last executing test programs: 3.732363974s ago: executing program 4 (id=1821): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0x5, 0xe}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x4908d13283d17e6b, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2001f}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x40000) r0 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.926666265s ago: executing program 1 (id=1827): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) 2.52070626s ago: executing program 4 (id=1831): socket$netlink(0x10, 0x3, 0x0) socket(0x25, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) unshare(0x26020480) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) socket(0x10, 0x3, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) listen(r0, 0x800) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.340537466s ago: executing program 4 (id=1833): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xcd, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x170}, 0x4080) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.327529298s ago: executing program 0 (id=1834): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207200902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.057663505s ago: executing program 1 (id=1837): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000a40)="2e9b3d0007", 0x5}, {&(0x7f0000000280)="0000001c13ee818c790a49ec82d6c24e51f916c156ec9ad24ba51ff4c7edb494994e4d2b80b9139540334ffe28550c052079f2b6", 0x34}], 0x2) socket$kcm(0x2d, 0x2, 0x0) 2.000542449s ago: executing program 4 (id=1838): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r2 = openat$cgroup(r1, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) close(r2) 1.65985307s ago: executing program 4 (id=1839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.506167647s ago: executing program 2 (id=1841): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r4, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 1.419995519s ago: executing program 4 (id=1842): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000340), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 1.409143233s ago: executing program 1 (id=1843): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3a}]}}]}, 0x44}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.311815337s ago: executing program 2 (id=1844): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x60, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x80000001, 0x4, 0x1, 0x5, 0x5, {0xfd, 0x1, 0x0, 0xd, 0x2}, {0x4, 0x0, 0xdef8, 0xfe4a, 0x40}, 0x8, 0x3, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.245726478s ago: executing program 3 (id=1845): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @private=0xa010100}, 0xc) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 1.122797061s ago: executing program 0 (id=1846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x101}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.015267927s ago: executing program 1 (id=1847): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000100)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 786.595437ms ago: executing program 1 (id=1848): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) 775.994368ms ago: executing program 3 (id=1849): unshare(0x8040480) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000300)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0x75, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640)=[{}, {}], 0x10, 0x10, &(0x7f0000000680), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) 740.630898ms ago: executing program 2 (id=1850): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004c015) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socketpair(0x2a, 0x4, 0x6, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 717.166609ms ago: executing program 0 (id=1851): socket$inet(0x2, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, 0x0, &(0x7f0000000440)}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000f0000000500000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0), &(0x7f00000003c0), 0x3f, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), &(0x7f0000000300)=""/177}, 0x20) 618.109664ms ago: executing program 0 (id=1852): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0xafe6) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xb) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 589.111284ms ago: executing program 1 (id=1853): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0x100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 528.636022ms ago: executing program 2 (id=1854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24040000, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0x71af}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) 524.533415ms ago: executing program 0 (id=1855): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef5, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000400), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 519.142708ms ago: executing program 3 (id=1856): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 418.259793ms ago: executing program 2 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x1, 0x40, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 372.981389ms ago: executing program 3 (id=1858): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c01000011002300"/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB='\b\x00.'], 0x14c}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppoe(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'syzkaller0\x00'}}, 0x1e) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 184.595234ms ago: executing program 2 (id=1859): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e) 177.427921ms ago: executing program 3 (id=1860): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) close(0x4) 29.002355ms ago: executing program 3 (id=1861): socket$kcm(0x11, 0xa, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd8, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0x8c, 0x2, [@TCA_BASIC_ACT={0x88, 0x3, [@m_sample={0x40, 0x17, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x44, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x14, 