last executing test programs: 3.483001723s ago: executing program 3 (id=1041): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendto$unix(r2, &(0x7f0000000000)="96e1825a8935527e2e610c701cea2bb564c4f3345c6a44b804bc2842519c666846c34acc07959ab1775837fe47f7d71eb72ae94e20ca5d34dcc577b4bebc0efe60e6fcb7f0aa9cb21196ab6f65d5e43b36c44f8887a13103f665e9fd646b65e2f4a9ba21d5214c4a6c936bc78f2f59c7a1bf221a1171c6cd4881942dd7acb7803ad6a8f4b8841bc19b805d9ab9765bd220c0b6ac8b051815481268175ff7409d4b1bf71b36818e8bf3c1", 0xfffffffffffffd2e, 0x20044801, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.720705637s ago: executing program 2 (id=1051): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, 0x0, &(0x7f0000001380)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x7800, 0x80, 0x5, 0x3, {{0x18, 0x4, 0x0, 0x37, 0x60, 0x65, 0x0, 0xc1, 0x4, 0x0, @private=0xa010100, @remote, {[@ssrr={0x89, 0x17, 0x35, [@loopback, @private=0xa010100, @local, @private=0xa010101, @private=0xa010102]}, @noop, @timestamp_addr={0x44, 0xc, 0xc7, 0x1, 0x8, [{@loopback, 0xb}]}, @noop, @lsrr={0x83, 0xf, 0xcd, [@loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0xad, [@dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010101, @multicast2]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@remote, @in6=@mcast1, 0x4e22, 0x4, 0x4e21, 0x9, 0xa, 0x20, 0x80, 0x84, r2, r4}, {0x80, 0x4, 0xf77e, 0x10, 0xe0b, 0x5, 0x9, 0x5}, {0x28b, 0x4, 0x2, 0x52d}, 0x5403, 0x0, 0x2, 0x1, 0x1, 0x2}, {{@in=@local, 0x4d6, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x4, 0x2, 0x7, 0x40, 0x0, 0x9}}, 0xe8) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f00000002c0)=0x8, 0x4) 1.954005135s ago: executing program 1 (id=1059): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000100000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1.771862018s ago: executing program 1 (id=1062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000200001030300e2ff000000000200000000000007"], 0x1c}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010003904000000000000000000e00000", @ANYRES32=0x0, @ANYBLOB="bd980000031300001c0012800900010069706970000000000c00028008000300e0"], 0x3c}}, 0x0) 1.727571289s ago: executing program 2 (id=1063): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc, 0x0, 0x0, 0xffffffff}, {0x6, 0x0, 0x0, 0x200000}]}, 0x10) 1.61025616s ago: executing program 0 (id=1065): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xe5, "ce504c3c9a1508a84a99046983ba30e35cb723ae3b9ffc405c1c0a3491a239dd4a5bcdb8a5a5c066c887c4c42674bc29dac578de926c5b1541e937e3391d56681ef61e85103a55c911986c32f6c49af54a3ed139af1a6f2455b68ba8cfd14b309a94e0d031447d0ed3873921bc4bfb176dae15d79e4b392687cf5b9e719d04a79dad4c5cd71259b9f2299438a49a2d7934c2e783db789fd6e0a490060db284dc4a7801f25e76bce62a2154cad72e79ff54755b37b51b515e06d4c34a155cdec313b64e109ebdec6f578eaf44b9a459b56a8f9afdd08ccfc004d36e4e3f424601880cb21353"}, &(0x7f0000000100)=0xed) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000200)=0x84) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={r0, 0x4d12415e, 0x800, 0xb}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x861}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xaf59}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x40008}, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000400)) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @default, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) recvfrom$rxrpc(r2, &(0x7f00000004c0)=""/254, 0xfe, 0x20, &(0x7f00000005c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x24) setsockopt$inet6_mreq(r0, 0x29, 0x32, &(0x7f0000000600)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x14) r4 = socket(0x22, 0x5, 0x5555ac54) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xf8b528ecd217cd44}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbea0, 0x57}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000780), &(0x7f00000007c0)=0x4) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000800)=""/210, 0xd2}, {&(0x7f0000000900)=""/113, 0x71}], 0x2) write$tun(r2, &(0x7f00000009c0)={@void, @void, @ipv4=@igmp={{0xb, 0x4, 0x0, 0x20, 0xe8, 0x64, 0x0, 0x5, 0x2, 0x0, @multicast1, @remote, {[@rr={0x7, 0x17, 0xd1, [@rand_addr=0x64010101, @private=0xa010101, @empty, @multicast2, @empty]}]}}, {0x12, 0x5, 0x0, @private=0xa010102, "707e939c494a875115d47d82c574806f86d6dc629e6dfb03b2888418d99ebb9efb14096ec7aa93290345248916ece1c7675064d71ef3fdb49330971337e530819cb5dc75a4b97d4e7ed4d385f2ee9ab93c30c6e5b30d7a997c9fe0f37176598e63b5805dfe0c7962e4c1fd87d33df6a3b6b9d577c01e54040a437c3b4748013c805d03e1f6032f6df3c99e4dec445135b163d9b786522b22f7e814155cd42a9b04ee34507ea988c9660e2baf70c6bdc80b1cb067"}}}, 0xe8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x404c880) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0xcc, 0x1, 0x40, @mcast2, @empty, 0x380, 0x20, 0x34c, 0xff}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x68, r5, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x3}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac0f, 0xfac0f, 0xfac02, 0xfac0a, 0xfac13, 0xfac11, 0xfac07]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac08, 0x0, 0xfac02]}]]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_proto_private(r9, 0x89e0, &(0x7f0000000e40)="11c8d88232c3908f55e69fff159392d4d6ada2f040cbbe077bdd8eb44d02595ad77100427dc886c855bb8634dfd8a4dd69183b04a8e0a99214a14845eef28e6fe4e5e229e06650b8883bcc1c34816a73a312c4d88afb70e04522a3f351bc3b9f56a290514790fe247020d55be3cdb01f8f57436b8c7a35d1ee2cf09634798eeb8043eae11423b72baa") recvmsg$qrtr(r0, &(0x7f0000003280)={&(0x7f0000000f00), 0xc, &(0x7f0000000f80)=[{&(0x7f0000000f40)=""/40, 0x28}], 0x1, &(0x7f0000000fc0)=[{0x1010, 0x0, 0x0, ""/4096}, {0xc0, 0x0, 0x0, ""/173}, {0x88, 0x0, 0x0, ""/115}, {0x1010, 0x0, 0x0, ""/4096}, {0xa0, 0x0, 0x0, ""/138}, {0x88, 0x0, 0x0, ""/114}], 0x2290, 0x2}, 0x38, 0x41) sendmsg$nl_route(r4, &(0x7f0000003440)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003400)={&(0x7f0000003300)=@ipv6_delroute={0xec, 0x19, 0x0, 0x70bd29, 0x25dfdbfe, {0xa, 0x20, 0x0, 0xd2, 0xfd, 0x1, 0xc8, 0x6, 0x2400}, [@RTA_METRICS={0xc7, 0x8, 0x0, 0x1, "dd081b340cdebe00c01b669939f452ef342ddf4248cfad4327d0e32ae3f9234dce9b0e56f14016ac7419f3990c55fb9bd3afbeb38ed6d7e041c857d14f3c54d5c7dc962fb95b77983f8728cbccba45f62981c394a6cbd831cef400f2f2bbf610cf15ec885198daf749479e7ad459cbb5460f9fb16fd8146df38a4c199e785f4a71962e3912cae9c92979e51572f51f03820c16f4b39b78ee52ec3482c5aa421d29aee75842d108362b56160323a3d1ed1cb02407a29a9dee2c8081c1c2021a692c8005"}, @RTA_OIF={0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x24000004}, 0x20040001) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000034c0), r2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000003640)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003600)={&(0x7f0000003500)={0xcc, r10, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000000}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd6}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1.609898709s ago: executing program 1 (id=1066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.548618695s ago: executing program 2 (id=1067): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5}, {0x5}, {0x5}, {0x5}]}]}, 0x5c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@o_path={0x0, 0x0, 0x18}, 0x18) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e5ffffff000000007111bf00000000008510000002000000850006000000000095000810000000009541f0366e402759"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.515542096s ago: executing program 4 (id=1068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000a0601080000000000000000000000000500010007000000"], 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, 0xfff}, @in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e24, 0x6, @remote, 0xa}], 0x58) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @remote, 0x7ff}, 0x1c) sendto$inet6(r2, &(0x7f0000000b80)="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", 0x5ad, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2}, 0x1c) read(r2, &(0x7f0000000280)=""/244, 0xf4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0016"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.452440022s ago: executing program 0 (id=1069): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (fail_nth: 1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r5], 0x4) 1.45033363s ago: executing program 1 (id=1070): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 1.381380816s ago: executing program 4 (id=1071): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000380), &(0x7f00000000c0)=0x8) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$NFT_BATCH(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006100), 0x49f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a00"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.073457147s ago: executing program 2 (id=1072): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0x4, 0x7, 0x15, 0x17, 0xb}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x18, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18c876f6076d6f0926c126b9"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007f000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) recvmsg$unix(r0, &(0x7f0000001640)={&(0x7f0000000100), 0x6e, &(0x7f0000002840)=[{&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/175, 0xaf}, {&(0x7f0000000480)=""/161, 0xa1}, {&(0x7f0000000540)=""/170, 0xaa}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000000000)=""/15, 0xf}, {&(0x7f0000000180)=""/126, 0x7e}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000001600)=""/55, 0x37}], 0x9}, 0x40012141) close(r3) 924.366698ms ago: executing program 1 (id=1073): socket(0x10, 0x3, 0x0) 924.03633ms ago: executing program 0 (id=1074): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1}, 0xe0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000029002c00000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000740)=""/184, 0xb8}, {0x0}], 0x4}, 0x6}], 0x1, 0x21, 0x0) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010101}, 0x10) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r2, 0x0) (async) listen(r2, 0x0) (async, rerun: 64) syz_emit_ethernet(0x2e, &(0x7f0000001140)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119278000000020000000000014e20000c907801000080"], 0x0) (async, rerun: 64) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r4, 0x0, 0x1e, &(0x7f0000000180)="6e54922475cc82ac929c77e2efee8141334a43707d0ada99235f87de5e0c77", 0x1f) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000070000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) (async) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) (async, rerun: 32) r7 = socket$key(0xf, 0x3, 0x2) (rerun: 32) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) (async) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) (async, rerun: 32) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) (rerun: 32) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000300)={0x1d, r8}, 0x10, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="010000009b050000080000000000000054d78b2c4ad284e3db65fcf25a0204adc5cab69014ae4ae27016577c065a85d6307a6fc8d362c1ea9368ea2586fe479485b89531a95da96d6144c0afe5e6697a7fdc3a40f8b5974745aee1c661632581f8951d5307d147c23ea3940301d1f434066cef6c61317a78aea9b587235d6d3f91d4addda486aae158bb186b5c8f9ec140b69ae549c7959827e522b75092c490d4936151b2a109423f839217f41689b08452d1125559c008f7eb2a68794f09f08b153aeec87b8fe9b21fa322b25d5898a55c5144386e55b55834a22a9334dd322928c82d44eaf889774747922c08006a5416d4b1bd", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRESHEX=r5, @ANYRES64=0x2710, @ANYRES8=r8, @ANYRES8=r2, @ANYRESDEC=r7, @ANYRESHEX=r7], 0x48}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) (async) unshare(0x22020600) unshare(0x2a020400) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) 866.127508ms ago: executing program 3 (id=1075): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_getaddr={0x18, 0x16, 0x3c2be10bca706f15}, 0x18}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x1c, 0xab, @udp='udp:syz2\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) (async) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd6", 0x6}], 0x1}}], 0x1, 0x20040010) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @random="863f187dc8f8", @void, {@ipv6={0x86dd, @generic={0x3, 0x6, "7caa27", 0x8, 0x3c, 0x1, @private1, @mcast2, {[@hopopts={0x2f}]}}}}}, 0x0) close(0x3) 830.626921ms ago: executing program 2 (id=1076): syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x1027, 0x9, 0x3}]}}]}, 0xa2}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001"], 0x122}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="48000000020601000600000600000000000000000e0003006269746d61703a6970000000050004"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 764.304713ms ago: executing program 0 (id=1077): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x2}}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x401) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000001000008500000029000000850000004f0000009500"/40], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) recvfrom$packet(r5, &(0x7f0000000600)=""/178, 0xb2, 0x40000000, &(0x7f0000000740)={0x11, 0x5, r6, 0x1, 0x2, 0x6, @multicast}, 0x14) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r7, &(0x7f00000005c0)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="eebce5739bde507c50417204ad07da297ce0455cf7a1bb7c", 0x18}, {&(0x7f0000000200)="c434bdad00982c268e09ccee6a9753a84ec598029f6bade90123f1d6cc88255e9f43f6ca036ebabdb334f98a3d58383eb0ad9c0683565eb0d9ca81fca24014340b62f8744604a7636a0e2e5376645e451a4655c7b8690d50e98ec03673a2ed22fbc75e11b4e5087a3536768c13183aaa03", 0x71}, {&(0x7f0000000280)="e834ddc0d488a85d3740a1b9a008daeead905450a4607760610bb034ec4bfd8a1f566aea48fa0f416dbae9e20d6fd191de83c5c68589769ac1bf6a17dcce1a71c55753f978ef04ccec75e759d121e5d6beea378995af2a470232f043127aa0a03d900668699c5a3826f1863813cb43929ff8a49deef46192e06eda9357713a12467b538d86cac4c241ccafa0569c7d6035f7fd1cbac66cab993e358e999c0fb540d1eff1b4dd310625dfa39aff9cde21a97bdfdb9006c23d183e05cabda9d38457fbd71673a6f6a16251b6446636da5f040208427ce9205a366f59520adc5e82512f1024c4280675eae7b94ebd25f5ada633", 0xf2}, {&(0x7f0000000380)="907971908fbd3c568d6b69b4bbfce0167afbb6acd31be24377377f68c0ba535bf94448db740ee8392251feb8cf62169630e8a31b03923806073ac066b5944e8693fdf1cde47e4e5d3d0ce8ec2dcaafd3d5f85593a38c8de291daf34dcb777abe8e0c8c828041ecaee9124947d895df99", 0x70}, {&(0x7f0000000400)="719c2856c63380cacfaff3a8382d5e8a189accf6b913cb8d2fa5726d18b36cda084566766b1ac998eb31f73f93368da96e70b1ac092443e04f22e76de793eff52f5f0622b94a436ccaf5ca9b5aaf25d2f76e894ed8725197a42ba38bcdc0bfcaec50dd3dddc84eeb7213e04bb252f672f2a4c3bbf26e1103dbe447653a1ea49d3305e11e87c7895e1a7d", 0x8a}], 0x5, &(0x7f0000000540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffa196}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff}}], 0x78}, 0x8000) 716.427011ms ago: executing program 