000200)="f79679f9b1ccdf267741bfc264c469fb570b68fc6a24fd89aa9ecb1dd0ee34085519d348222f3adbb0cbd87602fd6359ffc3be9b01c3e7f07cc3c51ca71cb0a2b92e5b67495b59460f2afaac123a5bf9a9251b89af84f5b8b4fd99a80740ace783ec50446b6d2b62ede03828c2670798b297be79ad4190820932f702", 0x7c}, {&(0x7f0000000280)="3877e43e2cbbadfca84683cb", 0xc}, {&(0x7f00000002c0)="d0f5b0759accda9ddf4a8d4ef1d2cb57df4f7154fec622f91f3382d7f67e879b4f19b99966a655e52a5c8d697ca3b3937e482f4e21972e", 0x37}], 0x6, &(0x7f0000000380)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x25, 0x3, 0x7, [{@remote, 0x101}]}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xb7, 0x0, 0xd, [0x9, 0x8, 0x10000, 0xc2f, 0x1ff, 0xffffffff, 0x3]}, @noop]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x64, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast2, @local, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0x108}, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f00070113a769d500000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async, rerun: 64) sendmsg$rds(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1, &(0x7f0000000800)=[@rdma_dest={0x18, 0x114, 0x2, {0x777b, 0xf2}}, @fadd={0x58, 0x114, 0x6, {{0x10, 0x2}, &(0x7f0000000680)=0x3, &(0x7f00000006c0)=0x5c1, 0x4, 0x684440d8, 0x4, 0xffffffffffffffff, 0x39, 0xd5}}, @mask_cswp={0x58, 0x114, 0x9, {{0x6, 0x7fff}, &(0x7f0000000700)=0x4, &(0x7f0000000740)=0x9, 0x100, 0x2, 0xfffffffffffffff8, 0x7, 0x5, 0x100}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x5}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0x800, 0xcf, 0x6, 0x5, 0x100000000, 0x4, 0x10001}}], 0x120, 0x1}, 0x40) (rerun: 64) 510.974263ms ago: executing program 1 (id=1285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040)=0xa00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 506.901703ms ago: executing program 4 (id=1286): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000340)={r0, &(0x7f0000000180)='\x00', 0x8481, &(0x7f0000000200)={@align=0x7322, {0x9, 0x2, 0x7}}, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x101}) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x4008) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) close(r5) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="3f9d000000087603006d1aa103fdb860ae71b5c6ab3bbc6e32ba488d27a22eefc7773e754959cf880bf7aa0d9d3da2318c620eb2226159c98cd77a5c91b0c86cf70e002ee9b9bd27e489b07b28b0c75995fbb9329efc52aeb88aaf7d053750e3ddd4c0b8fc914f080e656bfed330e893a8af7beeb75c314500"/131, @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r7 = accept$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r8, @ANYBLOB="89040400000000001800128008000100736dc900448c8b4108000100", @ANYRESDEC=r0, @ANYBLOB], 0x38}}, 0x40800) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r9, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=r8, @ANYBLOB="38000700000000c5f67a10aa6ce0e5a54606073478a06560d17ef766e1b6631500e800100000000000d2683bd6667263c1e6ae17de4c525304367370b94d5551dfb8be0ed2c372ab8204a31dd823e63f951559d2c5d110a0cd9599ea6a", @ANYRESDEC=r6, @ANYRESOCT=r9], 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) 505.963595ms ago: executing program 2 (id=1287): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffb, @multicast2}, 0x10, &(0x7f0000001940)}, 0x28000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x200032d}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}}, 0x1) sendto$packet(r1, &(0x7f0000000240)="44c394f305916c4516999da2080095a11ada0a96a7113c0ca50c0be5993e477c43fd", 0x22, 0x0, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) accept4$alg(r0, 0x0, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-asm)\x00'}, 0x58) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r7 = socket(0x2c, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x20, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x50) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4041}, 0x10) close(0xffffffffffffffff) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000140)={0x8, 0x8000000, 0x3, 0x0, 0x1, 0x0, 0x0, &(0x7f00000000c0)}) 395.814583ms ago: executing program 1 (id=1288): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040854) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 389.255183ms ago: executing program 0 (id=1289): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000a80000000030006000000001400070000000000000000000000000000000001"], 0x38}}, 0x20000000) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="e0000000110009050000000000000000113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9bb02a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e91847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73000000"], 0xe0}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001e000100fdffffff000000000200000001000007000000000800070002000000080001", @ANYRES32=r1, @ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x42816}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x36dc}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0, r12}, 0x18) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r10, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x14}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x2c}}, 0x814) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0xc848}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c0700000b0a0102000000000000000001000009090001"], 0x794}}, 0x80) 246.927446ms ago: executing program 4 (id=1290): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000600)={@private1, 0x0}, &(0x7f0000000640)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={0xffffffffffffffff, r0, 0x25, 0x0, @val=@perf_event={0x2}}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) 139.535787ms ago: executing program 2 (id=1291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/542, @ANYRES64=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = getpid() sendmsg$unix(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003140)="fa", 0x1}], 0x1, &(0x7f00000046c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee01}}}, @rights={{0x10}}], 0x30}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001200000829bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000200000042010008001300", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x24004044) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x4c) 93.464764ms ago: executing program 4 (id=1292): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r1, 0x110, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3b, 0x1d}}}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0x20, 0x34, @random="c36a34f51a7904bce9f3d8861735d25460531005dd3c308f033080a7"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9138}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}], @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x3, 0x1, 0x0, {0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x6}}]}, 0xac}, 0x1, 0x0, 0x0, 0x7133dd06e793c425}, 0x200000c1) pipe(&(0x7f0000002740)={0xffffffffffffffff}) sendmmsg$unix(r5, 0x0, 0x0, 0x4041) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000280)={0x8, 'bond0\x00', {'ipvlan1\x00'}, 0xfa}) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}}) 38.905115ms ago: executing program 1 (id=1293): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000380)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37abcda1a297e0099c5ac0020c5b068030046d323456536016466fcb78dcaaf6c3efed495a46215be0000760636c035b1000000000000ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fb6e9aa241731ae9e0b39072", 0x91, 0x8000, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x808000}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r3, &(0x7f0000000040)=0x4) socket$alg(0x26, 0x5, 0x0) 0s ago: executing program 0 (id=1294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x9, 0x4, 0xb47e, 0xa, 0x2, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000280)) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="2703", 0x2}], 0x1}, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f00000001c0), 0x8) sendmmsg$sock(r6, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="8ca10e91", 0x4}], 0x1, &(0x7f0000000200)=[@txtime={{0x18, 0x1, 0x3d, 0x1fe}}], 0x18}}], 0x1, 0x20004084) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r10, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180002ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 2 (id=1295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000080c}, 0x810) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r1], 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x50) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x2, 0x1}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdc01, {0x0, 0x0, 0x0, r10, {0xd, 0xb}, {0x5, 0x3}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_RATE={0x6, 0x5, {0xe6, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8400) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0x0, 0xb}, {0xffe5, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44040) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r6, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r6, &(0x7f00000003c0)="16", &(0x7f0000000600)=""/212}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts. [ 81.823435][ T5609] cgroup: Unknown subsys name 'net' [ 81.958258][ T5609] cgroup: Unknown subsys name 'cpuset' [ 81.968589][ T5609] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.391228][ T5609] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.878305][ T5629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.889493][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.897516][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.909335][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.917578][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.919824][ T5637] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.927276][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.940144][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.943204][ T5638] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.949155][ T5635] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.955032][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.962383][ T5635] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.971915][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.975944][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.983700][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.997804][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.998358][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.006452][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.021224][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.032266][ T5637] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.039712][ T4941] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.041116][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.050788][ T5637] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.055200][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.074722][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.759486][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.766918][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.774434][ T5622] bridge_slave_0: entered allmulticast mode [ 88.782035][ T5622] bridge_slave_0: entered promiscuous mode [ 88.832722][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.840165][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.847434][ T5622] bridge_slave_1: entered allmulticast mode [ 88.854505][ T5622] bridge_slave_1: entered promiscuous mode [ 88.871178][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.878342][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.885605][ T5634] bridge_slave_0: entered allmulticast mode [ 88.893401][ T5634] bridge_slave_0: entered promiscuous mode [ 88.937415][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.944606][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.952056][ T5634] bridge_slave_1: entered allmulticast mode [ 88.959026][ T5634] bridge_slave_1: entered promiscuous mode [ 89.008648][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.015962][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.023097][ T5623] bridge_slave_0: entered allmulticast mode [ 89.030275][ T5623] bridge_slave_0: entered promiscuous mode [ 89.045460][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.065468][ T50] Bluetooth: hci0: command tx timeout [ 89.076201][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.083362][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.090933][ T5623] bridge_slave_1: entered allmulticast mode [ 89.098836][ T5623] bridge_slave_1: entered promiscuous mode [ 89.135370][ T5624] Bluetooth: hci4: command tx timeout [ 89.137604][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.141253][ T5629] Bluetooth: hci2: command tx timeout [ 89.150883][ T5637] Bluetooth: hci1: command tx timeout [ 89.156456][ T50] Bluetooth: hci3: command tx timeout [ 89.184018][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.220937][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.228229][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.236214][ T5630] bridge_slave_0: entered allmulticast mode [ 89.243190][ T5630] bridge_slave_0: entered promiscuous mode [ 89.252315][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.264146][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.273912][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.281063][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.289205][ T5628] bridge_slave_0: entered allmulticast mode [ 89.296292][ T5628] bridge_slave_0: entered promiscuous mode [ 89.305878][ T5622] team0: Port device team_slave_0 added [ 89.311647][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.318835][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.326432][ T5630] bridge_slave_1: entered allmulticast mode [ 89.333405][ T5630] bridge_slave_1: entered promiscuous mode [ 89.350767][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.364315][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.371619][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.379022][ T5628] bridge_slave_1: entered allmulticast mode [ 89.386046][ T5628] bridge_slave_1: entered promiscuous mode [ 89.394378][ T5622] team0: Port device team_slave_1 added [ 89.467357][ T5634] team0: Port device team_slave_0 added [ 89.492703][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.499918][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.525899][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.541784][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.549294][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.575841][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.590219][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.603203][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.615565][ T5634] team0: Port device team_slave_1 added [ 89.643446][ T5623] team0: Port device team_slave_0 added [ 89.653768][ T5623] team0: Port device team_slave_1 added [ 89.663741][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.677368][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.776943][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.785008][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.811632][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.853064][ T5630] team0: Port device team_slave_0 added [ 89.859514][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.866702][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.893114][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.914470][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.921621][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.948169][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.961200][ T5628] team0: Port device team_slave_0 added [ 89.968816][ T5630] team0: Port device team_slave_1 added [ 89.990871][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.998135][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.025159][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.038930][ T5628] team0: Port device team_slave_1 added [ 90.069133][ T5622] hsr_slave_0: entered promiscuous mode [ 90.075935][ T5622] hsr_slave_1: entered promiscuous mode [ 90.112491][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.119960][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.146555][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.159513][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.166524][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.192883][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.262860][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.270407][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.297457][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.315200][ T5634] hsr_slave_0: entered promiscuous mode [ 90.322404][ T5634] hsr_slave_1: entered promiscuous mode [ 90.329261][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 90.335171][ T5634] Cannot create hsr debugfs directory [ 90.366743][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.373831][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.400756][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.428012][ T5623] hsr_slave_0: entered promiscuous mode [ 90.434344][ T5623] hsr_slave_1: entered promiscuous mode [ 90.440770][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 90.447734][ T5623] Cannot create hsr debugfs directory [ 90.489802][ T5630] hsr_slave_0: entered promiscuous mode [ 90.497531][ T5630] hsr_slave_1: entered promiscuous mode [ 90.503844][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 90.509678][ T5630] Cannot create hsr debugfs directory [ 90.654702][ T5628] hsr_slave_0: entered promiscuous mode [ 90.661211][ T5628] hsr_slave_1: entered promiscuous mode [ 90.668366][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 90.674274][ T5628] Cannot create hsr debugfs directory [ 91.039318][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.051889][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.060313][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.070674][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.096689][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.107674][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.125182][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.135805][ T50] Bluetooth: hci0: command tx timeout [ 91.136088][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.194091][ T5623] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.207666][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.215133][ T50] Bluetooth: hci1: command tx timeout [ 91.215156][ T5629] Bluetooth: hci3: command tx timeout [ 91.220976][ T5637] Bluetooth: hci2: command tx timeout [ 91.226020][ T5624] Bluetooth: hci4: command tx timeout [ 91.241907][ T5623] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.251937][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.260146][ T5623] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.269132][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.288993][ T5623] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.299425][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.364131][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.374412][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.382940][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.392071][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.412470][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.421817][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.431030][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.441746][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.550195][ T5634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.559470][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.567869][ T5634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.578090][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.586644][ T5634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.598312][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.614537][ T5634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.625001][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.709923][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.720791][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.728792][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.738139][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.754475][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.764567][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.772952][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.786940][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.800628][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.830063][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.865830][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.883040][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.890516][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.917629][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.938861][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.945982][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.979268][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.986492][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.000775][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.008017][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.086529][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.158288][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.184609][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.191753][ T3294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.218564][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.233751][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.240965][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.277344][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.370432][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.390031][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.421792][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.429030][ T3294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.471654][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.478881][ T3294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.491366][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.498572][ T3294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.528559][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.535818][ T3294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.200157][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.224633][ T5624] Bluetooth: hci0: command tx timeout [ 93.290234][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.295121][ T5624] Bluetooth: hci4: command tx timeout [ 93.302471][ T5629] Bluetooth: hci3: command tx timeout [ 93.303804][ T5637] Bluetooth: hci2: command tx timeout [ 93.313793][ T50] Bluetooth: hci1: command tx timeout [ 93.440279][ T5622] veth0_vlan: entered promiscuous mode [ 93.500237][ T5622] veth1_vlan: entered promiscuous mode [ 93.572313][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.622316][ T5623] veth0_vlan: entered promiscuous mode [ 93.674266][ T5623] veth1_vlan: entered promiscuous mode [ 93.721311][ T5622] veth0_macvtap: entered promiscuous mode [ 93.763413][ T5622] veth1_macvtap: entered promiscuous mode [ 93.794334][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.819968][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.840299][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.868658][ T5630] veth0_vlan: entered promiscuous mode [ 93.897613][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.928991][ T5623] veth0_macvtap: entered promiscuous mode [ 93.940454][ T5630] veth1_vlan: entered promiscuous mode [ 93.969449][ T5623] veth1_macvtap: entered promiscuous mode [ 93.990098][ T3294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055571][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.068676][ T3294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.139796][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.157990][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.183426][ T5634] veth0_vlan: entered promiscuous mode [ 94.190223][ T5630] veth0_macvtap: entered promiscuous mode [ 94.218884][ T5630] veth1_macvtap: entered promiscuous mode [ 94.252623][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.257789][ T5634] veth1_vlan: entered promiscuous mode [ 94.271982][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.311026][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.364213][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.373851][ T3294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.385952][ T3294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.392763][ T5628] veth0_vlan: entered promiscuous mode [ 94.440642][ T5628] veth1_vlan: entered promiscuous mode [ 94.516809][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.545386][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.549148][ T5634] veth0_macvtap: entered promiscuous mode [ 94.556954][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.584399][ T5634] veth1_macvtap: entered promiscuous mode [ 94.628541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.644149][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.672287][ T9] cfg80211: failed to load regulatory.db [ 94.748340][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.763662][ T5628] veth0_macvtap: entered promiscuous mode [ 94.780001][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.785821][ T29] IPVS: starting estimator thread 0... [ 94.791002][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.803591][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.830239][ T5628] veth1_macvtap: entered promiscuous mode [ 94.865193][ T3294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.882049][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.906629][ T5824] IPVS: using max 35 ests per chain, 84000 per kthread [ 94.909588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.944346][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.012063][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.176550][ T5831] Zero length message leads to an empty skb [ 95.294590][ T5834] ip6gre1: entered allmulticast mode [ 95.301983][ T50] Bluetooth: hci0: command tx timeout [ 95.333223][ T740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.345426][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.354421][ T740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.376198][ T50] Bluetooth: hci4: command tx timeout [ 95.381986][ T5637] Bluetooth: hci3: command tx timeout [ 95.387786][ T5637] Bluetooth: hci1: command tx timeout [ 95.387803][ T5624] Bluetooth: hci2: command tx timeout [ 95.457726][ T197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.551923][ T197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.556828][ T740] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.568607][ T197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.580563][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.622941][ T5842] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 95.630676][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.630698][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.648666][ T1123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.660783][ T5842] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 95.786067][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.821230][ T3294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.839840][ T3294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.915196][ T197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941163][ T197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.065266][ T5852] v: renamed from veth0_vlan [ 96.094108][ T5861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 96.108181][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 96.185955][ T3294] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.221747][ T5867] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 96.238746][ T5867] IPv6: NLM_F_CREATE should be specified when creating new route [ 96.296744][ T5867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.304518][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 96.311880][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 96.319251][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 96.335995][ T197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.429143][ T5877] netlink: 'syz.3.16': attribute type 9 has an invalid length. [ 96.448206][ T197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.593425][ T197] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.926350][ T5883] syzkaller0: entered promiscuous mode [ 96.944103][ T5883] syzkaller0: entered allmulticast mode [ 97.022424][ T5893] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 97.036881][ T3294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.237233][ T5916] netlink: 'syz.3.26': attribute type 10 has an invalid length. [ 97.564297][ T5936] netlink: 196 bytes leftover after parsing attributes in process `syz.2.27'. [ 97.576154][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27'. [ 98.572360][ T5759] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 98.596308][ T5916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.607247][ T5916] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 98.729933][ T5287] v: left promiscuous mode [ 98.822909][ T5759] v: entered promiscuous mode [ 98.842921][ T5948] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.864945][ T3294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.946616][ T3294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.155052][ T197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.188694][ T197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.502314][ T5991] sctp: [Deprecated]: syz.0.41 (pid 5991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.502314][ T5991] Use struct sctp_sack_info instead [ 99.511664][ T5984] netlink: 104 bytes leftover after parsing attributes in process `syz.1.40'. [ 99.850876][ T5988] syzkaller0: entered promiscuous mode [ 99.884528][ T5988] syzkaller0: entered allmulticast mode [ 99.928152][ T5975] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 100.815533][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 