last executing test programs: 32.420527674s ago: executing program 3 (id=1519): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000140)='GPL\x00', 0x6}, 0x94) 32.246376465s ago: executing program 3 (id=1524): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="02"], 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x52, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 32.137764107s ago: executing program 3 (id=1526): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x2, {0x2, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704", 0x8}], 0x1}, 0x4048081) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0xc}, @void, @eth={@empty, @multicast, @val, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local, @rand_addr=0x64010101, @random="7e6ad059944b", @multicast2}}}}}, 0x36) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x44}}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000080), 0x9) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x28, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.916395385s ago: executing program 3 (id=1531): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50abeb84139aaa900dd4b45e941bed1022", @ANYRESHEX=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="ae0faf269e4e8820964714bc741bb36ea2a8138acf0e50288fe45c77b9ef8106cdab01db58249c405b6079ec94a9e48aa3ce617f1b56cd1454f5516b267e6e53001848cd70845690c79ec88114aa94ecffdfe139086646ea3177dd1ec2ae01d3a24430402ce1b4a1136acb1342c5dc7d791817c7ff9945114e81e3862c08463423311302b7101ee406b398f5dd18f44fad0d9ce963486b2dfa3b07469fc8e018b3d78ba0c978cfb47b09c47b56d5a75d031981303e993334ff3b163450d9589973c929f167bf3b8d747eccac729c30ac1deffd6d295a1fd39668fb4a187faaf40526089b7de613"], 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r9, 0x0, 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 19.248463253s ago: executing program 3 (id=1531): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50abeb84139aaa900dd4b45e941bed1022", @ANYRESHEX=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="ae0faf269e4e8820964714bc741bb36ea2a8138acf0e50288fe45c77b9ef8106cdab01db58249c405b6079ec94a9e48aa3ce617f1b56cd1454f5516b267e6e53001848cd70845690c79ec88114aa94ecffdfe139086646ea3177dd1ec2ae01d3a24430402ce1b4a1136acb1342c5dc7d791817c7ff9945114e81e3862c08463423311302b7101ee406b398f5dd18f44fad0d9ce963486b2dfa3b07469fc8e018b3d78ba0c978cfb47b09c47b56d5a75d031981303e993334ff3b163450d9589973c929f167bf3b8d747eccac729c30ac1deffd6d295a1fd39668fb4a187faaf40526089b7de613"], 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r9, 0x0, 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9.712376042s ago: executing program 3 (id=1531): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x5, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x80000000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50abeb84139aaa900dd4b45e941bed1022", @ANYRESHEX=r6, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYBLOB="ae0faf269e4e8820964714bc741bb36ea2a8138acf0e50288fe45c77b9ef8106cdab01db58249c405b6079ec94a9e48aa3ce617f1b56cd1454f5516b267e6e53001848cd70845690c79ec88114aa94ecffdfe139086646ea3177dd1ec2ae01d3a24430402ce1b4a1136acb1342c5dc7d791817c7ff9945114e81e3862c08463423311302b7101ee406b398f5dd18f44fad0d9ce963486b2dfa3b07469fc8e018b3d78ba0c978cfb47b09c47b56d5a75d031981303e993334ff3b163450d9589973c929f167bf3b8d747eccac729c30ac1deffd6d295a1fd39668fb4a187faaf40526089b7de613"], 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r4}, 0x14) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r9, &(0x7f0000000140)=0xffffffffffffffff, 0x12) write$cgroup_subtree(r9, 0x0, 0x12) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.467715041s ago: executing program 0 (id=1828): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x53b, 0x70bd2d, 0x0, {0x9}, [{0x8c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x20}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}, @m_skbmod={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa0}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310d2dbd7000ffdbdf252500000008000300", @ANYRES32=r4, @ANYBLOB="0a0006005050505050500000634eb124362f4b887e5b11c71cee512d027f1df9ead1c1f46f721f128a3860d7b3645ab82be06d4f9529e0530380a78139b219becb0f29d7ac7aaa160921e29d1918539cbff3ce36fc7b9fe35805369081bcd5cec8b8a2fea353421acba15b249936dfcf7efb5bc0ec566fcb1f2a11095add79d9cf934b8b2988dc357d3e6c2531b9c3d22af251a514a675e2b45b98ef40a7711499884e79004912f1fad8dc1238c27c315f52a89e5c100585b3762250522a129aae3a51223310d92063f809e4001d07f091840e35014a19a166f835864fda9dd2ccbbfce837048379cce768c7ec8109af234d71af1c34d19faa25a2bad8c8d163358907f58927b5d445b632cd52d384"], 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) (async) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0xe07e872420dfefca) (async) sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) (async) close(r6) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x120, r3, 0x4, 0x70bd28, 0x7ff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}]}, @NL80211_ATTR_TX_RATES={0xf4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0xe, 0x5, 0x1, 0x8, 0x5ca, 0x1920]}}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x24, 0x1, 0x18, 0x30, 0x24, 0x3, 0x9, 0x0, 0x18, 0xb, 0x9, 0xc, 0x9, 0x66, 0x5, 0x24, 0x12, 0x6c]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x2, 0x3ff, 0x4, 0x3, 0x6, 0x7f, 0x400]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5, 0x12, 0x3, 0x48, 0x36, 0x2, 0x18, 0x4, 0x5, 0x30, 0x48, 0x2, 0x18, 0x6, 0x1, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1b, 0x2, 0x9, 0x6c, 0x48, 0x6c, 0x0, 0x1b, 0x3c, 0x9, 0x5, 0x12, 0x9, 0x5, 0x30, 0x12, 0x6]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0xb, 0x1b, 0x0, 0x5, 0x6c, 0xb, 0x1b, 0x12, 0x5, 0x2a, 0x18, 0x4]}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x8, 0x7f, 0x33, 0x8, 0x8001, 0x0, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb954, 0x7, 0x6, 0x9, 0x10, 0x5, 0xb4, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x46f, 0x2, 0xfffc, 0x101, 0x1, 0x5, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x240080c5}, 0x4004045) 4.191421271s ago: executing program 0 (id=1833): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @remote}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x0, &(0x7f0000000280)=""/265, &(0x7f0000000100)=0xfffffe20) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r4, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r5, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f0000000440)=""/91}, 0x20) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.641111847s ago: executing program 0 (id=1835): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "8ddbb51a3cfd954e41e8ccb21f650fa6a867fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71bc4b828c7de258b6b9ca1fc52bcc83e2a016a"}, 0xd8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0)=[{0x5, 0x3, 0xa, 0xa}], 0x10, 0x7ff}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x410001, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900"], 0x30}}, 0x0) 3.281127134s ago: executing program 0 (id=1842): r0 = socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x36, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "03136c", 0x0, 0x87, 0x0, @private2={0xfc, 0x2, '\x00', 0xfd}, @mcast2}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000800000000000000000010000af52c057be992420bfffbc49e6b37591b97e6000cbcf9234e83d732a1ae1580a878b0128477442e4e72f16425c9eb8bfd76c0836c29953ac994aa01d5569b0c365b70baa090d8fe2bbd7aeee6da97652f87f9fb24a64ed1d60d246b2bc5286235ae06021cde729488c91f7ca9c6f384209d2db0d878b2dc9c1042410af50c5f52ea200000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000ebffffff00"/28], 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x201, 0x8d, 0xfffffffe, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r2, 0xd3e, 0x824e, 0x80}, &(0x7f0000000300)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611068000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="050006b884d4d9de57025faf606ddc9350000d000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.021049997s ago: executing program 0 (id=1845): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc6, 0xc6, 0xb, [@volatile={0xe, 0x0, 0x0, 0x9, 0x4}, @datasec={0x1, 0x6, 0x0, 0xf, 0x1, [{0x5, 0xffffffff, 0x1}, {0x5, 0xf36, 0x9}, {0x3, 0x7, 0x9}, {0x5, 0x0, 0x5}, {0x4, 0x2, 0xffffff7f}, {0x1, 0x8, 0x5}], 'w'}, @datasec={0x6, 0x3, 0x0, 0xf, 0x1, [{0x2, 0x7b4, 0xb}, {0x2, 0x8, 0x7}, {0x2, 0x10000, 0x1}], 'e'}, @restrict={0xf, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8}}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x61, 0x0, 0x41, 0x0, 0x61, 0x0, 0x2e, 0x61, 0x30]}}, &(0x7f0000000200)=""/4096, 0xeb, 0x1000, 0x1, 0x900000}, 0x28) pipe(&(0x7f0000001280)) bpf$TOKEN_CREATE(0x24, &(0x7f0000001200)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0x18, 0x8, 0x1, 0x17, 0x2, r0, 0x2, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 2.893506668s ago: executing program 0 (id=1847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x128, 0x1403, 0x20, 0x70bd2b, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dvmrp1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvtap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x128}}, 0x4044050) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x7fffffff, 0x2, 0x2, 0x4, 0x6, 0x1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000108000005000000000000000003b023218977d1807f7f1c06f6073d935bc7b7a8123d5a902393536f8c30270fdaea7e9087e726cce3b665a5e594be0644a662be9a4d1d0cafabc84cca8f5870fd1bbf2a150e708d5a6617efe04dfa98a627c6c4f951c22b3c65ec4767951a4dc739e5a93cc23d9aa64e710dc4bda8bfb74f4cd533b893aa514aad69ce3fd587e6f4a3202cfdb6e93682", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) 1.814066693s ago: executing program 2 (id=1856): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="92090000000400000022bf000000000000000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0xa45d80d12cc4e1b6, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x1290, 0xffffffff, 0x98, 0x11a8, 0x11a8, 0xffffffff, 0xffffffff, 0x98, 0x1390, 0x1390, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_1\x00'}, 0x287, 0x10a0, 0x10c8, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @REJECT={0x28}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12f0) 1.577020426s ago: executing program 2 (id=1858): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x81}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x18, 0x41, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x12d}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_KEYS={0x38, 0x51, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "40dd1c8342"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_BSS_SELECT={0x30, 0xe3, 0x0, 0x1, {0x2c, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x3, 0x9}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x2}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x5}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 1.430042397s ago: executing program 4 (id=1861): recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7be206c5d564c90c200271d4fceb8e99c26a7c206", 0x23) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.376855552s ago: executing program 2 (id=1863): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x2, 0x0, 0x2, 0x0, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010}, 0x48) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.23713756s ago: executing program 4 (id=1864): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) (async) setsockopt$inet_int(r1, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) (async) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 32) r2 = socket$kcm(0x2, 0xa, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x4, 0x3) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0x142}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYRES32=r4, @ANYRES8=r3, @ANYRES64=r5], 0x158}, 0x14093) sendmmsg(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x200048c1) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, r3, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc0002042, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r7}, 0x10) 1.144847222s ago: executing program 2 (id=1866): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x34000}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) bind$alg(r0, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=ANY=[], 0x644}, 0x1, 0x0, 0x0, 0x20048804}, 0x2400a850) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=ANY=[], 0x644}, 0x1, 0x0, 0x0, 0x20048804}, 0x2400a850) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x1, 0xfffff038}, {0x6}]}, 0x10) recvmmsg$unix(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4090, 0xffa}], 0x1}}], 0x1, 0x10000, 0x0) 946.238466ms ago: executing program 4 (id=1868): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x5, 0x80, "f4b47dbe229dc474fab893f2dff53fdcb67211f26f445c6b68122cc9da79b95861562d1c7ddf0450047d6bad3a99157080510190b76dca807d3c0fbf59c97b", 0x21}, 0x80, 0x0}}], 0x1, 0x4004804) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}}) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x800803fc) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) shutdown(r1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x35d}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 733.54009ms ago: executing program 4 (id=1870): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000121401000000000600000000"], 0x10}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x8, 0x7f02ae, 0x348, 0x200, 0x418, 0x2e8, 0x2e8, 0x418, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private0, 'bridge_slave_0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x564) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r6, &(0x7f0000001800)="ca3ad83137436dca751a60f6966b50aa1c0ba6ff6109959d06131216623c49f8ec8f48b165cada5fa471df08b4ba3955129fffbb840531cebd47d874c2d050821f78d9147ecadf93fc357cfc2da31af9026cd7c7f5b29112e5144cd7e90a91e195cf6e88dbf91827462d73cec5edf409265bf405452c2c1d2e2500dd1a0255968f08991dbf05ec0fcbbd7482593d966848d62b503477c25b0e0a8a28e2f29d5c21284102d806b7ed962b5e59447a972c77ff5fac4698293605d5fba8234fa8ced078d260ce7000e1e547af4c955fa0436c2e83d1a25451a90e43fa409b352571bd373a160ca5732f42fff0ef6102b9c3ed44bb24771bb4b0f96664142ea95163640bf2620f22469e01ed6b94800c4f15eade728ccfcca170faf29ecf889b67e685fa257d3b31ef117a057c827e3abf529e1183f5272d811c01c6c79d7a8f34c82a3c0faf7500ad357b9415a9237cc9cb3d4ddbf1fce4f363461185c12e48bc9fcd9768f1c4bdcfe27a478fa048bde6f32f912536cc277118696cc25b01d96bc349ce7b345ac75f74a7cf00e2aef53575ba82415b00c97ac3194fb40b370af52a563a8b26f5745f98531410b2baf7c85a7f7c94d8afc60d618530dd06f284dc21922faa2f2d3b174649c1b95ac6fad1b74251e517efbdc1fe8f0acc927bbf56bf1daa53b59ca114762af66b5280e05ba7fe15c835420d876fc8d2f6f4120c0c46ffbb7c15c36e6577d549bbe25485bdfb12baf48e815cf3a31bee36e0354eeb42a33d60deac1e25927fc7457cb7124f3c5b6d78dc2171cf06cde43ac314f7e30c045dac7217e75cce6b1e1e229cb40ce07d9fb476706c41ca14b56e668578739405167e13356aae687da7071b2d7ef3d8aa7396cafb5a5ad6f58c5ef2dd91b5d28377438b01a686158a497577163a2f7d62498aff398b961cbc7f43c2b3fe7755ee9397bf25e05d77f8964be2ae5203f7972e0280d9878644ada0ebf9bd4bd95d2aee0470d1c7ee548ef8fea3f3e78e037c8734f05b5958456c4a9ed45d1c9160bfdb6ea51cdccd8cbb048c25d012289e9648fb872c5ffd2381b41f4e451e3d7ccf4017a03cfafb1e9b262b3b6faa3884455e68c3adeca56b4dd1f2de31fd548d73e41ac3fe813dd8eaca3bcb40d5925771260f0333fdc733d57a08e1b2dc840d749684858294a11206bed39bc6cdbbd050c082238ecc985634cf334dccee1770eb7001c499b70a43b77f49ef73d58d5d7278a24ddfd6dba85b1c778fb7956479d3d0f1d2fbea6bd5db710fdc2d9ce453e4066d6ab982c287dc52e7ef064a0359ba72f8ffffe6c112b1d129663f7dc9b4a2c98594a31843a4887d58792b6af2d18e0020c73ea969018c3c4134b7a33f08ef4f24d09743e058c05154ff7c5faad8d1f7bb8fb8baceff156d2d4cca93914be300376f6e97a0e7dc700fc42fc53d7fd9216ff1fc8bf851389167d9450e79bdf86418c7674a5b804e782d1ec04bcbcbb3f08d96fec533ef2c072cb9d803b496df58fc0a81c07fcce2b65cb68b9695af02c5dcaca54774f22a41cc89c10d8382223ccbc792090469e4fcb2e5a7d314ba8ccdd54592f3446ea0efb287d28ae9292ae0fe83208c5a2632ee607e3e5e17319bd3564e6c04685a70a0982ea207d2c0e64bad1344cbf039b9153523d410a8e9b19179845115502da5fa7483a4132b80f96fe9696b41b1d5c72037aedfb211cfcb21dcbbfe5281c04b909986f71f439d4425ca1b21987f5e8eeb2f1ec66c76c28032db25761d586ba136c96a3aabdd0d215bf6f41b4ed78b7f5830e14b41e87fdf7ac05c4fcc0e987d2753be1733bcd5addca2487883d0a5f1248b25251e6ca3acfcd4ea8f569ee9794c1c21054e4e4752e8e0e8f0570aa039cbdb89d5696374724efd19e74e4d3bd06fdc2cc9b4352bf7fd4c090ca36bf5a7498f12a7ff8a53c23add08c18e27a0901038218fe0575a19f4918232385e913f92cde48526185c0e45a3fd045d6445f06db9a054d0b68858abd78a4c34383ed578824b0b271446566ad12fa8e5ddf6f78cb1fcf18fe1f9a933b50751ea6c85fdd9474171bb8316f0fa33822076856955110fab836c1084476d6fbc91d9fadddcc320501b5c98166d36f8c6058c6d5ad09dc75cbaaabf5bc9ed9c95a838a535bd8926d0b53d049780195af6dbdc61885ca8bf705e15f68b49650e637593709716d6a07f290a044ad5cda3e0f1e1845de2325842c864275bf3d1cd6c2e6faf5f3bcd4c9880b0261f3f0d7798a3be57200d6617a61c66b54675a9bd6cb0873529ace0340cf207330f4c67ee489504f4a4860e22d52020bd83b7db0145521c0e7519bd2ff86c5bac0a4aa68b904866278b986c4ba6e73abcf7b50b4f25bd842a47fc4d244537e97fb84e34587cd2c027627fa20143598faa368322316438ad4fc2f3a97258cf054a6ec77e7947fa95580c74b0601acb5ae5aef6ef7e530e7b9cb757b68f4e099a9eab589ebcdbc0fa346a7e75f1c357ed1c7f621a4a3c91f6c5267006c09c6d639470ec4272eeaaf8664b2f320ccae3e0befd066a82c6378cb129a894569f226fe4c2ac25200cb5f753bc27b05c989e6da74970a0e8c4787040134811501fae3f27a78dcff6438a87db5195043887445dbe477a350292e77a49d6793e4863e805e594c035060d38bf20b350009f4c3faedce0ebeeaf66cc66a9e5c8113347f38cc469808cc6909bf00687c235df3547baa3fef22a8f7be75206605674f5200f4bae2e45b32436730bc0fbb7d97aeef96c1477b59a3d641f3db5ceab0fb4a943e3e26d71612af3f25f4ddfd22cca0139265f63635901ac7f5926989f4294e640e3b7f4f39aec82b173c08d251157e41ebf23f6572f280810f93809e300c0fdea6c3373ea334af2226fecbcb32102b22b4e5d3da4a149c3d8167d642477747e8567f7aef83aeda33cbdf5073ab83fd90b33f42c2f1be2b1e6b0d5307f470177f5378315806966ee51e6cb11b0106e0ac96e9af09529649e7c30bc98dabbd4eec448f53f61d52cdd6e4803a67e39aea678df912ef9ce997ca0a9563789f17fc95643f9b2ad8fcea14850c38b182154fcac1be7b73a4df9f4004b5042550ecd5fe56edae20b6ac233393f7214c76d1a1187c49124d70320d5bda9346cdcebe56cf52d7b61dea4e3d36814e13cdccee4d5ca01669a4973a67c0f00d5669d0225375de531aa0aeee94912a7e4bf04eae87c20fddb6dff43bfaa07dcbabdda4a568ecd9e77712bafabfac9375bb8abe544198c95a3b7951c97829f7131e066257ad1b776bd25bc1ee944583123f21485923fd96b15ed9d768dfc1ed8744dbdc9064874aadf4ccbebf7a2ab1a1b53a5710a586512b6e530caa6f8e4170d3b1771acdb6e5ddf863307170e97e27bebcbe785b8ce8246fba9e49b646a2071ac3ad4d8d1165da13e541adb4f73f4657de7e68a1e36fe8d69529654471189630c9d6840023bd3c375863190837bdc9ce5468d9611bca3b655180efcaaad8315ec520fd102176d59525ade105994dd5c856d7b37241ad20d67508e0baf3912faaa4d1015d8628e6be6270f04426d1688979b7c376cf200e424d49969d19c18073a33fa0bf8c7cf2c2021247933b5c8d77196543850fbe2162d0c6813cb387e0607c7608e88fd6f021418bf0f8ae2ec51040c3127b3f817d9207ebeca689e7fc9c234a86bd223916009888af93f6fdf659a5e14ae250898a0367bf4f4089ce424ff53666ef5c49985a1197abcc868d1d3c05c1923d82acb9b83277ccaf0251546a0633f650b1fc5313f359687d7216028ab657aaee4040a8ad05a36cbc1004924e4c5e85e7f55b9130dd2b984a52edd9a141d0b730a71d5c3589eead00cb3377477a11b7b5a5ab1e3182a44eb6bf2b12a932501b649e1a89c5321f35ab102ea14e676ec458e681484bbf61f2f5300fd9d12cba20cc1f34a46a5342004058dbd58dda668dc1cdbcce2ef8e97cca3100f2ccfa84e0c93bc58f3042341f936dcea35b45d7bc12d7d7744f5d1f03c7cdf1abbe2d6ab35598964094b87be3c1f8ab752ef06316884992ac1e30e6707dc10823ecead1d248cd0feff5f4c4835011b2a9c40e4b4a37cc3800acbe527eebd40f89ccfe49880fb8a68501abdb0fc5c3a99b13ae6d7ebdb4fe7f057a210c1222148075a26f57f3f7635b3ceb6c392a5b096ade5756cc2238ee45655bc52d977dc1b9cca55cf41c3920c9f43d778b168bc3c18b185c9e7e267505bf65fb6f968ef2f23405e26d34adda1ad8cfcc6a8568c645e6568fdd2cca782e6f16dfd43cda56767fccc010b7b8cf57dd6514b6641dc64093b7b0ba54895b6bfcdd7c4a480e12aa39f6a3c7a98c09222fafe8b417a2725fb7fdf7950230016ab4ee2349b8d14386fa23095a0dc008ade9483dda0758edac409f3ec8398e8f44a315b8c01a935124fee6b3d9e5b847d4e967d7739a4f517bd71c8b815eb5bfd1f2084c67beac9f39c33951c059e5ed9ad1734f9f3273c46ff643073207d6a8d7c69dacc3adf488b9ebe6b0d8be4f228076f156c795fa1eb0a3c0392c8a3d0d63f3c59b002028416300bfa2391cbbb2e1ad249b15a755c001af030c4c5065c17adb8bd94411a3a90fd75caa9a211ad03d4837329a71f7d36cf877fc431f2100ee0e323839dcab6b410c3df17e1d7d63153412739bf4316ca4c2ce52a8160359f035090d6f0951e77782646ef15161d580f5eb8a7d157b855a144bbe697d54aa3aa4c3eeaf7342c51b9218095c332cb9c6acd423ce59d77291ee68f752309f08446d5b3b330a1722cec8fab00ae77e22f9a7e5160918f678eeff557475a7a27676ddd2d4a1b49b422e766bfd44cd2444f0242627dfd57d5fea7f9af564a8215a2ce7f077075d341f829d60f65cca9e174d8042716ecc5969b7aa5f0d491240eb40c16d61d4989e2e0bab759271e99a1d0368c848eb11d2c215614c09e9f554bc6f9fff9386e9a6df9d0ff88b1bf4f6ead326b69baf07bb3eccae34cb684f1f99e5a7694354cc8678590f67dfe03a828c3dd97a7b6294e60639a852fa23a6fbb2d870f9301b19b5eb395a1fc26ed136dd4e3dac9413fadd13728fef02ed17d67794f6e14b10fc086dc96006b8e307576f830a712e74083998ab6221e53616bb5b28dd7ca850a8b05df25ebe89af0b0ff6e5a98201af40d057b67679b5048432da2fc7143f6e072b90b2d5a32d1e01b0c4a616b686fc5426fb0a1c7df10f84ce8f09de477fd0a119044a1d78f50324a0df437525ca8e604ad06011cc292feb59e2ca5349029c021d8e58ae6e38f2f16a25c4a898e0fc13fa1a05182706f137a96c1f0ba52ff797b11c855ec30c53dfe2ef9dd2ef9ec60abe16d5d0072a92e29dceb160c38a499390752ab36f0d89a771a010d6fe30e95eeb472c2948845a1d47f67ff3647a9b8ae64906f95a9c16df69ed600d1c0ed770e9c79a4c565c12d4a2b1b8da16e0a5b793dcfacf3a8933f7f803bfdc398bcd18df6566315c49d81408357dc532ab0b1f738a94e963aff2b389d08f3b51189c82155510c0a1569fb265002bfea6e11af12847ea2ae57b166669c3d00b419144d98c85b50e841c9a72bbfb797a0565fa4f29328d1225ca343c4e953bddf215c9b823aaf2b304db35923ce53c9ea058d4958319996ac1c7009e0e438abf79421b828b0c8dbe12e3d09577d103978d4a959766189061157bc4158c9990453384f574e7ab8c204427b4752a1fd79e59e6ec0a1a30a446c663f530f9db5ef3e23246a30d581f79b0a82fda82b2617e4", 