4 (id=1078): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000120000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}}, 0x0) 715.521908ms ago: executing program 1 (id=1079): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x3069e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000006c0)={r0, 0xa4b, 0x3, 0x400}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x3, 0xff, 0x3}, 0xff}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000780)={0x0, @initdev, @multicast1}, &(0x7f00000007c0)=0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x0, 0x9, 0x401}, 0x14}}, 0x0) r12 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r12, &(0x7f0000001180)={&(0x7f00000000c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000940)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xd4, r6, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r2, 0x6, 0x6, 0x4}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r14 = socket$packet(0x11, 0x3, 0x300) splice(r13, 0x0, r14, 0x0, 0x10500, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES8=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 665.884819ms ago: executing program 3 (id=1080): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f00000000c0)=0x5, 0x4) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r1, 0x3, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$nl_rdma(0x10, 0x3, 0x14) shutdown(r4, 0x1) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x1, 0x2, {0x0, 0xf0, 0x1}, {0x1, 0x0, 0x3}, 0xfd, 0xff}], 0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xc1, "096083d18521492fdeb1c8e112dc3ec1c99c5889e4da8e0c0e8ed44c294fab292b17866eceba68bfa00c2fc3c995de5503ff4b6bf56628fc835a2cebbf044717d1b49181d3c5af436ba30cef0dbcb4c7e7f304a7e43b913d0ebcbdca1de6b6b21a33663716d7fd634dbedf9e89a51777098f402974cbb22690bf6d31c0399b4d1d271b625799e4f69289d955567aa395b8411a1200a9f019313da667991a75484602b97110352990130d4358d3ef9bb8d76f483f4b36c0030b35a52e18dcd11eb7"}, &(0x7f00000003c0)=0xc9) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={r5, 0x3, 0xfffffffa, 0xec}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x2) write(r3, &(0x7f0000000440)="c1e0d2b3acb85c6ab99267728fe78939dfe186cfe6d3862fcc67abe21e8094d589f6658a421474e5c1a995748cabd4297cbd993921139f5328d0daf1cdf3d8ea652c2a1ab8946e2b3f74227566ba89ca80fde8ef619b095851f2e922c1f3bac573d2464e9d890c16c2569b7721e9600b6833841a4d3fe7039a5d0025cbc68de5c504e7ffacfaa146d772823143940e5edee2ff8d2c7bb6cb656cc68be28973ea708554", 0xa3) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000500)={0x8, 0x8, 0x6}, 0xc) r7 = socket$packet(0x11, 0x5ae21c12054b4395, 0x300) recvmmsg(r7, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000540)=""/134, 0x86}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/94, 0x5e}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/148, 0x94}, {&(0x7f0000002840)=""/137, 0x89}, {&(0x7f0000002900)=""/27, 0x1b}, {&(0x7f0000002940)=""/81, 0x51}, {&(0x7f00000029c0)=""/190, 0xbe}], 0xa}, 0x5}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002b40)=""/203, 0xcb}, {&(0x7f0000002c40)=""/175, 0xaf}, {&(0x7f0000002d00)=""/201, 0xc9}], 0x3, &(0x7f0000002e40)=""/24, 0x18}, 0x1}, {{&(0x7f0000002e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002f00)=""/211, 0xd3}, {&(0x7f0000003000)=""/66, 0x42}, {&(0x7f0000003080)=""/43, 0x2b}, {&(0x7f00000030c0)=""/224, 0xe0}, {&(0x7f00000031c0)=""/78, 0x4e}], 0x5, &(0x7f00000032c0)=""/240, 0xf0}, 0xff}, {{&(0x7f00000033c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/66, 0x42}], 0x1}, 0x5}, {{&(0x7f0000003500)=@nl=@unspec, 0x80, &(0x7f0000003940)=[{&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/88, 0x58}, {&(0x7f0000003680)=""/216, 0xd8}, {&(0x7f0000003780)=""/248, 0xf8}, {&(0x7f0000003880)=""/46, 0x2e}, {&(0x7f00000038c0)=""/123, 0x7b}], 0x6}, 0x9b}, {{&(0x7f00000039c0)=@in={0x2, 0x0, @local}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003a40)=""/207, 0xcf}, {&(0x7f0000003b40)=""/15, 0xf}, {&(0x7f0000003b80)=""/152, 0x98}, {&(0x7f0000003c40)=""/101, 0x65}], 0x4, &(0x7f0000003d00)=""/85, 0x55}, 0x8}, {{0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000003d80)=""/242, 0xf2}, {&(0x7f0000003e80)=""/168, 0xa8}, {&(0x7f0000003f40)=""/200, 0xc8}], 0x3, &(0x7f0000004080)=""/31, 0x1f}, 0x3}, {{&(0x7f00000040c0)=@l2tp6, 0x80, &(0x7f0000004580)=[{&(0x7f0000004140)=""/89, 0x59}, {&(0x7f00000041c0)=""/161, 0xa1}, {&(0x7f0000004280)=""/211, 0xd3}, {&(0x7f0000004380)=""/76, 0x4c}, {&(0x7f0000004400)=""/77, 0x4d}, {&(0x7f0000004480)=""/138, 0x8a}, {&(0x7f0000004540)=""/18, 0x12}], 0x7, &(0x7f0000004600)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000005600)=@nfc, 0x80, &(0x7f0000005680), 0x0, &(0x7f00000056c0)=""/240, 0xf0}, 0x49}, {{&(0x7f00000057c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005840)=""/196, 0xc4}, {&(0x7f0000005940)=""/222, 0xde}, {&(0x7f0000005a40)=""/77, 0x4d}], 0x3, &(0x7f0000005b00)=""/167, 0xa7}, 0x8}], 0xa, 0x40000000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000005e40)={r7}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000006000)={'syztnl1\x00', &(0x7f0000005ec0)={'erspan0\x00', 0x0, 0x700, 0x1, 0x81, 0x6, {{0x39, 0x4, 0x3, 0x8, 0xe4, 0x68, 0x0, 0xf5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @local, {[@timestamp_prespec={0x44, 0x34, 0x4d, 0x3, 0x2, [{@broadcast, 0x80000001}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@private=0xa010101, 0xff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x81}, {@local}]}, @cipso={0x86, 0x30, 0x1, [{0x2, 0xd, "3bb4ba83ffa34708cfda3c"}, {0x6, 0xe, "ed73db4549eda580d3fb1172"}, {0x6, 0xf, "f2633db02db5ffa38f86792810"}]}, @cipso={0x86, 0x19, 0x0, [{0x6, 0xb, "d8ba8a718cdd2d27f4"}, {0x1, 0x8, "fc855f5c5c78"}]}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x4, [0x44, 0xe, 0x1004, 0x2]}, @rr={0x7, 0x27, 0x60, [@dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010100, @remote, @empty, @remote, @broadcast, @local, @multicast2, @rand_addr=0x64010102]}, @ssrr={0x89, 0x17, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @loopback, @local]}]}}}}}) sendmsg$nl_route(r9, &(0x7f00000060c0)={&(0x7f0000005e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)=@ipmr_delroute={0x3c, 0x19, 0x800, 0x70bd2d, 0x25dfdbfc, {0x80, 0x0, 0x0, 0x0, 0x83, 0x1, 0x0, 0x9, 0x500}, [@RTA_SRC={0x8, 0x2, @multicast1}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x37}}, @RTA_NH_ID={0x8, 0x1e, 0xb}, @RTA_OIF={0x8, 0x4, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x11) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r3, 0xa88000) socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet(r9, &(0x7f0000006100)="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", 0x1000, 0x40800, &(0x7f0000007100)={0x2, 0x4e24, @multicast2}, 0x10) getsockopt$IP_SET_OP_GET_FNAME(r7, 0x1, 0x53, &(0x7f0000007140)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000007180)=0x2c) splice(r8, &(0x7f00000071c0)=0x401, r3, &(0x7f0000007200), 0xc72a, 0x2) accept4(r6, 0x0, &(0x7f0000007240), 0x80000) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000007280)={'ip6erspan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000073c0)={@fallback=r3, 0x0, 0x0, 0x2, &(0x7f00000072c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000007300)=[0x0, 0x0], &(0x7f0000007340)=[0x0, 0x0, 0x0], &(0x7f0000007380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) connect$pppoe(0xffffffffffffffff, &(0x7f0000007400)={0x18, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, 'veth1_to_bridge\x00'}}, 0x1e) 630.27156ms ago: executing program 2 (id=1081): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r11], 0x4) 560.073432ms ago: executing program 0 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}}, 0x20000000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="7e07000000000000004d5445000000007a9d59680c00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xec9f, 0x8d, 0x70}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x4, 0x0}, 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x30, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x0, 0x5, 0x2, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfce}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0xf3, &(0x7f0000000440)=""/243, 0x41000, 0x4e, '\x00', 0x0, @fallback=0x11, r5, 0x8, &(0x7f0000000540)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xd, 0x38, 0x5}, 0x10, r6, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r7, r8, r9, r10], 0x0, 0x10, 0x200}, 0x94) 548.435287ms ago: executing program 4 (id=1083): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fd55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x7000000}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x48}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r4, 0x29, 0x4b, 0x0, &(0x7f0000000040)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 524.96715ms ago: executing program 3 (id=1084): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x44, r2, 0x1, 0x70bc2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x5]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'bridge_slave_0\x00', {0x2, 0x4e20, @local}}) 388.39166ms ago: executing program 4 (id=1085): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) (fail_nth: 2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r5], 0x4) 375.860558ms ago: executing program 3 (id=1086): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x280c4) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xf}, {0x9, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="6e3b7d7e77648de78e1b3c1ad03cfb7ea6394aec7fce382d3ce6ece3d73fb0568102c0e3c4060b006334b3d84a8b7bf3f1666dca39d7e60be53ea2185fd2c268e3abe6afa5a2d96c89169b42c4e91a45cb7e83b952b9dd6ad04339a2f03e420c6894f5a4c6ce0c37bf41", @ANYRESHEX=r7], 0x60}, 0x1, 0x0, 0x0, 0x24000001}, 0x840) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r5}, 0x8) 370.259414ms ago: executing program 0 (id=1087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c1fffff408004500002800650000ae4bd0c2bfdf0f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000337, 0x10, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81, 0x20000009}]}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r3, 0x29, 0x2b, 0x0, 0xfff3) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0xdc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x92, 0x8d, 0x3, 0x8001, 0x6}, &(0x7f0000000140)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$inet6(0xa, 0x2, 0xff) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000300)={'ip6tnl0\x00', r10, 0x2f, 0xe, 0xf9, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x7800, 0x20, 0x1, 0x4}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6], 0x3c}}, 0x10) 278.616µs ago: executing program 3 (id=1088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x8000, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1000, 0x9d91}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r6, r5, 0x26}, 0x10) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x100000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 0s ago: executing program 4 (id=1089): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14001000", @ANYRES16=r2, @ANYBLOB="010028bd70000000000004000000"], 0x14}}, 0x4000080) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt(r3, 0x1, 0x29, 0x0, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0xffff4cc6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0300001a"], 0x34c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.62' (ED25519) to the list of known hosts. [ 412.217865][ T5900] cgroup: Unknown subsys name 'net' [ 412.387197][ T5900] cgroup: Unknown subsys name 'cpuset' [ 412.396397][ T5900] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 414.017787][ T5900] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 416.366204][ T5913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.393502][ T5913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.402425][ T5913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.423154][ T5916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.433145][ T5919] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.440799][ T5919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.454152][ T5924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.461854][ T5924] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.470490][ T5924] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 416.478370][ T5924] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.486696][ T5924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.494175][ T5924] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 416.501957][ T5924] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 416.509302][ T5924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.517933][ T5924] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 416.523664][ T5921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.525345][ T5924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.532717][ T5921] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.539560][ T5924] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.553556][ T5924] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 416.561744][ T5924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.562571][ T5921] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.572847][ T5184] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.589515][ T5921] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.628675][ T5924] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.155687][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 417.288610][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 417.308897][ T5914] chnl_net:caif_netlink_parms(): no params data found [ 417.391929][ T5920] chnl_net:caif_netlink_parms(): no params data found [ 417.443179][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.451155][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.458544][ T5910] bridge_slave_0: entered allmulticast mode [ 417.466728][ T5910] bridge_slave_0: entered promiscuous mode [ 417.514059][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.521320][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.528600][ T5910] bridge_slave_1: entered allmulticast mode [ 417.536048][ T5910] bridge_slave_1: entered promiscuous mode [ 417.614794][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 417.631837][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.639043][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.646929][ T5915] bridge_slave_0: entered allmulticast mode [ 417.654210][ T5915] bridge_slave_0: entered promiscuous mode [ 417.669647][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.681838][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.708806][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.716111][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.723235][ T5915] bridge_slave_1: entered allmulticast mode [ 417.730409][ T5915] bridge_slave_1: entered promiscuous mode [ 417.818424][ T5910] team0: Port device team_slave_0 added [ 417.824589][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.831774][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.840810][ T5914] bridge_slave_0: entered allmulticast mode [ 417.848041][ T5914] bridge_slave_0: entered promiscuous mode [ 417.886269][ T5910] team0: Port device team_slave_1 added [ 417.892316][ T5914] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.899668][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.907434][ T5914] bridge_slave_1: entered allmulticast mode [ 417.914605][ T5914] bridge_slave_1: entered promiscuous mode [ 417.923197][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.977984][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.001189][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.009027][ T5920] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.016696][ T5920] bridge_slave_0: entered allmulticast mode [ 418.024351][ T5920] bridge_slave_0: entered promiscuous mode [ 418.079224][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.086787][ T5920] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.094707][ T5920] bridge_slave_1: entered allmulticast mode [ 418.101715][ T5920] bridge_slave_1: entered promiscuous mode [ 418.119946][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.127507][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.153514][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.166953][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.174173][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.200107][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.213248][ T5914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.226684][ T5914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.237654][ T5915] team0: Port device team_slave_0 added [ 418.246823][ T5915] team0: Port device team_slave_1 added [ 418.348613][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.356212][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.364656][ T5918] bridge_slave_0: entered allmulticast mode [ 418.371938][ T5918] bridge_slave_0: entered promiscuous mode [ 418.381956][ T5914] team0: Port device team_slave_0 added [ 418.388526][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.396941][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.423309][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.438764][ T5920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.451041][ T5920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.460968][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.468260][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.475522][ T5918] bridge_slave_1: entered allmulticast mode [ 418.482534][ T5918] bridge_slave_1: entered promiscuous mode [ 418.491200][ T5914] team0: Port device team_slave_1 added [ 418.509271][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.516404][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.542516][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.645163][ T5919] Bluetooth: hci0: command tx timeout [ 418.652669][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.659992][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.686210][ T5914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.698940][ T5914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.705968][ T5914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.732068][ T5916] Bluetooth: hci4: command tx timeout [ 418.732358][ T5914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.737997][ T5924] Bluetooth: hci1: command tx timeout [ 418.753629][ T5929] Bluetooth: hci2: command tx timeout [ 418.753984][ T5919] Bluetooth: hci3: command tx timeout [ 418.766104][ T5910] hsr_slave_0: entered promiscuous mode [ 418.772592][ T5910] hsr_slave_1: entered promiscuous mode [ 418.780451][ T5920] team0: Port device team_slave_0 added [ 418.789014][ T5920] team0: Port device team_slave_1 added [ 418.797289][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.843497][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.869200][ T5915] hsr_slave_0: entered promiscuous mode [ 418.877440][ T5915] hsr_slave_1: entered promiscuous mode [ 418.883896][ T5915] debugfs: 'hsr0' already exists in 'hsr' [ 418.889689][ T5915] Cannot create hsr debugfs directory [ 418.961850][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.968946][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.994916][ T5920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.007697][ T5920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.014726][ T5920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.041142][ T5920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.093175][ T5914] hsr_slave_0: entered promiscuous mode [ 419.100150][ T5914] hsr_slave_1: entered promiscuous mode [ 419.106380][ T5914] debugfs: 'hsr0' already exists in 'hsr' [ 419.112122][ T5914] Cannot create hsr debugfs directory [ 419.127983][ T5918] team0: Port device team_slave_0 added [ 419.162323][ T5918] team0: Port device team_slave_1 added [ 419.309856][ T5920] hsr_slave_0: entered promiscuous mode [ 419.316778][ T5920] hsr_slave_1: entered promiscuous mode [ 419.322796][ T5920] debugfs: 'hsr0' already exists in 'hsr' [ 419.329243][ T5920] Cannot create hsr debugfs directory [ 419.335480][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.342435][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.372280][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.427498][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.434752][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.461780][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.671166][ T5918] hsr_slave_0: entered promiscuous mode [ 419.677905][ T5918] hsr_slave_1: entered promiscuous mode [ 419.684300][ T5918] debugfs: 'hsr0' already exists in 'hsr' [ 419.690032][ T5918] Cannot create hsr debugfs directory [ 419.802638][ T5910] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.831458][ T5910] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.843121][ T5910] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.868246][ T5910] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.960016][ T5915] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.981280][ T5915] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.007530][ T5915] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.026298][ T5915] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 420.127133][ T5914] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.149452][ T5914] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.159399][ T5914] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.171582][ T5914] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.242688][ T5920] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 420.282149][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.290086][ T5920] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 420.321834][ T5920] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 420.344235][ T5920] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 420.376073][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.436717][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.444116][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.454997][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.462108][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.473920][ T5918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 420.490984][ T5918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 420.502587][ T5918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 420.514299][ T5918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 420.566946][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.643048][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.685553][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.692690][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.730572][ T5914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.737490][ T5919] Bluetooth: hci0: command tx timeout [ 420.757057][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.764244][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.806351][ T5916] Bluetooth: hci3: command tx timeout [ 420.811804][ T5916] Bluetooth: hci4: command tx timeout [ 420.813423][ T5924] Bluetooth: hci2: command tx timeout [ 420.817467][ T5919] Bluetooth: hci1: command tx timeout [ 420.845761][ T5920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.892540][ T5915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.933809][ T5920] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.964975][ T5914] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.985801][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.993022][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.049060][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.056241][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.080939][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.088145][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.130563][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.156346][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.163637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.225428][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.248005][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.259052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.266292][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.300372][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.307822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.352722][ T5914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.381319][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.631322][ T5915] veth0_vlan: entered promiscuous mode [ 421.663194][ T5910] veth0_vlan: entered promiscuous mode [ 421.701121][ T5910] veth1_vlan: entered promiscuous mode [ 421.720739][ T5915] veth1_vlan: entered promiscuous mode [ 421.861443][ T5914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.895306][ T5915] veth0_macvtap: entered promiscuous mode [ 421.929483][ T5910] veth0_macvtap: entered promiscuous mode [ 421.945625][ T5915] veth1_macvtap: entered promiscuous mode [ 421.963014][ T5920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.991199][ T5910] veth1_macvtap: entered promiscuous mode [ 422.046677][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.065220][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.090845][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.110785][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.134533][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.177891][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.217277][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.240906][ T5920] veth0_vlan: entered promiscuous mode [ 422.250223][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.262113][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.293056][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.325504][ T5920] veth1_vlan: entered promiscuous mode [ 422.337970][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.347626][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.368154][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.431752][ T5918] veth0_vlan: entered promiscuous mode [ 422.482499][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.482724][ T5918] veth1_vlan: entered promiscuous mode [ 422.492973][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.589888][ T5914] veth0_vlan: entered promiscuous mode [ 422.606051][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.616992][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.630225][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.639308][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.675351][ T5920] veth0_macvtap: entered promiscuous mode [ 422.691505][ T5914] veth1_vlan: entered promiscuous mode [ 422.716173][ T5920] veth1_macvtap: entered promiscuous mode [ 422.751782][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.758172][ T5915] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 422.762940][ T5918] veth0_macvtap: entered promiscuous mode [ 422.780297][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.804662][ T5919] Bluetooth: hci0: command tx timeout [ 422.836933][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.858265][ T5918] veth1_macvtap: entered promiscuous mode [ 422.883861][ T5919] Bluetooth: hci1: command tx timeout [ 422.889295][ T5919] Bluetooth: hci4: command tx timeout [ 422.900558][ T5920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.903801][ T5916] Bluetooth: hci3: command tx timeout [ 422.908111][ T5919] Bluetooth: hci2: command tx timeout [ 422.964843][ T6029] Zero length message leads to an empty skb [ 422.976089][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.997607][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.007327][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.029926][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.041208][ T5914] veth0_macvtap: entered promiscuous mode [ 423.056519][ T6029] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 423.073076][ T5914] veth1_macvtap: entered promiscuous mode [ 423.086280][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 423.108934][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.151215][ T6033] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 423.161489][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.169071][ T6033] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 423.187952][ T6033] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2'. [ 423.233020][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.256634][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.286038][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.331807][ T5914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.361420][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.376092][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.503044][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.511581][ T6045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.518966][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 423.526343][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 423.533630][ T6045] IPv6: NLM_F_CREATE should be set when creating new route [ 423.542782][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.558930][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.570158][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.586174][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 423.600811][ T6045] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8'. [ 