0x6, "6f3e464680b8dcb925d3c8416db18e2e"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) 0s ago: executing program 0 (id=1862): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r3, 0x1, 0x0, 0xffffffff, {{}, {}, {0x14, 0x19, {0x3, 0x8, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4048810}, 0x40010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. [ 82.437770][ T5812] cgroup: Unknown subsys name 'net' [ 82.566104][ T5812] cgroup: Unknown subsys name 'cpuset' [ 82.575718][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.173667][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.403966][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.414031][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.422159][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.430992][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.440656][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.448374][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.456270][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.464571][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.473054][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.480917][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.488292][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.496182][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.504188][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.523453][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.535130][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.553757][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.561532][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.570839][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.579306][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.587166][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.673162][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.682630][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.690550][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.699052][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.706880][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.263855][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.453672][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.507198][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.604769][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.715043][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.723677][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.731031][ T5831] bridge_slave_0: entered allmulticast mode [ 87.740992][ T5831] bridge_slave_0: entered promiscuous mode [ 87.751105][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.758639][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.766226][ T5831] bridge_slave_1: entered allmulticast mode [ 87.774350][ T5831] bridge_slave_1: entered promiscuous mode [ 87.887608][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.894920][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.902585][ T5834] bridge_slave_0: entered allmulticast mode [ 87.909944][ T5834] bridge_slave_0: entered promiscuous mode [ 87.917798][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.932814][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.944962][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.976212][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.983559][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.990734][ T5834] bridge_slave_1: entered allmulticast mode [ 87.998244][ T5834] bridge_slave_1: entered promiscuous mode [ 88.034599][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.041766][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.049256][ T5827] bridge_slave_0: entered allmulticast mode [ 88.056851][ T5827] bridge_slave_0: entered promiscuous mode [ 88.109549][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.117128][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.124621][ T5839] bridge_slave_0: entered allmulticast mode [ 88.132411][ T5839] bridge_slave_0: entered promiscuous mode [ 88.140532][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.148021][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.155762][ T5827] bridge_slave_1: entered allmulticast mode [ 88.163617][ T5827] bridge_slave_1: entered promiscuous mode [ 88.183993][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.196619][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.208708][ T5831] team0: Port device team_slave_0 added [ 88.214807][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.222681][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.229914][ T5839] bridge_slave_1: entered allmulticast mode [ 88.237666][ T5839] bridge_slave_1: entered promiscuous mode [ 88.288632][ T5831] team0: Port device team_slave_1 added [ 88.341379][ T5834] team0: Port device team_slave_0 added [ 88.372190][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.393431][ T5834] team0: Port device team_slave_1 added [ 88.411703][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.418834][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.445427][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.459724][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.472246][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.484513][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.504343][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.511490][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.519648][ T5842] bridge_slave_0: entered allmulticast mode [ 88.526980][ T5842] bridge_slave_0: entered promiscuous mode [ 88.546583][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.554006][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.580570][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.584955][ T5144] Bluetooth: hci2: command tx timeout [ 88.591263][ T5836] Bluetooth: hci0: command tx timeout [ 88.625561][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.633030][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.640469][ T5842] bridge_slave_1: entered allmulticast mode [ 88.642733][ T5836] Bluetooth: hci3: command tx timeout [ 88.646545][ T5144] Bluetooth: hci1: command tx timeout [ 88.657748][ T5842] bridge_slave_1: entered promiscuous mode [ 88.697390][ T5827] team0: Port device team_slave_0 added [ 88.715064][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.722484][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.748945][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.761652][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.769055][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.795652][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.806656][ T5144] Bluetooth: hci4: command tx timeout [ 88.813227][ T5839] team0: Port device team_slave_0 added [ 88.820900][ T5827] team0: Port device team_slave_1 added [ 88.882950][ T5839] team0: Port device team_slave_1 added [ 88.891219][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.903924][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.914499][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.921464][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.948297][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.960797][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.968291][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.994442][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.024177][ T5831] hsr_slave_0: entered promiscuous mode [ 89.030787][ T5831] hsr_slave_1: entered promiscuous mode [ 89.124970][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.132335][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.158683][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.171825][ T5842] team0: Port device team_slave_0 added [ 89.192420][ T5834] hsr_slave_0: entered promiscuous mode [ 89.199025][ T5834] hsr_slave_1: entered promiscuous mode [ 89.205445][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 89.211265][ T5834] Cannot create hsr debugfs directory [ 89.217773][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.224841][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.251220][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.264617][ T5842] team0: Port device team_slave_1 added [ 89.386446][ T5827] hsr_slave_0: entered promiscuous mode [ 89.393989][ T5827] hsr_slave_1: entered promiscuous mode [ 89.400162][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 89.406302][ T5827] Cannot create hsr debugfs directory [ 89.431554][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.439260][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.465670][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.478351][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.485580][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.511876][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.631503][ T5839] hsr_slave_0: entered promiscuous mode [ 89.638434][ T5839] hsr_slave_1: entered promiscuous mode [ 89.644870][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 89.650624][ T5839] Cannot create hsr debugfs directory [ 89.819107][ T5842] hsr_slave_0: entered promiscuous mode [ 89.825993][ T5842] hsr_slave_1: entered promiscuous mode [ 89.832338][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 89.838102][ T5842] Cannot create hsr debugfs directory [ 90.109031][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.135815][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.163408][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.190339][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.245263][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.264058][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.285137][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.306795][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.387438][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.409670][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.421736][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.451470][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.536777][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.550306][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.582474][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.595499][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.642245][ T5836] Bluetooth: hci0: command tx timeout [ 90.647942][ T5144] Bluetooth: hci2: command tx timeout [ 90.681812][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.706207][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.717304][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.724169][ T5144] Bluetooth: hci3: command tx timeout [ 90.724275][ T5144] Bluetooth: hci1: command tx timeout [ 90.739844][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.750294][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.789575][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.817331][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.832195][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.839499][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.867263][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.874543][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.883622][ T5836] Bluetooth: hci4: command tx timeout [ 90.974130][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.983263][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.027152][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.034608][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.057933][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.093533][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.100677][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.116749][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.124036][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.144996][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.152177][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.224048][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.253709][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.287468][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.324593][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.331780][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.358256][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.381931][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.389201][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.411798][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.524115][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.531296][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.576598][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.583805][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.719671][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.785051][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.899045][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.014250][ T796] cfg80211: failed to load regulatory.db [ 92.046716][ T5834] veth0_vlan: entered promiscuous mode [ 92.073045][ T5831] veth0_vlan: entered promiscuous mode [ 92.122559][ T5834] veth1_vlan: entered promiscuous mode [ 92.150112][ T5839] veth0_vlan: entered promiscuous mode [ 92.161186][ T5831] veth1_vlan: entered promiscuous mode [ 92.196495][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.205689][ T5839] veth1_vlan: entered promiscuous mode [ 92.299318][ T5834] veth0_macvtap: entered promiscuous mode [ 92.310329][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.325833][ T5839] veth0_macvtap: entered promiscuous mode [ 92.343891][ T5831] veth0_macvtap: entered promiscuous mode [ 92.355338][ T5839] veth1_macvtap: entered promiscuous mode [ 92.365092][ T5834] veth1_macvtap: entered promiscuous mode [ 92.422823][ T5831] veth1_macvtap: entered promiscuous mode [ 92.485041][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.520973][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.553118][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.576172][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.595883][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.626007][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.647084][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658299][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667812][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.677035][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.695971][ T5827] veth0_vlan: entered promiscuous mode [ 92.704344][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.714456][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724057][ T5836] Bluetooth: hci2: command tx timeout [ 92.724090][ T5836] Bluetooth: hci0: command tx timeout [ 92.748852][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.758396][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776111][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.787633][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.802290][ T5144] Bluetooth: hci1: command tx timeout [ 92.807853][ T5144] Bluetooth: hci3: command tx timeout [ 92.820946][ T5827] veth1_vlan: entered promiscuous mode [ 92.829593][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.851178][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.925994][ T5842] veth0_vlan: entered promiscuous mode [ 92.962382][ T5144] Bluetooth: hci4: command tx timeout [ 93.018796][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.033224][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.055985][ T5827] veth0_macvtap: entered promiscuous mode [ 93.068217][ T5842] veth1_vlan: entered promiscuous mode [ 93.089539][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.104976][ T5827] veth1_macvtap: entered promiscuous mode [ 93.113530][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.132708][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.140674][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.208906][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.219626][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.242709][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.262947][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.285812][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.303784][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.320973][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.333181][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.346299][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.358898][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.375044][ T5842] veth0_macvtap: entered promiscuous mode [ 93.414658][ T5842] veth1_macvtap: entered promiscuous mode [ 93.425344][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.453596][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.479940][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.513963][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.565826][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.703648][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.748017][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.759862][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.774990][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.815141][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.840021][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.156656][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.172264][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.300180][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.333145][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.664512][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.727899][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.744805][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.802400][ T5836] Bluetooth: hci2: command tx timeout [ 94.808332][ T5144] Bluetooth: hci0: command tx timeout [ 94.882101][ T5836] Bluetooth: hci1: command tx timeout [ 94.887625][ T5144] Bluetooth: hci3: command tx timeout [ 95.017731][ T5961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.043319][ T5144] Bluetooth: hci4: command tx timeout [ 95.310230][ T5968] Bluetooth: MGMT ver 1.23 [ 96.114396][ T5976] netlink: 'syz.1.11': attribute type 13 has an invalid length. [ 96.383429][ T5983] nbd0: detected capacity change