0x1000, 0x4000, &(0x7f0000000240)={0xa, 0x4e23, 0x10, @private2, 0x79}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x68}}}}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xd67f}, @NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0xa}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x12}, {0x4, 0x8}, {0x1}, {}, {0x7, 0x5}, {0x0, 0x6}, {0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x1}, {0x3, 0x8}, {0x5, 0x4}, {0x0, 0x3}, {0x5}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x7}, {0x7, 0x7}, {}, {0x7, 0x2}, {0x0, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x4, 0xa}, {0x1}, {0x0, 0x1}, {0x5, 0x5}, {0x1, 0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x6, 0x2, 0x7, 0x82, 0x8, 0x2, 0x100]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x26, 0x0, 0x1ff, 0x2, 0x1, 0x0, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x2, 0xfff7, 0x7, 0x80, 0x3, 0x4, 0x9]}}]}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000040}, 0x8008800) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 647.789215ms ago: executing program 1 (id=1871): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000007065574d000000000000000071100200000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) 497.069961ms ago: executing program 4 (id=1872): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7a, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000600014002020a600e41b0000900ac00040211000000160016000a0002000048035c3b61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x4e21, @local}}, 0x24) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x6, 0x5, 0x2}) sendto$inet6(r2, &(0x7f0000000100)="b46d4ef7730d6de61d05aeae2de0fcf5875cce719e80f7dbf048a8ff35f5b65be65dcf2ef9eddbae8446c4471f5ad93971d78915e2fb5df27981fd6cf6a20f9cbd7ec95549c7bf822e5f7f2bb9171c70a961d229a8933b2a26da4490b3b49fc9a7d1de1dd5743c760c02d57b447b30ab9e37e86184019e2b16df91918a6fd46750168b60034968a9aa488310c4dbc057001150e67221f3b5f963a5fa20b1bbe9e718d6f60235a0dcaf4674070529bd4da903ba7ccd2cc5745d26b47d77b8beddc6156d29e97379636225ba66bfc05ea466ae2f9f41711c071efba0ffbd43cf", 0xdf, 0x40000, &(0x7f0000000080)={0xa, 0x4e20, 0x81, @remote}, 0x1c) 496.334714ms ago: executing program 1 (id=1873): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180400"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 418.405263ms ago: executing program 1 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x80000001, 0x277, 0x100}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) 353.466305ms ago: executing program 4 (id=1875): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000140)=""/134, 0x86}, {&(0x7f0000003040)=""/4036, 0xfc4}, {&(0x7f0000001040)=""/4059, 0xfdb}, {&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x5}, 0x12121) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000005c0)=0x1c, 0x80400) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x4e24, 0x0, @private2, 0x7}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r2, r1, 0x4}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x29, 0x22, 0x0, 0x27) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x24000000) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000800)=@ethtool_rxnfc={0x2f, 0x0, 0x0, {0x0, @udp_ip4_spec={@private, @dev}, {0x0, @link_local}, @usr_ip4_spec={@multicast1, @remote}, {0x0, @remote}}}}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r11, 0x1, 0x8, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x0, 0x4}}}}, 0x30}}, 0x2c040880) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x9, 0x0, 0x0, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x24000044) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 248.943684ms ago: executing program 1 (id=1876): socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000140)="d510c490f913674c5ae400", 0x0, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000711226000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xc}, 0x94) 235.507051ms ago: executing program 2 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00\r'], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300ba2cf03f9cd7bb4a37497600000000f4c95f1585f90478390c9d21b7767cd56cfcc6795ed55c4d5282328e634eaadb2bbc50828eeb33b4f6312bab5b21bea3e2d0744e7541db1bb478117b402293f96901e4d8ad9272d3c8e74d86383832c0b5313984a1ad4d79a717831e7864e879", @ANYRESHEX=r2, @ANYBLOB="0c00990001004a920c8b8439aa8a04002f61637faf616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)={0xffffffffffffffff}) ppoll(&(0x7f0000001b00)=[{r4, 0x1}], 0x1, &(0x7f0000001b80), 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004040) 191.921587ms ago: executing program 1 (id=1878): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000000095e9600500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xbc, &(0x7f000000cf3d)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x6}, 0x94) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(blake2b-160-generic)\x00'}, 0x58) 929.414µs ago: executing program 2 (id=1879): socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000001800018014000200776c616e30000000000000000000000008000f007fffffff"], 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70acd1442e240dec288539fa2ab02e7700e34d9b1a0000000036dd0c"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x8, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x1]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1}, 0x5c) sendto$packet(r4, &(0x7f00000016c0)='=', 0x1, 0x4040011, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xc4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x29, 0x2a, [@mesh_chsw={0x76, 0x6, {0x8, 0x0, 0x2d}}, @channel_switch={0x25, 0x3, {0x1, 0xa9, 0x9}}, @peer_mgmt={0x75, 0x16, {0x1, 0xaf, @void, @val=0x33, @val="99c4590689ec25874c4821476a4df10a"}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x47, 0x2a, [@erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x8000, 0x3, 0x5, 0x0, {0x5, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0x2}, 0x800, 0x6, 0x4}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x3, 0x0, {0x8, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x3}, 0x400, 0x4, 0x11}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1d}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2c}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r9, 0x1, 0x4, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) r10 = socket(0x1d, 0x2, 0x6) r11 = socket(0x10, 0x5, 0xfffffffe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r14, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x67d}, @ETHTOOL_A_RINGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xf82383051745ab26}, 0x81) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) 0s ago: executing program 1 (id=1880): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="b4010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b4}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000a06020100000000000000910d00000005000100070000005966cccda764cbf1a6de13602b55932f410ba13ce3dabffaacbc0c86eac27effbac9006b6663dad2c03f3ca77d731c960d327690a3d29a0d192424dd1e40a6053003812060074738014ff5a1dc1aecc2eb609ed8a6b14f16e4959b01e897d797674547b482526289bc61d8f4f3607d2e3400ff84db0a37d3c907db968d4608cfbfc93ac8919acc26309bde95c4f4aa574d3cf488c4"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x75}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00deffffffffffffff0000000000000000211d1c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000873dcf96a600000bc2303c72a9fc0d0000006ec0fb27c606000a00000000000800070000000000060008"], 0x2c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) socket$kcm(0x2, 0xd, 0x2) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x24, r10, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}}, 0x0) sendmsg$alg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000580)="aac929059a39da4c2fe50d5c8c8a9e973a68dfdccdcff55691f7af273fa1b01fca4b29018a922ea3df7966529830f3b4e0f7da5d2adb4606779c98f81f6601804b51c03c890f6d9aa86f78f4c117d29270d636c23263b4024656fdde7b2d5a25f51de1bc22e3a89270e3d9a2a655e9810af344c095b356ed2c008792ae9f4103b1eee0cffbf3d51326e593e29785fd2f2fba8ec62073fcd7d73e532913a186beb938108ac4cd", 0xa6}, {&(0x7f0000000080)="b7473ffd51dfadd68e189bdddc8157894f00"/27, 0x1b}, {&(0x7f0000000e80)="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", 0x1f6}, {&(0x7f00000003c0)="27ddbe7e1426e450032d447522662d47", 0x10}, {&(0x7f0000000640)="967988c4b295f1c3df21d58633a0a5cd4ef9641d331a6f59ddeb9e0b2c274098a7ce4ec148963a5ab329a1a7d107979b702a0278696dfee1439cc50f400041c0002eb0e4c0c9f366bc77e1be9e92aef36e2b58a2554a87a1bc622ed845a6d362ac1bea850104c35c7ec964ce26b55cf6b2ecb8", 0x73}, {&(0x7f0000000a00)="3c6aa450e5744046f20661f3dcab2c9720f3d2fc0085675c300ef5c19777f9e4aae5602f87d04b582c60cada122f283d5ab329fa05fa82d343da00d0a27d219c6fd16b72ea56f88643432cc71d616b5e305450936929563e11d506a0ed4ee4b32961990a2158aebecba581f9d954", 0x6e}, {&(0x7f0000000cc0)="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", 0x1ba}], 0x7, &(0x7f00000018c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "7ed477e9035dfd76d662203269ba42ee91060667c6d937e3eee9526da5481e251376b6ea0bcfe1e44ad7441565ea3afec3a2aa80c1f092e5281b5e85ad8ed8bc68dedc8eab87dcd53f29d114a61221f5689dcef4c115a043df63fca2c6799d9e779ffef6147cc1e5b8a4c5c38a160a27f5c36bd16e44952bb4875a68506e0031590889c2978bfa829b859ce3dc263f154262120dcf9482e2470cfdcc5dc98cf397310c697b8d8a916a7b6a8c6cb3f1111d2fa8328c97feda48b31dd51aef81107c05be85d9e3e8c2ed80b3baf98559fe86d529ac85ba437b6c41b28c94a5b17a53a70339188bc2e783c43b6f4fb19a6b9f96e13e32b05945152df779d386e2f24dcc615d0863a9f6bc48c392f56bb0f101e08092d4895f023933e0e99638e0f84b88b9f21ffd39a61f588ea2521988641719d7a9c7b6fb79053ea94116eb51962fd2976c1739ea778f0d7c8e0d7eda30e9c9a8b7a1daaf1a2ff253cb19a095f539429e9f973f373cb2b0cf6e8d1c7124e1bbcbc51476e71f150cf4592cb36d4839cbc90cbfbd28485415216589a91cbffcfe8a829cec63293eb88eb9bc2d4b167b7482d4e098f90b63afa3be85681dca759ae5a75e5e95be3d2a2fc38875878ed3dcae32f0d5f164c528a3fc7e822454f32584fa5f0dfc0fb270ff753a7a280b23f79d8a099b9cff0f7e73a3095f5f2408a8fcac74a5c8fadcedcac1198891567d579ab48a77084982ca7360c6435d1a62d9412612b0e1d0cc8aa23dbecbb1ec73df177a8eb9ba46019d26dec909f3ec8b5b9ecb4b99821c9ef2e230fcbe775e45279ca44343d8c2b40730718676892a89608158c0c36d917ebfd40ff858ac580460b3ac149f51867c4f25bc865c8f27fc3faa6479cf222526041d75b7ab41849a97a5d694f65a32f65a225a4367b230ebe44b8bfd52a25063b39acef46166859dd98d350978c1a2520fcd34ccdd23b3b34a6944ea80dbd86f5f526937220695697391fa2420434d6203edbada939d7c523fae1c768501a5ec2090f36b7fb37e5d7de81b86599097954f53dc9c798f6b6d36046c1f8b7de40c0c4bd16d9653f75515127839ff363375477a36750b99af86258a264c895151fc9fa08e504854da20215e1a0afb73ce507f459bc317c938c29c8b9d34d1352787b32aba837b8346948f94b7570d8106e1d96132e2972916f52666ce549d88eef0ab8004f76868d6f6eabd89bb6aba29d94151c97aa84aad3985f3873573a18ab95c38bcf46754dbb0b531ca61b275427eb4a6708e4010599e72416d8c906f6070a09c384595fee203825062c4e8c9325edf42a84cce91504e46902e0fb993f195a6dbe7d562d35cf552ea008321bc8e893ecedf85a946e8503438a5700b3f5959575c1a6e47dcd6481c4b6dd99fcd56bb0d85199d883eb07de7ff8408e983ce5023080f0ae78f0bdff00ae4051897e193b0cbd0398a60c8923abc71d6cfbd735da50a02abfc9a6d8b34577afc3dee17799f9c1e10759d47ffa51bbe27060b263e50f57f15ec23ed2f5f279438d1d144a5fb57341ae39f8cef903b095c1f075ef4ab9a7bbb73eda76e8fdbf1465ce60bb9640c47475583cbaf3711d03a9d3a86b47b7f0f952c95bd8d51ff8141f0b9a228e03b02c5e853e0364f817c64e4cf133460e5a32e069f55803a1685b065532367a01122aecfbf874284da1126327947f133ee3b00f82796b002f3a5cd603f0f41bb626143658acf9ba0b663cfa646e292a7b4868ac72de17ff60acd9ccb3e36b37cb1a0812178c7bb93a748c07cf0310a55db797a030ddc8a0a1c09fdc98cd5de1e58d4ed2d9a42554935f564e1f10641e51a03f33f1fca3b2334e1911a1c20764a5fe5954979ecac3a51cefffde3db380993089ec4f3fac4e7c0a117b89ea075922c91f8a557902333cc4620b6b5de51f1ccc4ca6ddbf5a10208750893527da56ee11086552374ccf8b6277a98ade3ab59f25c8f9c2fa4ec0e521cccae6b8a06f91743275f64585919ef345377174156529abe7d492ee870cb06d88ae5eab0ed9693c73a581d947ce6096b22395443cfe8a4098b16a5b572000e967be15b538943fd69e44aa6601ba48929196febf96c7a7757c898403a85cc6a181545e8c497391742c69a20cc53c163975e0b2baed64fb4f7357f037b490cf56c3089af4f104cfe28480c545c221b392cc390bb227bb9052d36c18990943f4ab816216f7b450fc5a0ac3a276ffe74c9a5edd1737677d364ce2c711fc108f7a72b6dcd549ee8bd233091dd7470e2c46cc88b9a87eec47ea2367887b137812e18d15fb797498f1cc2064e2b366d305e73df45c607af22b0718d0d20c2aea92473b26469b02782487802d12ce42f4907cc7a22d7d4aadafb782d2f4b4c93b780ae280525bbbd3dad86b5a21dd51e79acd463f89243df5b88114e3b28ff8b2358d850c809440da7db2fec5e0ee155ed84d04833b5670fcf08539295790834b21b26cb19d31114daa77c3d3f1c79778a0649cefce4591d257cdd464865f0a1066a4614fdb12f934fe77262c6f4074600241d1c9faad1a082ff88fe216fa2055e15c0078d039ffdddde1b4992c09025304ba3195e5d040222f9964f67da1ba766094265702b0727f22973e5efa539db55b04067a85efe5ef4c4379d349fb9fe7bffce69921870650d1c528f6413ca0780b6237cb250bdd92fa920b5456df57290653f05fa62e67dfa819507d6860d6ee8faf272b04844e830155116c6c527a8170aa9e332c178493c078d71d387dc70c784c7cedebb040dae097151237d1276208222ddf74b0fe84d3c9898a45e9ccc84da7f52e876ecf0679a37bf898eb3cd633fa19df69f406e09e64c7af1f9d1614da1507942311568667466fa866e05e94291dfd3b3e79446b3b943179f66fa6d8810d5694d52f4fe7bf4f1fd796caa7a460ebb99fdfafe5ae47f696c49c8d0bea9e83eda7679fd0c775535e4e2d3fb15f29b63b85f47229b3c3a3c5cea87a66f68c9a1a0709cdade77a720a865f22082e74a1d71f157ad0fabf2ed80aa88fbdb19b42c91f94e3bec1f12498950eea35f47ca6f3a9e22cc03e9f449ccf06dddf4e6590a2cd76ed85d515e50c279f64815669026604005e62da55346e2f33b350a6d83d3357eb9b03cc7de3e06f884be5d9fdf5526857604932a700fc07d59ea42d5946267a4fefb3199becaa5b9660d45f0f78ce4bc989d6f39df9c09ec6dbdfcd52fb9c474ca491b6982137bc63e8d89e2fbc9569efeee5215ed2a08175b8c7e9517f4d866f7c6f0cfc5087f3f9ff21ec560609d72925f9cd9abe1500c5bc198ff1756ee4f650acd633712fee551fc82dacfb358ad888dd7b3f49275015b4a851c3b6a609db9644718198085c2db29add9afdd9f51a02f2ac6e909e79d6c3820a70467bc1bc2f82f0f33f00eef4c8d5af1dabbb994994b19cb3a5cdc49e113d4abeae4ce97a224eefc7f44b1a60b1543fe29be7b58df95cb87c4443f67b2d19dc6a7f8cebf3f63daf2ddf17a81ac3ab1093bec664eef1fbd581a6ea319c38b3e13c35b08774350333c4a26552d73cb7ba715995cc98a7cf5b32fc6a02cc6d5f640e36a3d2c0180ce858af563cf1316d5077f13ec85ec148523f7f3e603a2af540da9c9a811a30b9d5b873f4e862ad2ac01b7f5ec2375df142c675eacdddc6b76f845b348135f82c636116a6adebf2925d7a0b44d8e8fd314b4afb203f8b7b249242a49f589c2f0f44c19ee18e306458c17fc0f1d48320018015c3020ebbd48b1bdaf182bf1469faa1eb7e6825447e67f2f629d64b71a1cdcaf789f39d6c00b37432fb4313391a5c26e011f3faf44f7056f0fa34315ba3e612838dc2e394c7b7e0d9fc92f1732bd0c72a86da9328835b8e8e318ea256c4f0fcce05d9b037d88546536cde6b489db3ed0a2a3bf91bd23d20983fdfa2b43463927861616c30b68b2d5b24171caa2e8cd5404f23f9775dc3c876643ab42132f2622cc6ce99f051d8358dab592a53529dc6461fdec6bc1ff4e3363cf4f1f1536360d6b47bca7706ca841631e99ea1ea779d2f70c1713ea225b6e84296fe1b0cfbba6d31b56d79cbcfe5591642818d7ab3d96c72b784285419544ed80e8f3781406e2762206747085dba40cd575140e22cfdd09db70bfdddb0e111d4c8bbd51e378560008f2de16dfe5968551ecc9c2e77f13c177858ad242e506f78861bac16859b70076209afaca1441d96f41fd7a02577aa9bd9f0962f9542deb3e1bd0475c84f67c8f0a156ba9dcbd4f9f34ac1d9b5e42bdee4de891d8792f21f06280ffa2a6792c7eeda0a592cebced51959c503142b86c37bd22d84f66db942d9a50606d6f9298435af16812a2e3803402eaa6ed21041347ed96dab627bf45400481c4f282f7d20417aff60013118f6c47926f49728034c1753073ec14bddabfe82466145ba8999738dee8e1633ed9c25670627f54459c37ea6aed72c37e687de9152c5dce3489ae2e1af1d94f3e0e96918bff15708d21c4a830471d869299f8f9ebf4224f363bb5b94c2a54d353c46660ea3f181a8ac06be6b2073bb7864ad3df7c9dd69b2ec5c56f3d3d1c660f4fed1124aab5b573a5195a27e086e21051f7b773fd9203b4abc9a95c5213b704461630626ff27b3bddffe452fcead83e5ab4574ec9f94bd7e2f7c50df4c81ba9e35323f426c211a7986b2e3198aa01dd6031674fdbb15a7b959a71099d565d06a5c445cc0d6de017ff4275e22621fb86fb6a5a6f3ab5ba0161af4a6a1e2e1b5d8c2cf58d5d03c2249a9196d5d2c90a970f89978ad8a871f9974a84809826c1c7ff4b8a8a0c34685f9bd82eaeba2568c982850569a088a120b285d6ef8871cb9e34fa231f3f09c130327519f01a3f0cb20e5db5a7c13523dcd4de6c199def5ee9b133e217936ef5464353c8a46f85c2587d334711bafbbeeda51742836e059049ea73ebb627da6c635a3d07f47ed260548f37e18938b0982b95ab8dcaacbb2beee6c70cc696cc700c8f1b8986386025d450d1d48145e8487c43cfddfa32e1805e8f477e1936490d0c4e67829850d9ce1331450de45c7f79111eb90628fcacecdb4ca12ee151322b043934a4d403f1834845c1948c2992635da70a57e08c02de4b263017770b99f878f0af98db42985d3d4defadf430047cefa287323b67a086f7e8a426e7bc1b61dd31546d5cd0fe0256f5999ceaf87cc600a3f5c997c05d08e8fe8570ab57c28db467a01cb1a5af3011df387ce812c10094344a250ff12e519c1e55ef24f033b6579d4a0ee005b2ac39a99957492cef178ede7c31b185d2c39c1ad4a4aa900e415a25908130f53284f9c7d4881714f50ff6118858f8cece116eeb21c2e19ea93ebaf03edcd4e8324ec5e6dfb301e9e603abc24968b3da0bb4e93bb1bc14995f7309e72a81e436ea68ca316ec41befd278d2d1bda5bfb4b7e91e004269b79a12f21f2b78e0e7afdebd3dd304142c7355e6d7cee291f7e7baf6c95f7523047ea4cd405c8b5d54ca654039007d7ee0715670da6fb5bc8ca35e41419071e3d3b641ac155bd0b9cbe6687ee6294ff401981697f677a25e0ab22d05a71a3a65aa57d893c64219d7f0b8bce4045259f4aa6112c4ee64b20b3ae0c10dbd3dd4c6daecd5e59b26cb1ff8d9fbc56025b6e0c8cd622d4ea221cba606c779ac853324647d944fb2670d2aecd6ed9b45211f3e4532312ff3e0fc8009a2c1d0b8f4ebf3c721d625426b2b787238db811fcca0c88316c28513995d5879c4461b00f8c9f7466fdf2d46ff8bedd7389d63"}, @assoc={0x18, 