423.627310][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.678418][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.719843][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.746048][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.858875][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.927497][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.032494][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.052938][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.161320][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.186961][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.264069][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.271923][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.765242][ T6082] syzkaller1: entered promiscuous mode [ 424.770783][ T6082] syzkaller1: entered allmulticast mode [ 424.861733][ T6082] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 424.884792][ T5919] Bluetooth: hci0: command tx timeout [ 424.963594][ T5919] Bluetooth: hci2: command tx timeout [ 424.973694][ T5919] Bluetooth: hci3: command tx timeout [ 424.978716][ T5929] Bluetooth: hci4: command tx timeout [ 424.981484][ T5919] Bluetooth: hci1: command tx timeout [ 425.174630][ T6102] tipc: Enabling of bearer rejected, media not registered [ 425.190360][ T6105] bridge0: port 3(syz_tun) entered blocking state [ 425.199111][ T6105] bridge0: port 3(syz_tun) entered disabled state [ 425.207390][ T6105] syz_tun: entered allmulticast mode [ 425.226440][ T6102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20'. [ 425.245768][ T6105] syz_tun: entered promiscuous mode [ 425.281805][ T6105] bridge0: port 3(syz_tun) entered blocking state [ 425.288776][ T6105] bridge0: port 3(syz_tun) entered forwarding state [ 425.375304][ T5974] IPVS: starting estimator thread 0... [ 425.422357][ T6109] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 425.464000][ T6113] IPVS: using max 32 ests per chain, 76800 per kthread [ 425.478438][ T6109] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 425.564627][ T6123] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 425.594984][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 425.869241][ T6135] netlink: 'syz.0.30': attribute type 10 has an invalid length. [ 425.894412][ T6135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.30'. [ 425.927524][ T6135] team0: Port device geneve0 added [ 426.526446][ T6166] netlink: 48 bytes leftover after parsing attributes in process `syz.1.39'. [ 426.545756][ T6166] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 426.912926][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 426.947132][ T6178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.42'. [ 427.272983][ T6204] veth0_vi: renamed from ipvlan1 [ 427.325386][ T6204] netlink: 'syz.4.49': attribute type 11 has an invalid length. [ 427.333083][ T6204] netlink: 'syz.4.49': attribute type 11 has an invalid length. [ 427.673763][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 427.680816][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 427.796330][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 427.828616][ T6224] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 427.929154][ T6224] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 428.004926][ T5919] Bluetooth: hci4: command tx timeout [ 428.072205][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 428.094295][ T6244] netlink: 'syz.4.59': attribute type 29 has an invalid length. [ 428.125473][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 428.133119][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 428.139983][ T6244] netlink: 'syz.4.59': attribute type 29 has an invalid length. [ 428.195329][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 428.202995][ T6224] hsr0 speed is unknown, defaulting to 1000 [ 428.215880][ T6244] __nla_validate_parse: 4 callbacks suppressed [ 428.215894][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 428.680647][ T6237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 429.039422][ T6285] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 429.052875][ T6286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.056847][ T6283] openvswitch: netlink: Message has -1 unknown bytes. [ 429.070081][ T6279] syzkaller1: entered promiscuous mode [ 429.085998][ T6279] syzkaller1: entered allmulticast mode [ 429.259039][ T6290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.70'. [ 429.441205][ T6305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.75'. [ 429.487715][ T6307] trusted_key: syz.1.74 sent an empty control message without MSG_MORE. [ 429.530726][ T6307] netlink: 'syz.1.74': attribute type 178 has an invalid length. [ 429.579706][ T6312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.77'. [ 429.996742][ T6326] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 430.595575][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 430.633513][ T6360] bridge_slave_1: left allmulticast mode [ 430.645484][ T6332] netlink: 'syz.4.83': attribute type 11 has an invalid length. [ 430.667713][ T6360] bridge_slave_1: left promiscuous mode [ 430.686990][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.716845][ T6360] bridge_slave_0: left allmulticast mode [ 430.736867][ T6360] bridge_slave_0: left promiscuous mode [ 430.754845][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.828242][ T6376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.83'. [ 431.254409][ T6377] syzkaller0: entered promiscuous mode [ 431.264317][ T6388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.282195][ T6391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.284087][ T6377] syzkaller0: entered allmulticast mode [ 431.336473][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 432.699461][ T6427] sch_fq: defrate 0 ignored. [ 432.967666][ T6452] syzkaller0: entered promiscuous mode [ 432.991445][ T6452] syzkaller0: entered allmulticast mode [ 433.044634][ T6452] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 433.346353][ T6471] netlink: 208 bytes leftover after parsing attributes in process `syz.1.116'. [ 434.239269][ T6521] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 434.312917][ T6525] Bluetooth: MGMT ver 1.23 [ 434.519444][ T6494] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 434.546804][ T6538] netlink: 'syz.1.133': attribute type 16 has an invalid length. [ 434.567301][ T6538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.133'. [ 434.626498][ T6538] netlink: 33 bytes leftover after parsing attributes in process `syz.1.133'. [ 435.069696][ T6568] netlink: 264 bytes leftover after parsing attributes in process `syz.1.141'. [ 435.080191][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 435.157476][ T6565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.140'. [ 435.382924][ T5234] udevd[5234]: worker [5923] terminated by signal 33 (Unknown signal 33) [ 435.413188][ T5234] udevd[5234]: worker [5923] failed while handling '/devices/virtual/block/loop0' [ 435.471727][ T6588] openvswitch: netlink: Multiple metadata blocks provided [ 435.532248][ T6592] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 435.929948][ T6603] hsr0 speed is unknown, defaulting to 1000 [ 436.360268][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 436.912107][ T6644] batman_adv: batadv0: Adding interface: wlan1 [ 436.922528][ T6644] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.950062][ T6644] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 437.768766][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 437.985475][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 438.047491][ T6712] netlink: 28 bytes leftover after parsing attributes in process `syz.0.178'. [ 438.062698][ T6709] tipc: Started in network mode [ 438.069411][ T6709] tipc: Node identity c6d446364878, cluster identity 4711 [ 438.081128][ T6709] tipc: Enabled bearer , priority 0 [ 438.100432][ T6709] syzkaller0: entered promiscuous mode [ 438.106206][ T6711] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 438.119439][ T6709] syzkaller0: entered allmulticast mode [ 438.128171][ T6711] netlink: 224 bytes leftover after parsing attributes in process `syz.3.180'. [ 438.128760][ T6714] netlink: 'syz.3.180': attribute type 1 has an invalid length. [ 438.290238][ T6708] tipc: Resetting bearer [ 438.326223][ T6708] tipc: Disabling bearer [ 438.339770][ T6719] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.352638][ T6719] RDS: rds_bind could not find a transport for ::ffff:10.1.0.253, load rds_tcp or rds_rdma? [ 438.437832][ T6722] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.183'. [ 438.447446][ T6723] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.183'. [ 438.539752][ T6726] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 438.549980][ T6726] veth1_macvtap: left promiscuous mode [ 438.648091][ T6729] syz.4.186 uses old SIOCAX25GETINFO [ 438.736226][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.187'. [ 438.747052][ T6732] xt_HMARK: proto mask must be zero with L3 mode [ 438.914366][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 438.943322][ T6738] Unsupported ieee802154 address type: 0 [ 438.951535][ T6738] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.981519][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 439.158624][ T6736] tipc: Started in network mode [ 439.164316][ T6736] tipc: Node identity aa59637d6b14, cluster identity 4711 [ 439.171800][ T6736] tipc: Enabled bearer , priority 0 [ 439.183185][ T6745] netdevsim netdevsim4: Direct firmware load for ..€ failed with error -2 [ 439.193999][ T6745] netdevsim netdevsim4: Falling back to sysfs fallback for: ..€ [ 439.221996][ T6735] tipc: Resetting bearer [ 439.278057][ T6750] netlink: 72 bytes leftover after parsing attributes in process `syz.2.195'. [ 439.391448][ T6761] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 439.507466][ T6769] sctp: [Deprecated]: syz.0.196 (pid 6769) Use of int in maxseg socket option. [ 439.507466][ T6769] Use struct sctp_assoc_value instead [ 440.166632][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.173687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.256427][ T5988] tipc: Node number set to 3243074429 [ 440.267748][ T6735] tipc: Disabling bearer [ 440.284310][ T6748] netlink: 'syz.4.193': attribute type 26 has an invalid length. [ 441.804554][ T6844] netlink: 44 bytes leftover after parsing attributes in process `syz.4.222'. [ 441.859204][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 441.964747][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 441.994078][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 442.002914][ T6854] netlink: 'syz.3.226': attribute type 15 has an invalid length. [ 442.046812][ T6862] veth0: entered promiscuous mode [ 442.057886][ T6852] netlink: 'syz.3.226': attribute type 15 has an invalid length. [ 442.081609][ T6862] sit0: entered promiscuous mode [ 442.159712][ T6862] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 442.239570][ T6869] warning: `syz.4.228' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 442.326994][ T6871] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 442.353057][ T6874] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 442.398033][ T6871] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 442.421101][ T6869] veth0: left promiscuous mode [ 443.145323][ T6922] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 443.164024][ T6918] hsr0 speed is unknown, defaulting to 1000 [ 443.282244][ T6925] gretap1: entered promiscuous mode [ 443.303817][ T6925] bond2: (slave gretap1): making interface the new active one [ 443.312904][ T6925] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 443.360704][ T6922] macvlan2: entered promiscuous mode [ 443.369672][ T6922] macvlan2: entered allmulticast mode [ 443.376246][ T6922] bond2: entered promiscuous mode [ 443.384028][ T6922] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.391740][ T6922] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 443.409876][ T6922] bond2: left promiscuous mode [ 443.996053][ T6958] __nla_validate_parse: 8 callbacks suppressed [ 443.996070][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 444.043882][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 444.080575][ T6963] netlink: 7 bytes leftover after parsing attributes in process `syz.4.258'. [ 444.123970][ T6963] netlink: 7 bytes leftover after parsing attributes in process `syz.4.258'. [ 444.733786][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 444.773639][ T7001] netlink: 224 bytes leftover after parsing attributes in process `syz.0.266'. [ 444.921502][ T7015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.270'. [ 445.237777][ T7023] wg2: entered promiscuous mode [ 445.242776][ T7023] wg2: entered allmulticast mode [ 445.465578][ T7029] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 445.505265][ T7029] netlink: 'syz.0.275': attribute type 2 has an invalid length. [ 445.961576][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 446.004545][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 446.049367][ T7054] netlink: 'syz.4.284': attribute type 12 has an invalid length. [ 446.049726][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 446.058857][ T7054] netlink: 'syz.4.284': attribute type 11 has an invalid length. [ 446.081371][ T7067] veth0_to_team: entered promiscuous mode [ 446.088498][ T7067] veth0_to_team: entered allmulticast mode [ 446.868712][ T7112] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 446.902472][ T7112] veth0_vlan: entered allmulticast mode [ 446.967280][ T7112] veth0_vlan: left promiscuous mode [ 446.985686][ T7114] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 447.003555][ T7112] veth0_vlan: entered promiscuous mode [ 447.020209][ T7112] team0: Device veth0_vlan failed to register rx_handler [ 447.052087][ T7114] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 447.268565][ T7131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.351088][ T7135] syzkaller1: entered promiscuous mode [ 447.360133][ T7135] syzkaller1: entered allmulticast mode [ 447.453176][ T7140] netlink: 'syz.2.309': attribute type 7 has an invalid length. [ 447.867201][ T7161] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 448.111274][ T7176] netlink: 'syz.2.322': attribute type 5 has an invalid length. [ 448.177719][ T7176] geneve2: entered promiscuous mode [ 448.183130][ T7176] geneve2: entered allmulticast mode [ 448.200862][ T6444] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 448.238935][ T6444] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 448.322047][ T6444] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 448.361329][ T6444] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 448.500468][ T5886] IPVS: starting estimator thread 0... [ 448.624326][ T7193] IPVS: using max 31 ests per chain, 74400 per kthread [ 448.733579][ T5929] Bluetooth: hci4: command 0x0405 tx timeout [ 448.797100][ T7202] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 448.809791][ T7206] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 448.978036][ T5844] IPVS: starting estimator thread 0... [ 449.075239][ T7225] IPVS: using max 36 ests per chain, 86400 per kthread [ 449.146388][ T7233] batman_adv: batadv0: Interface activated: wlan1 [ 449.312989][ T7235] hsr0 speed is unknown, defaulting to 1000 [ 449.416389][ T7245] __nla_validate_parse: 11 callbacks suppressed [ 449.416407][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 449.467583][ T7248] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 449.469642][ T7247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.340'. [ 449.531483][ T7247] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 449.540413][ T7250] netlink: 'syz.0.339': attribute type 4 has an invalid length. [ 449.701764][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.342'. [ 449.974648][ T7264] netlink: 40 bytes leftover after parsing attributes in process `syz.1.345'. [ 450.075430][ T7261] pim6reg1: entered promiscuous mode [ 450.080876][ T7261] pim6reg1: entered allmulticast mode [ 450.689930][ T7296] netlink: 'syz.0.353': attribute type 6 has an invalid length. [ 450.806783][ T5929] Bluetooth: hci4: command 0x0405 tx timeout [ 451.168513][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 451.538457][ T7339] netlink: 165 bytes leftover after parsing attributes in process `syz.0.366'. [ 452.063692][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 452.112032][ T7359] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 452.203326][ T7356] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.836882][ T7385] tipc: Started in network mode [ 452.841811][ T7385] tipc: Node identity ac1414aa, cluster identity 4711 [ 452.900911][ T7389] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.384'. [ 452.921742][ T7385] tipc: Enabled bearer , priority 10 [ 452.997131][ T7389] netlink: 'syz.0.384': attribute type 1 has an invalid length. [ 453.055089][ T6013] wlan1: Trigger new scan to find an IBSS to join [ 453.121956][ T7399] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 453.277733][ T7403] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 453.320168][ T7403] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 453.336085][ T7403] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 453.402366][ T7406] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 453.449819][ T7406] team0: Port device dummy0 added [ 453.496471][ T7406] netlink: 'syz.0.388': attribute type 10 has an invalid length. [ 453.559029][ T7406] team0: Port device dummy0 removed [ 453.592768][ T7419] netlink: 'syz.2.392': attribute type 1 has an invalid length. [ 453.602545][ T7406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 453.647670][ T7420] veth0: entered promiscuous mode [ 453.694065][ T7420] veth0: left promiscuous mode [ 454.049147][ T5974] tipc: Node number set to 2886997162 [ 454.081382][ T7428] vlan0: entered allmulticast mode [ 454.106657][ T7428] bond0: entered allmulticast mode [ 454.153578][ T7428] bond_slave_0: entered allmulticast mode [ 454.159387][ T7428] bond_slave_1: entered allmulticast mode [ 454.249071][ T7428] dummy0: entered allmulticast mode [ 454.275679][ T7433] netlink: 'syz.4.399': attribute type 11 has an invalid length. [ 454.297181][ T7433] netlink: 224 bytes leftover after parsing attributes in process `syz.4.399'. [ 454.326686][ T7434] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 454.334114][ T5919] Bluetooth: hci0: command tx timeout [ 454.372562][ T7436] openvswitch: netlink: Flow key attr not present in new flow. [ 454.480652][ T7440] netlink: 68 bytes leftover after parsing attributes in process `syz.0.401'. [ 454.603050][ T7444] tipc: Started in network mode [ 454.611711][ T7444] tipc: Node identity 526cbfdf5599, cluster identity 4711 [ 454.621532][ T7444] tipc: Enabled bearer , priority 0 [ 454.638179][ T7444] syzkaller0: entered promiscuous mode [ 454.651236][ T7444] syzkaller0: entered allmulticast mode [ 454.705180][ T7441] tipc: Resetting bearer [ 454.764784][ T7441] tipc: Disabling bearer [ 454.922653][ T7453] netlink: 'syz.0.408': attribute type 16 has an invalid length. [ 454.931092][ T7453] netlink: 'syz.0.408': attribute type 17 has an invalid length. [ 455.043265][ T7453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.117547][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 455.262335][ T7468] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 456.116003][ T7507] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 456.169339][ T7511] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.193848][ T7507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 456.222959][ T7516] netlink: 'syz.0.422': attribute type 10 has an invalid length. [ 456.250929][ T7517] ieee802154 phy0 wpan0: encryption failed: -22 [ 456.274911][ T7516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 456.527232][ T7533] netlink: 'syz.4.429': attribute type 4 has an invalid length. [ 456.578370][ T7533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.429'. [ 456.676784][ T7537] pimreg: entered allmulticast mode [ 456.690488][ T7533] `: renamed from bond0 (while UP) [ 456.713887][ T7542] netlink: 96 bytes leftover after parsing attributes in process `syz.1.431'. [ 456.719258][ T7544] netlink: 'syz.2.432': attribute type 33 has an invalid length. [ 456.950582][ T7549] netlink: 'syz.0.435': attribute type 9 has an invalid length. [ 457.473327][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 457.528484][ T7583] bridge0: port 3(batadv1) entered blocking state [ 457.540339][ T7583] bridge0: port 3(batadv1) entered disabled state [ 457.548444][ T7583] batadv1: entered allmulticast mode [ 457.554127][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.449'. [ 457.565558][ T7583] batadv1: entered promiscuous mode [ 457.597561][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.451'. [ 457.863926][ T7605] netlink: 'syz.4.455': attribute type 33 has an invalid length. [ 458.004366][ T6442] wlan1: Trigger new scan to find an IBSS to join [ 458.017544][ T6445] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 458.027143][ T6445] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 458.072508][ T7610] sctp: [Deprecated]: syz.2.458 (pid 7610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.072508][ T7610] Use struct sctp_sack_info instead [ 458.136087][ T7617] sctp: [Deprecated]: syz.2.458 (pid 7617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.136087][ T7617] Use struct sctp_sack_info instead [ 458.432804][ T7629] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 458.650414][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 459.054999][ T6013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.267412][ T7686] sctp: [Deprecated]: syz.0.477 (pid 7686) Use of int in maxseg socket option. [ 459.267412][ T7686] Use struct sctp_assoc_value instead [ 459.699523][ T7701] hsr0 speed is unknown, defaulting to 1000 [ 459.717931][ T7708] netlink: 'syz.1.487': attribute type 10 has an invalid length. [ 459.764138][ T7708] team0: Device hsr_slave_0 failed to register rx_handler [ 459.918131][ T7717] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 [ 460.136652][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.490'. [ 460.420647][ T7739] netlink: 'syz.2.496': attribute type 11 has an invalid length. [ 460.448489][ T7739] netlink: 'syz.2.496': attribute type 11 has an invalid length. [ 460.470701][ T7739] netlink: 224 bytes leftover after parsing attributes in process `syz.2.496'. [ 460.573778][ T7750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.497'. [ 460.620138][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 460.708208][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.500'. [ 460.790540][ T7756] bridge0: port 4(batadv1) entered blocking state [ 460.820081][ T7756] bridge0: port 4(batadv1) entered disabled state [ 460.854507][ T7756] batadv1: entered allmulticast mode [ 460.878777][ T7756] batadv1: entered promiscuous mode [ 461.299362][ T6445] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 461.305714][ T7780] IPVS: Error connecting to the multicast addr [ 461.309201][ T6445] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 461.686838][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.516'. [ 461.729820][ T7803] bridge0: port 5(batadv2) entered blocking state [ 461.748976][ T7803] bridge0: port 5(batadv2) entered disabled state [ 461.763176][ T7803] batadv2: entered allmulticast mode [ 461.800671][ T7803] batadv2: entered promiscuous mode [ 461.986257][ T7820] netlink: 36 bytes leftover after parsing attributes in process `syz.4.520'. [ 462.053806][ T7820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.520'. [ 462.108007][ T7824] netlink: 16 bytes leftover after parsing attributes in process `syz.0.521'. [ 462.233170][ T6445] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 462.242896][ T6445] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 462.326788][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 462.349026][ T7833] xfrm1: entered promiscuous mode [ 462.363475][ T7833] xfrm1: entered allmulticast mode [ 462.537189][ T7843] bridge0: port 3(batadv1) entered blocking state [ 462.568788][ T7843] bridge0: port 3(batadv1) entered disabled state [ 462.582465][ T7843] batadv1: entered allmulticast mode [ 462.668175][ T7843] batadv1: entered promiscuous mode [ 463.040355][ T6445] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 463.049923][ T6445] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 463.073945][ T7876] netlink: 'syz.2.539': attribute type 30 has an invalid length. [ 463.089628][ T7876] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 463.103073][ T7876] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 463.515849][ T7897] netlink: 'syz.2.548': attribute type 58 has an invalid length. [ 463.526442][ T7896] netlink: 'syz.0.547': attribute type 29 has an invalid length. [ 463.543127][ T7898] netlink: 'syz.2.548': attribute type 58 has an invalid length. [ 463.577746][ T7903] ieee802154 phy0 wpan0: encryption failed: -22 [ 463.696342][ T7908] netlink: 'syz.0.550': attribute type 3 has an invalid length. [ 463.704464][ T7908] netlink: 'syz.0.550': attribute type 3 has an invalid length. [ 463.858286][ T7917] netlink: 'syz.0.554': attribute type 13 has an invalid length. [ 464.109700][ T7917] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 464.218296][ T7923] IPv6: sit1: Disabled Multicast RS [ 464.251114][ T7923] sit1: entered allmulticast mode [ 464.275002][ T7931] tipc: Enabled bearer , priority 0 [ 464.329471][ T7925] syzkaller0: entered promiscuous mode [ 464.336098][ T7925] syzkaller0: entered allmulticast mode [ 464.343019][ T7926] syzkaller0: entered promiscuous mode [ 464.353966][ T7926] syzkaller0: entered allmulticast mode [ 464.361278][ T7920] tipc: Enabled bearer , priority 0 [ 464.386788][ T7920] tipc: Resetting bearer [ 465.394842][ T5981] tipc: Node number set to 133545951 [ 465.542569][ T7931] tipc: Resetting bearer [ 465.550985][ T7952] vlan1: entered allmulticast mode [ 465.556565][ T7952] veth0_vlan: entered allmulticast mode [ 465.568262][ T7919] tipc: Resetting bearer [ 465.624931][ T7919] tipc: Disabling bearer [ 465.651814][ T7964] delete_channel: no stack [ 465.659923][ T7924] tipc: Resetting bearer [ 465.691928][ T7924] tipc: Disabling bearer [ 465.894935][ T7976] __nla_validate_parse: 77 callbacks suppressed [ 465.894956][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 465.915719][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'. [ 465.995749][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.571'. [ 466.154746][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 466.371807][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 466.587620][ T8012] unknown channel width for channel at 909000KHz? [ 466.596285][ T8012] unknown channel width for channel at 909000KHz? [ 466.605341][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.581'. [ 466.828495][ T8026] netlink: 'syz.4.585': attribute type 11 has an invalid length. [ 466.843098][ T8025] IPVS: set_ctl: invalid protocol: 43 172.30.0.2:20000 [ 466.845563][ T8022] hsr0 speed is unknown, defaulting to 1000 [ 466.881172][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 466.962255][ T8025] ip_vti0: entered promiscuous mode [ 466.969579][ T8025] ip_vti0: entered allmulticast mode [ 467.264150][ T8042] syzkaller1: entered promiscuous mode [ 467.269758][ T8042] syzkaller1: entered allmulticast mode [ 467.350114][ T8053] netlink: 76 bytes leftover after parsing attributes in process `syz.1.590'. [ 467.402093][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 467.677422][ T8069] netlink: 44 bytes leftover after parsing attributes in process `syz.4.595'. [ 467.854084][ T8087] vxcan1: tx address claim with dest, not broadcast [ 467.858370][ T8093] netlink: 'syz.4.599': attribute type 10 has an invalid length. [ 467.869690][ T8073] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 467.907959][ T8093] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 468.226067][ T8103] bond1 (unregistering): Released all slaves [ 468.369675][ T8121] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 468.471677][ T8122] tipc: Started in network mode [ 468.482732][ T8122] tipc: Node identity ba8cd3477387, cluster identity 4711 [ 468.536826][ T8122] tipc: Enabled bearer , priority 0 [ 468.580066][ T8125] syzkaller0: entered promiscuous mode [ 468.642615][ T8125] syzkaller0: entered allmulticast mode [ 468.687055][ T8120] tipc: Resetting bearer [ 468.726306][ T8120] tipc: Disabling bearer [ 468.758501][ T8143] sock: sock_timestamping_bind_phc: sock not bind to device [ 468.815441][ T8146] openvswitch: netlink: Message has -1 unknown bytes. [ 468.826903][ T8147] netlink: 'syz.3.612': attribute type 58 has an invalid length. [ 469.840499][ T8204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 469.878704][ T8210] vlan2: entered allmulticast mode [ 469.928304][ T8210] bond2: entered allmulticast mode [ 470.151748][ T8221] netlink: 'syz.1.636': attribute type 1 has an invalid length. [ 470.205710][ T8228] netlink: 'syz.4.639': attribute type 1 has an invalid length. [ 470.315907][ T8230] ip_vti0: left promiscuous mode [ 470.366998][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.374861][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.490256][ T8230] veth0_to_team: left promiscuous mode [ 470.515011][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.531870][ T8230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.812457][ T5998] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.873010][ T5998] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.885937][ T5998] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.953181][ T6439] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.206731][ T8249] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 471.250015][ T8249] __nla_validate_parse: 13 callbacks suppressed [ 471.250032][ T8249] netlink: 244 bytes leftover after parsing attributes in process `syz.1.645'. [ 471.319315][ T8261] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 471.364429][ T8259] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 471.401961][ T8249] netlink: 'syz.1.645': attribute type 10 has an invalid length. [ 471.411322][ T8261] team0: Port device dummy0 added [ 471.449592][ T8263] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 471.480426][ T8249] team0: Port device dummy0 removed [ 471.496146][ T8249] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 471.664151][ T8264] bond1: (slave bridge2): making interface the new active one [ 471.713070][ T8264] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 471.785803][ T8287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.654'. [ 471.826047][ T8284] tipc: Enabled bearer , priority 0 [ 471.833741][ T8281] tipc: Enabling of bearer rejected, already enabled [ 472.033829][ T8284] syzkaller0: entered promiscuous mode [ 472.044626][ T8284] syzkaller0: entered allmulticast mode [ 472.447071][ T8284] tipc: Resetting bearer [ 473.272880][ T8340] netlink: 20 bytes leftover after parsing attributes in process `syz.3.668'. [ 473.756849][ T8284] tipc: Disabling bearer [ 473.870808][ T8342] netlink: 'syz.1.669': attribute type 1 has an invalid length. [ 474.022326][ T5919] Bluetooth: hci4: link tx timeout [ 474.028351][ T5919] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.040796][ T5919] Bluetooth: hci4: link tx timeout [ 474.047042][ T5919] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.085761][ T8344] 8021q: adding VLAN 0 to HW filter on device bond5 [ 474.208952][ T8363] lo speed is unknown, defaulting to 1000 [ 474.215883][ T8363] lo speed is unknown, defaulting to 1000 [ 474.236401][ T8363] lo speed is unknown, defaulting to 1000 [ 474.292312][ T8363] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 474.325099][ T8363] lo speed is unknown, defaulting to 1000 [ 474.334091][ T8363] lo speed is unknown, defaulting to 1000 [ 474.342458][ T8363] lo speed is unknown, defaulting to 1000 [ 474.353496][ T8363] lo speed is unknown, defaulting to 1000 [ 474.370058][ T8363] lo speed is unknown, defaulting to 1000 [ 474.551925][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 474.568467][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.680'. [ 474.777392][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 474.886268][ T8391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.683'. [ 475.134303][ T8402] bond0: (slave dummy0): Releasing backup interface [ 475.179405][ T8402] dummy0: left allmulticast mode [ 475.211767][ T8402] batman_adv: batadv0: Adding interface: dummy0 [ 475.230268][ T8402] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.258852][ T8402] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 475.320396][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 475.323455][ T8412] bridge0: port 3(syz_tun) entered disabled state [ 475.516998][ T8422] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 475.670552][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 475.733094][ T8431] netlink: 'syz.0.700': attribute type 3 has an invalid length. [ 475.981686][ T8446] netlink: 'syz.0.705': attribute type 1 has an invalid length. [ 476.082927][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.093052][ T5919] Bluetooth: hci4: command 0x0405 tx timeout [ 476.127281][ T8452] netlink: 'syz.2.706': attribute type 23 has an invalid length. [ 476.358665][ T8468] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 476.393778][ T8468] __nla_validate_parse: 2 callbacks suppressed [ 476.393795][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 476.495816][ T8473] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 476.591848][ T8479] IPVS: sed: SCTP 172.20.20.187:0 - no destination available [ 477.124968][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 477.166890][ T8509] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 477.183703][ T8507] netlink: 244 bytes leftover after parsing attributes in process `syz.1.723'. [ 477.801711][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 478.036329][ T8549] netlink: 88 bytes leftover after parsing attributes in process `syz.3.736'. [ 478.210654][ T8555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.736'. [ 478.307461][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 478.357299][ T8558] hsr0 speed is unknown, defaulting to 1000 [ 479.159011][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.755'. [ 479.266565][ T8614] pim6reg: entered allmulticast mode [ 479.272083][ T8615] netlink: 'syz.3.755': attribute type 12 has an invalid length. [ 479.280265][ T8615] netlink: 132 bytes leftover after parsing attributes in process `syz.3.755'. [ 479.290253][ T8618] tipc: Enabled bearer , priority 0 [ 479.303437][ T8619] pim6reg: left allmulticast mode [ 479.337411][ T8611] syzkaller0: entered promiscuous mode [ 479.343111][ T8611] syzkaller0: entered allmulticast mode [ 479.363323][ T8611] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 479.402211][ T8611] tipc: Resetting bearer [ 479.426548][ T8610] tipc: Resetting bearer [ 479.469505][ T8610] tipc: Disabling bearer [ 479.932411][ T8644] netlink: 'syz.2.765': attribute type 10 has an invalid length. [ 479.952071][ T8644] netlink: 52 bytes leftover after parsing attributes in process `syz.2.765'. [ 480.006527][ T8644] Driver unsupported XDP return value 0 on prog (id 138) dev N/A, expect packet loss! [ 480.074541][ T8648] netlink: 'syz.3.767': attribute type 9 has an invalid length. [ 480.144746][ T8648] netlink: 'syz.3.767': attribute type 9 has an invalid length. [ 480.173042][ T8654] nbd: must specify an index to disconnect [ 480.220041][ T8648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.538983][ T8668] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 480.657005][ T8672] 8021q: adding VLAN 0 to HW filter on device bond3 [ 480.665973][ T8672] bond2: (slave bond3): making interface the new active one [ 480.674438][ T8672] bond2: (slave bond3): Enslaving as an active interface with an up link [ 480.695071][ T8668] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 480.727105][ T8668] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.561816][ T8712] __nla_validate_parse: 5 callbacks suppressed [ 482.561835][ T8712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 482.593844][ T8715] netlink: 76 bytes leftover after parsing attributes in process `syz.3.786'. [ 482.845095][ T8730] raw_sendmsg: syz.4.790 forgot to set AF_INET. Fix it! [ 482.994144][ T8740] netlink: 96 bytes leftover after parsing attributes in process `syz.1.793'. [ 483.029784][ T8745] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 483.142645][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.796'. [ 483.208201][ T8758] netlink: 'syz.4.800': attribute type 10 has an invalid length. [ 483.228280][ T8758] veth0_vlan: entered allmulticast mode [ 483.255534][ T8758] veth0_vlan: left promiscuous mode [ 483.264378][ T8758] veth0_vlan: entered promiscuous mode [ 483.272222][ T8758] team0: Device veth0_vlan failed to register rx_handler [ 483.283985][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 483.545266][ T8782] tipc: Enabled bearer , priority 0 [ 483.571549][ T8782] syzkaller0: entered promiscuous mode [ 483.580026][ T8782] syzkaller0: entered allmulticast mode [ 483.607916][ T8782] tipc: Resetting bearer [ 483.628738][ T8781] tipc: Resetting bearer [ 483.648793][ T8781] tipc: Disabling bearer [ 483.672316][ T8789] netlink: 'syz.1.809': attribute type 3 has an invalid length. [ 483.687202][ T8789] netlink: 248 bytes leftover after parsing attributes in process `syz.1.809'. [ 483.698272][ T8786] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 483.716051][ T8791] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 483.729663][ T8791] netlink: 'syz.2.810': attribute type 2 has an invalid length. [ 483.803284][ T8795] syzkaller1: entered promiscuous mode [ 483.813756][ T8795] syzkaller1: entered allmulticast mode [ 483.892663][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.813'. [ 483.904044][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 483.922022][ T8804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 483.934021][ T8801] netlink: 52 bytes leftover after parsing attributes in process `syz.3.813'. [ 484.460395][ T8836] veth1_to_bridge: entered promiscuous mode [ 484.472679][ T8837] netlink: 'syz.4.824': attribute type 13 has an invalid length. [ 484.475832][ T8836] erspan0: entered promiscuous mode [ 484.483473][ T8837] netlink: 'syz.4.824': attribute type 17 has an invalid length. [ 484.592026][ T8837] sit0: left promiscuous mode [ 484.659845][ T8837] bridge0: port 3(syz_tun) entered blocking state [ 484.666525][ T8837] bridge0: port 3(syz_tun) entered forwarding state [ 484.700212][ T8837] 8021q: adding VLAN 0 to HW filter on device ` [ 484.718827][ T8837] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.734634][ T8837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 484.816506][ T8835] hsr0 speed is unknown, defaulting to 1000 [ 484.835164][ T8835] lo speed is unknown, defaulting to 1000 [ 484.976715][ T5919] Bluetooth: hci4: command 0x0405 tx timeout [ 485.038744][ T8878] netlink: 'syz.0.835': attribute type 62 has an invalid length. [ 485.065116][ T8878] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 485.169919][ T8878] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.231965][ T8878] veth5: entered promiscuous mode [ 485.252580][ T8878] bond4: (slave veth5): Enslaving as an active interface with a down link [ 485.275885][ T8882] vlan2: entered allmulticast mode [ 485.281056][ T8882] bond4: entered allmulticast mode [ 485.288748][ T8882] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 485.660697][ T919] hsr0 speed is unknown, defaulting to 1000 [ 485.818505][ T8919] bond0: entered allmulticast mode [ 486.120194][ T8940] netlink: 'syz.3.851': attribute type 62 has an invalid length. [ 486.136301][ T8940] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 486.253042][ T8940] 8021q: adding VLAN 0 to HW filter on device bond6 [ 486.360561][ T8940] veth3: entered promiscuous mode [ 486.379249][ T8940] bond6: (slave veth3): Enslaving as an active interface with a down link [ 486.627301][ T8945] vlan2: entered allmulticast mode [ 486.632727][ T8945] bond6: entered allmulticast mode [ 486.640743][ T8945] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 487.328984][ T9009] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 487.816400][ T9028] FAULT_INJECTION: forcing a failure. [ 487.816400][ T9028] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 487.829902][ T9028] CPU: 0 UID: 0 PID: 9028 Comm: syz.4.872 Not tainted syzkaller #0 PREEMPT(full) [ 487.829941][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 487.829966][ T9028] Call Trace: [ 487.829974][ T9028] [ 487.829982][ T9028] dump_stack_lvl+0x189/0x250 [ 487.830013][ T9028] ? __pfx____ratelimit+0x10/0x10 [ 487.830047][ T9028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.830069][ T9028] ? __pfx__printk+0x10/0x10 [ 487.830095][ T9028] ? __might_fault+0xb0/0x130 [ 487.830133][ T9028] should_fail_ex+0x414/0x560 [ 487.830163][ T9028] _copy_from_user+0x2d/0xb0 [ 487.830185][ T9028] ___sys_sendmsg+0x158/0x2a0 [ 487.830209][ T9028] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.830265][ T9028] ? __fget_files+0x2a/0x420 [ 487.830291][ T9028] ? __fget_files+0x3a0/0x420 [ 487.830329][ T9028] __x64_sys_sendmsg+0x19b/0x260 [ 487.830352][ T9028] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.830382][ T9028] ? __pfx_ksys_write+0x10/0x10 [ 487.830404][ T9028] ? rcu_is_watching+0x15/0xb0 [ 487.830428][ T9028] ? do_syscall_64+0xbe/0x3b0 [ 487.830448][ T9028] do_syscall_64+0xfa/0x3b0 [ 487.830463][ T9028] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.830488][ T9028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.830506][ T9028] ? clear_bhb_loop+0x60/0xb0 [ 487.830529][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.830550][ T9028] RIP: 0033:0x7f9c8f98ebe9 [ 487.830571][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.830586][ T9028] RSP: 002b:00007f9c90794038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.830608][ T9028] RAX: ffffffffffffffda RBX: 00007f9c8fbc5fa0 RCX: 00007f9c8f98ebe9 [ 487.830621][ T9028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 487.830632][ T9028] RBP: 00007f9c90794090 R08: 0000000000000000 R09: 0000000000000000 [ 487.830642][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.830652][ T9028] R13: 00007f9c8fbc6038 R14: 00007f9c8fbc5fa0 R15: 00007fff076f6cb8 [ 487.830681][ T9028] [ 488.055721][ T5919] Bluetooth: hci4: command 0x0405 tx timeout [ 488.660635][ T9060] netlink: 'syz.2.884': attribute type 2 has an invalid length. [ 488.682307][ T9063] Unsupported ieee802154 address type: 0 [ 488.696480][ T9060] netlink: 'syz.2.884': attribute type 8 has an invalid length. [ 488.700524][ T9056] netlink: 'syz.0.882': attribute type 11 has an invalid length. [ 488.711360][ T9060] __nla_validate_parse: 12 callbacks suppressed [ 488.711376][ T9060] netlink: 1148 bytes leftover after parsing attributes in process `syz.2.884'. [ 488.942643][ T9078] pim6reg: entered allmulticast mode [ 489.276076][ T30] audit: type=1800 audit(1756942717.993:2): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.897" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=941 res=0 errno=0 [ 489.607521][ T9125] netlink: 'syz.3.905': attribute type 10 has an invalid length. [ 489.616047][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.905'. [ 489.625245][ T9122] netlink: ct family unspecified [ 489.631579][ T9122] openvswitch: netlink: Actions may not be safe on all matching packets [ 489.671352][ T9125] team0: Port device geneve0 added [ 489.679675][ T9126] netlink: 3 bytes leftover after parsing attributes in process `syz.3.905'. [ 489.695620][ T9126] openvswitch: netlink: Actions may not be safe on all matching packets [ 489.725768][ T9128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.904'. [ 489.757077][ T9125] netlink: 36 bytes leftover after parsing attributes in process `syz.3.905'. [ 489.772349][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 489.782896][ T9128] netlink: 'syz.2.904': attribute type 15 has an invalid length. [ 489.988424][ T9141] syz_tun: left allmulticast mode [ 490.001832][ T9141] syz_tun: left promiscuous mode [ 490.014264][ T9141] bridge0: port 3(syz_tun) entered disabled state [ 490.037589][ T9141] bridge_slave_0: left allmulticast mode [ 490.061133][ T9141] bridge_slave_0: left promiscuous mode [ 490.081971][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.129796][ T9141] bridge_slave_1: left allmulticast mode [ 490.144130][ T9158] sctp: [Deprecated]: syz.1.914 (pid 9158) Use of int in max_burst socket option. [ 490.144130][ T9158] Use struct sctp_assoc_value instead [ 490.176123][ T9141] bridge_slave_1: left promiscuous mode [ 490.187001][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.214188][ T9141] `: (slave bond_slave_0): Releasing backup interface [ 490.258423][ T9141] `: (slave bond_slave_1): Releasing backup interface [ 490.286320][ T9141] team0: Port device team_slave_0 