from 0 to 63 [ 96.428746][ T5987] block nbd0: NBD_DISCONNECT [ 96.435373][ T5987] block nbd0: Disconnected due to user request. [ 96.454298][ T5987] block nbd0: shutting down sockets [ 96.598166][ C1] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.608026][ C1] Buffer I/O error on dev nbd0, logical block 0, async page read [ 96.615916][ C1] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.625474][ C1] Buffer I/O error on dev nbd0, logical block 1, async page read [ 96.633327][ C1] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.643039][ C1] Buffer I/O error on dev nbd0, logical block 2, async page read [ 96.650860][ C1] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.660689][ C1] Buffer I/O error on dev nbd0, logical block 3, async page read [ 96.721540][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.745084][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 96.775502][ T5843] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.850675][ T5843] Buffer I/O error on dev nbd0, logical block 1, async page read [ 96.861003][ T5843] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.875781][ T5843] Buffer I/O error on dev nbd0, logical block 2, async page read [ 96.888354][ T5843] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.940523][ T5843] Buffer I/O error on dev nbd0, logical block 3, async page read [ 96.960351][ T5843] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 96.997353][ T5843] Buffer I/O error on dev nbd0, logical block 0, async page read [ 97.027172][ T5843] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 97.057128][ T5843] Buffer I/O error on dev nbd0, logical block 1, async page read [ 97.066731][ T5843] ldm_validate_partition_table(): Disk read failed. [ 97.087185][ T5843] Dev nbd0: unable to read RDB block 0 [ 97.119326][ T5843] nbd0: unable to read partition table [ 97.176146][ T5843] ldm_validate_partition_table(): Disk read failed. [ 97.191119][ T5843] Dev nbd0: unable to read RDB block 0 [ 97.220457][ T5843] nbd0: unable to read partition table [ 97.374061][ T5836] Bluetooth: hci2: command 0x0401 tx timeout [ 97.380205][ T5144] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 97.454591][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 97.466486][ T6014] Zero length message leads to an empty skb [ 97.812764][ T6024] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 98.247446][ T5844] IPVS: starting estimator thread 0... [ 98.363947][ T6036] IPVS: using max 29 ests per chain, 69600 per kthread [ 98.770684][ T6051] syz.4.38 uses obsolete (PF_INET,SOCK_PACKET) [ 98.783716][ T6051] syzkaller1: entered promiscuous mode [ 98.803353][ T6051] syzkaller1: entered allmulticast mode [ 98.972885][ T6057] IPVS: length: 132 != 8 [ 98.993768][ T6057] pimreg: entered allmulticast mode [ 99.168382][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 99.196078][ T6066] veth0_macvtap: left promiscuous mode [ 101.046274][ T6119] bond1: (slave vlan0): Enslaving as a backup interface with an up link [ 101.504431][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.1.77'. [ 101.540534][ T6139] delete_channel: no stack [ 101.767376][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.775763][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.075303][ T6167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.89'. [ 102.117414][ T6169] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 102.182689][ T6172] netlink: 'syz.3.90': attribute type 4 has an invalid length. [ 102.399111][ T6183] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.440012][ T6183] netlink: Conntrack attr has 4 unknown bytes [ 102.447022][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'. [ 102.504047][ T6181] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.512436][ T6181] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.608322][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.639157][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 102.654315][ T6190] netlink: 'syz.1.98': attribute type 5 has an invalid length. [ 102.679247][ T6192] raw_sendmsg: syz.4.99 forgot to set AF_INET. Fix it! [ 102.754752][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.769032][ T6181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.064732][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.073806][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.98'. [ 103.083094][ T6190] netlink: 'syz.1.98': attribute type 5 has an invalid length. [ 103.102144][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.154859][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.193852][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.232077][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.271473][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.288206][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.350639][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.446604][ T69] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.624860][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.638906][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.653334][ T6213] netlink: 'syz.4.108': attribute type 6 has an invalid length. [ 103.665142][ T6213] netlink: 'syz.4.108': attribute type 5 has an invalid length. [ 103.693913][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.694264][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.711774][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.725551][ T6213] netlink: 'syz.4.108': attribute type 6 has an invalid length. [ 103.734520][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.743576][ T6213] netlink: 'syz.4.108': attribute type 5 has an invalid length. [ 103.769813][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.787359][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.834590][ T6215] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.109'. [ 103.862282][ T6215] netlink: Conntrack attr has 3 unknown bytes [ 103.988516][ T6220] netlink: 68 bytes leftover after parsing attributes in process `syz.2.111'. [ 105.512755][ T6255] IPVS: Scheduler module ip_vs_ not found [ 105.524551][ T6264] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 