101.295219][ T5624] Bluetooth: hci0: command 0x0401 tx timeout [ 101.377229][ T6017] warning: `syz.1.45' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.594646][ T6050] 8021q: VLANs not supported on wg1 [ 101.758533][ T6057] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 101.900883][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.918734][ T6064] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.959516][ T6064] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.995876][ T6076] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 102.187778][ T6080] netlink: 182 bytes leftover after parsing attributes in process `syz.2.60'. [ 102.240097][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.61'. [ 102.260525][ T6084] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 102.288807][ T6084] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 102.407944][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 102.481199][ T6095] syzkaller0: entered promiscuous mode [ 102.501021][ T6097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.64'. [ 102.510536][ T6095] syzkaller0: entered allmulticast mode [ 102.529654][ T6101] sctp: [Deprecated]: syz.3.65 (pid 6101) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.529654][ T6101] Use struct sctp_sack_info instead [ 102.615923][ T6104] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 102.643361][ T6097] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.663723][ T6102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 102.766193][ T6104] netlink: 'syz.1.66': attribute type 2 has an invalid length. [ 102.785799][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.66'. [ 102.903443][ T6118] IPv4: Oversized IP packet from 127.202.26.0 [ 102.917031][ T6114] syzkaller0: entered promiscuous mode [ 102.922989][ T6114] syzkaller0: entered allmulticast mode [ 102.965410][ T6121] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 103.124455][ T6124] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 103.199586][ T6124] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 103.274533][ T6130] 8021q: VLANs not supported on ip_vti0 [ 103.327762][ T6139] netlink: 68 bytes leftover after parsing attributes in process `syz.2.76'. [ 103.340994][ T6141] netlink: 36 bytes leftover after parsing attributes in process `syz.4.77'. [ 103.579913][ T6155] syzkaller0: entered promiscuous mode [ 103.594399][ T6160] syz.1.83 uses obsolete (PF_INET,SOCK_PACKET) [ 103.612777][ T6155] syzkaller0: entered allmulticast mode [ 104.904786][ T6235] syzkaller0: entered promiscuous mode [ 104.980391][ T6235] syzkaller0: entered allmulticast mode [ 105.125372][ T6240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.197465][ T6244] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.231799][ T6236] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 105.362438][ T6268] Bluetooth: MGMT ver 1.23 [ 105.370160][ T6268] Bluetooth: hci1: too big key_count value 32778 [ 105.430143][ T6251] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 105.679671][ T6273] netlink: 'syz.3.103': attribute type 10 has an invalid length. [ 105.696390][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 105.749181][ T6281] syz_tun: entered allmulticast mode [ 105.800824][ T6280] syz_tun: left allmulticast mode [ 105.988957][ T6293] syzkaller0: entered promiscuous mode [ 106.021756][ T6293] syzkaller0: entered allmulticast mode [ 106.370911][ T6315] syzkaller1: entered promiscuous mode [ 106.402881][ T6315] syzkaller1: entered allmulticast mode [ 106.476714][ T6328] Bluetooth: MGMT ver 1.23 [ 106.654066][ T6334] syz_tun: entered allmulticast mode [ 106.710019][ T6333] syz_tun: left allmulticast mode [ 107.034232][ T6356] x_tables: duplicate underflow at hook 2 [ 107.109785][ T6358] syzkaller0: entered promiscuous mode [ 107.121992][ T6358] syzkaller0: entered allmulticast mode [ 107.231243][ T6352] syz.2.129 (6352) used greatest stack depth: 16512 bytes left [ 107.524602][ T6375] __nla_validate_parse: 9 callbacks suppressed [ 107.524620][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 107.565338][ T6381] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 107.684537][ T6381] bond2: entered promiscuous mode [ 107.690184][ T6381] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.816465][ T6386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.823792][ T6386] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 107.838135][ T6386] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 107.852555][ T6386] bond2: (slave ip6gre1): making interface the new active one [ 107.865257][ T6386] ip6gre1: entered promiscuous mode [ 107.875686][ T6386] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 107.983148][ T6389] syzkaller0: entered promiscuous mode [ 108.004764][ T6389] syzkaller0: entered allmulticast mode [ 108.035228][ T6402] netlink: ct family unspecified [ 108.042435][ T6389] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 108.052270][ T6389] netlink: 220 bytes leftover after parsing attributes in process `syz.3.137'. [ 108.071137][ T6402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.082905][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 108.152610][ T6409] netlink: 'syz.0.141': attribute type 58 has an invalid length. [ 108.177622][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.141'. [ 108.282476][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 108.303159][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 108.316001][ T6412] syzkaller0: entered promiscuous mode [ 108.322194][ T6412] syzkaller0: entered allmulticast mode [ 108.501237][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.0.146'. [ 108.590368][ T6425] veth1_to_team: entered allmulticast mode [ 108.752046][ T6431] netlink: 'syz.0.150': attribute type 12 has an invalid length. [ 108.789275][ T6431] netlink: 'syz.0.150': attribute type 29 has an invalid length. [ 108.811508][ T6431] netlink: 148 bytes leftover after parsing attributes in process `syz.0.150'. [ 108.824047][ T6431] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 108.832691][ T6431] netlink: 'syz.0.150': attribute type 2 has an invalid length. [ 108.888355][ T6434] syzkaller0: entered promiscuous mode [ 108.912343][ T6434] syzkaller0: entered allmulticast mode [ 109.324556][ T6460] syzkaller0: entered promiscuous mode [ 109.341938][ T6460] syzkaller0: entered allmulticast mode [ 109.376145][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.440814][ T6470] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.445786][ T6471] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 109.508881][ T6470] netlink: 'syz.2.162': attribute type 11 has an invalid length. [ 109.535030][ T6470] netlink: 4320 bytes leftover after parsing attributes in process `syz.2.162'. [ 109.987788][ T6497] netlink: 'syz.3.169': attribute type 2 has an invalid length. [ 110.367933][ T6512] syzkaller0: entered promiscuous mode [ 110.374931][ T6512] syzkaller0: entered allmulticast mode [ 110.512083][ T6523] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.559492][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.178'. [ 110.800901][ T6531] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 111.393026][ T6558] syzkaller0: entered promiscuous mode [ 111.417865][ T6558] syzkaller0: entered allmulticast mode [ 111.570285][ T6572] xt_hashlimit: size too large, truncated to 1048576 [ 111.903128][ T6589] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 112.090123][ T6596] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 112.253478][ T6596] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.339149][ T6606] netlink: 'syz.0.199': attribute type 34 has an invalid length. [ 112.417303][ T6600] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 112.753925][ T6602] macvlan2: entered promiscuous mode [ 112.767421][ T6627] netlink: 'syz.1.203': attribute type 32 has an invalid length. [ 112.795274][ T6602] macvlan2: entered allmulticast mode [ 112.852279][ T6602] bond1: entered promiscuous mode [ 112.888310][ T6602] veth0_to_bond: entered promiscuous mode [ 112.941506][ T6602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.996426][ T6602] bond1: left promiscuous mode [ 113.014428][ T6602] veth0_to_bond: left promiscuous mode [ 113.113063][ T6646] xt_nfacct: accounting object `syz1' does not exist [ 113.293862][ T6636] syzkaller0: entered promiscuous mode [ 113.318363][ T6636] syzkaller0: entered allmulticast mode [ 113.838026][ T6682] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.925019][ T6687] __nla_validate_parse: 11 callbacks suppressed [ 113.925036][ T6687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 114.990860][ T6672] bridge1: entered allmulticast mode [ 115.122142][ T6694] xt_TCPMSS: Only works on TCP SYN packets [ 115.188913][ T6696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 115.252764][ T6703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.217'. [ 115.291827][ T6708] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 115.354786][ T6704] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 115.363311][ T6715] netlink: 'syz.3.221': attribute type 3 has an invalid length. [ 115.765393][ T6735] syzkaller0: entered promiscuous mode [ 115.794877][ T6735] syzkaller0: entered allmulticast mode [ 115.879420][ T6736] af_packet: tpacket_rcv: packet too big, clamped from 240 to 4294967272. macoff=96 [ 116.165927][ T6759] vcan1: entered promiscuous mode [ 116.183497][ T6759] vcan1: entered allmulticast mode [ 116.231175][ T6768] nbd: must specify a device to reconfigure [ 116.253732][ T6777] netlink: 'syz.2.233': attribute type 4 has an invalid length. [ 116.546972][ T6795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 116.763467][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.243'. [ 116.779754][ T6805] syzkaller0: entered promiscuous mode [ 116.792656][ T6805] syzkaller0: entered allmulticast mode [ 117.073386][ T6825] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 117.177053][ T6835] gtp0: entered promiscuous mode [ 117.220174][ T6835] gtp0: entered allmulticast mode [ 117.383208][ T6849] x_tables: duplicate underflow at hook 2 [ 117.815017][ T6870] x_tables: duplicate underflow at hook 2 [ 117.853248][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.261'. [ 117.921917][ T6876] syzkaller0: entered promiscuous mode [ 117.932349][ T6876] syzkaller0: entered allmulticast mode [ 118.119624][ T6880] Cannot find add_set index 4 as target [ 118.137512][ T6880] x_tables: duplicate underflow at hook 2 [ 118.192019][ T6884] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 118.232755][ T6884] netlink: 44 bytes leftover after parsing attributes in process `syz.4.265'. [ 118.335582][ T6892] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 118.372875][ T6841] infiniband syz1: set active [ 118.393520][ T6841] infiniband syz1: added bond_slave_0 [ 118.443395][ T6896] lo: entered promiscuous mode [ 118.458515][ T6896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.474489][ T6841] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 118.489987][ T6841] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 118.508001][ T6841] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 118.582703][ T6899] bridge0: port 3(vlan2) entered blocking state [ 118.632785][ T6841] RDS/IB: syz1: added [ 118.638769][ T6899] bridge0: port 3(vlan2) entered disabled state [ 118.667245][ T6841] smc: adding ib device syz1 with port count 1 [ 118.674655][ T6899] vlan2: entered allmulticast mode [ 118.693426][ T6841] smc: ib device syz1 port 1 has no pnetid [ 118.695882][ T6899] geneve0: entered allmulticast mode [ 118.733944][ T6899] vlan2: entered promiscuous mode [ 118.740415][ T6899] geneve0: entered promiscuous mode [ 118.784514][ T6914] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 118.917245][ T6914] 8021q: adding VLAN 0 to HW filter on device bond4 [ 118.966043][ T6916] bond4: (slave veth3): Enslaving as an active interface with a down link [ 118.999672][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 119.307964][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 119.374602][ T6939] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 119.622769][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 119.643600][ T6945] netlink: 'syz.1.285': attribute type 21 has an invalid length. [ 119.652857][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 120.207093][ T6978] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 120.499088][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.299'. [ 120.614380][ T6991] netlink: 'syz.1.300': attribute type 2 has an invalid length. [ 120.675328][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.303'. [ 120.689177][ T6999] netlink: 24 bytes leftover after parsing attributes in process `syz.0.301'. [ 120.689421][ T7000] netlink: 84 bytes leftover after parsing attributes in process `syz.2.303'. [ 120.880867][ T7011] netlink: 'syz.0.304': attribute type 1 has an invalid length. [ 121.124611][ T7013] bond3: (slave veth3): Enslaving as an active interface with a down link [ 121.140473][ T7011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.722477][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 121.762910][ T7050] netlink: 'syz.2.314': attribute type 30 has an invalid length. [ 121.806353][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 121.870539][ T7053] syzkaller0: entered promiscuous mode [ 121.885812][ T7053] syzkaller0: entered allmulticast mode [ 122.021025][ T7062] netlink: 'syz.2.318': attribute type 11 has an invalid length. [ 122.450005][ T7082] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 122.529127][ T7088] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 122.604125][ T7088] netlink: 'syz.2.327': attribute type 12 has an invalid length. [ 122.615621][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.634284][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.644130][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.697332][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.945794][ T7106] syzkaller0: entered promiscuous mode [ 122.965971][ T7106] syzkaller0: entered allmulticast mode [ 122.989793][ T7106] FAULT_INJECTION: forcing a failure. [ 122.989793][ T7106] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.039381][ T7106] CPU: 1 UID: 0 PID: 7106 Comm: syz.2.332 Not tainted syzkaller #0 PREEMPT(full) [ 123.039408][ T7106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.039430][ T7106] Call Trace: [ 123.039438][ T7106] [ 123.039445][ T7106] dump_stack_lvl+0xe8/0x150 [ 123.039477][ T7106] should_fail_ex+0x40c/0x560 [ 123.039506][ T7106] _copy_from_iter+0x1d3/0x1660 [ 123.039531][ T7106] ? skb_set_owner_w+0x263/0x3d0 [ 123.039566][ T7106] ? __pfx__copy_from_iter+0x10/0x10 [ 123.039596][ T7106] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 123.039622][ T7106] skb_copy_datagram_from_iter+0xe6/0x720 [ 123.039648][ T7106] ? dev_get_by_index+0x22/0x2d0 [ 123.039672][ T7106] ? skb_put+0x112/0x210 [ 123.039699][ T7106] packet_sendmsg+0x36ab/0x5040 [ 123.039739][ T7106] ? __lock_acquire+0x683/0x2cf0 [ 123.039790][ T7106] ? unwind_next_frame+0x8f/0x2550 [ 123.039821][ T7106] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.039853][ T7106] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.039876][ T7106] ? aa_sock_msg_perm+0xf1/0x1b0 [ 123.039901][ T7106] ? __pfx_packet_sendmsg+0x10/0x10 [ 123.039922][ T7106] sock_sendmsg_nosec+0x13a/0x180 [ 123.039949][ T7106] ____sys_sendmsg+0x54e/0x850 [ 123.039974][ T7106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.040004][ T7106] ? import_iovec+0x73/0xa0 [ 123.040025][ T7106] ___sys_sendmsg+0x2a5/0x360 [ 123.040045][ T7106] ? __lock_acquire+0x683/0x2cf0 [ 123.040074][ T7106] ? __pfx____sys_sendmsg+0x10/0x10 [ 123.040136][ T7106] ? __fget_files+0x2a/0x420 [ 123.040161][ T7106] ? __fget_files+0x3a2/0x420 [ 123.040201][ T7106] __x64_sys_sendmsg+0x1b1/0x290 [ 123.040226][ T7106] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 123.040262][ T7106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.040283][ T7106] do_syscall_64+0x174/0x580 [ 123.040305][ T7106] ? trace_irq_disable+0x3b/0x140 [ 123.040329][ T7106] ? clear_bhb_loop+0x40/0x90 [ 123.040352][ T7106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.040370][ T7106] RIP: 0033:0x7febdd19e019 [ 123.040395][ T7106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.040410][ T7106] RSP: 002b:00007febde038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.040435][ T7106] RAX: ffffffffffffffda RBX: 00007febdd425fa0 RCX: 00007febdd19e019 [ 123.040448][ T7106] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 123.040460][ T7106] RBP: 00007febde038090 R08: 0000000000000000 R09: 0000000000000000 [ 123.040471][ T7106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.040482][ T7106] R13: 00007febdd426038 R14: 00007febdd425fa0 R15: 00007ffdcdf75b38 [ 123.040511][ T7106] [ 123.688014][ T7131] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 124.092667][ T7154] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 124.483955][ T7174] netlink: 'syz.0.353': attribute type 1 has an invalid length. [ 124.494027][ T7173] syzkaller0: entered promiscuous mode [ 124.508527][ T7173] syzkaller0: entered allmulticast mode [ 124.615138][ T7177] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.651304][ T7176] syzkaller0: entered promiscuous mode [ 124.689286][ T7176] syzkaller0: entered allmulticast mode [ 124.697655][ T7176] FAULT_INJECTION: forcing a failure. [ 124.697655][ T7176] name failslab, interval 1, probability 0, space 0, times 0 [ 124.711067][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.2.352 Not tainted syzkaller #0 PREEMPT(full) [ 124.711083][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.711089][ T7176] Call Trace: [ 124.711094][ T7176] [ 124.711098][ T7176] dump_stack_lvl+0xe8/0x150 [ 124.711119][ T7176] should_fail_ex+0x40c/0x560 [ 124.711135][ T7176] should_failslab+0xa8/0x100 [ 124.711153][ T7176] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 124.711166][ T7176] ? skb_clone+0x212/0x3a0 [ 124.711177][ T7176] ? skb_clone+0x212/0x3a0 [ 124.711192][ T7176] skb_clone+0x212/0x3a0 [ 124.711203][ T7176] ? netem_enqueue+0xeb8/0x32b0 [ 124.711215][ T7176] netem_enqueue+0xecb/0x32b0 [ 124.711231][ T7176] ? do_raw_spin_lock+0x12b/0x2f0 [ 124.711248][ T7176] dev_qdisc_enqueue+0x4e/0x260 [ 124.711263][ T7176] ? __dev_queue_xmit+0x1b2b/0x3820 [ 124.711277][ T7176] __dev_queue_xmit+0x1b45/0x3820 [ 124.711295][ T7176] ? __dev_queue_xmit+0x29b/0x3820 [ 124.711310][ T7176] ? _copy_from_iter+0x21b/0x1660 [ 124.711324][ T7176] ? skb_set_owner_w+0x263/0x3d0 [ 124.711336][ T7176] ? __pfx___dev_queue_xmit+0x10/0x10 [ 124.711352][ T7176] ? __pfx__copy_from_iter+0x10/0x10 [ 124.711374][ T7176] ? __pfx_packet_parse_headers+0x10/0x10 [ 124.711391][ T7176] ? packet_xmit+0x68/0x330 [ 124.711405][ T7176] ? skb_put+0x112/0x210 [ 124.711416][ T7176] packet_sendmsg+0x3d95/0x5040 [ 124.711436][ T7176] ? __lock_acquire+0x683/0x2cf0 [ 124.711458][ T7176] ? unwind_next_frame+0x8f/0x2550 [ 124.711477][ T7176] ? __pfx_packet_sendmsg+0x10/0x10 [ 124.711496][ T7176] ? __pfx_aa_sk_perm+0x10/0x10 [ 124.711508][ T7176] ? aa_sock_msg_perm+0xf1/0x1b0 [ 124.711522][ T7176] ? __pfx_packet_sendmsg+0x10/0x10 [ 124.711534][ T7176] sock_sendmsg_nosec+0x13a/0x180 [ 124.711550][ T7176] ____sys_sendmsg+0x54e/0x850 [ 124.711565][ T7176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.711580][ T7176] ? import_iovec+0x73/0xa0 [ 124.711591][ T7176] ___sys_sendmsg+0x2a5/0x360 [ 124.711602][ T7176] ? __lock_acquire+0x683/0x2cf0 [ 124.711618][ T7176] ? __pfx____sys_sendmsg+0x10/0x10 [ 124.711646][ T7176] ? __fget_files+0x2a/0x420 [ 124.711659][ T7176] ? __fget_files+0x3a2/0x420 [ 124.711677][ T7176] __x64_sys_sendmsg+0x1b1/0x290 [ 124.711690][ T7176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 124.711710][ T7176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.711721][ T7176] do_syscall_64+0x174/0x580 [ 124.711740][ T7176] ? trace_irq_disable+0x3b/0x140 [ 124.711754][ T7176] ? clear_bhb_loop+0x40/0x90 [ 124.711766][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.711776][ T7176] RIP: 0033:0x7febdd19e019 [ 124.711786][ T7176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.711795][ T7176] RSP: 002b:00007febde038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.711806][ T7176] RAX: ffffffffffffffda RBX: 00007febdd425fa0 RCX: 00007febdd19e019 [ 124.711813][ T7176] RDX: 0000000000004000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 124.711819][ T7176] RBP: 00007febde038090 R08: 0000000000000000 R09: 0000000000000000 [ 124.711825][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.711831][ T7176] R13: 00007febdd426038 R14: 00007febdd425fa0 R15: 00007ffdcdf75b38 [ 124.711846][ T7176] [ 125.230644][ T7199] __nla_validate_parse: 3 callbacks suppressed [ 125.230663][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.359'. [ 125.295091][ T7197] syzkaller0: entered promiscuous mode [ 125.340463][ T7197] syzkaller0: entered allmulticast mode [ 125.359844][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.361'. [ 125.537762][ T7217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 125.547216][ T7215] veth1_to_bond: entered allmulticast mode [ 125.553813][ T7216] netlink: 'syz.1.365': attribute type 1 has an invalid length. [ 125.562779][ T7215] veth1_to_bond: entered promiscuous mode [ 125.570265][ T7218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 125.573596][ T7215] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.603553][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 125.642486][ T7218] veth1_to_bond (unregistering): left allmulticast mode [ 125.649725][ T7218] veth1_to_bond (unregistering): left promiscuous mode [ 125.683202][ T7218] bond0: (slave bond_slave_1): Releasing backup interface [ 125.869475][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.366'. [ 125.931783][ T7233] netlink: 'syz.2.369': attribute type 8 has an invalid length. [ 125.949384][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'. [ 125.968833][ T7233] bond0: entered promiscuous mode [ 125.974118][ T7233] bond_slave_0: entered promiscuous mode [ 125.982684][ T7233] gretap0: entered promiscuous mode [ 125.993509][ T7233] team0: entered promiscuous mode [ 125.998667][ T7233] team_slave_0: entered promiscuous mode [ 126.004615][ T7233] team_slave_1: entered promiscuous mode [ 126.018434][ T7233] hsr1: entered promiscuous mode [ 126.019876][ T7237] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.370'. [ 126.201587][ T7241] syzkaller0: entered promiscuous mode [ 126.227258][ T7241] syzkaller0: entered allmulticast mode [ 126.258486][ T7246] FAULT_INJECTION: forcing a failure. [ 126.258486][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.330857][ T7246] CPU: 0 UID: 0 PID: 7246 Comm: syz.2.371 Not tainted syzkaller #0 PREEMPT(full) [ 126.330883][ T7246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 126.330894][ T7246] Call Trace: [ 126.330901][ T7246] [ 126.330909][ T7246] dump_stack_lvl+0xe8/0x150 [ 126.330941][ T7246] should_fail_ex+0x40c/0x560 [ 126.330970][ T7246] _copy_to_user+0x31/0xb0 [ 126.330991][ T7246] simple_read_from_buffer+0xe1/0x170 [ 126.331023][ T7246] proc_fail_nth_read+0x1bb/0x230 [ 126.331053][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.331083][ T7246] ? rw_verify_area+0x24a/0x4c0 [ 126.331103][ T7246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.331129][ T7246] vfs_read+0x213/0xa80 [ 126.331153][ T7246] ? __pfx___mutex_lock+0x10/0x10 [ 126.331177][ T7246] ? __pfx_vfs_read+0x10/0x10 [ 126.331197][ T7246] ? __fget_files+0x2a/0x420 [ 126.331227][ T7246] ? __fget_files+0x3a2/0x420 [ 126.331251][ T7246] ? __fget_files+0x2a/0x420 [ 126.331287][ T7246] ksys_read+0x150/0x270 [ 126.331308][ T7246] ? __pfx_ksys_read+0x10/0x10 [ 126.331334][ T7246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.331355][ T7246] do_syscall_64+0x174/0x580 [ 126.331376][ T7246] ? trace_irq_disable+0x3b/0x140 [ 126.331400][ T7246] ? clear_bhb_loop+0x40/0x90 [ 126.331423][ T7246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.331448][ T7246] RIP: 0033:0x7febdd15e84e [ 126.331465][ T7246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.331478][ T7246] RSP: 002b:00007febde016fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.331496][ T7246] RAX: ffffffffffffffda RBX: 00007febde0176c0 RCX: 00007febdd15e84e [ 126.331508][ T7246] RDX: 000000000000000f RSI: 00007febde0170a0 RDI: 0000000000000007 [ 126.331519][ T7246] RBP: 00007febde017090 R08: 0000000000000000 R09: 0000000000000000 [ 126.331528][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.331539][ T7246] R13: 00007febdd426128 R14: 00007febdd426090 R15: 00007ffdcdf75b38 [ 126.331568][ T7246] [ 126.554622][ T7251] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 126.586634][ T7255] geneve1: entered allmulticast mode [ 126.734211][ T7255] IPv6: sit1: Disabled Multicast RS [ 126.741250][ T7255] sit1: entered allmulticast mode [ 127.093612][ T36] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 127.279728][ T7284] syzkaller0: entered promiscuous mode [ 127.295249][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.309143][ T7284] syzkaller0: entered allmulticast mode [ 127.538046][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 127.557668][ T7298] xt_hashlimit: invalid interval [ 127.806276][ T7300] SET target dimension over the limit! [ 128.039845][ T7320] netlink: 'syz.2.392': attribute type 28 has an invalid length. [ 128.090922][ T7320] netlink: 'syz.2.392': attribute type 3 has an invalid length. [ 128.099872][ T7320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.392'. [ 128.303026][ T7334] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 128.448659][ T7340] openvswitch: netlink: Key 6 has unexpected len 177 expected 2 [ 128.458580][ T7331] syzkaller0: entered promiscuous mode [ 128.464742][ T7331] syzkaller0: entered allmulticast mode [ 130.281839][ T7378] __nla_validate_parse: 3 callbacks suppressed [ 130.281857][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 130.858484][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 130.885858][ T7415] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 130.980782][ T7413] 8021q: adding VLAN 0 to HW filter on device bond6 [ 131.000786][ T7425] netlink: 192 bytes leftover after parsing attributes in process `syz.3.424'. [ 131.012128][ T7425] netlink: 192 bytes leftover after parsing attributes in process `syz.3.424'. [ 131.144152][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.425'. [ 131.166192][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 131.267865][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.430'. [ 131.277279][ T7445] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'. [ 131.411294][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 131.453287][ T7458] netlink: 104 bytes leftover after parsing attributes in process `syz.4.432'. [ 131.529117][ T7463] openvswitch: netlink: Duplicate or invalid key (type 0). [ 131.546769][ T7463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.804258][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.306305][ T7513] xt_hashlimit: size too large, truncated to 1048576 [ 132.372974][ T7509] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 132.428120][ T7509] 0ªX¹¦Dö»: entered allmulticast mode [ 132.527612][ T7518] syzkaller0: entered promiscuous mode [ 132.548197][ T7518] syzkaller0: entered allmulticast mode [ 133.271442][ T7569] netlink: 'syz.0.462': attribute type 5 has an invalid length. [ 133.305330][ T7569] netlink: 'syz.0.462': attribute type 6 has an invalid length. [ 133.417759][ T7575] netlink: 'syz.1.463': attribute type 2 has an invalid length. [ 133.494999][ T7574] ipvlan2: entered allmulticast mode [ 133.500822][ T7574] batadv_slave_1: entered allmulticast mode [ 133.511379][ T7574] batman_adv: batadv0: Adding interface: ipvlan2 [ 133.519179][ T7574] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.569026][ T7574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.590265][ T7574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.602784][ T7574] batman_adv: batadv0: Interface activated: ipvlan2 [ 133.674570][ T7575] : entered promiscuous mode [ 133.850280][ T7589] netlink: 'syz.0.467': attribute type 1 has an invalid length. [ 133.918544][ T7589] bond5: entered promiscuous mode [ 133.924151][ T7589] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.973904][ T7589] bond5: (slave bridge3): making interface the new active one [ 133.982908][ T7589] bridge3: entered promiscuous mode [ 133.991302][ T7589] bridge3: left promiscuous mode [ 134.214071][ T7616] Illegal XDP return value 4294967274 on prog (id 90) dev N/A, expect packet loss! [ 134.308491][ T7619] bridge: RTM_NEWNEIGH with invalid ether address [ 134.725111][ T7594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.053923][ T12] nci: nci_rx_work: unknown MT 0x7 [ 135.089103][ T7660] syz_tun: entered allmulticast mode [ 135.109939][ T7657] syz_tun: left allmulticast mode [ 135.287339][ T7665] syzkaller0: entered promiscuous mode [ 135.292927][ T7665] syzkaller0: entered allmulticast mode [ 135.432210][ T7675] syzkaller0: entered promiscuous mode [ 135.438822][ T7675] syzkaller0: entered allmulticast mode [ 135.616149][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.624567][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.717089][ T7644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 135.900400][ T7686] __nla_validate_parse: 18 callbacks suppressed [ 135.900417][ T7686] netlink: 104 bytes leftover after parsing attributes in process `syz.0.493'. [ 135.949731][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 136.066495][ T7697] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 136.067324][ T7693] bond2: entered promiscuous mode [ 136.101291][ T7693] bond2: entered allmulticast mode [ 136.173410][ T7703] bond1: (slave gretap0): making interface the new active one [ 136.183632][ T7703] bond1: (slave gretap0): Enslaving as an active interface with an up link [ 136.408559][ T7719] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 136.418938][ T7719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 136.464441][ T7719] : entered promiscuous mode [ 136.484434][ T7724] sctp: [Deprecated]: syz.2.503 (pid 7724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.484434][ T7724] Use struct sctp_sack_info instead [ 136.553178][ T7729] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 136.586841][ T7729] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.614171][ T7729] bond1: (slave veth0_to_bond): Releasing backup interface [ 136.697113][ T7729] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 136.737873][ T7737] syz_tun: entered allmulticast mode [ 136.747597][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 136.764225][ T7736] syz_tun: left allmulticast mode [ 136.883220][ T7742] netlink: 216 bytes leftover after parsing attributes in process `syz.3.511'. [ 136.902623][ T7742] netlink: 216 bytes leftover after parsing attributes in process `syz.3.511'. [ 136.925034][ T7747] netlink: 'syz.2.510': attribute type 11 has an invalid length. [ 136.960735][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.509'. [ 137.137809][ T7760] netlink: 2 bytes leftover after parsing attributes in process `syz.4.513'. [ 137.597920][ T7782] syzkaller0: entered promiscuous mode [ 137.624974][ T7782] syzkaller0: entered allmulticast mode [ 137.693931][ T7787] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 137.809329][ T7791] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 137.859412][ T7791] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.054493][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.3.527'. [ 138.089396][ T7800] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 138.125034][ T7800] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 138.138138][ T7805] lo speed is unknown, defaulting to 1000 [ 138.145508][ T7805] lo speed is unknown, defaulting to 1000 [ 138.154501][ T7800] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 138.162577][ T7805] lo speed is unknown, defaulting to 1000 [ 138.171513][ T7805] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 138.202009][ T7805] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 138.254198][ T7805] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 138.284086][ T7805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 138.318651][ T7812] netlink: 'syz.1.531': attribute type 21 has an invalid length. [ 138.331579][ T7805] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.399442][ T7805] lo speed is unknown, defaulting to 1000 [ 138.422438][ T7805] lo speed is unknown, defaulting to 1000 [ 138.446322][ T7805] lo speed is unknown, defaulting to 1000 [ 138.467472][ T7805] lo speed is unknown, defaulting to 1000 [ 138.476639][ T7805] lo speed is unknown, defaulting to 1000 [ 138.509747][ T7806] smc: removing ib device syz1 [ 138.620289][ T7806] smbdirect: ib_dev[syz1] removed [ 138.932818][ T7826] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 139.069249][ T7833] syz_tun: entered allmulticast mode [ 139.121641][ T7828] syz_tun: left allmulticast mode [ 139.526267][ T7852] netlink: 'syz.1.545': attribute type 2 has an invalid length. [ 139.549936][ T7858] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 139.713966][ T7866] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 139.733468][ T7868] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 139.932080][ T7867] bond4: entered promiscuous mode [ 139.953380][ T7867] bond4: entered allmulticast mode [ 139.972413][ T7867] 8021q: adding VLAN 0 to HW filter on device bond4 [ 139.990632][ T7866] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 139.992913][ T7868] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 140.173954][ T7882] bond2: entered allmulticast mode [ 140.202750][ T7882] ip6gre1: entered allmulticast mode [ 140.237183][ T7881] bond2: left allmulticast mode [ 140.243506][ T7870] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 140.255917][ T7881] ip6gre1: left allmulticast mode [ 140.270617][ T7872] lo speed is unknown, defaulting to 1000 [ 140.299202][ T7853] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 140.487173][ T7894] netlink: 'syz.1.555': attribute type 1 has an invalid length. [ 140.766212][ T7894] 8021q: adding VLAN 0 to HW filter on device bond8 [ 140.911592][ T7909] netlink: 'syz.4.558': attribute type 9 has an invalid length. [ 140.929379][ T7899] bond8: (slave gretap1): making interface the new active one [ 140.941616][ T7899] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 141.238074][ T7920] netlink: 'syz.2.560': attribute type 64 has an invalid length. [ 141.391758][ T7921] 8021q: VLANs not supported on wg1 [ 141.630186][ T7918] lo speed is unknown, defaulting to 1000 [ 142.249476][ T7967] __nla_validate_parse: 9 callbacks suppressed [ 142.249494][ T7967] netlink: 220 bytes leftover after parsing attributes in process `syz.2.574'. [ 142.272979][ T7969] syz_tun: entered allmulticast mode [ 142.296364][ T7962] syz_tun: left allmulticast mode [ 142.415730][ T7973] xt_l2tp: unknown flags: 10 [ 142.433397][ T7972] xt_l2tp: unknown flags: 10 [ 142.488388][ T7975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 142.617635][ T7977] netlink: 72 bytes leftover after parsing attributes in process `syz.4.579'. [ 142.639653][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 142.683575][ T7977] netlink: 256 bytes leftover after parsing attributes in process `syz.4.579'. [ 142.869655][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 143.060834][ T8019] netlink: 'syz.1.586': attribute type 11 has an invalid length. [ 143.075009][ T8019] netlink: 4312 bytes leftover after parsing attributes in process `syz.1.586'. [ 143.196356][ T8022] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 143.203712][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.216392][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.227054][ T8025] netlink: 32 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.243429][ T8025] netlink: 'syz.1.590': attribute type 32 has an invalid length. [ 143.252972][ T8025] netlink: 500 bytes leftover after parsing attributes in process `syz.1.590'. [ 143.334035][ T8027] 0·: renamed from hsr0 (while UP) [ 143.348223][ T8027] 0·: entered allmulticast mode [ 143.380228][ T8027] hsr_slave_0: entered allmulticast mode [ 143.387075][ T8027] hsr_slave_1: entered allmulticast mode [ 143.394215][ T8027] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 143.618487][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.654991][ T197] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.706009][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.736629][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.887574][ T8062] sch_tbf: burst 5 is lower than device syzkaller0 mtu (1514) ! [ 144.156607][ T8080] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 144.180823][ T8080] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 144.670495][ T8115] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 144.701889][ T8117] sch_tbf: burst 5 is lower than device syzkaller0 mtu (65589) ! [ 144.723691][ T29] lo speed is unknown, defaulting to 1000 [ 144.771829][ T8115] 8021q: adding VLAN 0 to HW filter on device bond5 [ 144.792231][ T197] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 144.819154][ T8108] bond5: (slave geneve2): making interface the new active one [ 144.828312][ T8108] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 144.844252][ T8122] bond1: (slave dummy0): Releasing backup interface [ 144.888530][ T29] openvswitch: cpu_id mismatch with handler threads [ 145.003132][ T8128] netlink: 'syz.4.621': attribute type 25 has an invalid length. [ 145.048648][ T8131] lo speed is unknown, defaulting to 1000 [ 145.087421][ T29] openvswitch: cpu_id mismatch with handler threads [ 145.201563][ T8134] lo speed is unknown, defaulting to 1000 [ 145.269027][ T8134] lo speed is unknown, defaulting to 1000 [ 145.423654][ T8134] lo speed is unknown, defaulting to 1000 [ 145.828740][ T8172] netlink: 'syz.2.632': attribute type 3 has an invalid length. [ 146.005696][ T8175] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 146.029866][ T8134] infiniband syz1: set active [ 146.033286][ T8175] bond1 (unregistering): Released all slaves [ 146.039615][ T8134] infiniband syz1: added lo [ 146.058752][ T8134] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 146.069500][ T8134] infiniband syz1: Couldn't open port 1 [ 146.086045][ T8134] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 146.102881][ T8134] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 146.128808][ T8134] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 146.152015][ T8181] sit0: entered promiscuous mode [ 146.193614][ T8181] netlink: 'syz.2.635': attribute type 1 has an invalid length. [ 146.208798][ T8134] RDS/IB: syz1: added [ 146.226077][ T8134] smc: adding ib device syz1 with port count 1 [ 146.285168][ T8134] smc: ib device syz1 port 1 has no pnetid [ 146.301038][ T5714] lo speed is unknown, defaulting to 1000 [ 146.355266][ T8134] lo speed is unknown, defaulting to 1000 [ 146.376043][ T5714] lo speed is unknown, defaulting to 1000 [ 146.476367][ T8200] netlink: 'syz.3.637': attribute type 1 has an invalid length. [ 146.622799][ T8200] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 146.892339][ T8223] netlink: 'syz.3.645': attribute type 1 has an invalid length. [ 146.988440][ T8223] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.999497][ T8134] lo speed is unknown, defaulting to 1000 [ 147.072318][ T8228] bond1: (slave veth0_to_bond): making interface the new active one [ 147.143381][ T8228] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.215548][ T8223] macvlan2: entered promiscuous mode [ 147.228349][ T8223] macvlan2: entered allmulticast mode [ 147.246196][ T8223] bond1: entered promiscuous mode [ 147.267136][ T8223] veth0_to_bond: entered promiscuous mode [ 147.288995][ T8223] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.301485][ T8223] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 147.322031][ T8223] bond1: left promiscuous mode [ 147.328893][ T8223] veth0_to_bond: left promiscuous mode [ 147.354131][ T8238] syz_tun: entered allmulticast mode [ 147.373665][ T8234] syz_tun: left allmulticast mode [ 147.681092][ T8257] xt_ecn: cannot match TCP bits for non-tcp packets [ 147.712000][ T8260] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 147.763301][ T8134] lo speed is unknown, defaulting to 1000 [ 147.870939][ T8265] netlink: 'syz.4.657': attribute type 10 has an invalid length. [ 148.144783][ T8283] __nla_validate_parse: 53 callbacks suppressed [ 148.163937][ T8283] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 148.309463][ T8292] syz_tun: entered allmulticast mode [ 148.321056][ T8291] syz_tun: left allmulticast mode [ 148.417329][ T8297] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.425154][ T8134] lo speed is unknown, defaulting to 1000 [ 148.495061][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 148.546491][ T8301] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 148.801013][ T8134] lo speed is unknown, defaulting to 1000 [ 149.108100][ T8329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 149.220501][ T8336] syz_tun: entered allmulticast mode [ 149.239658][ T8335] syz_tun: left allmulticast mode [ 149.606785][ T8356] netlink: 'syz.3.683': attribute type 8 has an invalid length. [ 149.616387][ T8354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 149.640377][ T8354] veth0_macvtap: left promiscuous mode [ 149.845301][ T5760] IPVS: starting estimator thread 0... [ 149.916108][ T8377] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 149.954952][ T8369] IPVS: using max 32 ests per chain, 76800 per kthread [ 150.282082][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 150.317924][ T8394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 150.643415][ T8403] netlink: 'syz.1.697': attribute type 2 has an invalid length. [ 150.687844][ T8408] netlink: 'syz.3.699': attribute type 1 has an invalid length. [ 150.737627][ T8408] netlink: 'syz.3.699': attribute type 11 has an invalid length. [ 150.795486][ T8408] netlink: 224 bytes leftover after parsing attributes in process `syz.3.699'. [ 151.095538][ T8424] netlink: 256 bytes leftover after parsing attributes in process `syz.3.700'. [ 151.832918][ T8442] netlink: zone id is out of range [ 151.851480][ T8442] netlink: zone id is out of range [ 151.876607][ T8442] netlink: zone id is out of range [ 152.178699][ T8453] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 152.297098][ T8457] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 152.332647][ T8458] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 152.381901][ T8462] netlink: Unknown conntrack attr (type=12, max=9) [ 152.389669][ T8457] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 152.405663][ T8462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.405663][ T8461] netlink: 'syz.1.711': attribute type 21 has an invalid length. [ 152.412568][ T8458] netlink: 'syz.4.710': attribute type 1 has an invalid length. [ 152.424936][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.711'. [ 152.448975][ T8457] netlink: 16051 bytes leftover after parsing attributes in process `syz.4.710'. [ 152.487867][ T8458] netlink: 16051 bytes leftover after parsing attributes in process `syz.4.710'. [ 152.896661][ T8490] veth0_to_bond: entered allmulticast mode [ 153.008353][ T8495] netlink: 'syz.4.723': attribute type 58 has an invalid length. [ 153.236328][ T8501] tipc: Started in network mode [ 153.256451][ T8501] tipc: Node identity d6f95fc7db47, cluster identity 4711 [ 153.276565][ T8501] tipc: Enabled bearer , priority 0 [ 153.298610][ T8516] syz.4.729: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 153.314212][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz.4.729 Not tainted syzkaller #0 PREEMPT(full) [ 153.314237][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.314248][ T8516] Call Trace: [ 153.314255][ T8516] [ 153.314263][ T8516] dump_stack_lvl+0xe8/0x150 [ 153.314297][ T8516] warn_alloc+0x24c/0x270 [ 153.314324][ T8516] ? stack_depot_save_flags+0x33/0x800 [ 153.314352][ T8516] ? __pfx_warn_alloc+0x10/0x10 [ 153.314379][ T8516] ? kasan_save_track+0x3e/0x80 [ 153.314402][ T8516] ? __kasan_kmalloc+0x93/0xb0 [ 153.314429][ T8516] ? xsk_setsockopt+0x52a/0x960 [ 153.314446][ T8516] ? do_sock_setsockopt+0x17c/0x1b0 [ 153.314466][ T8516] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 153.314484][ T8516] ? do_syscall_64+0x174/0x580 [ 153.314505][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.314534][ T8516] __vmalloc_node_range_noprof+0x12c/0x1730 [ 153.314589][ T8516] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.314626][ T8516] ? __kasan_kmalloc+0x93/0xb0 [ 153.314653][ T8516] ? __kmalloc_cache_noprof+0x32d/0x660 [ 153.314678][ T8516] ? __kmalloc_cache_noprof+0x150/0x660 [ 153.314704][ T8516] vmalloc_user_noprof+0xad/0xe0 [ 153.314728][ T8516] ? xskq_create+0xbf/0x170 [ 153.314749][ T8516] xskq_create+0xbf/0x170 [ 153.314772][ T8516] xsk_init_queue+0x8a/0xe0 [ 153.314795][ T8516] xsk_setsockopt+0x52a/0x960 [ 153.314817][ T8516] ? __fget_files+0x2a/0x420 [ 153.314843][ T8516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.314861][ T8516] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.314885][ T8516] ? aa_sock_opt_perm+0xff/0x1a0 [ 153.314910][ T8516] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 153.314930][ T8516] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.314951][ T8516] do_sock_setsockopt+0x17c/0x1b0 [ 153.314977][ T8516] __x64_sys_setsockopt+0x13d/0x1b0 [ 153.315001][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.315021][ T8516] do_syscall_64+0x174/0x580 [ 153.315043][ T8516] ? trace_irq_disable+0x3b/0x140 [ 153.315067][ T8516] ? clear_bhb_loop+0x40/0x90 [ 153.315091][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.315109][ T8516] RIP: 0033:0x7f1e2099e019 [ 153.315127][ T8516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.315143][ T8516] RSP: 002b:00007f1e217da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.315163][ T8516] RAX: ffffffffffffffda RBX: 00007f1e20c25fa0 RCX: 00007f1e2099e019 [ 153.315177][ T8516] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 153.315188][ T8516] RBP: 00007f1e20a3500c R08: 0000000000000004 R09: 0000000000000000 [ 153.315201][ T8516] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.315212][ T8516] R13: 00007f1e20c26038 R14: 00007f1e20c25fa0 R15: 00007fff4c395608 [ 153.315244][ T8516] [ 153.594569][ T8516] Mem-Info: [ 153.598406][ T8516] active_anon:5948 inactive_anon:0 isolated_anon:0 [ 153.598406][ T8516] active_file:0 inactive_file:43060 isolated_file:0 [ 153.598406][ T8516] unevictable:768 dirty:50 writeback:0 [ 153.598406][ T8516] slab_reclaimable:10526 slab_unreclaimable:102937 [ 153.598406][ T8516] mapped:29382 shmem:1290 pagetables:1224 [ 153.598406][ T8516] sec_pagetables:0 bounce:0 [ 153.598406][ T8516] kernel_misc_reclaimable:0 [ 153.598406][ T8516] free:1325450 free_pcp:8455 free_cma:0 [ 153.646840][ T8516] Node 0 active_anon:23844kB inactive_anon:0kB active_file:0kB inactive_file:172032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117612kB dirty:204kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13252kB pagetables:4828kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 153.681849][ T8516] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 153.715468][ T8516] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.745878][ T8516] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 153.752890][ T8516] Node 0 DMA32 free:1340416kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23776kB inactive_anon:0kB active_file:0kB inactive_file:172032kB unevictable:1536kB writepending:228kB zspages:0kB present:3129332kB managed:2548536kB mlocked:0kB bounce:0kB free_pcp:34260kB local_pcp:21252kB free_cma:0kB [ 153.800672][ T8516] lowmem_reserve[]: 0 0 0 0 0 [ 153.810258][ T8516] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:256kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.849953][ T8501] syzkaller0: entered promiscuous mode [ 153.855500][ T8501] syzkaller0: entered allmulticast mode [ 153.861741][ T8501] tipc: Resetting bearer [ 153.868810][ T8516] lowmem_reserve[]: 0 0 0 0 0 [ 153.873571][ T8516] Node 1 Normal free:3946024kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 153.905536][ T8516] lowmem_reserve[]: 0 0 0 0 0 [ 153.905991][ T8520] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 153.910414][ T8516] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 153.967558][ T8516] Node 0 DMA32: 654*4kB (UM) 693*8kB (UME) 304*16kB (UME) 15*32kB (UME) 4*64kB (ME) 1*128kB (U) 16*256kB (ME) 8*512kB (M) 5*1024kB (ME) 4*2048kB (UM) 316*4096kB (UM) = 1329728kB [ 154.011007][ T8516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 154.038890][ T8516] Node 1 Normal: 6*4kB (U) 10*8kB (UM) 12*16kB (UM) 10*32kB (UM) 7*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (M) = 3946024kB [ 154.070551][ T8516] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.084289][ T8516] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.097977][ T8516] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 154.110483][ T8516] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 154.124701][ T8516] 44346 total pagecache pages [ 154.130950][ T8516] 0 pages in swap cache [ 154.136244][ T7436] tipc: Resetting bearer [ 154.137820][ T8516] Free swap = 124996kB [ 154.147068][ T8500] tipc: Resetting bearer [ 154.148534][ T8516] Total swap = 124996kB [ 154.157221][ T8516] 2097051 pages RAM [ 154.161211][ T8516] 0 pages HighMem/MovableOnly [ 154.185577][ T8516] 428238 pages reserved [ 154.189911][ T8516] 0 pages cma reserved [ 154.217738][ T8536] netlink: 'syz.2.732': attribute type 1 has an invalid length. [ 155.581213][ T8500] tipc: Disabling bearer [ 155.611345][ T8536] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 155.617736][ T5760] tipc: Node number set to 230580167 [ 155.654277][ T8543] syz_tun: entered allmulticast mode [ 155.677421][ T8546] syz_tun: left allmulticast mode [ 155.882208][ T8560] smc: net device lo applied user defined pnetid SYZ0 [ 155.926581][ T8560] smc: smcd device lo applied user defined pnetid SYZ0 [ 155.946041][ T8566] netlink: 'syz.1.740': attribute type 24 has an invalid length. [ 156.041624][ T8560] __nla_validate_parse: 5 callbacks suppressed [ 156.041643][ T8560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.739'. [ 156.075365][ T8573] netlink: 48 bytes leftover after parsing attributes in process `syz.1.740'. [ 156.095018][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 156.133706][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.1.740'. [ 156.244646][ T8580] sctp: [Deprecated]: syz.0.744 (pid 8580) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.244646][ T8580] Use struct sctp_sack_info instead [ 156.248964][ T8583] netlink: 420 bytes leftover after parsing attributes in process `syz.3.745'. [ 156.491117][ T8593] pim6reg1: entered promiscuous mode [ 156.496988][ T8593] pim6reg1: entered allmulticast mode [ 156.668815][ T8586] bond6: Unable to set down delay as MII monitoring is disabled [ 156.703640][ T8586] bond6 (unregistering): Released all slaves [ 156.866206][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.289125][ T7436] bond0: (slave bond_slave_0): interface is now down [ 157.315336][ T7436] bond0: (slave bond_slave_1): interface is now down [ 157.323227][ T7436] bond0: (slave netdevsim1): interface is now down [ 157.335329][ T7436] bond0: now running without any active interface! [ 157.689898][ T8635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.761'. [ 157.750374][ T8635] openvswitch: netlink: IP tunnel TTL not specified. [ 157.783270][ T8635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.836883][ T8635] netlink: 60 bytes leftover after parsing attributes in process `syz.0.761'. [ 157.961877][ T8649] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 158.002329][ T8649] netlink: 168 bytes leftover after parsing attributes in process `syz.4.765'. [ 158.031408][ T8644] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.762'. [ 158.072882][ T8654] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 158.094651][ T8637] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.762'. [ 158.153413][ T8657] netlink: 68 bytes leftover after parsing attributes in process `syz.4.768'. [ 158.178776][ T8637] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 158.230876][ T8637] bond1: (slave veth0_to_bond): Releasing active interface [ 158.277594][ T8637] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 158.368060][ T8662] syzkaller0: entered promiscuous mode [ 158.374750][ T8662] syzkaller0: entered allmulticast mode [ 159.281979][ T8700] syzkaller0: entered promiscuous mode [ 159.302514][ T8700] syzkaller0: entered allmulticast mode [ 159.319351][ T8689] bond0: Error: CAN devices cannot be enslaved [ 159.819282][ T8732] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 159.852492][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.859830][ T8728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.906117][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.937776][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.960242][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 159.970755][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.010979][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.025177][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.037398][ T5818] lo speed is unknown, defaulting to 1000 [ 160.069401][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.080264][ T5760] openvswitch: cpu_id mismatch with handler threads [ 160.081290][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.102174][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 160.112234][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.140960][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.152178][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.167673][ T5771] lo speed is unknown, defaulting to 1000 [ 160.195377][ T5771] openvswitch: cpu_id mismatch with handler threads [ 160.789866][ T8743] syzkaller0: entered promiscuous mode [ 160.810464][ T8754] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 160.813744][ T8743] syzkaller0: entered allmulticast mode [ 160.826409][ T5771] openvswitch: cpu_id mismatch with handler threads [ 160.869723][ T8754] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 160.980972][ T8763] batadv0: entered promiscuous mode [ 160.993798][ T8763] macsec2: entered promiscuous mode [ 161.001569][ T8763] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 161.278114][ T8782] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 161.301822][ T8772] __nla_validate_parse: 9 callbacks suppressed [ 161.301838][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.0.807'. [ 161.467426][ T8789] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 161.501713][ T8789] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 161.529756][ T8792] netlink: 'syz.1.813': attribute type 63 has an invalid length. [ 161.582507][ T8800] netlink: 'syz.1.813': attribute type 63 has an invalid length. [ 161.612074][ T8789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.656620][ T8796] bond3: (slave geneve2): making interface the new active one [ 161.676718][ T8796] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 161.882378][ T8810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 161.904955][ T8814] xt_hashlimit: size too large, truncated to 1048576 [ 161.941949][ T8819] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 161.959507][ T8810] netlink: 156 bytes leftover after parsing attributes in process `syz.3.817'. [ 161.968704][ T8819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.820'. [ 162.110959][ T8810] No such timeout policy "syz0" [ 162.380570][ T8835] bridge0: port 3(vlan2) entered blocking state [ 162.390331][ T8835] bridge0: port 3(vlan2) entered disabled state [ 162.397521][ T8835] vlan2: entered allmulticast mode [ 162.403845][ T8835] geneve0: entered allmulticast mode [ 162.412874][ T8835] vlan2: entered promiscuous mode [ 162.418233][ T1123] bond0: (slave veth0_to_bond): interface is now down [ 162.419130][ T8835] geneve0: entered promiscuous mode [ 162.457319][ T1123] bond0: now running without any active interface! [ 163.003782][ T8874] syzkaller1: entered promiscuous mode [ 163.027109][ T8874] syzkaller1: entered allmulticast mode [ 163.039257][ T8874] sctp: [Deprecated]: syz.2.837 (pid 8874) Use of int in maxseg socket option. [ 163.039257][ T8874] Use struct sctp_assoc_value instead [ 163.142593][ T8887] syz_tun: entered allmulticast mode [ 163.155315][ T8886] syz_tun: left allmulticast mode [ 163.230467][ T8892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.844'. [ 163.679602][ T8920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 163.709103][ T8922] netlink: 'syz.1.855': attribute type 28 has an invalid length. [ 163.754002][ T8922] netlink: 'syz.1.855': attribute type 3 has an invalid length. [ 163.772679][ T8922] netlink: 132 bytes leftover after parsing attributes in process `syz.1.855'. [ 163.783366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 163.868319][ T8928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.901286][ T8939] netlink: 'syz.2.857': attribute type 11 has an invalid length. [ 163.919945][ T8928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.937713][ T8939] netlink: 'syz.2.857': attribute type 11 has an invalid length. [ 163.957886][ T8939] netlink: 228 bytes leftover after parsing attributes in process `syz.2.857'. [ 163.989092][ T8935] erspan0: entered promiscuous mode [ 164.008627][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.859'. [ 164.132616][ T8945] bond9: entered promiscuous mode [ 164.138532][ T8945] 8021q: adding VLAN 0 to HW filter on device bond9 [ 164.150540][ T8942] netlink: 'syz.2.857': attribute type 4 has an invalid length. [ 164.255580][ T8942] netlink: 'syz.2.857': attribute type 4 has an invalid length. [ 164.690453][ T8978] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 164.939326][ T8988] netdevsim netdevsim2: Direct firmware load for ÿ failed with error -2 [ 164.952315][ T8988] netdevsim netdevsim2: Falling back to sysfs fallback for: ÿ [ 165.290241][ T9006] tc_dump_action: action bad kind [ 165.424330][ T9018] syzkaller0: entered promiscuous mode [ 165.441607][ T9018] syzkaller0: entered allmulticast mode [ 165.834558][ T9035] netlink: 'syz.2.884': attribute type 11 has an invalid length. [ 166.727288][ T9092] __nla_validate_parse: 10 callbacks suppressed [ 166.727318][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 167.005025][ T9108] netlink: 36 bytes leftover after parsing attributes in process `syz.0.902'. [ 167.184467][ T9120] syz_tun: entered allmulticast mode [ 167.196377][ T9114] syz_tun: left allmulticast mode [ 167.339312][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 167.399343][ T9125] bridge0: port 4(ipvlan2) entered blocking state [ 167.414368][ T9125] bridge0: port 4(ipvlan2) entered disabled state [ 167.425210][ T9125] ipvlan2: entered allmulticast mode [ 167.431395][ T9125] bridge0: entered allmulticast mode [ 167.440978][ T9125] ipvlan2: left allmulticast mode [ 167.447355][ T9125] bridge0: left allmulticast mode [ 167.812389][ T9151] syz_tun: entered allmulticast mode [ 167.869234][ T9148] syz_tun: left allmulticast mode [ 167.926561][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 167.978289][ T9161] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 168.004974][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.027635][ T9166] team0: entered promiscuous mode [ 168.033781][ T9166] team_slave_0: entered promiscuous mode [ 168.044211][ T9166] team_slave_1: entered promiscuous mode [ 168.064666][ T9166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.498785][ T9191] syzkaller0: entered promiscuous mode [ 168.504409][ T9191] syzkaller0: entered allmulticast mode [ 168.536711][ T9194] netlink: 80 bytes leftover after parsing attributes in process `syz.3.931'. [ 168.784011][ T9202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.933'. [ 168.867320][ T9208] netlink: 68 bytes leftover after parsing attributes in process `syz.1.934'. [ 169.488217][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.943'. [ 169.644174][ T9248] Cannot find add_set index 0 as target [ 170.815322][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 173.045931][ T9295] netlink: 'syz.2.956': attribute type 21 has an invalid length. [ 173.065332][ T9295] netlink: 128 bytes leftover after parsing attributes in process `syz.2.956'. [ 173.116646][ T9295] netlink: 3 bytes leftover after parsing attributes in process `syz.2.956'. [ 173.343331][ T9316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 