0x117, 0x4, 0x401}], 0x1048, 0x4c000}, 0x20000801) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x5, 0x10001, 0x7fff, 0x2000002, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r12}, 0x38) ioctl$TUNSETLINK(r11, 0x400454cd, 0x4) r13 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r13, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000100100000c"], 0x28, 0xe000}, 0x5}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRESOCT=r1, @ANYRESDEC=0x0], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20084801) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 73.788161][ T5826] cgroup: Unknown subsys name 'net' [ 73.899786][ T5826] cgroup: Unknown subsys name 'cpuset' [ 73.908386][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.461959][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.600674][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.609677][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.618089][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.625288][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.636892][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.644399][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.652459][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.659950][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.665813][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.668388][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.681199][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.688340][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.689583][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.698792][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.702609][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.711631][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.716606][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.724910][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.731388][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.738050][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.744953][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.760572][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.772557][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.793304][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.806849][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.388349][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 80.445859][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.508148][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 80.618010][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 80.633541][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 80.768721][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.776245][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.783603][ T5837] bridge_slave_0: entered allmulticast mode [ 80.790933][ T5837] bridge_slave_0: entered promiscuous mode [ 80.799770][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.807212][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.814408][ T5838] bridge_slave_0: entered allmulticast mode [ 80.822357][ T5838] bridge_slave_0: entered promiscuous mode [ 80.875022][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.883007][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.890174][ T5837] bridge_slave_1: entered allmulticast mode [ 80.897618][ T5837] bridge_slave_1: entered promiscuous mode [ 80.904530][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.911684][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.918999][ T5838] bridge_slave_1: entered allmulticast mode [ 80.925991][ T5838] bridge_slave_1: entered promiscuous mode [ 80.932711][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.940042][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.947220][ T5845] bridge_slave_0: entered allmulticast mode [ 80.954306][ T5845] bridge_slave_0: entered promiscuous mode [ 81.005939][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.013088][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.020691][ T5845] bridge_slave_1: entered allmulticast mode [ 81.027774][ T5845] bridge_slave_1: entered promiscuous mode [ 81.079454][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.103899][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.129609][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.136890][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.144139][ T5836] bridge_slave_0: entered allmulticast mode [ 81.151997][ T5836] bridge_slave_0: entered promiscuous mode [ 81.161870][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.173078][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.185381][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.200064][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.233053][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.240559][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.247819][ T5836] bridge_slave_1: entered allmulticast mode [ 81.254891][ T5836] bridge_slave_1: entered promiscuous mode [ 81.310093][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.317727][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.324849][ T5853] bridge_slave_0: entered allmulticast mode [ 81.332322][ T5853] bridge_slave_0: entered promiscuous mode [ 81.341712][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.349087][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.356223][ T5853] bridge_slave_1: entered allmulticast mode [ 81.363661][ T5853] bridge_slave_1: entered promiscuous mode [ 81.400822][ T5838] team0: Port device team_slave_0 added [ 81.409505][ T5838] team0: Port device team_slave_1 added [ 81.477814][ T5837] team0: Port device team_slave_0 added [ 81.501607][ T5845] team0: Port device team_slave_0 added [ 81.509918][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.522334][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.533955][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.545686][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.556017][ T5837] team0: Port device team_slave_1 added [ 81.574489][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.581770][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.607836][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.621223][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.628307][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.654296][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.667156][ T5845] team0: Port device team_slave_1 added [ 81.715688][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.722693][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.748839][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.800357][ T5853] team0: Port device team_slave_0 added [ 81.819353][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.826482][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.837932][ T5157] Bluetooth: hci0: command tx timeout [ 81.856429][ T5846] Bluetooth: hci3: command tx timeout [ 81.858100][ T5157] Bluetooth: hci2: command tx timeout [ 81.863353][ T5846] Bluetooth: hci1: command tx timeout [ 81.869358][ T5157] Bluetooth: hci4: command tx timeout [ 81.878641][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.899165][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.906119][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.932528][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.945444][ T5853] team0: Port device team_slave_1 added [ 81.953838][ T5836] team0: Port device team_slave_0 added [ 81.962186][ T5836] team0: Port device team_slave_1 added [ 82.011796][ T5838] hsr_slave_0: entered promiscuous mode [ 82.018935][ T5838] hsr_slave_1: entered promiscuous mode [ 82.025820][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.033547][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.059694][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.155066][ T5837] hsr_slave_0: entered promiscuous mode [ 82.161745][ T5837] hsr_slave_1: entered promiscuous mode [ 82.168650][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.176338][ T5837] Cannot create hsr debugfs directory [ 82.183377][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.190379][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.216523][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.229023][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.236122][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.262397][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.286266][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.293318][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.319361][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.331904][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.338945][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.364920][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.502233][ T5845] hsr_slave_0: entered promiscuous mode [ 82.508860][ T5845] hsr_slave_1: entered promiscuous mode [ 82.514878][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.523213][ T5845] Cannot create hsr debugfs directory [ 82.565058][ T5836] hsr_slave_0: entered promiscuous mode [ 82.571383][ T5836] hsr_slave_1: entered promiscuous mode [ 82.578402][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.585959][ T5836] Cannot create hsr debugfs directory [ 82.692424][ T5853] hsr_slave_0: entered promiscuous mode [ 82.699633][ T5853] hsr_slave_1: entered promiscuous mode [ 82.705711][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.713785][ T5853] Cannot create hsr debugfs directory [ 83.098428][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.110333][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.135801][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.147164][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.196211][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.215388][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.232665][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.253171][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.329168][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.342568][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.355894][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.369148][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.499676][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.510640][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.522319][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.534228][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.565735][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.642558][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.663434][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.672787][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.684680][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.704735][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.717831][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.755365][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.762660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.804734][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.825921][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.833055][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.865480][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.875678][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.882819][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.911518][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.918499][ T5157] Bluetooth: hci4: command tx timeout [ 83.926498][ T5157] Bluetooth: hci1: command tx timeout [ 83.928470][ T5846] Bluetooth: hci3: command tx timeout [ 83.931901][ T5157] Bluetooth: hci0: command tx timeout [ 83.937418][ T5856] Bluetooth: hci2: command tx timeout [ 83.945594][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.955284][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.004717][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.011834][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.031312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.038493][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.109937][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.263947][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.282282][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.374517][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.399303][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.426494][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.433654][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.520445][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.527652][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.566840][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.574006][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.591338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.598501][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.701096][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.712795][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.773097][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.900884][ T5836] veth0_vlan: entered promiscuous mode [ 84.925946][ T5836] veth1_vlan: entered promiscuous mode [ 84.946430][ T5838] veth0_vlan: entered promiscuous mode [ 84.986285][ T5838] veth1_vlan: entered promiscuous mode [ 85.120384][ T5836] veth0_macvtap: entered promiscuous mode [ 85.160655][ T5836] veth1_macvtap: entered promiscuous mode [ 85.187866][ T5838] veth0_macvtap: entered promiscuous mode [ 85.222341][ T5838] veth1_macvtap: entered promiscuous mode [ 85.313337][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.325309][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.344212][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.353471][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.363328][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.372128][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.401382][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.415403][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.428465][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.466207][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.488816][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.499229][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.508481][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.518099][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.574782][ T5837] veth0_vlan: entered promiscuous mode [ 85.659685][ T5837] veth1_vlan: entered promiscuous mode [ 85.706107][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.719278][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.744015][ T5845] veth0_vlan: entered promiscuous mode [ 85.785948][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.793959][ T5853] veth0_vlan: entered promiscuous mode [ 85.800976][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.814150][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.830960][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.850120][ T5853] veth1_vlan: entered promiscuous mode [ 85.865313][ T5845] veth1_vlan: entered promiscuous mode [ 85.876904][ T5837] veth0_macvtap: entered promiscuous mode [ 85.912978][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.914290][ T5837] veth1_macvtap: entered promiscuous mode [ 85.969217][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.982925][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.996994][ T5856] Bluetooth: hci2: command tx timeout [ 85.997839][ T5157] Bluetooth: hci0: command tx timeout [ 86.002407][ T5856] Bluetooth: hci3: command tx timeout [ 86.007945][ T5157] Bluetooth: hci4: command tx timeout [ 86.007978][ T5157] Bluetooth: hci1: command tx timeout [ 86.030541][ T5853] veth0_macvtap: entered promiscuous mode [ 86.093958][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.117185][ T5853] veth1_macvtap: entered promiscuous mode [ 86.128416][ T5959] netlink: 81 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.141481][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.172268][ T5845] veth0_macvtap: entered promiscuous mode [ 86.202270][ T5845] veth1_macvtap: entered promiscuous mode [ 86.243277][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.257552][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.266279][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.284631][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.314992][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.349633][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.372853][ T5853] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.400805][ T5853] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.425004][ T5853] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.434754][ T5853] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.443676][ T5967] x_tables: duplicate underflow at hook 1 [ 86.528160][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.623786][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.649009][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 86.675029][ T5974] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 86.695704][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.724739][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.747575][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.756299][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.927872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.941761][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.157564][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.165439][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.177647][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.185495][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.258451][ T5993] syzkaller0: create flow: hash 1964337484 index 1 [ 87.463540][ T5991] syzkaller0: delete flow: hash 1964337484 index 1 [ 87.563858][ T6008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 88.077117][ T5846] Bluetooth: hci4: command tx timeout [ 88.082662][ T5846] Bluetooth: hci0: command tx timeout [ 88.082684][ T5157] Bluetooth: hci2: command tx timeout [ 88.088406][ T5848] Bluetooth: hci3: command tx timeout [ 88.098950][ T5856] Bluetooth: hci1: command tx timeout [ 88.336546][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.344736][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.352042][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.352066][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.525927][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.555020][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.594105][ T6013] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 88.632798][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 88.714705][ T6022] Bluetooth: MGMT ver 1.23 [ 88.823176][ T6023] nbd: must specify an index to disconnect [ 89.062676][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.095266][ T6035] xt_bpf: check failed: parse error [ 89.388337][ T6049] netlink: 11 bytes leftover after parsing attributes in process `syz.2.22'. [ 89.408266][ T6049] netlink: 11 bytes leftover after parsing attributes in process `syz.2.22'. [ 89.432375][ T6047] Zero length message leads to an empty skb [ 89.515541][ T6058] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 89.566216][ T6058] team0: Device ipvlan1 failed to register rx_handler [ 90.128491][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 90.579781][ T6110] netlink: 'syz.4.40': attribute type 142 has an invalid length. [ 90.591711][ C0] vcan0: j1939_tp_rxtimer: 0xffff888141bbe400: rx timeout, send abort [ 90.600939][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888141bbe400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.614723][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 90.652836][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 90.815184][ T6117] netlink: 284 bytes leftover after parsing attributes in process `syz.3.41'. [ 91.259653][ T6140] syz.4.49 uses obsolete (PF_INET,SOCK_PACKET) [ 91.350546][ T6147] __nla_validate_parse: 1 callbacks suppressed [ 91.350565][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 91.368898][ T6148] netlink: 'syz.0.51': attribute type 21 has an invalid length. [ 91.695410][ T24] cfg80211: failed to load regulatory.db [ 91.763655][ T6166] raw_sendmsg: syz.2.57 forgot to set AF_INET. Fix it! [ 92.108793][ T6184] netlink: 'syz.2.66': attribute type 1 has an invalid length. [ 92.125631][ T6184] netlink: 244 bytes leftover after parsing attributes in process `syz.2.66'. [ 92.363282][ T6200] netlink: 128 bytes leftover after parsing attributes in process `syz.4.70'. [ 92.375237][ T6200] netlink: 20 bytes leftover after parsing attributes in process `syz.4.70'. [ 92.515849][ T6208] netlink: 2 bytes leftover after parsing attributes in process `syz.2.71'. [ 92.564397][ T6208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 93.419264][ T6253] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 93.502288][ T6253] netlink: 224 bytes leftover after parsing attributes in process `syz.1.83'. [ 93.524559][ T10] IPVS: starting estimator thread 0... [ 93.557825][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 93.642480][ T6268] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.646622][ T6261] IPVS: using max 31 ests per chain, 74400 per kthread [ 94.352812][ T6295] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 94.590830][ T6298] tap0: tun_chr_ioctl cmd 1074025676 [ 94.605931][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 94.615891][ T6298] tap0: owner set to 0 [ 95.686542][ T5856] Bluetooth: hci4: command tx timeout [ 95.984476][ T6334] sctp: [Deprecated]: syz.1.113 (pid 6334) Use of int in max_burst socket option. [ 95.984476][ T6334] Use struct sctp_assoc_value instead [ 96.007661][ T6338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.111'. [ 96.270780][ T6355] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 96.274866][ T6359] openvswitch: netlink: Key type 29 is not supported [ 96.290566][ T6359] tipc: Started in network mode [ 96.295889][ T6359] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 96.303691][ T6359] tipc: Enabled bearer , priority 10 [ 96.430801][ T6364] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 96.625660][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 97.124788][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 97.182651][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 97.428521][ T43] tipc: Node number set to 10463914 [ 97.704476][ T6415] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.137'. [ 98.319229][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'. [ 98.390565][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 98.505333][ T6444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.147'. [ 98.580888][ T6464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.608173][ T6464] netlink: 44 bytes leftover after parsing attributes in process `syz.2.151'. [ 98.739751][ T6469] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 98.784353][ T6471] netlink: 32 bytes leftover after parsing attributes in process `syz.0.155'. [ 99.127388][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.4.161'. [ 99.349350][ T6506] netlink: 'syz.3.165': attribute type 2 has an invalid length. [ 99.383351][ T6499] netlink: 'syz.0.163': attribute type 7 has an invalid length. [ 99.392051][ T6504] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 99.399961][ T6499] netlink: 'syz.0.163': attribute type 8 has an invalid length. [ 99.408803][ T6511] netlink: 'syz.3.165': attribute type 7 has an invalid length. [ 99.409466][ T6504] netlink: 'syz.2.162': attribute type 2 has an invalid length. [ 99.425909][ T6497] netlink: 'syz.2.162': attribute type 1 has an invalid length. [ 99.434235][ T6497] netlink: 'syz.2.162': attribute type 2 has an invalid length. [ 99.450469][ T6512] netlink: 'syz.4.166': attribute type 12 has an invalid length. [ 99.465740][ T6511] : entered promiscuous mode [ 99.523828][ T6519] pimreg3: entered allmulticast mode [ 99.674904][ T6524] x_tables: duplicate entry at hook 1 [ 99.718262][ T6528] team0: Device gtp0 is of different type [ 100.256292][ T6564] netlink: zone id is out of range [ 100.273238][ T6564] netlink: zone id is out of range [ 100.281995][ T6564] netlink: zone id is out of range [ 100.292463][ T6564] netlink: zone id is out of range [ 100.302296][ T6564] netlink: zone id is out of range [ 100.311248][ T6564] netlink: zone id is out of range [ 100.318496][ T6557] IPVS: length: 8 != 1152 [ 100.361341][ T6568] Cannot find set identified by id 0 to match [ 100.363669][ T6563] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.386152][ C1] Illegal XDP return value 16128 on prog (id 99) dev veth0_to_bridge, expect packet loss! [ 100.397797][ T6567] Cannot find set identified by id 0 to match [ 100.560401][ T6578] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 100.584054][ T6578] veth1_vlan: entered allmulticast mode [ 100.599373][ T6578] team0: Device veth1_vlan failed to register rx_handler [ 100.804563][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.915063][ T6586] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 100.923967][ T6020] IPVS: starting estimator thread 0... [ 100.962806][ T6591] bond1: (slave gretap1): making interface the new active one [ 100.979221][ T6591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.036769][ T6599] IPVS: using max 39 ests per chain, 93600 per kthread [ 101.235581][ T6609] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.305425][ T6609] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.345232][ T6614] tipc: New replicast peer: 255.255.255.255 [ 101.355742][ T6614] tipc: Enabled bearer , priority 10 [ 101.726731][ T6638] __nla_validate_parse: 14 callbacks suppressed [ 101.726751][ T6638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 101.732347][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.2.207'. [ 101.757899][ T6640] tap0: tun_chr_ioctl cmd 1074025676 [ 101.763295][ T6640] tap0: owner set to 0 [ 101.960059][ T6658] netlink: 68 bytes leftover after parsing attributes in process `syz.3.214'. [ 102.003542][ T6664] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.215'. [ 102.003916][ T6658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.214'. [ 102.027955][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.215'. [ 102.046897][ T6658] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 102.077749][ T6664] netlink: 404 bytes leftover after parsing attributes in process `syz.2.215'. [ 102.097328][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 102.121783][ T6664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.215'. [ 102.154315][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.219'. [ 102.165103][ T6670] bridge0: entered allmulticast mode [ 102.174751][ T6670] bridge_slave_1: left allmulticast mode [ 102.183232][ T6670] bridge_slave_1: left promiscuous mode [ 102.192074][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.229338][ T6670] bridge_slave_0: left allmulticast mode [ 102.241093][ T6670] bridge_slave_0: left promiscuous mode [ 102.247324][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.280661][ T6682] netlink: 'syz.3.221': attribute type 11 has an invalid length. [ 102.308178][ T6670] bridge0 (unregistering): left allmulticast mode [ 102.924366][ T6715] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 102.932521][ T6715] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 102.954059][ T6714] warning: `syz.1.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.053556][ T6720] : renamed from bond0 (while UP) [ 105.047337][ T6819] syzkaller1: entered promiscuous mode [ 105.052881][ T6819] syzkaller1: entered allmulticast mode [ 105.397967][ T6859] x_tables: duplicate underflow at hook 1 [ 105.696560][ T6876] validate_nla: 7 callbacks suppressed [ 105.696579][ T6876] netlink: 'syz.2.282': attribute type 28 has an invalid length. [ 105.967871][ T6902] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 107.522776][ T6936] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 107.531161][ T6951] __nla_validate_parse: 20 callbacks suppressed [ 107.531181][ T6951] netlink: 52 bytes leftover after parsing attributes in process `syz.1.305'. [ 107.699211][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 107.726698][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.310'. [ 107.810385][ T9] IPVS: starting estimator thread 0... [ 107.887565][ T6979] Bluetooth: MGMT ver 1.23 [ 107.898217][ T6975] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.165946][ T7011] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.221624][ T7013] netlink: 'syz.1.324': attribute type 1 has an invalid length. [ 108.447874][ T7029] nbd: must specify an index to disconnect [ 108.461479][ T7029] nbd: must specify an index to disconnect [ 108.517644][ T7036] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 108.542090][ T7037] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 108.686766][ T7041] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 108.695341][ T7041] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 108.779447][ T7053] bond0: (slave bond_slave_0): Releasing backup interface [ 108.809472][ T7053] bond0: (slave bond_slave_1): Releasing backup interface [ 108.833861][ T7053] team0: Port device team_slave_0 removed [ 108.851316][ T7053] team0: Port device team_slave_1 removed [ 108.859656][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.867833][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.877733][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.885244][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.409836][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'. [ 109.509115][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.352'. [ 109.533836][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'. [ 109.670462][ T7104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 109.753008][ T7108] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 109.789338][ T7114] openvswitch: netlink: Message has 199 unknown bytes. [ 109.801825][ T7114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.826828][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 109.879243][ T7115] sctp: [Deprecated]: syz.4.359 (pid 7115) Use of int in maxseg socket option. [ 109.879243][ T7115] Use struct sctp_assoc_value instead [ 109.906089][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.362'. [ 110.015342][ T7119] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 110.348668][ T7145] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.375530][ T7146] netlink: 'syz.1.369': attribute type 5 has an invalid length. [ 110.414092][ T7146] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 110.454555][ T7146] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 110.463813][ T7146] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 110.486629][ T7146] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 110.496063][ T7146] geneve2: entered promiscuous mode [ 110.523650][ T7146] geneve2: entered allmulticast mode [ 112.193865][ T7180] netlink: 'syz.1.380': attribute type 1 has an invalid length. [ 112.393859][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.639964][ T7216] __nla_validate_parse: 12 callbacks suppressed [ 112.639983][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 112.677900][ T7206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.390'. [ 112.709989][ T7216] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 112.806112][ T7216] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.910215][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 112.975872][ T7235] netlink: 'syz.3.397': attribute type 3 has an invalid length. [ 113.174912][ T7244] netlink: 20 bytes leftover after parsing attributes in process `syz.4.400'. [ 113.276906][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.285440][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.324108][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.346674][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.395984][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.438961][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.455577][ T7260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.480161][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.492126][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.504269][ T7252] netlink: 'syz.3.402': attribute type 1 has an invalid length. [ 113.716016][ T7270] netlink: 128 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.725482][ T7270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.753731][ T7270] netlink: 128 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.764418][ T7270] netlink: 3 bytes leftover after parsing attributes in process `syz.3.409'. [ 113.789636][ T7275] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.410'. [ 113.845446][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 113.923908][ T7281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 114.505888][ T7318] batman_adv: batadv0: Adding interface: team0 [ 114.522485][ T7318] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.570064][ T7318] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 114.836451][ T7345] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 115.286004][ T7376] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 115.548992][ T7392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 116.266518][ T7432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.027405][ T7479] xt_ecn: cannot match TCP bits for non-tcp packets [ 117.527322][ T7512] Cannot find del_set index 4 as target [ 117.676840][ T7522] __nla_validate_parse: 24 callbacks suppressed [ 117.676859][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 117.937575][ T7539] netlink: 56 bytes leftover after parsing attributes in process `syz.0.493'. [ 117.938499][ T7535] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.083832][ T7547] dvmrp1: entered allmulticast mode [ 118.200517][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 118.267181][ T7562] trusted_key: syz.4.502 sent an empty control message without MSG_MORE. [ 118.332551][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.502'. [ 118.378213][ T7564] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 118.656655][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 118.659532][ T7586] netlink: 284 bytes leftover after parsing attributes in process `syz.0.509'. [ 118.825704][ T7592] validate_nla: 74 callbacks suppressed [ 118.825720][ T7592] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 118.847750][ T7592] netlink: 224 bytes leftover after parsing attributes in process `syz.4.513'. [ 118.939339][ T7603] netlink: 'syz.3.517': attribute type 10 has an invalid length. [ 118.988169][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.999983][ T7603] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.157918][ T7618] openvswitch: netlink: IPv6 tunnel dst address is zero [ 119.167942][ T7618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.522'. [ 119.206928][ T7621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.521'. [ 119.219137][ T7621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.521'. [ 119.593168][ T7650] syz_tun: entered allmulticast mode [ 119.614446][ T7649] syz_tun: left allmulticast mode [ 121.565512][ T7671] batman_adv: batadv0: Removing interface: team0 [ 121.575014][ T7671] bridge_slave_0: left allmulticast mode [ 121.580838][ T7671] bridge_slave_0: left promiscuous mode [ 121.586960][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.599358][ T7671] bridge_slave_1: left allmulticast mode [ 121.605049][ T7671] bridge_slave_1: left promiscuous mode [ 121.612771][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.641907][ T7671] : (slave bond_slave_0): Releasing backup interface [ 121.662735][ T7671] : (slave bond_slave_1): Releasing backup interface [ 121.691913][ T7671] team0: Port device team_slave_0 removed [ 121.705440][ T7671] team0: Port device team_slave_1 removed [ 121.728311][ T7671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.735736][ T7671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.766923][ T7671] bond1: (slave gretap1): Releasing active interface [ 121.792069][ T7696] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 122.074094][ T7717] gretap0: entered promiscuous mode [ 122.095924][ T7717] 0ªX¹¦D: renamed from gretap0 [ 122.113096][ T7717] 0ªX¹¦D: left promiscuous mode [ 122.121133][ T7717] 0ªX¹¦D: entered allmulticast mode [ 122.149759][ T7717] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 122.836673][ T7759] can: request_module (can-proto-0) failed. [ 122.863358][ T7765] __nla_validate_parse: 4 callbacks suppressed [ 122.863373][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.562'. [ 123.152427][ T7785] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 123.291304][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.568'. [ 123.309378][ T7798] netlink: 16 bytes leftover after parsing attributes in process `syz.1.568'. [ 123.319100][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.568'. [ 123.328436][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.568'. [ 123.588921][ T7814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.607868][ T7815] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.578'. [ 123.610338][ T7814] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.578'. [ 123.617372][ T7815] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.617396][ T7815] openvswitch: netlink: Duplicate key (type 0). [ 123.631029][ T7814] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 123.652605][ T7814] openvswitch: netlink: Duplicate key (type 0). [ 124.008886][ T7837] netlink: 'syz.2.583': attribute type 16 has an invalid length. [ 124.017150][ T7837] netlink: 'syz.2.583': attribute type 17 has an invalid length. [ 124.259934][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'. [ 124.312857][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'. [ 124.699213][ T7867] tipc: Enabling of bearer rejected, failed to enable media [ 125.039083][ T7884] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 125.040074][ T24] IPVS: starting estimator thread 0... [ 125.078204][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.1.602'. [ 125.186517][ T7889] IPVS: using max 26 ests per chain, 62400 per kthread [ 125.706273][ T7927] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 125.899367][ T30] audit: type=1107 audit(1750916430.388:2): pid=7933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ÿ[ÂÞš5÷Ÿ˜øQQ¦SÝëoÌ9öÞ„JðjàïãÃÒGA}d.