105.876229][ T6272] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 105.923539][ T6272] bond1 (unregistering): Released all slaves [ 106.925087][ T6309] netlink: 'syz.3.146': attribute type 1 has an invalid length. [ 107.704787][ T6332] __nla_validate_parse: 5 callbacks suppressed [ 107.704811][ T6332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.155'. [ 108.103431][ T6345] netlink: 'syz.2.161': attribute type 25 has an invalid length. [ 108.122218][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 108.186434][ T6345] netlink: 'syz.2.161': attribute type 25 has an invalid length. [ 108.194697][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.215983][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 108.227786][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.257359][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.294992][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.499282][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 109.637500][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 109.902465][ T6394] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.910431][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.085034][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.117377][ T6394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.331353][ T1341] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.356174][ T1341] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.428771][ T1341] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.458272][ T1341] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.446491][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.204'. [ 111.568861][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'. [ 111.638620][ T6460] netlink: 'syz.1.206': attribute type 9 has an invalid length. [ 111.857211][ T6474] netlink: 'syz.0.212': attribute type 1 has an invalid length. [ 111.881972][ T6474] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.212'. [ 113.002798][ T6514] warning: `syz.0.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.603632][ T6526] syzkaller1: entered promiscuous mode [ 113.609724][ T6526] syzkaller1: entered allmulticast mode [ 115.677694][ T6618] netlink: 'syz.2.272': attribute type 1 has an invalid length. [ 115.898143][ T6627] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.922783][ T6627] bond1: (slave lo): Enslaving as an active interface with an up link [ 115.948112][ T6627] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 115.986118][ T6630] netlink: 164 bytes leftover after parsing attributes in process `syz.2.278'. [ 116.103348][ T6635] Cannot find del_set index 2 as target [ 116.279528][ T6641] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.283'. [ 116.728138][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 117.773463][ T6705] syzkaller1: entered promiscuous mode [ 117.779660][ T6705] syzkaller1: entered allmulticast mode [ 119.085089][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.098856][ T6747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.356374][ T1341] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.385756][ T1341] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.424227][ T1341] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.452105][ T1341] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.483679][ T1341] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.507549][ T1341] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.553429][ T1341] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 119.592272][ T1341] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.696645][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.332'. [ 119.844095][ T6774] hsr_slave_1 (unregistering): left promiscuous mode [ 120.181405][ T6802] netlink: 49 bytes leftover after parsing attributes in process `syz.3.340'. [ 120.212066][ T6802] netlink: 140 bytes leftover after parsing attributes in process `syz.3.340'. [ 120.335209][ T6802] netlink: 49 bytes leftover after parsing attributes in process `syz.3.340'. [ 121.039993][ T6839] netlink: 'syz.4.354': attribute type 1 has an invalid length. [ 121.109720][ T6843] netlink: 3 bytes leftover after parsing attributes in process `syz.3.356'. [ 121.223077][ T6839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.303706][ T6845] bond1: (slave gretap1): making interface the new active one [ 121.315150][ T6845] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 121.732051][ T6861] netlink: 876 bytes leftover after parsing attributes in process `syz.0.362'. [ 121.741075][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.362'. [ 122.060869][ T6881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.371'. [ 122.304182][ T6891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.376'. [ 123.077656][ T6923] netlink: 'syz.1.390': attribute type 2 has an invalid length. [ 123.089398][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 123.404906][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 123.604632][ T6936] netlink: 176 bytes leftover after parsing attributes in process `syz.3.395'. [ 123.717171][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 123.741476][ T6942] netlink: 'syz.4.398': attribute type 2 has an invalid length. [ 124.215849][ T6961] tunl0: Caught tx_queue_len zero misconfig [ 125.463654][ T7013] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.428'. [ 125.593253][ T7016] ip6gre1: entered promiscuous mode [ 125.625251][ T7016] ip6gre1: entered allmulticast mode [ 126.351245][ T7056] netlink: 'syz.2.447': attribute type 8 has an invalid length. [ 126.360024][ T7056] __nla_validate_parse: 1 callbacks suppressed [ 126.360044][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.447'. [ 126.435060][ T7056] bond0: entered promiscuous mode [ 126.440493][ T7056] bond_slave_0: entered promiscuous mode [ 126.447175][ T7056] bond_slave_1: entered promiscuous mode [ 126.504912][ T7056] gretap0: entered promiscuous mode [ 126.533198][ T7056] bond0: left promiscuous mode [ 126.540392][ T7056] bond_slave_0: left promiscuous mode [ 126.550945][ T7056] bond_slave_1: left promiscuous mode [ 