173.361926][ T9315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 173.481551][ T9320] bond2: entered allmulticast mode [ 173.497106][ T9320] ip6gre1: entered allmulticast mode [ 173.505175][ T9316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.962'. [ 173.530627][ T9319] bond2: left allmulticast mode [ 173.542128][ T9319] ip6gre1: left allmulticast mode [ 174.056049][ T9349] vlan0: entered promiscuous mode [ 174.108472][ T9347] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.973'. [ 174.236693][ T9357] bond2: entered allmulticast mode [ 174.258238][ T9357] ip6gre1: entered allmulticast mode [ 174.276836][ T9356] bond2: left allmulticast mode [ 174.293622][ T9356] ip6gre1: left allmulticast mode [ 174.688232][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 174.716380][ T9377] netlink: 'syz.4.985': attribute type 3 has an invalid length. [ 175.391220][ T9375] rdma_rxe: rxe_newlink: failed to add lo [ 175.401158][ T9382] openvswitch: netlink: Actions may not be safe on all matching packets [ 175.685757][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.4.992'. [ 175.722761][ T9402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.992'. [ 175.763259][ T9408] netlink: 48 bytes leftover after parsing attributes in process `syz.0.994'. [ 176.870841][ T9469] 8021q: adding VLAN 0 to HW filter on device bond6 [ 176.898287][ T9469] bridge0: port 4(bond6) entered blocking state [ 176.939080][ T9469] bridge0: port 4(bond6) entered disabled state [ 176.956747][ T9485] netlink: 'syz.2.1016': attribute type 1 has an invalid length. [ 176.970113][ T9469] bond6: entered allmulticast mode [ 177.011063][ T9469] bond6: entered promiscuous mode [ 177.017559][ T9469] bridge0: port 4(bond6) entered blocking state [ 177.024118][ T9469] bridge0: port 4(bond6) entered forwarding state [ 177.062613][ T29] IPVS: starting estimator thread 0... [ 177.164942][ T9494] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.210788][ T9493] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 177.336755][ T9485] veth3: entered promiscuous mode [ 177.368279][ T9485] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 177.400470][ T3333] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.419262][ T9489] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.482064][ T7434] bridge0: port 4(bond6) entered disabled state [ 177.546398][ T7434] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 177.814271][ T9533] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.076398][ T9547] netlink: 'syz.0.1032': attribute type 4 has an invalid length. [ 178.198018][ T9551] bridge0: port 3(ipvlan2) entered blocking state [ 178.262049][ T9551] bridge0: port 3(ipvlan2) entered disabled state [ 178.292997][ T9551] ipvlan2: entered allmulticast mode [ 178.311078][ T9551] bridge0: entered allmulticast mode [ 178.322492][ T9530] __nla_validate_parse: 69 callbacks suppressed [ 178.322510][ T9530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1026'. [ 178.361208][ T9551] ipvlan2: left allmulticast mode [ 178.378447][ T9551] bridge0: left allmulticast mode [ 178.476236][ T9577] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1039'. [ 178.834609][ T9586] syzkaller0: entered promiscuous mode [ 178.851816][ T9586] syzkaller0: entered allmulticast mode [ 179.145446][ T9613] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 179.865922][ T5629] block nbd0: Receive control failed (result -32) [ 179.866275][ T5624] block nbd0: Receive control failed (result -32) [ 179.966774][ T9625] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1050'. [ 179.982216][ T9625] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1050'. [ 180.999156][ T9639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.023314][ T9636] syzkaller0: entered promiscuous mode [ 181.032457][ T9636] syzkaller0: entered allmulticast mode [ 181.573044][ T9667] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1064'. [ 181.603848][ T9669] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1064'. [ 181.712409][ T9675] trusted_key: syz.0.1065 sent an empty control message without MSG_MORE. [ 181.870970][ T30] audit: type=1804 audit(1785818801.682:2): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1067" name="/newroot/216/cgroup.controllers" dev="tmpfs" ino=1114 res=1 errno=0 [ 181.924405][ T30] audit: type=1800 audit(1785818801.712:3): pid=9682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1067" name="cgroup.controllers" dev="tmpfs" ino=1114 res=0 errno=0 [ 182.538257][ T9721] FAULT_INJECTION: forcing a failure. [ 182.538257][ T9721] name failslab, interval 1, probability 0, space 0, times 0 [ 182.572478][ T9721] CPU: 0 UID: 0 PID: 9721 Comm: syz.2.1077 Not tainted syzkaller #0 PREEMPT(full) [ 182.572506][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 182.572517][ T9721] Call Trace: [ 182.572525][ T9721] [ 182.572533][ T9721] dump_stack_lvl+0xe8/0x150 [ 182.572566][ T9721] should_fail_ex+0x40c/0x560 [ 182.572596][ T9721] should_failslab+0xa8/0x100 [ 182.572626][ T9721] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 182.572649][ T9721] ? local_lock_release+0x9c/0x160 [ 182.572668][ T9721] ? __alloc_skb+0x1d7/0x7a0 [ 182.572684][ T9721] ? __alloc_skb+0x1d7/0x7a0 [ 182.572717][ T9721] __alloc_skb+0x1d7/0x7a0 [ 182.572740][ T9721] alloc_skb_with_frags+0xc6/0x760 [ 182.572771][ T9721] sock_alloc_send_pskb+0x878/0x990 [ 182.572811][ T9721] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 182.572839][ T9721] ? dev_get_by_index+0x22/0x2d0 [ 182.572864][ T9721] ? dev_get_by_index+0x22/0x2d0 [ 182.572894][ T9721] packet_sendmsg+0x3258/0x5040 [ 182.572920][ T9721] ? aa_label_sk_perm+0x532/0x6e0 [ 182.572950][ T9721] ? __lock_acquire+0x683/0x2cf0 [ 182.572990][ T9721] ? unwind_next_frame+0x8f/0x2550 [ 182.573027][ T9721] ? __pfx_packet_sendmsg+0x10/0x10 [ 182.573063][ T9721] ? __pfx_aa_sk_perm+0x10/0x10 [ 182.573086][ T9721] ? aa_sock_msg_perm+0xf1/0x1b0 [ 182.573112][ T9721] ? __pfx_packet_sendmsg+0x10/0x10 [ 182.573135][ T9721] sock_sendmsg_nosec+0x13a/0x180 [ 182.573164][ T9721] ____sys_sendmsg+0x54e/0x850 [ 182.573191][ T9721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.573221][ T9721] ? import_iovec+0x73/0xa0 [ 182.573243][ T9721] ___sys_sendmsg+0x2a5/0x360 [ 182.573263][ T9721] ? __lock_acquire+0x683/0x2cf0 [ 182.573293][ T9721] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.573353][ T9721] ? __fget_files+0x2a/0x420 [ 182.573378][ T9721] ? __fget_files+0x3a2/0x420 [ 182.573413][ T9721] __x64_sys_sendmsg+0x1b1/0x290 [ 182.573438][ T9721] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 182.573477][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.573498][ T9721] do_syscall_64+0x174/0x580 [ 182.573520][ T9721] ? trace_irq_disable+0x3b/0x140 [ 182.573544][ T9721] ? clear_bhb_loop+0x40/0x90 [ 182.573567][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.573585][ T9721] RIP: 0033:0x7febdd19e019 [ 182.573603][ T9721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.573618][ T9721] RSP: 002b:00007febde038028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.573638][ T9721] RAX: ffffffffffffffda RBX: 00007febdd425fa0 RCX: 00007febdd19e019 [ 182.573652][ T9721] RDX: 0000000000000005 RSI: 0000200000000300 RDI: 0000000000000009 [ 182.573663][ T9721] RBP: 00007febde038090 R08: 0000000000000000 R09: 0000000000000000 [ 182.573674][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.573685][ T9721] R13: 00007febdd426038 R14: 00007febdd425fa0 R15: 00007ffdcdf75b38 [ 182.573721][ T9721] [ 183.044539][ T9735] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1082'. [ 183.081943][ T9734] syzkaller0: entered promiscuous mode [ 183.109313][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'. [ 183.117564][ T9734] syzkaller0: entered allmulticast mode [ 183.136001][ T9734] TC_ACT_REPEAT abuse ? [ 183.176648][ T9744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1083'. [ 183.188527][ T9744] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1083'. [ 183.313866][ T9749] syzkaller0: entered promiscuous mode [ 183.361965][ T9749] syzkaller0: entered allmulticast mode [ 183.563460][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1088'. [ 183.577782][ T9767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 183.688902][ T9767] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1089'. [ 183.737367][ T9767] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1089'. [ 183.764328][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1092'. [ 183.781466][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1093'. [ 184.062821][ T9806] syzkaller0: entered promiscuous mode [ 184.068562][ T9806] syzkaller0: entered allmulticast mode [ 184.082828][ T9806] TC_ACT_REPEAT abuse ? [ 184.220251][ T9814] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1100'. [ 186.661397][ T9771] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.884516][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 186.893094][ T9842] netlink: 'syz.2.1106': attribute type 1 has an invalid length. [ 186.914033][ T9842] netlink: 5120 bytes leftover after parsing attributes in process `syz.2.1106'. [ 186.950741][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 187.312584][ T9865] netlink: ct family unspecified [ 187.317788][ T9848] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.356861][ T9865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.423917][ T9867] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 187.490090][ T9871] openvswitch: netlink: IP tunnel attribute has 5413 unknown bytes. [ 187.538444][ T9848] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.629679][ T9872] syzkaller0: entered promiscuous mode [ 187.640394][ T9872] syzkaller0: entered allmulticast mode [ 187.652121][ T9875] netlink: 'syz.2.1116': attribute type 1 has an invalid length. [ 187.752958][ T9875] bond3: entered promiscuous mode [ 187.761096][ T9875] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.813009][ T9848] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.878630][ T9885] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 187.968311][ T9848] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.341089][ T9913] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 188.345168][ T9908] Can't find ip_set type bitmap:ip,mac [ 188.397829][ T3333] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.576264][ T197] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.590192][ T9923] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 188.611025][ T197] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.632898][ T9925] __nla_validate_parse: 1 callbacks suppressed [ 188.632911][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1130'. [ 188.665459][ T7436] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.857163][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1135'. [ 188.905623][ T9943] syzkaller1: entered promiscuous mode [ 188.935575][ T9943] syzkaller1: entered allmulticast mode [ 189.047400][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 189.119321][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 189.402315][ T9979] IPVS: length: 28 != 8 [ 189.515382][ T9982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 189.557168][ T9986] IPVS: set_ctl: invalid protocol: 2 172.20.20.30:20002 [ 189.580357][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 189.662293][ T9982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 189.689610][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1151'. [ 189.701022][ T9982] bond5 (unregistering): Released all slaves [ 190.014202][T10017] syzkaller0: entered promiscuous mode [ 190.030531][T10017] syzkaller0: entered allmulticast mode [ 190.072800][T10022] veth0: entered promiscuous mode [ 190.136102][T10021] veth0: left promiscuous mode [ 190.254300][T10030] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 190.583349][T10055] netlink: 'syz.2.1166': attribute type 11 has an invalid length. [ 190.741270][T10058] netlink: 'syz.0.1167': attribute type 30 has an invalid length. [ 190.777191][T10058] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1167'. [ 190.923400][T10073] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1171'. [ 191.153534][T10084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1175'. [ 191.191288][T10085] syzkaller0: entered promiscuous mode [ 191.205978][T10085] syzkaller0: entered allmulticast mode [ 191.909633][T10121] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 191.917643][T10121] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.025681][T10129] netlink: 'syz.2.1188': attribute type 39 has an invalid length. [ 192.437024][T10150] Bluetooth: MGMT ver 1.23 [ 192.481327][T10140] macvtap1: entered promiscuous mode [ 192.505228][T10140] vlan0: entered promiscuous mode [ 192.518760][T10140] macvtap1: entered allmulticast mode [ 192.533503][T10140] vlan0: entered allmulticast mode [ 192.557176][T10140] veth0_vlan: entered allmulticast mode [ 192.673260][T10163] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 192.733114][T10163] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 192.753927][ T7434] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.779165][T10164] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 192.802315][ T7434] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.903477][T10163] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 192.907166][T10164] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 192.945438][ T3294] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 192.991769][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.076390][ T3294] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.307897][T10195] syzkaller1: entered promiscuous mode [ 193.316015][T10195] syzkaller1: entered allmulticast mode [ 193.564456][T10195] bond8 (unregistering): Released all slaves [ 193.788885][T10219] __nla_validate_parse: 11 callbacks suppressed [ 193.788903][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1217'. [ 193.838392][T10233] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1220'. [ 194.213348][T10246] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 194.280420][ T5759] lo speed is unknown, defaulting to 1000 [ 194.303055][T10260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1228'. [ 194.438386][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 194.555459][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 194.595434][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 194.621511][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1229'. [ 194.649247][T10276] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1233'. [ 194.879594][T10287] syzkaller0: entered promiscuous mode [ 194.893123][T10287] syzkaller0: entered allmulticast mode [ 194.914701][T10289] netlink: 'syz.1.1236': attribute type 30 has an invalid length. [ 194.949385][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1237'. [ 195.033222][T10289] bond11: option arp_missed_max: invalid value (0) [ 195.040156][T10289] bond11: option arp_missed_max: allowed values 1 - 255 [ 195.049574][T10289] bond11 (unregistering): Released all slaves [ 195.079593][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 195.285588][T10314] xt_TCPMSS: Only works on TCP SYN packets [ 195.331487][T10320] netlink: 