removed [ 490.297658][ T9141] team0: Port device team_slave_1 removed [ 490.304495][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.312341][ T9141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.334978][ T9141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.337987][ T9177] netlink: 256 bytes leftover after parsing attributes in process `syz.0.917'. [ 490.342790][ T9141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.371411][ T9141] batadv1: left allmulticast mode [ 490.377665][ T9141] batadv1: left promiscuous mode [ 490.383172][ T9141] bridge0: port 4(batadv1) entered disabled state [ 490.406670][ T9141] batadv2: left allmulticast mode [ 490.411898][ T9141] batadv2: left promiscuous mode [ 490.418678][ T9141] bridge0: port 5(batadv2) entered disabled state [ 490.507489][ T9156] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 490.508229][ T9187] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 490.562294][ T9181] netlink: 44 bytes leftover after parsing attributes in process `syz.1.919'. [ 490.591988][ T9187] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 491.020731][ T9208] netlink: 'syz.3.925': attribute type 2 has an invalid length. [ 491.038638][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.925'. [ 491.327549][ T9215] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 491.358643][ T9215] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 491.375726][ T9219] FAULT_INJECTION: forcing a failure. [ 491.375726][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.398639][ T9221] netlink: 'syz.1.931': attribute type 21 has an invalid length. [ 491.410429][ T9221] netlink: 'syz.1.931': attribute type 6 has an invalid length. [ 491.415772][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.929'. [ 491.443850][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.2.930 Not tainted syzkaller #0 PREEMPT(full) [ 491.443881][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.443895][ T9219] Call Trace: [ 491.443905][ T9219] [ 491.443916][ T9219] dump_stack_lvl+0x189/0x250 [ 491.443958][ T9219] ? __pfx____ratelimit+0x10/0x10 [ 491.443986][ T9219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.444007][ T9219] ? __pfx__printk+0x10/0x10 [ 491.444032][ T9219] ? __might_fault+0xb0/0x130 [ 491.444068][ T9219] should_fail_ex+0x414/0x560 [ 491.444096][ T9219] _copy_from_iter+0x1de/0x1790 [ 491.444121][ T9219] ? rcu_is_watching+0x15/0xb0 [ 491.444140][ T9219] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 491.444165][ T9219] ? __pfx__copy_from_iter+0x10/0x10 [ 491.444185][ T9219] ? __build_skb_around+0x257/0x3e0 [ 491.444205][ T9219] ? netlink_sendmsg+0x642/0xb30 [ 491.444220][ T9219] ? skb_put+0x11b/0x210 [ 491.444240][ T9219] netlink_sendmsg+0x6b2/0xb30 [ 491.444265][ T9219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.444285][ T9219] ? aa_sock_msg_perm+0xf1/0x1d0 [ 491.444304][ T9219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 491.444323][ T9219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.444341][ T9219] __sock_sendmsg+0x219/0x270 [ 491.444369][ T9219] ____sys_sendmsg+0x505/0x830 [ 491.444394][ T9219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.444424][ T9219] ? import_iovec+0x74/0xa0 [ 491.444448][ T9219] ___sys_sendmsg+0x21f/0x2a0 [ 491.444470][ T9219] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.444526][ T9219] ? __fget_files+0x2a/0x420 [ 491.444553][ T9219] ? __fget_files+0x3a0/0x420 [ 491.444590][ T9219] __x64_sys_sendmsg+0x19b/0x260 [ 491.444631][ T9219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.444663][ T9219] ? __pfx_ksys_write+0x10/0x10 [ 491.444695][ T9219] ? do_syscall_64+0xbe/0x3b0 [ 491.444727][ T9219] do_syscall_64+0xfa/0x3b0 [ 491.444743][ T9219] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.444770][ T9219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.444789][ T9219] ? clear_bhb_loop+0x60/0xb0 [ 491.444813][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.444831][ T9219] RIP: 0033:0x7f5fd798ebe9 [ 491.444848][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.444864][ T9219] RSP: 002b:00007f5fd87a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.444884][ T9219] RAX: ffffffffffffffda RBX: 00007f5fd7bc6090 RCX: 00007f5fd798ebe9 [ 491.444897][ T9219] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 491.444909][ T9219] RBP: 00007f5fd87a1090 R08: 0000000000000000 R09: 0000000000000000 [ 491.444919][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.444930][ T9219] R13: 00007f5fd7bc6128 R14: 00007f5fd7bc6090 R15: 00007fff8059afd8 [ 491.444960][ T9219] [ 491.800824][ T9232] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 491.814271][ T9232] netlink: 'syz.3.933': attribute type 1 has an invalid length. [ 492.192587][ T9255] netlink: 'syz.1.942': attribute type 15 has an invalid length. [ 492.318006][ T9265] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 492.343243][ T9271] tipc: Failed to remove unknown binding: 66,1,1/0:3053478584/3053478586 [ 492.358413][ T9265] bond2: (slave vcan1): Error -95 calling set_mac_address [ 492.885753][ T9292] netlink: 'syz.3.953': attribute type 1 has an invalid length. [ 492.894204][ T9293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 493.078899][ T9295] 8021q: adding VLAN 0 to HW filter on device bond8 [ 493.087715][ T9295] bond7: (slave bond8): making interface the new active one [ 493.096990][ T9295] bond7: (slave bond8): Enslaving as an active interface with an up link [ 493.345019][ T9312] tipc: Enabled bearer , priority 0 [ 493.357112][ T9313] syzkaller0: entered promiscuous mode [ 493.373082][ T9313] syzkaller0: entered allmulticast mode [ 493.453723][ T9310] tipc: Resetting bearer [ 493.520990][ T9310] tipc: Disabling bearer [ 493.609385][ T9321] tipc: Enabling of bearer rejected, failed to enable media [ 493.634123][ T9324] tipc: Enabling of bearer rejected, failed to enable media [ 493.722871][ T9335] __nla_validate_parse: 12 callbacks suppressed [ 493.722889][ T9335] netlink: 9 bytes leftover after parsing attributes in process `syz.4.963'. [ 493.765242][ T9335] gretap0: entered promiscuous mode [ 493.810661][ T9335] netlink: 5 bytes leftover after parsing attributes in process `syz.4.963'. [ 493.886041][ T9335] 0ªî{X¹¦: renamed from gretap0 [ 493.898693][ T9335] 0ªî{X¹¦: left promiscuous mode [ 493.926847][ T9335] 0ªî{X¹¦: entered allmulticast mode [ 493.940784][ T9335] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 493.957245][ T9346] netlink: 'syz.1.965': attribute type 64 has an invalid length. [ 493.966719][ T9346] netlink: 5 bytes leftover after parsing attributes in process `syz.1.965'. [ 494.258157][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 494.271211][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 494.632134][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 494.687517][ T9381] netlink: 20 bytes leftover after parsing attributes in process `syz.0.978'. [ 494.712576][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.978'. [ 494.929252][ T9397] dvmrp0: entered allmulticast mode [ 494.949585][ T9396] dvmrp0: left allmulticast mode [ 494.968445][ T9396] pimreg: left allmulticast mode [ 495.044270][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 495.068740][ T9404] validate_nla: 2 callbacks suppressed [ 495.068759][ T9404] netlink: 'syz.4.985': attribute type 10 has an invalid length. [ 495.212171][ T9411] netlink: 348 bytes leftover after parsing attributes in process `syz.3.986'. [ 496.512732][ T9460] netlink: 'syz.4.1002': attribute type 17 has an invalid length. [ 496.546829][ T9460] erspan0: entered promiscuous mode [ 496.586574][ T9460] 0ªî{X¹¦: entered promiscuous mode [ 497.620959][ T9502] tipc: Enabled bearer , priority 0 [ 497.637181][ T9502] syzkaller0: entered promiscuous mode [ 497.662219][ T9502] syzkaller0: entered allmulticast mode [ 497.689089][ T9502] netlink: 'syz.2.1014': attribute type 11 has an invalid length. [ 497.749237][ T9501] tipc: Resetting bearer [ 497.800860][ T9501] tipc: Disabling bearer [ 498.738975][ T9549] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 498.742161][ T9548] IPVS: length: 157 != 24 [ 499.587335][ T9579] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 499.827326][ T9579] bond5: entered promiscuous mode [ 499.832571][ T9589] __nla_validate_parse: 42 callbacks suppressed [ 499.832588][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1039'. [ 499.862810][ T9579] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.891403][ T9589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1039'. [ 499.932263][ T9580] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.952148][ T9580] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 499.969555][ T9580] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 499.987262][ T9580] bond5: (slave wireguard0): making interface the new active one [ 500.002041][ T9580] wireguard0: entered promiscuous mode [ 500.011185][ T9580] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 500.037326][ T9588] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1040'. [ 500.580134][ T9628] tipc: Enabled bearer , priority 0 [ 500.615216][ T9628] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 500.656312][ T9628] tipc: Resetting bearer [ 500.708109][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 500.754145][ T9633] veth3: entered allmulticast mode [ 500.788486][ T9626] tipc: Disabling bearer [ 500.972466][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 501.005162][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'. [ 501.281338][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 501.320206][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 501.343215][ T9657] netlink: 212332 bytes leftover after parsing attributes in process `syz.4.1060'. [ 501.373238][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 501.608397][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.617743][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.737107][ T9679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.794674][ T9678] FAULT_INJECTION: forcing a failure. [ 501.794674][ T9678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.822729][ T9685] netlink: 'syz.1.1070': attribute type 21 has an invalid length. [ 501.831086][ T9678] CPU: 0 UID: 0 PID: 9678 Comm: syz.0.1069 Not tainted syzkaller #0 PREEMPT(full) [ 501.831111][ T9678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 501.831122][ T9678] Call Trace: [ 501.831129][ T9678] [ 501.831138][ T9678] dump_stack_lvl+0x189/0x250 [ 501.831166][ T9678] ? __pfx____ratelimit+0x10/0x10 [ 501.831194][ T9678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.831217][ T9678] ? __pfx__printk+0x10/0x10 [ 501.831244][ T9678] ? __might_fault+0xb0/0x130 [ 501.831283][ T9678] should_fail_ex+0x414/0x560 [ 501.831315][ T9678] _copy_from_user+0x2d/0xb0 [ 501.831338][ T9678] ___sys_sendmsg+0x158/0x2a0 [ 501.831363][ T9678] ? __pfx____sys_sendmsg+0x10/0x10 [ 501.831423][ T9678] ? __fget_files+0x2a/0x420 [ 501.831452][ T9678] ? __fget_files+0x3a0/0x420 [ 501.831492][ T9678] __x64_sys_sendmsg+0x19b/0x260 [ 501.831515][ T9678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 501.831547][ T9678] ? __pfx_ksys_write+0x10/0x10 [ 501.831570][ T9678] ? rcu_is_watching+0x15/0xb0 [ 501.831596][ T9678] ? do_syscall_64+0xbe/0x3b0 [ 501.831617][ T9678] do_syscall_64+0xfa/0x3b0 [ 501.831633][ T9678] ? lockdep_hardirqs_on+0x9c/0x150 [ 501.831660][ T9678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.831679][ T9678] ? clear_bhb_loop+0x60/0xb0 [ 501.831703][ T9678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.831721][ T9678] RIP: 0033:0x7f7fee98ebe9 [ 501.831738][ T9678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.831753][ T9678] RSP: 002b:00007f7fef7f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.831772][ T9678] RAX: ffffffffffffffda RBX: 00007f7feebc5fa0 RCX: 00007f7fee98ebe9 [ 501.831786][ T9678] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 501.831798][ T9678] RBP: 00007f7fef7f3090 R08: 0000000000000000 R09: 0000000000000000 [ 501.831809][ T9678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.831828][ T9678] R13: 00007f7feebc6038 R14: 00007f7feebc5fa0 R15: 00007ffec9ede1d8 [ 501.831859][ T9678] [ 502.073612][ T9685] netlink: 'syz.1.1070': attribute type 6 has an invalid length. [ 502.418452][ T9705] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.517088][ T9711] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 502.551881][ T9713] netlink: 'syz.1.1079': attribute type 1 has an invalid length. [ 502.569543][ T9713] netlink: 'syz.1.1079': attribute type 2 has an invalid length. [ 502.682272][ T9726] netlink: 'syz.4.1083': attribute type 21 has an invalid length. [ 502.693128][ T9726] netlink: 'syz.4.1083': attribute type 6 has an invalid length. [ 502.780431][ T9734] FAULT_INJECTION: forcing a failure. [ 502.780431][ T9734] name failslab, interval 1, probability 0, space 0, times 1 [ 502.816699][ T9734] CPU: 0 UID: 0 PID: 9734 Comm: syz.4.1085 Not tainted syzkaller #0 PREEMPT(full) [ 502.816724][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 502.816735][ T9734] Call Trace: [ 502.816743][ T9734] [ 502.816751][ T9734] dump_stack_lvl+0x189/0x250 [ 502.816778][ T9734] ? __pfx____ratelimit+0x10/0x10 [ 502.816805][ T9734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.816827][ T9734] ? __pfx__printk+0x10/0x10 [ 502.816857][ T9734] ? __pfx___might_resched+0x10/0x10 [ 502.816879][ T9734] should_fail_ex+0x414/0x560 [ 502.816909][ T9734] should_failslab+0xa8/0x100 [ 502.816937][ T9734] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 502.816962][ T9734] ? __alloc_skb+0x112/0x2d0 [ 502.816984][ T9734] __alloc_skb+0x112/0x2d0 [ 502.817010][ T9734] netlink_sendmsg+0x5c6/0xb30 [ 502.817037][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.817057][ T9734] ? aa_sock_msg_perm+0xf1/0x1d0 [ 502.817076][ T9734] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 502.817096][ T9734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.817113][ T9734] __sock_sendmsg+0x219/0x270 [ 502.817141][ T9734] ____sys_sendmsg+0x505/0x830 [ 502.817166][ T9734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.817195][ T9734] ? import_iovec+0x74/0xa0 [ 502.817220][ T9734] ___sys_sendmsg+0x21f/0x2a0 [ 502.817243][ T9734] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.817300][ T9734] ? __fget_files+0x2a/0x420 [ 502.817326][ T9734] ? __fget_files+0x3a0/0x420 [ 502.817364][ T9734] __x64_sys_sendmsg+0x19b/0x260 [ 502.817387][ T9734] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.817418][ T9734] ? __pfx_ksys_write+0x10/0x10 [ 502.817439][ T9734] ? rcu_is_watching+0x15/0xb0 [ 502.817462][ T9734] ? do_syscall_64+0xbe/0x3b0 [ 502.817483][ T9734] do_syscall_64+0xfa/0x3b0 [ 502.817508][ T9734] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.817533][ T9734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.817551][ T9734] ? clear_bhb_loop+0x60/0xb0 [ 502.817582][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.817599][ T9734] RIP: 0033:0x7f9c8f98ebe9 [ 502.817614][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.817628][ T9734] RSP: 002b:00007f9c90794038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.817646][ T9734] RAX: ffffffffffffffda RBX: 00007f9c8fbc5fa0 RCX: 00007f9c8f98ebe9 [ 502.817658][ T9734] RDX: 0000000000008004 RSI: 0000200000000180 RDI: 0000000000000005 [ 502.817669][ T9734] RBP: 00007f9c90794090 R08: 0000000000000000 R09: 0000000000000000 [ 502.817679][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.817688][ T9734] R13: 00007f9c8fbc6038 R14: 00007f9c8fbc5fa0 R15: 00007fff076f6cb8 [ 502.817728][ T9734] [ 503.232650][ T9750] netlink: 'syz.4.1089': attribute type 29 has an invalid length. [ 503.250818][ T9753] ================================================================== [ 503.258926][ T9753] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 503.266813][ T9753] Read of size 1 at addr ffff8880571e4770 by task syz.3.1088/9753 [ 503.274622][ T9753] [ 503.276944][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.3.1088 Not tainted syzkaller #0 PREEMPT(full) [ 503.276960][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.276968][ T9753] Call Trace: [ 503.276974][ T9753] [ 503.276980][ T9753] dump_stack_lvl+0x189/0x250 [ 503.276999][ T9753] ? __kasan_check_byte+0x12/0x40 [ 503.277020][ T9753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.277035][ T9753] ? lock_release+0x4b/0x3e0 [ 503.277058][ T9753] ? __virt_addr_valid+0x4a5/0x5c0 [ 503.277076][ T9753] print_report+0xca/0x240 [ 503.277089][ T9753] ? xfrm_state_find+0x2cf2/0x5400 [ 503.277101][ T9753] kasan_report+0x118/0x150 [ 503.277121][ T9753] ? xfrm_state_find+0x2cf2/0x5400 [ 503.277136][ T9753] xfrm_state_find+0x2cf2/0x5400 [ 503.277158][ T9753] ? xfrm_state_find+0x1da/0x5400 [ 503.277173][ T9753] ? __pfx_xfrm_state_find+0x10/0x10 [ 503.277185][ T9753] ? ip6_pol_route+0x547/0x1180 [ 503.277201][ T9753] ? fib6_rule_saddr+0xc0/0x420 [ 503.277216][ T9753] ? __pfx_ip6_pol_route+0x10/0x10 [ 503.277233][ T9753] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 503.277261][ T9753] ? fib_rules_lookup+0x96/0xe90 [ 503.277274][ T9753] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 503.277291][ T9753] ? __lock_acquire+0xab9/0xd20 [ 503.277318][ T9753] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 503.277338][ T9753] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 503.277357][ T9753] ? xfrm_expand_policies+0x41f/0x6a0 [ 503.277375][ T9753] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 503.277393][ T9753] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 503.277423][ T9753] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 503.277438][ T9753] ? txopt_get+0x335/0x3f0 [ 503.277457][ T9753] ? aa_label_sk_perm+0x4cd/0x630 [ 503.277476][ T9753] ? __pfx_txopt_get+0x10/0x10 [ 503.277494][ T9753] ? save_fpregs_to_fpstate+0xa3/0x210 [ 503.277511][ T9753] xfrm_lookup_route+0x3c/0x1c0 [ 503.277527][ T9753] rawv6_sendmsg+0xdab/0x1820 [ 503.277552][ T9753] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 503.277574][ T9753] ? finish_task_switch+0x266/0x950 [ 503.277595][ T9753] ? __pfx_aa_sk_perm+0x10/0x10 [ 503.277614][ T9753] ? sock_rps_record_flow+0x19/0x410 [ 503.277632][ T9753] ? inet_sendmsg+0x2f4/0x370 [ 503.277646][ T9753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 503.277662][ T9753] __sock_sendmsg+0x19c/0x270 [ 503.277689][ T9753] ____sys_sendmsg+0x52d/0x830 [ 503.277705][ T9753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 503.277746][ T9753] ? import_iovec+0x74/0xa0 [ 503.277763][ T9753] ___sys_sendmsg+0x21f/0x2a0 [ 503.277778][ T9753] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.277805][ T9753] ? __fget_files+0x2a/0x420 [ 503.277826][ T9753] ? __fget_files+0x3a0/0x420 [ 503.277849][ T9753] __sys_sendmmsg+0x227/0x430 [ 503.277865][ T9753] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.277878][ T9753] ? do_futex+0x395/0x420 [ 503.277906][ T9753] ? rcu_is_watching+0x15/0xb0 [ 503.277921][ T9753] __x64_sys_sendmmsg+0xa0/0xc0 [ 503.277935][ T9753] do_syscall_64+0xfa/0x3b0 [ 503.277947][ T9753] ? lockdep_hardirqs_on+0x9c/0x150 [ 503.277966][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.277979][ T9753] ? clear_bhb_loop+0x60/0xb0 [ 503.277993][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.278006][ T9753] RIP: 0033:0x7f28e178ebe9 [ 503.278019][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.278030][ T9753] RSP: 002b:00007f28e2616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.278044][ T9753] RAX: ffffffffffffffda RBX: 00007f28e19c6090 RCX: 00007f28e178ebe9 [ 503.278054][ T9753] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000c [ 503.278063][ T9753] RBP: 00007f28e1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.278071][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.278079][ T9753] R13: 00007f28e19c6128 R14: 00007f28e19c6090 R15: 00007ffe72062348 [ 503.278095][ T9753] [ 503.278100][ T9753] [ 503.657414][ T9753] Allocated by task 6827: [ 503.661732][ T9753] kasan_save_track+0x3e/0x80 [ 503.666407][ T9753] __kasan_slab_alloc+0x6c/0x80 [ 503.671257][ T9753] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 503.676724][ T9753] xfrm_state_alloc+0x24/0x2f0 [ 503.681496][ T9753] __find_acq_core+0x8a7/0x1c00 [ 503.686344][ T9753] xfrm_find_acq+0x78/0xa0 [ 503.690763][ T9753] xfrm_alloc_userspi+0x6b3/0xc90 [ 503.695787][ T9753] xfrm_user_rcv_msg+0x7a0/0xab0 [ 503.700748][ T9753] netlink_rcv_skb+0x208/0x470 [ 503.705517][ T9753] xfrm_netlink_rcv+0x79/0x90 [ 503.710211][ T9753] netlink_unicast+0x82f/0x9e0 [ 503.714973][ T9753] netlink_sendmsg+0x805/0xb30 [ 503.719733][ T9753] __sock_sendmsg+0x219/0x270 [ 503.724402][ T9753] ____sys_sendmsg+0x505/0x830 [ 503.729170][ T9753] ___sys_sendmsg+0x21f/0x2a0 [ 503.734191][ T9753] __x64_sys_sendmsg+0x19b/0x260 [ 503.739126][ T9753] do_syscall_64+0xfa/0x3b0 [ 503.743625][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.749508][ T9753] [ 503.751825][ T9753] Freed by task 5886: [ 503.755806][ T9753] kasan_save_track+0x3e/0x80 [ 503.760490][ T9753] kasan_save_free_info+0x46/0x50 [ 503.765509][ T9753] __kasan_slab_free+0x5b/0x80 [ 503.770292][ T9753] kmem_cache_free+0x18f/0x400 [ 503.775089][ T9753] xfrm_state_gc_task+0x52d/0x6b0 [ 503.780112][ T9753] process_scheduled_works+0xae1/0x17b0 [ 503.785656][ T9753] worker_thread+0x8a0/0xda0 [ 503.790246][ T9753] kthread+0x70e/0x8a0 [ 503.794309][ T9753] ret_from_fork+0x3f9/0x770 [ 503.798895][ T9753] ret_from_fork_asm+0x1a/0x30 [ 503.803684][ T9753] [ 503.806009][ T9753] The buggy address belongs to the object at ffff8880571e4440 [ 503.806009][ T9753] which belongs to the cache xfrm_state of size 928 [ 503.819962][ T9753] The buggy address is located 816 bytes inside of [ 503.819962][ T9753] freed 928-byte region [ffff8880571e4440, ffff8880571e47e0) [ 503.833748][ T9753] [ 503.836074][ T9753] The buggy address belongs to the physical page: [ 503.842490][ T9753] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880571e4440 pfn:0x571e4 [ 503.852547][ T9753] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 503.861035][ T9753] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 503.868580][ T9753] page_type: f5(slab) [ 503.872551][ T9753] raw: 00fff00000000040 ffff8881432aa140 dead000000000122 0000000000000000 [ 503.881127][ T9753] raw: ffff8880571e4440 00000000800f000a 00000000f5000000 0000000000000000 [ 503.889710][ T9753] head: 00fff00000000040 ffff8881432aa140 dead000000000122 0000000000000000 [ 503.898401][ T9753] head: ffff8880571e4440 00000000800f000a 00000000f5000000 0000000000000000 [ 503.907073][ T9753] head: 00fff00000000002 ffffea00015c7901 00000000ffffffff 00000000ffffffff [ 503.915734][ T9753] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 503.924390][ T9753] page dumped because: kasan: bad access detected [ 503.930799][ T9753] page_owner tracks the page as allocated [ 503.936521][ T9753] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6692, tgid 6690 (syz.3.174), ts 437846145294, free_ts 437534977751 [ 503.955710][ T9753] post_alloc_hook+0x240/0x2a0 [ 503.960523][ T9753] get_page_from_freelist+0x21e4/0x22c0 [ 503.966086][ T9753] __alloc_frozen_pages_noprof+0x181/0x370 [ 503.971936][ T9753] alloc_pages_mpol+0x232/0x4a0 [ 503.976803][ T9753] allocate_slab+0x8a/0x370 [ 503.981314][ T9753] ___slab_alloc+0xbeb/0x1410 [ 503.986006][ T9753] kmem_cache_alloc_noprof+0x283/0x3c0 [ 503.991481][ T9753] xfrm_state_alloc+0x24/0x2f0 [ 503.996265][ T9753] xfrm_add_acquire+0xf7/0xb20 [ 504.001026][ T9753] xfrm_user_rcv_msg+0x7a0/0xab0 [ 504.006046][ T9753] netlink_rcv_skb+0x208/0x470 [ 504.010809][ T9753] xfrm_netlink_rcv+0x79/0x90 [ 504.015485][ T9753] netlink_unicast+0x82f/0x9e0 [ 504.020277][ T9753] netlink_sendmsg+0x805/0xb30 [ 504.025030][ T9753] __sock_sendmsg+0x219/0x270 [ 504.029704][ T9753] ____sys_sendmsg+0x505/0x830 [ 504.034479][ T9753] page last free pid 6685 tgid 6684 stack trace: [ 504.040811][ T9753] __free_frozen_pages+0xbc4/0xd30 [ 504.045941][ T9753] stack_depot_save_flags+0x436/0x860 [ 504.051306][ T9753] kasan_save_track+0x4f/0x80 [ 504.055977][ T9753] __kasan_kmalloc+0x93/0xb0 [ 504.060564][ T9753] __kmalloc_node_noprof+0x276/0x4e0 [ 504.065858][ T9753] allocate_slab+0x16a/0x370 [ 504.070441][ T9753] ___slab_alloc+0xbeb/0x1410 [ 504.075138][ T9753] __kmalloc_cache_noprof+0x296/0x3d0 [ 504.080514][ T9753] copy_verifier_state+0x837/0xf10 [ 504.085620][ T9753] do_check+0x9a32/0xe520 [ 504.089947][ T9753] do_check_common+0x1949/0x24f0 [ 504.094877][ T9753] bpf_check+0x1746a/0x1d2d0 [ 504.099461][ T9753] bpf_prog_load+0x1318/0x1930 [ 504.104215][ T9753] __sys_bpf+0x528/0x870 [ 504.108468][ T9753] __x64_sys_bpf+0x7c/0x90 [ 504.112877][ T9753] do_syscall_64+0xfa/0x3b0 [ 504.117376][ T9753] [ 504.119689][ T9753] Memory state around the buggy address: [ 504.125305][ T9753] ffff8880571e4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.133361][ T9753] ffff8880571e4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.141411][ T9753] >ffff8880571e4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 504.149544][ T9753] ^ [ 504.157249][ T9753] ffff8880571e4780: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 504.165303][ T9753] ffff8880571e4800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 504.173361][ T9753] ================================================================== [ 504.209325][ T9753] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 504.216561][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.3.1088 Not tainted syzkaller #0 PREEMPT(full) [ 504.225862][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.235922][ T9753] Call Trace: [ 504.239197][ T9753] [ 504.242122][ T9753] dump_stack_lvl+0x99/0x250 [ 504.246715][ T9753] ? __asan_memcpy+0x40/0x70 [ 504.251306][ T9753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.256500][ T9753] ? __pfx__printk+0x10/0x10 [ 504.261121][ T9753] vpanic+0x281/0x750 [ 504.265106][ T9753] ? preempt_schedule+0xae/0xc0 [ 504.269966][ T9753] ? __pfx_vpanic+0x10/0x10 [ 504.274490][ T9753] ? preempt_schedule_common+0x83/0xd0 [ 504.279953][ T9753] ? preempt_schedule+0xae/0xc0 [ 504.284806][ T9753] ? __pfx_preempt_schedule+0x10/0x10 [ 504.290185][ T9753] panic+0xb9/0xc0 [ 504.293903][ T9753] ? __pfx_panic+0x10/0x10 [ 504.298320][ T9753] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 504.304218][ T9753] ? xfrm_state_find+0x2cf2/0x5400 [ 504.309335][ T9753] check_panic_on_warn+0x89/0xb0 [ 504.314270][ T9753] ? xfrm_state_find+0x2cf2/0x5400 [ 504.319374][ T9753] end_report+0x78/0x160 [ 504.323617][ T9753] kasan_report+0x129/0x150 [ 504.328124][ T9753] ? xfrm_state_find+0x2cf2/0x5400 [ 504.333235][ T9753] xfrm_state_find+0x2cf2/0x5400 [ 504.338177][ T9753] ? xfrm_state_find+0x1da/0x5400 [ 504.343201][ T9753] ? __pfx_xfrm_state_find+0x10/0x10 [ 504.348479][ T9753] ? ip6_pol_route+0x547/0x1180 [ 504.353326][ T9753] ? fib6_rule_saddr+0xc0/0x420 [ 504.358185][ T9753] ? __pfx_ip6_pol_route+0x10/0x10 [ 504.363301][ T9753] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 504.369476][ T9753] ? fib_rules_lookup+0x96/0xe90 [ 504.374411][ T9753] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 504.381003][ T9753] ? __lock_acquire+0xab9/0xd20 [ 504.385870][ T9753] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 504.391250][ T9753] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 504.396626][ T9753] ? xfrm_expand_policies+0x41f/0x6a0 [ 504.402001][ T9753] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 504.407372][ T9753] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 504.413019][ T9753] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 504.418834][ T9753] ? txopt_get+0x335/0x3f0 [ 504.423251][ T9753] ? aa_label_sk_perm+0x4cd/0x630 [ 504.428274][ T9753] ? __pfx_txopt_get+0x10/0x10 [ 504.433041][ T9753] ? save_fpregs_to_fpstate+0xa3/0x210 [ 504.438498][ T9753] xfrm_lookup_route+0x3c/0x1c0 [ 504.443361][ T9753] rawv6_sendmsg+0xdab/0x1820 [ 504.448051][ T9753] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 504.453169][ T9753] ? finish_task_switch+0x266/0x950 [ 504.458376][ T9753] ? __pfx_aa_sk_perm+0x10/0x10 [ 504.463232][ T9753] ? sock_rps_record_flow+0x19/0x410 [ 504.468518][ T9753] ? inet_sendmsg+0x2f4/0x370 [ 504.473200][ T9753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.478487][ T9753] __sock_sendmsg+0x19c/0x270 [ 504.483167][ T9753] ____sys_sendmsg+0x52d/0x830 [ 504.487938][ T9753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.493245][ T9753] ? import_iovec+0x74/0xa0 [ 504.497758][ T9753] ___sys_sendmsg+0x21f/0x2a0 [ 504.502447][ T9753] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.507672][ T9753] ? __fget_files+0x2a/0x420 [ 504.512268][ T9753] ? __fget_files+0x3a0/0x420 [ 504.516953][ T9753] __sys_sendmmsg+0x227/0x430 [ 504.521633][ T9753] ? __pfx___sys_sendmmsg+0x10/0x10 [ 504.526831][ T9753] ? do_futex+0x395/0x420 [ 504.531180][ T9753] ? rcu_is_watching+0x15/0xb0 [ 504.535945][ T9753] __x64_sys_sendmmsg+0xa0/0xc0 [ 504.540818][ T9753] do_syscall_64+0xfa/0x3b0 [ 504.545324][ T9753] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.550542][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.556613][ T9753] ? clear_bhb_loop+0x60/0xb0 [ 504.561291][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.567198][ T9753] RIP: 0033:0x7f28e178ebe9 [ 504.571618][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.591226][ T9753] RSP: 002b:00007f28e2616038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 504.599645][ T9753] RAX: ffffffffffffffda RBX: 00007f28e19c6090 RCX: 00007f28e178ebe9 [ 504.607616][ T9753] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 000000000000000c [ 504.615600][ T9753] RBP: 00007f28e1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 504.623578][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.631548][ T9753] R13: 00007f28e19c6128 R14: 00007f28e19c6090 R15: 00007ffe72062348 [ 504.639533][ T9753] [ 504.642881][ T9753] Kernel Offset: disabled [ 504.647201][ T9753] Rebooting in 86400 seconds..