鸮1™¨§Õ(´Xem· JÈ7)éí˜ÿ×QoÍð„Hö_©g]1(äPy{AkÔœ' [ 125.928992][ T7934] bridge0: port 3(30ªX¹¦D) entered blocking state [ 125.955489][ T7934] bridge0: port 3(30ªX¹¦D) entered disabled state [ 125.974161][ T7934] 0ªX¹¦D: entered promiscuous mode [ 125.994532][ T7936] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 126.911383][ T7954] netlink: 'syz.1.623': attribute type 11 has an invalid length. [ 127.665963][ T7982] x_tables: duplicate entry at hook 1 [ 127.973707][ T8007] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 129.258466][ T8029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.692787][ T8056] ip6gre1: entered allmulticast mode [ 129.801989][ T8057] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 130.112384][ T8076] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 130.127340][ T8076] __nla_validate_parse: 3 callbacks suppressed [ 130.127403][ T8076] netlink: 228 bytes leftover after parsing attributes in process `syz.3.658'. [ 130.143811][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.658'. [ 130.401386][ T8096] netlink: 'syz.3.664': attribute type 11 has an invalid length. [ 130.439791][ T8096] netlink: 224 bytes leftover after parsing attributes in process `syz.3.664'. [ 130.795678][ T8120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.671'. [ 130.823909][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.671'. [ 130.938283][ T8127] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.674'. [ 130.967717][ T8131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 131.186002][ T8146] : entered promiscuous mode [ 131.290988][ T8155] netlink: 56 bytes leftover after parsing attributes in process `syz.2.682'. [ 131.303207][ T8155] netlink: 56 bytes leftover after parsing attributes in process `syz.2.682'. [ 131.417375][ T8160] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 131.459030][ T8160] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 131.467335][ T8160] netlink: 'syz.3.683': attribute type 10 has an invalid length. [ 131.649517][ T8177] netlink: 191164 bytes leftover after parsing attributes in process `syz.3.688'. [ 131.963986][ T8196] veth0: entered promiscuous mode [ 131.976258][ T8199] netlink: 'syz.1.694': attribute type 9 has an invalid length. [ 132.093193][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.103451][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.123426][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.134312][ T8207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.203264][ T8206] dvmrp0: entered allmulticast mode [ 132.211889][ T8195] veth0: left promiscuous mode [ 132.366112][ T8221] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.424376][ T8221] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.643023][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.649812][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.518212][ T8313] netlink: 'syz.3.732': attribute type 3 has an invalid length. [ 133.620030][ T8316] bridge_slave_0: left allmulticast mode [ 133.627806][ T8316] bridge_slave_0: left promiscuous mode [ 133.636310][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.649676][ T8316] bridge_slave_1: left allmulticast mode [ 133.655715][ T8316] bridge_slave_1: left promiscuous mode [ 133.662813][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.678865][ T8316] bond0: (slave bond_slave_0): Releasing backup interface [ 133.691310][ T8316] bond0: (slave bond_slave_1): Releasing backup interface [ 133.718833][ T8316] team0: Port device team_slave_0 removed [ 133.736086][ T8316] team0: Port device team_slave_1 removed [ 133.743679][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.752095][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.762676][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.770957][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.027731][ T8333] netlink: 'syz.3.737': attribute type 1 has an invalid length. [ 134.765278][ T8377] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 134.779108][ T8377] netlink: 'syz.2.749': attribute type 3 has an invalid length. [ 134.985542][ T8393] netlink: 'syz.3.754': attribute type 21 has an invalid length. [ 135.114508][ T8401] batadv_slave_0: entered promiscuous mode [ 135.211740][ T8408] sctp: [Deprecated]: syz.4.760 (pid 8408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.211740][ T8408] Use struct sctp_sack_info instead [ 135.231785][ T8410] sctp: [Deprecated]: syz.4.760 (pid 8410) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.231785][ T8410] Use struct sctp_sack_info instead [ 135.554335][ T8433] netlink: 'syz.2.768': attribute type 39 has an invalid length. [ 135.564967][ T8434] netlink: 'syz.2.768': attribute type 39 has an invalid length. [ 135.643001][ T8439] __nla_validate_parse: 18 callbacks suppressed [ 135.643016][ T8439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.771'. [ 135.791460][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.774'. [ 135.892929][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 135.918029][ T8459] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 135.940324][ T8459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.161141][ T8478] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.783'. [ 136.284932][ T8486] netlink: 32 bytes leftover after parsing attributes in process `syz.4.784'. [ 136.356650][ T8494] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 136.598939][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.787'. [ 136.944678][ T8534] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 137.238282][ T8551] tipc: Enabled bearer , priority 0 [ 137.313147][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 137.351265][ T8551] syzkaller0: entered promiscuous mode [ 137.357917][ T8551] syzkaller0: entered allmulticast mode [ 137.364272][ T8551] tipc: Resetting bearer [ 137.454692][ T8544] tipc: Resetting bearer [ 137.702054][ T8578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.808'. [ 137.944365][ T43] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 137.957980][ T43] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 138.655970][ T8544] tipc: Disabling bearer [ 138.914633][ T8608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 138.948590][ T8608] netlink: 'syz.2.818': attribute type 1 has an invalid length. [ 138.956530][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 139.334578][ T8629] clip:clip_setentry: non-CLIP VCC [ 139.630005][ T8656] bond1: entered promiscuous mode [ 139.639838][ T8656] bond1: entered allmulticast mode [ 139.654070][ T8656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.757955][ T8656] bond1 (unregistering): Released all slaves [ 139.953487][ T8675] xt_time: unknown flags 0x4 [ 140.068140][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.889622][ T8709] __nla_validate_parse: 6 callbacks suppressed [ 140.889642][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.848'. [ 140.917351][ T8709] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 141.066469][ T8714] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 141.076955][ T8714] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 141.152009][ T8716] netlink: 9 bytes leftover after parsing attributes in process `syz.4.850'. [ 141.219255][ T8716] gretap0: entered promiscuous mode [ 141.257219][ T8722] netlink: 5 bytes leftover after parsing attributes in process `syz.4.850'. [ 141.277053][ T8722] 0ªX¹¦D: renamed from gretap0 [ 141.292256][ T8722] 0ªX¹¦D: left promiscuous mode [ 141.311419][ T8722] 0ªX¹¦D: entered allmulticast mode [ 141.328566][ T8722] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 141.498993][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 141.525160][ T8740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.186263][ T8773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 142.277703][ T8780] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 142.305972][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 142.346954][ T8788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 142.355763][ T8788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.870'. [ 142.468800][ T8794] netlink: 164 bytes leftover after parsing attributes in process `syz.0.871'. [ 142.618194][ T8808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 142.627152][ T8807] netlink: 176 bytes leftover after parsing attributes in process `syz.1.875'. [ 142.857258][ T8820] netlink: 'syz.0.882': attribute type 18 has an invalid length. [ 142.883827][ T8821] netlink: 'syz.0.882': attribute type 18 has an invalid length. [ 142.936981][ T8820] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.946623][ T8820] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.955900][ T8820] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.965276][ T8820] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.035882][ T8830] xt_CT: No such helper "snmp" [ 143.145219][ T8843] netlink: 'syz.3.886': attribute type 25 has an invalid length. [ 143.330126][ T8854] netlink: 'syz.0.889': attribute type 8 has an invalid length. [ 143.359224][ T8854] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.389221][ T8857] macvlan2: entered promiscuous mode [ 143.394581][ T8857] macvlan2: entered allmulticast mode [ 143.421054][ T8861] macvlan3: entered promiscuous mode [ 143.436002][ T8861] macvlan3: entered allmulticast mode [ 143.469855][ T8859] sch_fq: defrate 0 ignored. [ 143.555776][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.655816][ T8878] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 143.747404][ T3563] wlan1: Trigger new scan to find an IBSS to join [ 144.653744][ T8933] xt_time: unknown flags 0x4 [ 145.396302][ T8987] 8021q: VLANs not supported on lo [ 145.658588][ T8996] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.958985][ T9007] __nla_validate_parse: 9 callbacks suppressed [ 145.959003][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'. [ 145.976072][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 146.661481][ T9060] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 146.703728][ T9060] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 146.874626][ T9072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.013594][ T9073] netlink: 'syz.3.938': attribute type 28 has an invalid length. [ 147.068711][ T9081] netlink: 'syz.4.939': attribute type 6 has an invalid length. [ 147.139716][ T9085] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 3, id = 0 [ 147.257760][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 147.445494][ T9095] ip6t_rpfilter: unknown options [ 147.603502][ T9107] netlink: zone id is out of range [ 147.769123][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 147.798414][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 148.039194][ T9127] netlink: 'syz.3.952': attribute type 1 has an invalid length. [ 148.538760][ T9130] SET target dimension over the limit! [ 148.727209][ T12] wlan1: Trigger new scan to find an IBSS to join [ 149.657305][ T13] wlan1: Creating new IBSS network, BSSID 06:41:5f:66:e3:44 [ 149.765751][ T9146] xt_CT: No such helper "snmp" [ 149.774962][ T9153] netlink: 8210 bytes leftover after parsing attributes in process `syz.0.958'. [ 149.808451][ T9154] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 149.816211][ T9147] netlink: 8210 bytes leftover after parsing attributes in process `syz.0.958'. [ 149.826648][ T9154] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 149.853484][ T9147] netlink: 24 bytes leftover after parsing attributes in process `syz.0.958'. [ 149.934208][ T9167] openvswitch: netlink: Unknown key attributes 2 [ 150.020896][ T9173] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.966'. [ 150.153977][ T9185] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 150.196414][ T9185] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 150.253590][ T9185] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 150.292925][ T9193] netlink: 'syz.2.971': attribute type 12 has an invalid length. [ 150.403568][ T9199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.974'. [ 150.851598][ T9231] netlink: 'syz.3.983': attribute type 8 has an invalid length. [ 150.882520][ T9231] bridge0: entered allmulticast mode [ 151.152835][ T9250] IPv6: sit2: Disabled Multicast RS [ 151.177478][ T9250] sit2: entered allmulticast mode [ 151.286532][ T9265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.329279][ T9268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.391979][ T9270] veth1_macvtap: left promiscuous mode [ 151.398240][ T9270] macsec0: entered promiscuous mode [ 151.403473][ T9270] macsec0: entered allmulticast mode [ 151.418378][ T9270] veth1_macvtap: entered promiscuous mode [ 151.424400][ T9270] veth1_macvtap: entered allmulticast mode [ 151.440665][ T9270] macsec0: left promiscuous mode [ 151.450809][ T9270] macsec0: left allmulticast mode [ 151.456268][ T9270] veth1_macvtap: left allmulticast mode [ 151.480637][ T9274] __nla_validate_parse: 2 callbacks suppressed [ 151.480653][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 151.516925][ T9274] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 151.527304][ T9274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.543834][ T9282] bridge_slave_0: default FDB implementation only supports local addresses [ 151.576982][ T9282] bridge_slave_0: default FDB implementation only supports local addresses [ 151.750468][ T9291] veth3: entered promiscuous mode [ 151.755650][ T9291] veth3: entered allmulticast mode [ 151.789334][ T9293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1003'. [ 151.809983][ T9293] +: renamed from syzkaller0 [ 152.091323][ T9303] x_tables: duplicate underflow at hook 2 [ 152.138295][ T9309] netlink: 'syz.3.1008': attribute type 1 has an invalid length. [ 152.153102][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1008'. [ 152.335321][ T9323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.550923][ T9338] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1016'. [ 152.566151][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 152.617720][ T9341] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1016'. [ 152.720940][ T9346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 153.023553][ T9373] netlink: 796 bytes leftover after parsing attributes in process `syz.1.1025'. [ 153.160081][ T9382] xt_ecn: cannot match TCP bits for non-tcp packets [ 153.219418][ T9385] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1030'. [ 153.299640][ T9390] netlink: 'syz.0.1033': attribute type 1 has an invalid length. [ 153.319015][ T9390] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1033'. [ 153.632047][ T9420] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 153.658234][ T9420] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 153.718350][ T9420] netlink: 'syz.0.1039': attribute type 13 has an invalid length. [ 153.860341][ T9434] xt_hashlimit: size too large, truncated to 1048576 [ 153.964809][ T9442] netlink: 'syz.4.1046': attribute type 4 has an invalid length. [ 154.026286][ T9440] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 154.051270][ T9446] netlink: 'syz.3.1049': attribute type 29 has an invalid length. [ 154.343688][ T9466] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 154.574832][ T9475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.599239][ T9475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.618252][ T9475] bond0 (unregistering): Released all slaves [ 154.783851][ T9490] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 155.275981][ T9525] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 155.332827][ T9526] nbd: couldn't find a device at index 0 [ 155.377899][ T9532] tipc: Trying to set illegal importance in message [ 155.489354][ T9535] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 155.758913][ T9553] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 156.094641][ T9579] syzkaller1: entered promiscuous mode [ 156.118591][ T9579] syzkaller1: entered allmulticast mode [ 156.135394][ T9580] 8021q: VLANs not supported on ip6_vti0 [ 156.298381][ T9592] netlink: 'syz.4.1091': attribute type 4 has an invalid length. [ 156.396163][ T9588] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 156.461811][ T9599] netlink: 'syz.4.1091': attribute type 21 has an invalid length. [ 156.605690][ T9602] __nla_validate_parse: 17 callbacks suppressed [ 156.605708][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1093'. [ 156.672199][ T9605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1095'. [ 156.714019][ T9605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1095'. [ 157.157574][ T9628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1102'. [ 157.173336][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1103'. [ 157.188595][ T9628] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 157.325611][ T9635] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 157.333855][ T9636] netlink: 'syz.4.1107': attribute type 1 has an invalid length. [ 157.352742][ T9636] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1107'. [ 157.477136][ T9645] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1108'. [ 157.632524][ T9655] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 157.643806][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1113'. [ 157.754477][ T9663] netlink: 'syz.1.1116': attribute type 7 has an invalid length. [ 157.768949][ T9664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1116'. [ 158.092221][ T9679] xt_CT: No such helper "syz0" [ 158.464014][ T9714] validate_nla: 1 callbacks suppressed [ 158.464031][ T9714] netlink: 'syz.3.1128': attribute type 4 has an invalid length. [ 158.571083][ T9722] netlink: 'syz.0.1130': attribute type 3 has an invalid length. [ 158.633042][ T9723] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 159.298812][ T9751] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1139'. [ 159.492724][ T9770] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 159.523109][ T9765] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 159.780869][ T9788] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.886083][ T9797] netlink: 'syz.2.1149': attribute type 13 has an invalid length. [ 159.896183][ T9797] netlink: 'syz.2.1149': attribute type 17 has an invalid length. [ 160.178353][ T9810] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.197776][ T9797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.684713][ T9829] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 161.706993][ T9829] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 161.792423][ T9840] bond0: entered promiscuous mode [ 161.809007][ T9840] bond0: entered allmulticast mode [ 161.814941][ T9840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.073606][ T9862] syz_tun: entered allmulticast mode [ 162.095704][ T9853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1170'. [ 162.129268][ T9851] syz_tun: left allmulticast mode [ 162.402175][ T9882] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 162.424505][ T9882] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 162.513819][ T9889] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 162.617302][ T9894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1183'. [ 162.633158][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1183'. [ 162.652495][ T9894] gretap1: entered promiscuous mode [ 162.658145][ T9894] gretap1: entered allmulticast mode [ 162.719323][ T9903] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1184'. [ 162.733434][ T9905] nbd: must specify an index to disconnect [ 162.758792][ T9903] vlan2: entered allmulticast mode [ 162.934986][ T9914] bond1: entered promiscuous mode [ 162.951995][ T9914] bond1: entered allmulticast mode [ 162.969556][ T9914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 163.325043][ T9941] netlink: 'syz.3.1195': attribute type 10 has an invalid length. [ 163.340055][ T9941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1195'. [ 163.375307][ T9946] sit0: entered promiscuous mode [ 163.407585][ T9946] netlink: 'syz.0.1193': attribute type 1 has an invalid length. [ 163.415371][ T9946] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1193'. [ 163.466086][ T9941] dummy0: entered promiscuous mode [ 163.483859][ T9941] bridge0: port 4(dummy0) entered blocking state [ 163.503836][ T9941] bridge0: port 4(dummy0) entered disabled state [ 163.517954][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 163.544178][ T9950] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1197'. [ 163.555436][ T9941] dummy0: entered allmulticast mode [ 163.910538][ T9977] xt_TPROXY: Can be used only with -p tcp or -p udp [ 164.053060][ T9983] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 164.288116][T10005] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 164.543283][T10024] tipc: Failed to remove unknown binding: 66,1,1/0:145376740/145376742 [ 164.556537][ T5856] Bluetooth: hci0: command tx timeout [ 164.563806][T10026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1224'. [ 164.573691][T10026] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1224'. [ 164.626743][T10028] tipc: Failed to remove unknown binding: 66,1,1/0:145376740/145376742 [ 164.635482][T10028] tipc: Failed to remove unknown binding: 66,1,1/0:145376740/145376742 [ 164.992692][T10051] netlink: 'syz.1.1231': attribute type 4 has an invalid length. [ 165.033774][T10051] netlink: 'syz.1.1231': attribute type 4 has an invalid length. [ 165.114868][T10057] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 165.227724][ T43] hid-generic 0005:15C2:000B.0002: item fetching failed at offset 0/1 [ 165.238818][ T43] hid-generic 0005:15C2:000B.0002: probe with driver hid-generic failed with error -22 [ 165.649491][T10092] syzkaller0: entered allmulticast mode [ 165.665495][T10089] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 165.731476][T10090] syzkaller0: left allmulticast mode [ 165.743211][T10089] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 166.052266][T10121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.126222][T10123] erspan0: entered allmulticast mode [ 166.138750][T10124] netlink: 'syz.0.1244': attribute type 39 has an invalid length. [ 166.253388][T10134] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 167.374978][T10205] __nla_validate_parse: 8 callbacks suppressed [ 167.374996][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 167.431874][T10209] netlink: 'syz.1.1276': attribute type 2 has an invalid length. [ 167.432487][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1275'. [ 167.457384][T10205] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1275'. [ 167.592109][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1283'. [ 167.647704][T10226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 167.671627][T10228] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1284'. [ 167.690843][T10226] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 167.708665][T10228] batadv0: entered promiscuous mode [ 167.717661][T10228] team0: entered promiscuous mode [ 167.724403][T10228] hsr1: entered promiscuous mode [ 167.737021][T10228] hsr1: entered allmulticast mode [ 167.742761][T10228] batadv0: entered allmulticast mode [ 167.749650][T10228] team0: entered allmulticast mode [ 167.759765][T10226] netlink: 'syz.4.1282': attribute type 4 has an invalid length. [ 167.839821][T10235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1286'. [ 167.859025][T10235] netlink: 'syz.1.1286': attribute type 7 has an invalid length. [ 167.905046][T10235] netlink: 'syz.1.1286': attribute type 8 has an invalid length. [ 167.936164][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 167.949006][T10237] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1285'. [ 167.991330][T10230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1285'. [ 168.287805][T10262] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 168.366662][T10271] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 169.294307][T10313] netlink: 'syz.4.1306': attribute type 2 has an invalid length. [ 169.303491][T10316] xfrm0: entered promiscuous mode [ 169.315443][T10316] xfrm0: entered allmulticast mode [ 169.349005][T10323] netlink: 'syz.4.1306': attribute type 2 has an invalid length. [ 169.684784][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579d4400: rx timeout, send abort [ 169.705525][T10333] vxcan3: entered allmulticast mode [ 169.911835][T10351] netlink: 'syz.1.1314': attribute type 1 has an invalid length. [ 170.029952][T10351] bond1: entered promiscuous mode [ 170.042619][T10351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.055206][T10338] infiniband syz0: set down [ 170.061912][T10338] infiniband syz0: added bond_slave_0 [ 170.168129][T10338] RDS/IB: syz0: added [ 170.173697][T10338] smc: adding ib device syz0 with port count 1 [ 170.182217][T10338] smc: ib device syz0 port 1 has pnetid [ 170.184870][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579d4800: rx timeout, send abort [ 170.520349][T10377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.527193][T10377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.536663][T10377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.543067][T10377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.580428][T10377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.586909][T10377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.627010][T10377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.633439][T10377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 170.651042][T10377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 170.678597][T10388] netlink: 'syz.0.1326': attribute type 21 has an invalid length. [ 170.696396][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880579d4800: abort rx timeout. Force session deactivation [ 171.336580][ T5913] IPVS: starting estimator thread 0... [ 171.346357][T10429] netlink: 'syz.0.1339': attribute type 5 has an invalid length. [ 171.393623][T10429] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 171.416670][T10429] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 171.426752][T10427] IPVS: using max 28 ests per chain, 67200 per kthread [ 171.455320][T10429] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 171.495273][T10429] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 171.516275][T10438] netlink: 'syz.3.1341': attribute type 11 has an invalid length. [ 171.524517][T10429] geneve2: entered promiscuous mode [ 171.554586][T10429] geneve2: entered allmulticast mode [ 171.692891][T10446] bridge0: port 1(batadv1) entered blocking state [ 171.702049][T10446] bridge0: port 1(batadv1) entered disabled state [ 171.713253][T10446] batadv1: entered allmulticast mode [ 171.724561][T10446] batadv1: entered promiscuous mode [ 171.797576][T10448] veth0: entered promiscuous mode [ 171.813893][T10445] veth0: left promiscuous mode [ 172.193961][ T1094] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 172.203894][ T1094] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 172.659898][T10489] __nla_validate_parse: 15 callbacks suppressed [ 172.659916][T10489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1356'. [ 172.749817][T10495] netlink: 'syz.4.1356': attribute type 2 has an invalid length. [ 172.760856][T10495] netlink: 'syz.4.1356': attribute type 1 has an invalid length. [ 173.359225][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1361'. [ 173.517215][T10515] tipc: MTU too low for tipc bearer [ 174.013770][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 174.038030][T10549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1372'. [ 174.102349][T10553] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 174.176536][T10553] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 174.210574][T10553] netlink: 'syz.2.1372': attribute type 1 has an invalid length. [ 174.235805][T10553] netlink: 'syz.2.1372': attribute type 2 has an invalid length. [ 174.355676][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 174.404867][T10570] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 174.602669][T10578] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.791544][T10596] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1389'. [ 174.888400][T10605] net_ratelimit: 67 callbacks suppressed [ 174.888416][T10605] openvswitch: netlink: IPv6 tunnel dst address is zero [ 174.992491][T10612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 175.044626][T10615] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1395'. [ 175.086657][T10615] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 175.100265][T10615] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1395'. [ 175.173579][T10625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1398'. [ 175.596186][T10650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.624185][T10713] validate_nla: 2 callbacks suppressed [ 176.624202][T10713] netlink: 'syz.1.1423': attribute type 1 has an invalid length. [ 177.015845][T10749] netlink: 'syz.1.1433': attribute type 24 has an invalid length. [ 177.127666][T10758] netlink: 'syz.2.1437': attribute type 58 has an invalid length. [ 177.208617][T10765] FAULT_INJECTION: forcing a failure. [ 177.208617][T10765] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 177.227363][T10765] CPU: 0 UID: 0 PID: 10765 Comm: syz.4.1439 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 177.227387][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.227404][T10765] Call Trace: [ 177.227414][T10765] [ 177.227421][T10765] dump_stack_lvl+0x189/0x250 [ 177.227459][T10765] ? __pfx____ratelimit+0x10/0x10 [ 177.227485][T10765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.227511][T10765] ? __pfx__printk+0x10/0x10 [ 177.227529][T10765] ? __might_fault+0xb0/0x130 [ 177.227557][T10765] should_fail_ex+0x414/0x560 [ 177.227583][T10765] _copy_from_iter+0x1db/0x16f0 [ 177.227617][T10765] ? policy_nodemask+0x27c/0x720 [ 177.227634][T10765] ? __pfx__copy_from_iter+0x10/0x10 [ 177.227665][T10765] ? set_page_refcounted+0xa0/0x1e0 [ 177.227682][T10765] ? page_copy_sane+0x4e/0x280 [ 177.227708][T10765] copy_page_from_iter+0xdd/0x170 [ 177.227738][T10765] tun_get_user+0x1c4d/0x3ce0 [ 177.227767][T10765] ? tun_get_user+0x693/0x3ce0 [ 177.227804][T10765] ? aa_file_perm+0x11f/0xed0 [ 177.227828][T10765] ? __pfx_tun_get_user+0x10/0x10 [ 177.227850][T10765] ? aa_file_perm+0x11f/0xed0 [ 177.227873][T10765] ? aa_file_perm+0x3e7/0xed0 [ 177.227908][T10765] ? ref_tracker_alloc+0x318/0x460 [ 177.227930][T10765] ? __lock_acquire+0xab9/0xd20 [ 177.227955][T10765] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 177.227983][T10765] ? tun_get+0x1c/0x2f0 [ 177.228013][T10765] ? tun_get+0x1c/0x2f0 [ 177.228037][T10765] ? tun_get+0x1c/0x2f0 [ 177.228066][T10765] tun_chr_write_iter+0x113/0x200 [ 177.228093][T10765] vfs_write+0x548/0xa90 [ 177.228124][T10765] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 177.228149][T10765] ? __pfx_vfs_write+0x10/0x10 [ 177.228190][T10765] ? __fget_files+0x2a/0x420 [ 177.228218][T10765] ksys_write+0x145/0x250 [ 177.228236][T10765] ? __pfx_ksys_write+0x10/0x10 [ 177.228249][T10765] ? rcu_is_watching+0x15/0xb0 [ 177.228280][T10765] ? do_syscall_64+0xbe/0x3b0 [ 177.228299][T10765] do_syscall_64+0xfa/0x3b0 [ 177.228313][T10765] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.228338][T10765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.228355][T10765] ? clear_bhb_loop+0x60/0xb0 [ 177.228376][T10765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.228392][T10765] RIP: 0033:0x7f6e1d78d3df [ 177.228411][T10765] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 177.228425][T10765] RSP: 002b:00007f6e1e6db000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 177.228443][T10765] RAX: ffffffffffffffda RBX: 00007f6e1d9b5fa0 RCX: 00007f6e1d78d3df [ 177.228455][T10765] RDX: 0000000000000046 RSI: 0000200000000580 RDI: 00000000000000c8 [ 177.228466][T10765] RBP: 00007f6e1e6db090 R08: 0000000000000000 R09: 0000000000000000 [ 177.228476][T10765] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 177.228486][T10765] R13: 0000000000000000 R14: 00007f6e1d9b5fa0 R15: 00007ffeaaa79f48 [ 177.228513][T10765] [ 177.699936][T10780] x_tables: duplicate underflow at hook 1 [ 177.971752][T10800] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 178.335396][T10822] netlink: 'syz.2.1457': attribute type 11 has an invalid length. [ 178.343714][T10822] __nla_validate_parse: 7 callbacks suppressed [ 178.343728][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1457'. [ 178.677287][T10844] netlink: 'syz.2.1465': attribute type 1 has an invalid length. [ 178.701529][T10844] netlink: 'syz.2.1465': attribute type 2 has an invalid length. [ 179.013517][T10871] netlink: 'syz.0.1476': attribute type 21 has an invalid length. [ 179.024307][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1476'. [ 179.139785][T10879] rdma_rxe: rxe_newlink: failed to add lo [ 179.211703][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1480'. [ 179.514279][T10901] can: request_module (can-proto-5) failed. [ 179.879982][T10931] Bluetooth: MGMT ver 1.23 [ 179.900597][T10929] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 179.934589][T10925] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1492'. [ 180.073748][T10918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.084167][T10918] bond1: (slave bond2): making interface the new active one [ 180.096755][T10947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1489'. [ 180.097600][T10918] bond1: (slave bond2): Enslaving as an active interface with an up link [ 180.115030][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 180.136817][T10929] bond1: (slave gretap0): Enslaving as a backup interface with an up link [ 180.168303][T10947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.237871][T10948] pimreg3: entered allmulticast mode [ 180.443734][T10961] netlink: 'syz.2.1502': attribute type 11 has an invalid length. [ 180.460496][T10961] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 180.477322][T10961] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1502'. [ 180.832031][T10985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1507'. [ 180.910651][T10995] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1510'. [ 181.002449][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 181.468090][T11030] sctp: [Deprecated]: syz.0.1523 (pid 11030) Use of int in max_burst socket option. [ 181.468090][T11030] Use struct sctp_assoc_value instead [ 181.699348][T11052] veth0: entered promiscuous mode [ 181.803931][T11059] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 181.822982][T11059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.609525][T11092] x_tables: duplicate underflow at hook 3 [ 182.691337][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 182.706589][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 182.722808][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.744801][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.752832][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.787626][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.796952][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.806057][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.815192][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.824330][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.833449][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.842589][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.851760][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 182.860911][T11100] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 184.120286][T11118] __nla_validate_parse: 71 callbacks suppressed [ 184.120303][T11118] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1547'. [ 184.135770][T11118] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1547'. [ 184.230450][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 184.291139][T11121] bond0: (slave macvlan2): Opening slave failed [ 184.482154][T11130] netlink: 'syz.0.1550': attribute type 21 has an invalid length. [ 184.493989][T11130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1550'. [ 184.802303][ T5856] Bluetooth: hci3: command tx timeout [ 186.038444][T11152] netlink: 'syz.2.1558': attribute type 4 has an invalid length. [ 186.543262][T11095] chnl_net:caif_netlink_parms(): no params data found [ 186.599891][T11182] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 186.666206][T11182] batadv1: left allmulticast mode [ 186.672050][T11182] batadv1: left promiscuous mode [ 186.702877][T11182] bridge0: port 1(batadv1) entered disabled state [ 186.722521][T11192] netlink: 'syz.0.1568': attribute type 10 has an invalid length. [ 186.877718][ T5856] Bluetooth: hci3: command tx timeout [ 