'syz.1.1243': attribute type 10 has an invalid length. [ 195.371367][T10320] geneve2: entered promiscuous mode [ 195.381800][T10320] geneve2: entered allmulticast mode [ 195.481548][T10327] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 195.603954][T10327] bond8: entered promiscuous mode [ 195.612248][T10327] 8021q: adding VLAN 0 to HW filter on device bond8 [ 195.892213][T10353] netlink: 'syz.4.1252': attribute type 39 has an invalid length. [ 196.140013][T10367] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 196.140283][T10365] netlink: 'syz.2.1256': attribute type 28 has an invalid length. [ 196.172427][T10367] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 196.462163][T10384] 8021q: adding VLAN 0 to HW filter on device bond9 [ 196.631805][T10384] bond9: (slave geneve2): making interface the new active one [ 196.648878][T10384] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 196.654884][T10402] netlink: NAT attribute has 5 unknown bytes [ 196.673980][T10394] syzkaller0: entered promiscuous mode [ 196.686828][T10394] syzkaller0: entered allmulticast mode [ 196.700636][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.910872][T10410] 8021q: adding VLAN 0 to HW filter on device bond10 [ 196.956996][T10410] bond10: (slave gretap1): making interface the new active one [ 196.968022][T10410] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 196.982156][T10410] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.068219][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.380049][T10437] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20000 [ 197.582311][T10450] validate_nla: 2 callbacks suppressed [ 197.582330][T10450] netlink: 'syz.3.1280': attribute type 3 has an invalid length. [ 197.635183][T10450] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 197.945971][T10462] bridge0: port 3(veth1_to_bridge) entered blocking state [ 197.953662][T10462] bridge0: port 3(veth1_to_bridge) entered disabled state [ 197.963154][T10462] veth1_to_bridge: entered allmulticast mode [ 197.971840][T10462] veth1_to_bridge: entered promiscuous mode [ 197.979454][T10462] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 197.996173][T10462] bridge0: port 3(veth1_to_bridge) entered blocking state [ 198.003882][T10462] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 198.148732][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.213991][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.245842][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.277132][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.313024][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.336198][T10481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 198.343630][T10481] IPv6: NLM_F_CREATE should be set when creating new route [ 198.350935][T10481] IPv6: NLM_F_CREATE should be set when creating new route [ 198.354228][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.362645][T10482] netlink: 'syz.1.1288': attribute type 30 has an invalid length. [ 198.458816][T10485] ip6t_srh: unknown srh invflags 4000 [ 198.459906][T10467] netlink: 'syz.3.1284': attribute type 2 has an invalid length. [ 198.686605][T10491] openvswitch: netlink: ct_state flags ffffffff unsupported [ 198.803111][ C0] ------------[ cut here ]------------ [ 198.809599][ C0] 1 [ 198.809627][ C0] WARNING: net/core/sock.c:782 at sk_mc_loop+0x126/0x160, CPU#0: syz.2.1295/10498 [ 198.821345][ C0] Modules linked in: [ 198.825319][ C0] CPU: 0 UID: 0 PID: 10498 Comm: syz.2.1295 Not tainted syzkaller #0 PREEMPT(full) [ 198.834724][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.844868][ C0] RIP: 0010:sk_mc_loop+0x126/0x160 [ 198.850031][ C0] Code: 08 48 89 df e8 db 03 9c f8 48 8b 1b 81 e3 00 00 10 00 31 ff 48 89 de e8 48 71 2e f8 48 89 d8 c1 e8 14 eb 0b e8 5b 6c 2e f8 90 <0f> 0b 90 b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f1 80 e1 [ 198.869739][ C0] RSP: 0018:ffffc90000007708 EFLAGS: 00010246 [ 198.875852][ C0] RAX: ffffffff8998a7a5 RBX: ffff88803229c000 RCX: ffff88802f8b0000 [ 198.883874][ C0] RDX: 0000000000000100 RSI: ffffffff90010c60 RDI: 0000000000000011 [ 198.891970][ C0] RBP: 0000000000000000 R08: ffff88802f8b0000 R09: 0000000000000002 [ 198.900027][ C0] R10: 000000000000000a R11: 0000000000000100 R12: ffff8880786423c0 [ 198.908078][ C0] R13: 0000000000000010 R14: 0000000000000011 R15: dffffc0000000000 [ 198.916123][ C0] FS: 00007febde0176c0(0000) GS:ffff888124f4d000(0000) knlGS:0000000000000000 [ 198.925205][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.931275][T10506] __nla_validate_parse: 21 callbacks suppressed [ 198.931289][T10506] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1294'. [ 198.931801][ C0] CR2: 000020000000f000 CR3: 000000005637a000 CR4: 00000000003526f0 [ 198.955207][ C0] Call Trace: [ 198.958506][ C0] [ 198.961456][ C0] ip6_finish_output2+0x62b/0x13c0 [ 198.966648][ C0] ? ip6_mtu+0x38c/0x490 [ 198.970933][ C0] ? ip6_output+0x11e/0x540 [ 198.975516][ C0] ip6_output+0x337/0x540 [ 198.979889][ C0] ip6_mr_output+0x53e/0x1170 [ 198.984599][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 198.989811][ C0] ? ip6_mr_output+0x1f3/0x1170 [ 198.994685][ C0] ? __pfx_ip6_mr_output+0x10/0x10 [ 198.999883][ C0] ? nf_hook+0xa5/0x6a0 [ 199.004057][ C0] ? nf_hook+0x4c0/0x6a0 [ 199.008386][ C0] ? nf_hook+0xa5/0x6a0 [ 199.012666][ C0] ? __pfx_ip6_mr_output+0x10/0x10 [ 199.017887][ C0] vrf_xmit+0x1a60/0x1b40 [ 199.022234][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.027529][ C0] ? __pfx_vrf_xmit+0x10/0x10 [ 199.032235][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 199.038007][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.043231][ C0] ? ktime_get+0x45/0x220 [ 199.047656][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 199.053830][ C0] ? cake_dequeue_one+0x343/0x620 [ 199.059040][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 199.064196][ C0] sch_direct_xmit+0x257/0x4c0 [ 199.069059][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 199.074514][ C0] __qdisc_run+0xb11/0x1620 [ 199.079115][ C0] net_tx_action+0x7cb/0xc30 [ 199.083718][ C0] ? net_tx_action+0x5bb/0xc30 [ 199.088571][ C0] handle_softirqs+0x225/0x840 [ 199.093359][ C0] ? do_softirq+0x76/0xd0 [ 199.097783][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.102944][ C0] do_softirq+0x76/0xd0 [ 199.107348][ C0] [ 199.110293][ C0] [ 199.113324][ C0] __local_bh_enable_ip+0xf8/0x130 [ 199.118609][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.123757][ C0] __dev_queue_xmit+0x1edc/0x3820 [ 199.128876][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.134015][ C0] ? _copy_from_iter+0x21b/0x1660 [ 199.139123][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 199.144525][ C0] ? virtio_net_hdr_to_skb+0xa2a/0x1620 [ 199.150180][ C0] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 199.155709][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1299'. [ 199.156069][ C0] ? packet_xmit+0x68/0x330 [ 199.169499][ C0] packet_sendmsg+0x3d95/0x5040 [ 199.174382][ C0] ? trace_hrtimer_start+0x82/0x200 [ 199.179685][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 199.181294][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1299'. [ 199.184945][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.184992][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.185020][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 199.185050][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.185077][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 199.185112][ C0] ____sys_sendmsg+0x54e/0x850 [ 199.185143][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.185178][ C0] ? import_iovec+0x73/0xa0 [ 199.185203][ C0] ___sys_sendmsg+0x2a5/0x360 [ 199.185234][ C0] ? __lock_acquire+0x683/0x2cf0 [ 199.185265][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.185291][ C0] ? futex_wait+0x2a2/0x390 [ 199.185347][ C0] ? __fget_files+0x2a/0x420 [ 199.185373][ C0] ? __fget_files+0x3a2/0x420 [ 199.226522][T10520] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1297'. [ 199.229702][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 199.276868][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.282377][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.288540][ C0] do_syscall_64+0x174/0x580 [ 199.289402][T10507] veth1_to_bond: entered allmulticast mode [ 199.293179][ C0] ? trace_irq_disable+0x3b/0x140 [ 199.293215][ C0] ? clear_bhb_loop+0x40/0x90 [ 199.308849][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.310548][T10507] veth1_to_bond: entered promiscuous mode [ 199.314757][ C0] RIP: 0033:0x7febdd19e019 [ 199.314783][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.314846][ C0] RSP: 002b:00007febde017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.314869][ C0] RAX: ffffffffffffffda RBX: 00007febdd426090 RCX: 00007febdd19e019 [ 199.314885][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 199.314899][ C0] RBP: 00007febdd23500c R08: 0000000000000000 R09: 0000000000000000 [ 199.314913][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.314925][ C0] R13: 00007febdd426128 R14: 00007febdd426090 R15: 00007ffdcdf75b38 [ 199.314961][ C0] [ 199.314972][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.314987][ C0] CPU: 0 UID: 0 PID: 10498 Comm: syz.2.1295 Not tainted syzkaller #0 PREEMPT(full) [ 199.315009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.315021][ C0] Call Trace: [ 199.315030][ C0] [ 199.315038][ C0] vpanic+0x56c/0xa60 [ 199.315072][ C0] ? __pfx__printk+0x10/0x10 [ 199.315096][ C0] ? __pfx_vpanic+0x10/0x10 [ 199.315128][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 199.315153][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 199.315186][ C0] panic+0xc5/0xd0 [ 199.315212][ C0] ? __pfx_panic+0x10/0x10 [ 199.315255][ C0] __warn+0x315/0x4c0 [ 199.315270][ C0] ? sk_mc_loop+0x126/0x160 [ 199.315299][ C0] ? sk_mc_loop+0x126/0x160 [ 199.315326][ C0] __report_bug+0x276/0x570 [ 199.315351][ C0] ? sk_mc_loop+0x126/0x160 [ 199.315380][ C0] ? __pfx___report_bug+0x10/0x10 [ 199.315405][ C0] ? ip6table_mangle_hook+0x2b8/0x730 [ 199.315440][ C0] ? __lock_acquire+0x683/0x2cf0 [ 199.315474][ C0] ? sk_mc_loop+0x126/0x160 [ 199.315502][ C0] report_bug+0x16a/0x220 [ 199.315526][ C0] ? sk_mc_loop+0x126/0x160 [ 199.315553][ C0] ? sk_mc_loop+0x128/0x160 [ 199.315579][ C0] handle_bug+0x9c/0x200 [ 199.315607][ C0] exc_invalid_op+0x1a/0x50 [ 199.315632][ C0] asm_exc_invalid_op+0x1a/0x20 [ 199.315651][ C0] RIP: 0010:sk_mc_loop+0x126/0x160 [ 199.315680][ C0] Code: 08 48 89 df e8 db 03 9c f8 48 8b 1b 81 e3 00 00 10 00 31 ff 48 89 de e8 48 71 2e f8 48 89 d8 c1 e8 14 eb 0b e8 5b 6c 2e f8 90 <0f> 0b 90 b0 01 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f1 80 e1 [ 199.315696][ C0] RSP: 0018:ffffc90000007708 EFLAGS: 00010246 [ 199.315713][ C0] RAX: ffffffff8998a7a5 RBX: ffff88803229c000 RCX: ffff88802f8b0000 [ 199.315727][ C0] RDX: 0000000000000100 RSI: ffffffff90010c60 RDI: 0000000000000011 [ 199.315740][ C0] RBP: 0000000000000000 R08: ffff88802f8b0000 R09: 0000000000000002 [ 199.315754][ C0] R10: 000000000000000a R11: 0000000000000100 R12: ffff8880786423c0 [ 199.315766][ C0] R13: 0000000000000010 R14: 0000000000000011 R15: dffffc0000000000 [ 199.315787][ C0] ? sk_mc_loop+0x125/0x160 [ 199.315821][ C0] ? sk_mc_loop+0x125/0x160 [ 199.315851][ C0] ip6_finish_output2+0x62b/0x13c0 [ 199.315873][ C0] ? ip6_mtu+0x38c/0x490 [ 199.315904][ C0] ? ip6_output+0x11e/0x540 [ 199.315932][ C0] ip6_output+0x337/0x540 [ 199.315964][ C0] ip6_mr_output+0x53e/0x1170 [ 199.315992][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 199.316021][ C0] ? ip6_mr_output+0x1f3/0x1170 [ 199.316052][ C0] ? __pfx_ip6_mr_output+0x10/0x10 [ 199.316085][ C0] ? nf_hook+0xa5/0x6a0 [ 199.316110][ C0] ? nf_hook+0x4c0/0x6a0 [ 199.316140][ C0] ? nf_hook+0xa5/0x6a0 [ 199.316180][ C0] ? __pfx_ip6_mr_output+0x10/0x10 [ 199.316205][ C0] vrf_xmit+0x1a60/0x1b40 [ 199.316224][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.316258][ C0] ? __pfx_vrf_xmit+0x10/0x10 [ 199.316287][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 199.316309][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.316331][ C0] ? ktime_get+0x45/0x220 [ 199.316355][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 199.316380][ C0] ? cake_dequeue_one+0x343/0x620 [ 199.316419][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 199.316459][ C0] sch_direct_xmit+0x257/0x4c0 [ 199.316485][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 199.316514][ C0] __qdisc_run+0xb11/0x1620 [ 199.316553][ C0] net_tx_action+0x7cb/0xc30 [ 199.316571][ C0] ? net_tx_action+0x5bb/0xc30 [ 199.316593][ C0] handle_softirqs+0x225/0x840 [ 199.316619][ C0] ? do_softirq+0x76/0xd0 [ 199.316648][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.316672][ C0] do_softirq+0x76/0xd0 [ 199.316694][ C0] [ 199.316701][ C0] [ 199.316708][ C0] __local_bh_enable_ip+0xf8/0x130 [ 199.316730][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.316754][ C0] __dev_queue_xmit+0x1edc/0x3820 [ 199.316791][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 199.316819][ C0] ? _copy_from_iter+0x21b/0x1660 [ 199.316851][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 199.316883][ C0] ? virtio_net_hdr_to_skb+0xa2a/0x1620 [ 199.316928][ C0] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 199.316961][ C0] ? packet_xmit+0x68/0x330 [ 199.316998][ C0] packet_sendmsg+0x3d95/0x5040 [ 199.317022][ C0] ? trace_hrtimer_start+0x82/0x200 [ 199.317076][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 199.317113][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.317158][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 199.317183][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 199.317210][ C0] ? __pfx_packet_sendmsg+0x10/0x10 [ 199.317233][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 199.317264][ C0] ____sys_sendmsg+0x54e/0x850 [ 199.317294][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.317323][ C0] ? import_iovec+0x73/0xa0 [ 199.317346][ C0] ___sys_sendmsg+0x2a5/0x360 [ 199.317367][ C0] ? __lock_acquire+0x683/0x2cf0 [ 199.317398][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.317425][ C0] ? futex_wait+0x2a2/0x390 [ 199.317477][ C0] ? __fget_files+0x2a/0x420 [ 199.317504][ C0] ? __fget_files+0x3a2/0x420 [ 199.317541][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 199.317566][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.317608][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.317629][ C0] do_syscall_64+0x174/0x580 [ 199.317651][ C0] ? trace_irq_disable+0x3b/0x140 [ 199.317677][ C0] ? clear_bhb_loop+0x40/0x90 [ 199.317701][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.317721][ C0] RIP: 0033:0x7febdd19e019 [ 199.317738][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.317754][ C0] RSP: 002b:00007febde017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.317773][ C0] RAX: ffffffffffffffda RBX: 00007febdd426090 RCX: 00007febdd19e019 [ 199.317788][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 199.317800][ C0] RBP: 00007febdd23500c R08: 0000000000000000 R09: 0000000000000000 [ 199.317838][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.317850][ C0] R13: 00007febdd426128 R14: 00007febdd426090 R15: 00007ffdcdf75b38 [ 199.317881][ C0] [ 199.321320][ C0] Kernel Offset: disabled