187.009864][T11192] mac80211_hwsim hwsim4 wlan1: left allmulticast mode [ 187.019265][T11192] net_ratelimit: 3321 callbacks suppressed [ 187.019280][T11192] wlan1: mtu less than device minimum [ 187.032462][T11192] : (slave wlan1): Error -22 calling dev_set_mtu [ 187.165756][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'. [ 187.324038][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.334765][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.345816][T11095] bridge_slave_0: entered allmulticast mode [ 187.362740][T11095] bridge_slave_0: entered promiscuous mode [ 187.410555][T11211] tipc: Started in network mode [ 187.415479][T11211] tipc: Node identity ac1414aa, cluster identity 292 [ 187.423419][T11211] tipc: Enabled bearer , priority 10 [ 187.502947][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.516301][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.523591][T11095] bridge_slave_1: entered allmulticast mode [ 187.536132][T11095] bridge_slave_1: entered promiscuous mode [ 187.557767][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 187.567647][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1577'. [ 187.719359][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.772783][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.933435][T11095] team0: Port device team_slave_0 added [ 187.954714][T11095] team0: Port device team_slave_1 added [ 188.020890][T11252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1586'. [ 188.091477][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.096897][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 188.112630][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.165996][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.255637][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.281108][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.319776][T11273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1590'. [ 188.329199][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.407060][T11272] tap0: tun_chr_ioctl cmd 1074025677 [ 188.412697][T11272] tap0: linktype set to 65534 [ 188.480925][T11281] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 188.529358][T11272] team0: Refused to change device type [ 188.536444][ T10] tipc: Node number set to 2886997162 [ 188.652720][T11095] hsr_slave_0: entered promiscuous mode [ 188.660253][T11095] hsr_slave_1: entered promiscuous mode [ 188.675114][T11095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.689479][T11095] Cannot create hsr debugfs directory [ 188.974270][ T5856] Bluetooth: hci3: command tx timeout [ 189.235246][T11095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.433416][T11095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.581317][T11095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.616168][T11344] __nla_validate_parse: 2 callbacks suppressed [ 189.616182][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1610'. [ 189.657744][T11344] macvlan3: entered promiscuous mode [ 189.663844][T11344] macvlan3: entered allmulticast mode [ 189.698013][T11095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.891645][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 189.912585][T11363] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1613'. [ 190.230164][T11371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1616'. [ 190.243508][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 190.253297][T11371] netlink: 'syz.0.1616': attribute type 14 has an invalid length. [ 190.261848][T11371] netlink: 'syz.0.1616': attribute type 13 has an invalid length. [ 191.036912][ T5856] Bluetooth: hci3: command tx timeout [ 191.340475][T11344] vlan2: entered allmulticast mode [ 191.345637][T11344] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 191.370207][T11363] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 191.544660][T11377] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1617'. [ 191.584824][T11379] netlink: 'syz.2.1619': attribute type 9 has an invalid length. [ 191.594894][T11095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.607819][T11095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.652361][T11095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.680366][T11385] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1623'. [ 191.699398][T11095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 191.702467][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 191.787934][T11395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1622'. [ 191.830869][T11395] netlink: ct family unspecified [ 191.835874][T11395] openvswitch: netlink: Actions may not be safe on all matching packets [ 191.880253][T11398] tipc: Enabling of bearer rejected, already enabled [ 191.910931][T11398] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 191.965590][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.042652][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.101799][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.108969][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.195902][T11420] netlink: 'syz.0.1631': attribute type 5 has an invalid length. [ 192.212924][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.220125][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.230977][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1629'. [ 192.441535][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.584593][T11441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.846137][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.877334][T11457] unknown channel width for channel at 909000KHz? [ 192.904536][T11457] unknown channel width for channel at 909000KHz? [ 192.956760][T11457] netlink: 'syz.1.1639': attribute type 7 has an invalid length. [ 192.994724][T11095] veth0_vlan: entered promiscuous mode [ 193.053582][T11095] veth1_vlan: entered promiscuous mode [ 193.126528][T11095] veth0_macvtap: entered promiscuous mode [ 193.146228][T11095] veth1_macvtap: entered promiscuous mode [ 193.175270][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.196282][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.212469][T11095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.225242][T11095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.242217][T11095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.252470][T11095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.271658][T11473] netlink: 'syz.1.1648': attribute type 9 has an invalid length. [ 193.518475][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.553201][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.625997][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.652744][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.803231][T11497] netlink: 'syz.4.1655': attribute type 4 has an invalid length. [ 193.987189][T11502] syzkaller0: entered promiscuous mode [ 193.992723][T11502] syzkaller0: entered allmulticast mode [ 194.082928][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.089480][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.300673][T11523] sctp: [Deprecated]: syz.1.1668 (pid 11523) Use of int in max_burst socket option. [ 194.300673][T11523] Use struct sctp_assoc_value instead [ 194.650248][ T2997] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.973565][T11543] __nla_validate_parse: 10 callbacks suppressed [ 194.973582][T11543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 195.020708][T11552] xt_hashlimit: size too large, truncated to 1048576 [ 195.050468][ T2997] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.125928][T11557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 195.131691][T11555] : renamed from bridge_slave_0 (while UP) [ 195.191130][T11549] IPVS: stopping master sync thread 11557 ... [ 195.421310][ T2997] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.437105][ T5856] Bluetooth: hci4: link tx timeout [ 195.442912][ T5856] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 195.602170][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.603302][ T2997] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.614107][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.628564][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.652313][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.664719][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.842484][T11592] netlink: 'syz.2.1687': attribute type 4 has an invalid length. [ 195.951890][T11594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1688'. [ 195.985962][T11594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1688'. [ 195.996092][ T2997] bridge_slave_1: left allmulticast mode [ 196.011389][ T2997] bridge_slave_1: left promiscuous mode [ 196.036281][T11594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1688'. [ 196.042988][ T2997] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.100647][ T2997] bridge_slave_0: left allmulticast mode [ 196.119572][ T2997] bridge_slave_0: left promiscuous mode [ 196.125360][ T2997] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.313963][T11607] FAULT_INJECTION: forcing a failure. [ 196.313963][T11607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.347715][T11607] CPU: 1 UID: 0 PID: 11607 Comm: syz.2.1691 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 196.347742][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.347754][T11607] Call Trace: [ 196.347762][T11607] [ 196.347770][T11607] dump_stack_lvl+0x189/0x250 [ 196.347816][T11607] ? __pfx____ratelimit+0x10/0x10 [ 196.347847][T11607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.347876][T11607] ? __pfx__printk+0x10/0x10 [ 196.347911][T11607] should_fail_ex+0x414/0x560 [ 196.347942][T11607] _copy_to_user+0x31/0xb0 [ 196.347964][T11607] simple_read_from_buffer+0xe1/0x170 [ 196.347991][T11607] proc_fail_nth_read+0x1df/0x250 [ 196.348018][T11607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.348046][T11607] ? rw_verify_area+0x258/0x650 [ 196.348074][T11607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.348100][T11607] vfs_read+0x1fd/0x980 [ 196.348135][T11607] ? __pfx___mutex_lock+0x10/0x10 [ 196.348155][T11607] ? __pfx_vfs_read+0x10/0x10 [ 196.348186][T11607] ? __fget_files+0x2a/0x420 [ 196.348212][T11607] ? __fget_files+0x3a0/0x420 [ 196.348232][T11607] ? __fget_files+0x2a/0x420 [ 196.348264][T11607] ksys_read+0x145/0x250 [ 196.348284][T11607] ? __pfx_ksys_read+0x10/0x10 [ 196.348310][T11607] ? rcu_is_watching+0x15/0xb0 [ 196.348346][T11607] ? do_syscall_64+0xbe/0x3b0 [ 196.348368][T11607] do_syscall_64+0xfa/0x3b0 [ 196.348384][T11607] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.348413][T11607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.348438][T11607] ? clear_bhb_loop+0x60/0xb0 [ 196.348462][T11607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.348481][T11607] RIP: 0033:0x7f6e5b38d33c [ 196.348502][T11607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.348517][T11607] RSP: 002b:00007f6e591f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.348541][T11607] RAX: ffffffffffffffda RBX: 00007f6e5b5b6080 RCX: 00007f6e5b38d33c [ 196.348555][T11607] RDX: 000000000000000f RSI: 00007f6e591f60a0 RDI: 0000000000000006 [ 196.348566][T11607] RBP: 00007f6e591f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.348578][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.348589][T11607] R13: 0000000000000000 R14: 00007f6e5b5b6080 R15: 00007ffd7dab6488 [ 196.348621][T11607] [ 196.705222][T11612] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1695'. [ 196.967609][ T2997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.979066][ T2997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.989770][ T2997] bond0 (unregistering): Released all slaves [ 197.132019][T11621] netlink: 'syz.1.1697': attribute type 21 has an invalid length. [ 197.202135][T11621] netlink: 'syz.1.1697': attribute type 6 has an invalid length. [ 197.219951][T11621] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1697'. [ 197.310335][T11629] netlink: 'syz.1.1700': attribute type 24 has an invalid length. [ 197.415411][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 197.507417][T11639] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 197.529650][ T5856] Bluetooth: hci4: command 0x0405 tx timeout [ 197.739196][T11573] chnl_net:caif_netlink_parms(): no params data found [ 197.760022][ T5856] Bluetooth: hci3: command tx timeout [ 197.818929][T11649] x_tables: duplicate underflow at hook 2 [ 197.840755][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 198.028112][ T2997] hsr_slave_0: left promiscuous mode [ 198.047204][ T2997] hsr_slave_1: left promiscuous mode [ 198.063467][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.082997][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.101444][ T2997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.122294][ T2997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.149433][T11676] netlink: 'syz.1.1712': attribute type 4 has an invalid length. [ 198.179828][ T2997] veth1_macvtap: left promiscuous mode [ 198.185674][ T2997] veth0_macvtap: left promiscuous mode [ 198.195614][ T2997] veth1_vlan: left promiscuous mode [ 198.202681][ T2997] veth0_vlan: left promiscuous mode [ 198.631310][ T2997] team0 (unregistering): Port device team_slave_1 removed [ 198.665055][ T2997] team0 (unregistering): Port device team_slave_0 removed [ 199.169184][T11573] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.178555][T11573] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.185771][T11573] bridge_slave_0: entered allmulticast mode [ 199.245082][T11573] bridge_slave_0: entered promiscuous mode [ 199.293605][T11573] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.301647][T11573] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.310727][T11573] bridge_slave_1: entered allmulticast mode [ 199.335184][T11573] bridge_slave_1: entered promiscuous mode [ 199.350931][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1717'. [ 199.473110][T11711] netlink: 'syz.2.1719': attribute type 1 has an invalid length. [ 199.490378][T11715] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1720'. [ 199.522815][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.682941][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.740333][T11720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.837276][ T5856] Bluetooth: hci3: command tx timeout [ 199.939412][T11573] team0: Port device team_slave_0 added [ 199.963250][T11573] team0: Port device team_slave_1 added [ 200.067494][T11743] __nla_validate_parse: 3 callbacks suppressed [ 200.067510][T11743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1730'. [ 200.103501][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.121422][T11745] netlink: 'syz.1.1731': attribute type 23 has an invalid length. [ 200.136289][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.143489][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.173823][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.213803][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.227401][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.275717][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.307010][T11753] netlink: 320 bytes leftover after parsing attributes in process `syz.0.1734'. [ 200.361599][T11573] hsr_slave_0: entered promiscuous mode [ 200.368953][T11573] hsr_slave_1: entered promiscuous mode [ 200.375049][T11573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.382717][T11573] Cannot create hsr debugfs directory [ 200.398255][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 200.441226][T11754] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 200.841460][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1741'. [ 200.914350][T11791] netlink: 'syz.1.1743': attribute type 11 has an invalid length. [ 200.932222][T11791] netlink: 'syz.1.1743': attribute type 11 has an invalid length. [ 200.940975][T11791] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1743'. [ 200.955709][T11792] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1741'. [ 201.107479][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 201.133967][T11573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.154777][T11573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.187261][T11573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.209568][T11573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 201.425460][T11819] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1750'. [ 201.457196][T11573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.517909][T11573] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.535409][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.542607][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.555153][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 201.582168][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.589321][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.616242][T11823] team1: entered promiscuous mode [ 201.625792][T11823] team1: entered allmulticast mode [ 201.918364][ T5856] Bluetooth: hci3: command tx timeout [ 201.934135][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.985907][T11573] veth0_vlan: entered promiscuous mode [ 202.045815][T11573] veth1_vlan: entered promiscuous mode [ 202.125718][T11573] veth0_macvtap: entered promiscuous mode [ 202.146111][T11573] veth1_macvtap: entered promiscuous mode [ 202.153930][T11847] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 202.211618][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.237160][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.265536][T11573] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.290533][T11573] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.300371][T11573] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.314109][T11573] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.339571][T11857] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1760'. [ 202.530333][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.564529][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.749147][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.766519][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.864828][T11880] netlink: 'syz.4.1766': attribute type 1 has an invalid length. [ 203.273787][T11911] sit0: entered promiscuous mode [ 203.378180][T11911] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 203.399250][T11913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.034820][T11953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 204.056278][ T3563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.769484][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.783494][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.796273][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.818420][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.838909][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 205.572557][T11964] bridge3: entered promiscuous mode [ 205.583607][T11964] bridge3: entered allmulticast mode [ 205.673480][ T3563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.765129][T11978] __nla_validate_parse: 5 callbacks suppressed [ 205.765146][T11978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1789'. [ 205.866094][ T3563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.073311][ T3563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.176649][T11996] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1795'. [ 206.180597][T11998] netlink: 'syz.2.1796': attribute type 1 has an invalid length. [ 206.250131][T12001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.381379][T12005] unknown channel width for channel at 909000KHz? [ 206.391358][ T3563] bridge_slave_1: left allmulticast mode [ 206.397553][T12005] unknown channel width for channel at 909000KHz? [ 206.404972][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 206.411251][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 206.423569][ T3563] bridge_slave_1: left promiscuous mode [ 206.437740][ T3563] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.452200][ T3563] bridge_slave_0: left allmulticast mode [ 206.458076][ T3563] bridge_slave_0: left promiscuous mode [ 206.463892][ T3563] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.791145][ T3563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.803294][ T3563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.813424][ T3563] bond0 (unregistering): Released all slaves [ 206.827460][T12006] unknown channel width for channel at 909000KHz? [ 206.835133][T12006] unknown channel width for channel at 909000KHz? [ 206.894244][ T5846] Bluetooth: hci3: command tx timeout [ 207.000994][T12021] erspan0: entered allmulticast mode [ 207.164881][T12030] syzkaller0: entered promiscuous mode [ 207.174075][T12030] syzkaller0: entered allmulticast mode [ 207.218221][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1807'. [ 207.904506][T11966] chnl_net:caif_netlink_parms(): no params data found [ 208.003648][ T3563] hsr_slave_0: left promiscuous mode [ 208.020256][ T3563] hsr_slave_1: left promiscuous mode [ 208.031556][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.039372][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.053228][ T3563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.062025][ T3563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.102877][ T3563] veth1_macvtap: left promiscuous mode [ 208.112326][ T3563] veth0_macvtap: left promiscuous mode [ 208.119161][ T3563] veth1_vlan: left promiscuous mode [ 208.124578][ T3563] veth0_vlan: left promiscuous mode [ 208.702387][ T3563] team0 (unregistering): Port device team_slave_1 removed [ 208.741433][ T3563] team0 (unregistering): Port device team_slave_0 removed [ 208.960141][ T5846] Bluetooth: hci3: command tx timeout [ 209.100326][T12094] syz_tun: entered allmulticast mode [ 209.108875][T12090] syz_tun: left allmulticast mode [ 209.542625][T12125] netlink: 'syz.1.1831': attribute type 10 has an invalid length. [ 209.562885][T11966] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.584895][T11966] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.602635][T11966] bridge_slave_0: entered allmulticast mode [ 209.623350][T11966] bridge_slave_0: entered promiscuous mode [ 209.627065][T12131] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1831'. [ 209.650212][T11966] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.680232][T11966] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.710709][T11966] bridge_slave_1: entered allmulticast mode [ 209.732570][T11966] bridge_slave_1: entered promiscuous mode [ 209.769423][T12125] batman_adv: batadv0: Adding interface: team0 [ 209.805987][T12125] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.876574][T12125] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 209.926936][T12125] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.171112][T11966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.205855][T11966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.277263][T12148] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1835'. [ 210.319580][T11966] team0: Port device team_slave_0 added [ 210.343734][T11966] team0: Port device team_slave_1 added [ 210.459724][T12161] IPVS: length: 157 != 24 [ 210.491175][T12159] bond0: entered promiscuous mode [ 210.503292][T12159] bond0: left promiscuous mode [ 210.544273][T11966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.557871][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.584044][T11966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.599193][T11966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.626658][T11966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.634477][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 210.660370][T11966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.703801][T12169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 210.703882][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 210.726784][T12172] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1844'. [ 210.795236][T12169] geneve2: entered promiscuous mode [ 210.803380][T12169] geneve2: entered allmulticast mode [ 210.877967][T11966] hsr_slave_0: entered promiscuous mode [ 210.884412][T11966] hsr_slave_1: entered promiscuous mode [ 210.897282][T11966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.911501][T11966] Cannot create hsr debugfs directory [ 211.037121][ T5846] Bluetooth: hci3: command tx timeout [ 211.329739][T12188] vlan2: entered promiscuous mode [ 211.344756][T12188] vlan2: entered allmulticast mode [ 211.356254][T12188] hsr_slave_1: entered allmulticast mode [ 211.375135][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1850'. [ 211.682784][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.685745][T11966] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.721034][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.732682][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.734153][T11966] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.755395][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.765215][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.801254][T11966] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.825056][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 211.842062][T11966] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.975158][T12202] netlink: 'syz.4.1853': attribute type 11 has an invalid length. [ 211.983546][T12202] netlink: 'syz.4.1853': attribute type 11 has an invalid length. [ 211.991888][T12202] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1853'. [ 212.060488][T11966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.101512][T11966] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.133843][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.141028][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.212090][ T3031] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.219303][ T3031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.336951][T11966] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.360874][T11966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.413054][T12237] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 212.552127][T12242] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1865'. [ 212.822630][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1868'. [ 212.834610][T11966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.001863][T11966] veth0_vlan: entered promiscuous mode [ 213.030999][T11966] veth1_vlan: entered promiscuous mode [ 213.057864][T12197] chnl_net:caif_netlink_parms(): no params data found [ 213.071045][T12268] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 213.117220][ T5846] Bluetooth: hci3: command tx timeout [ 213.246857][T12277] netlink: 'syz.4.1872': attribute type 6 has an invalid length. [ 213.260384][T12197] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.267729][T12197] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.274941][T12197] bridge_slave_0: entered allmulticast mode [ 213.293551][T12197] bridge_slave_0: entered promiscuous mode [ 213.309119][T11966] veth0_macvtap: entered promiscuous mode [ 213.321262][T12197] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.328723][T12197] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.336008][T12197] bridge_slave_1: entered allmulticast mode [ 213.343814][T12197] bridge_slave_1: entered promiscuous mode [ 213.352128][T12281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.404450][T11966] veth1_macvtap: entered promiscuous mode [ 213.436720][T11966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.519371][T12197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.563158][T12197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.612062][T11966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.636273][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 213.718021][T12197] team0: Port device team_slave_0 added [ 213.736883][T12197] team0: Port device team_slave_1 added [ 213.740499][T12296] netlink: 'syz.1.1880': attribute type 32 has an invalid length. [ 213.752209][T12294] ================================================================== [ 213.760383][T12294] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 213.768043][T12294] Read of size 1 at addr ffff888140acdc30 by task syz.2.1879/12294 [ 213.773117][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1875'. [ 213.775930][T12294] [ 213.775942][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.2.1879 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 213.775969][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.775982][T12294] Call Trace: [ 213.775992][T12294] [ 213.776001][T12294] dump_stack_lvl+0x189/0x250 [ 213.776040][T12294] ? __virt_addr_valid+0x1c8/0x5c0 [ 213.776060][T12294] ? rcu_is_watching+0x15/0xb0 [ 213.776089][T12294] ? __kasan_check_byte+0x12/0x40 [ 213.776110][T12294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.776139][T12294] ? rcu_is_watching+0x15/0xb0 [ 213.776169][T12294] ? lock_release+0x4b/0x3e0 [ 213.776199][T12294] ? __virt_addr_valid+0x1c8/0x5c0 [ 213.776220][T12294] ? __virt_addr_valid+0x4a5/0x5c0 [ 213.776240][T12294] print_report+0xd2/0x2b0 [ 213.776268][T12294] ? rose_get_neigh+0x391/0x990 [ 213.776296][T12294] kasan_report+0x118/0x150 [ 213.776317][T12294] ? rose_get_neigh+0x391/0x990 [ 213.776358][T12294] rose_get_neigh+0x391/0x990 [ 213.776410][T12294] rose_connect+0x416/0x10a0 [ 213.776436][T12294] ? __pfx_current_check_access_socket+0x10/0x10 [ 213.776468][T12294] ? aa_sk_perm+0x81e/0x950 [ 213.776491][T12294] ? __might_fault+0xb0/0x130 [ 213.776510][T12294] ? __pfx_rose_connect+0x10/0x10 [ 213.776536][T12294] ? aa_af_perm+0x1f0/0x2b0 [ 213.776560][T12294] ? tomoyo_socket_connect_permission+0x164/0x290 [ 213.776597][T12294] ? bpf_lsm_socket_connect+0x9/0x20 [ 213.776627][T12294] __sys_connect+0x313/0x440 [ 213.776652][T12294] ? __pfx___sys_connect+0x10/0x10 [ 213.776682][T12294] ? rcu_is_watching+0x15/0xb0 [ 213.776716][T12294] __x64_sys_connect+0x7a/0x90 [ 213.776740][T12294] do_syscall_64+0xfa/0x3b0 [ 213.776759][T12294] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.776791][T12294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.776813][T12294] ? clear_bhb_loop+0x60/0xb0 [ 213.776837][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.776857][T12294] RIP: 0033:0x7f6e5b38e929 [ 213.776875][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.776895][T12294] RSP: 002b:00007f6e5c115038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 213.776917][T12294] RAX: ffffffffffffffda RBX: 00007f6e5b5b5fa0 RCX: 00007f6e5b38e929 [ 213.776934][T12294] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000b [ 213.776949][T12294] RBP: 00007f6e5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 213.776964][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.776976][T12294] R13: 0000000000000000 R14: 00007f6e5b5b5fa0 R15: 00007ffd7dab6488 [ 213.777002][T12294] [ 213.777010][T12294] [ 214.047096][T12294] Allocated by task 11304: [ 214.051522][T12294] kasan_save_track+0x3e/0x80 [ 214.056219][T12294] __kasan_kmalloc+0x93/0xb0 [ 214.060816][T12294] __kmalloc_cache_noprof+0x230/0x3d0 [ 214.066215][T12294] rose_add_node+0x23a/0xde0 [ 214.070815][T12294] rose_rt_ioctl+0xa48/0xfb0 [ 214.075415][T12294] rose_ioctl+0x3ce/0x8b0 [ 214.079764][T12294] sock_do_ioctl+0xd9/0x300 [ 214.084278][T12294] sock_ioctl+0x576/0x790 [ 214.088632][T12294] __se_sys_ioctl+0xfc/0x170 [ 214.093226][T12294] do_syscall_64+0xfa/0x3b0 [ 214.097730][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.103643][T12294] [ 214.105970][T12294] Freed by task 12007: [ 214.110032][T12294] kasan_save_track+0x3e/0x80 [ 214.114730][T12294] kasan_save_free_info+0x46/0x50 [ 214.119763][T12294] __kasan_slab_free+0x62/0x70 [ 214.124520][T12294] kfree+0x18e/0x440 [ 214.128439][T12294] rose_rt_device_down+0x66d/0x6c0 [ 214.133556][T12294] rose_device_event+0x603/0x6a0 [ 214.138501][T12294] notifier_call_chain+0x1b3/0x3e0 [ 214.143626][T12294] __dev_notify_flags+0x18d/0x2e0 [ 214.148656][T12294] netif_change_flags+0xe8/0x1a0 [ 214.153592][T12294] dev_change_flags+0x130/0x260 [ 214.158448][T12294] dev_ioctl+0x7b4/0x1150 [ 214.162798][T12294] sock_do_ioctl+0x22c/0x300 [ 214.167393][T12294] sock_ioctl+0x576/0x790 [ 214.171741][T12294] __se_sys_ioctl+0xfc/0x170 [ 214.176351][T12294] do_syscall_64+0xfa/0x3b0 [ 214.180858][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.186913][T12294] [ 214.189241][T12294] The buggy address belongs to the object at ffff888140acdc00 [ 214.189241][T12294] which belongs to the cache kmalloc-512 of size 512 [ 214.203297][T12294] The buggy address is located 48 bytes inside of [ 214.203297][T12294] freed 512-byte region [ffff888140acdc00, ffff888140acde00) [ 214.217016][T12294] [ 214.219348][T12294] The buggy address belongs to the physical page: [ 214.225756][T12294] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140acc [ 214.234600][T12294] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 214.243117][T12294] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 214.250771][T12294] page_type: f5(slab) [ 214.254759][T12294] raw: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 214.263348][T12294] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 214.271954][T12294] head: 057ff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 214.280634][T12294] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 214.289318][T12294] head: 057ff00000000002 ffffea000502b301 00000000ffffffff 00000000ffffffff [ 214.297997][T12294] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 214.306665][T12294] page dumped because: kasan: bad access detected [ 214.313093][T12294] page_owner tracks the page as allocated [ 214.318825][T12294] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2365996731, free_ts 0 [ 214.338447][T12294] post_alloc_hook+0x240/0x2a0 [ 214.343218][T12294] get_page_from_freelist+0x21e4/0x22c0 [ 214.348768][T12294] __alloc_frozen_pages_noprof+0x181/0x370 [ 214.354584][T12294] alloc_pages_mpol+0x232/0x4a0 [ 214.359437][T12294] allocate_slab+0x8a/0x3b0 [ 214.363955][T12294] ___slab_alloc+0xbfc/0x1480 [ 214.368638][T12294] __kmalloc_noprof+0x305/0x4f0 [ 214.373490][T12294] __alloc_workqueue+0x103/0x1b70 [ 214.378518][T12294] alloc_workqueue+0xd4/0x210 [ 214.383201][T12294] pm_init+0x1d/0xf0 [ 214.387097][T12294] do_one_initcall+0x233/0x820 [ 214.391856][T12294] do_initcall_level+0x137/0x1f0 [ 214.396794][T12294] do_initcalls+0x69/0xd0 [ 214.401122][T12294] kernel_init_freeable+0x3d9/0x570 [ 214.406332][T12294] kernel_init+0x1d/0x1d0 [ 214.410675][T12294] ret_from_fork+0x3f9/0x770 [ 214.415280][T12294] page_owner free stack trace missing [ 214.420646][T12294] [ 214.422974][T12294] Memory state around the buggy address: [ 214.428598][T12294] ffff888140acdb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.436653][T12294] ffff888140acdb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 214.444711][T12294] >ffff888140acdc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.452782][T12294] ^ [ 214.458497][T12294] ffff888140acdc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.466556][T12294] ffff888140acdd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.474611][T12294] ================================================================== [ 214.482885][T12294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 214.490103][T12294] CPU: 0 UID: 0 PID: 12294 Comm: syz.2.1879 Not tainted 6.16.0-rc2-syzkaller-00185-g010c40c1f50e #0 PREEMPT(full) [ 214.502184][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.512252][T12294] Call Trace: [ 214.515536][T12294] [ 214.518470][T12294] dump_stack_lvl+0x99/0x250 [ 214.523076][T12294] ? __asan_memcpy+0x40/0x70 [ 214.527680][T12294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.532896][T12294] ? __pfx__printk+0x10/0x10 [ 214.537497][T12294] panic+0x2db/0x790 [ 214.541406][T12294] ? __pfx_panic+0x10/0x10 [ 214.545838][T12294] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 214.551756][T12294] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.557666][T12294] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.563997][T12294] ? print_memory_metadata+0x314/0x400 [ 214.569474][T12294] ? rose_get_neigh+0x391/0x990 [ 214.574331][T12294] check_panic_on_warn+0x89/0xb0 [ 214.579272][T12294] ? rose_get_neigh+0x391/0x990 [ 214.584130][T12294] end_report+0x78/0x160 [ 214.588384][T12294] kasan_report+0x129/0x150 [ 214.592911][T12294] ? rose_get_neigh+0x391/0x990 [ 214.597794][T12294] rose_get_neigh+0x391/0x990 [ 214.602492][T12294] rose_connect+0x416/0x10a0 [ 214.607091][T12294] ? __pfx_current_check_access_socket+0x10/0x10 [ 214.613436][T12294] ? aa_sk_perm+0x81e/0x950 [ 214.617943][T12294] ? __might_fault+0xb0/0x130 [ 214.622620][T12294] ? __pfx_rose_connect+0x10/0x10 [ 214.627653][T12294] ? aa_af_perm+0x1f0/0x2b0 [ 214.632159][T12294] ? tomoyo_socket_connect_permission+0x164/0x290 [ 214.638581][T12294] ? bpf_lsm_socket_connect+0x9/0x20 [ 214.643875][T12294] __sys_connect+0x313/0x440 [ 214.648472][T12294] ? __pfx___sys_connect+0x10/0x10 [ 214.653588][T12294] ? rcu_is_watching+0x15/0xb0 [ 214.658358][T12294] __x64_sys_connect+0x7a/0x90 [ 214.663127][T12294] do_syscall_64+0xfa/0x3b0 [ 214.667627][T12294] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.672833][T12294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.678899][T12294] ? clear_bhb_loop+0x60/0xb0 [ 214.683578][T12294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.689474][T12294] RIP: 0033:0x7f6e5b38e929 [ 214.693890][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.713496][T12294] RSP: 002b:00007f6e5c115038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 214.721915][T12294] RAX: ffffffffffffffda RBX: 00007f6e5b5b5fa0 RCX: 00007f6e5b38e929 [ 214.729908][T12294] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000b [ 214.737879][T12294] RBP: 00007f6e5b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 214.745848][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.753819][T12294] R13: 0000000000000000 R14: 00007f6e5b5b5fa0 R15: 00007ffd7dab6488 [ 214.761809][T12294] [ 214.765168][T12294] Kernel Offset: disabled [ 214.769497][T12294] Rebooting in 86400 seconds..