126.592373][ T7056] gretap0: left promiscuous mode [ 126.838213][ T7075] hsr0: entered promiscuous mode [ 126.853057][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 127.105541][ T7086] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 127.123126][ T7090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.459'. [ 127.162549][ T7086] netlink: 'syz.4.461': attribute type 4 has an invalid length. [ 127.169138][ T7082] IPVS: Scheduler module ip_vs_ not found [ 127.474018][ T7104] netlink: 'syz.0.467': attribute type 6 has an invalid length. [ 127.570008][ T7109] macvtap0: entered promiscuous mode [ 127.580820][ T7109] macvtap0: entered allmulticast mode [ 127.588578][ T7109] veth1_vlan: entered allmulticast mode [ 127.610720][ T7109] macvtap1: entered promiscuous mode [ 127.616576][ T7109] macvtap1: entered allmulticast mode [ 127.946137][ T7127] Bluetooth: MGMT ver 1.23 [ 128.416388][ T7146] syzkaller0: refused to change device tx_queue_len [ 129.179239][ T7186] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 129.281014][ T7186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.320743][ T7188] bond1: (slave geneve2): making interface the new active one [ 129.330926][ T7188] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 129.464413][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.482041][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.526139][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.548388][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.787933][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 130.253095][ T7215] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 130.520545][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 130.571079][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 130.894427][ T7247] netlink: 'syz.3.528': attribute type 13 has an invalid length. [ 130.930258][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.939654][ T7247] netlink: 'syz.3.528': attribute type 13 has an invalid length. [ 130.948024][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.970305][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.990844][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.244304][ T7263] netlink: 'syz.1.536': attribute type 1 has an invalid length. [ 131.255318][ T7263] netlink: 'syz.1.536': attribute type 6 has an invalid length. [ 131.274146][ T7263] netlink: 'syz.1.536': attribute type 3 has an invalid length. [ 131.487190][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 131.509811][ T7271] netlink: 'syz.2.541': attribute type 13 has an invalid length. [ 131.522561][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 131.542309][ T7271] netlink: 'syz.2.541': attribute type 17 has an invalid length. [ 131.550282][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 131.675254][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 131.720899][ T7271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.732146][ T7277] netlink: 'syz.3.544': attribute type 26 has an invalid length. [ 131.740213][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 131.761535][ T7271] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.790490][ T7271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.815842][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 131.820350][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 131.894422][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.544'. [ 131.925131][ T7277] netlink: 'syz.3.544': attribute type 26 has an invalid length. [ 131.940599][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 132.035913][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.059833][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.092524][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.154020][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 132.664958][ T7318] netlink: 'syz.1.560': attribute type 6 has an invalid length. [ 132.972430][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979083][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.743149][ T7376] netlink: 'syz.0.581': attribute type 1 has an invalid length. [ 134.751252][ T7376] netlink: 'syz.0.581': attribute type 2 has an invalid length. [ 136.573259][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 136.608807][ T7451] bond2: entered promiscuous mode [ 136.615332][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.746445][ T7451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.762636][ T7451] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 136.798924][ T7451] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 136.805798][ T7455] netlink: 'syz.2.598': attribute type 11 has an invalid length. [ 136.821907][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 136.842343][ T7455] netlink: 'syz.2.598': attribute type 11 has an invalid length. [ 136.862103][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 139.557760][ T7544] bridge1: entered promiscuous mode [ 139.585790][ T7544] bridge1: entered allmulticast mode [ 139.626193][ T7544] team0: Port device bridge1 added [ 139.644508][ T7547] bridge0: port 3(team0) entered blocking state [ 139.678311][ T7547] bridge0: port 3(team0) entered disabled state [ 139.697006][ T7547] team0: entered allmulticast mode [ 139.716663][ T7547] team_slave_0: entered allmulticast mode [ 139.732034][ T7547] team_slave_1: entered allmulticast mode [ 139.756428][ T7547] team0: entered promiscuous mode [ 139.778714][ T7547] team_slave_0: entered promiscuous mode [ 139.796821][ T7547] team_slave_1: entered promiscuous mode [ 139.815179][ T7547] bridge0: port 3(team0) entered blocking state [ 139.821912][ T7547] bridge0: port 3(team0) entered forwarding state [ 140.065568][ T7564] netlink: 'syz.1.626': attribute type 9 has an invalid length. [ 140.073497][ T7564] netlink: 'syz.1.626': attribute type 11 has an invalid length. [ 140.081466][ T7564] netlink: 'syz.1.626': attribute type 12 has an invalid length. [ 140.090177][ T7564] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.626'. [ 140.862819][ T7595] netlink: 'syz.3.639': attribute type 9 has an invalid length. [ 140.897881][ T7595] netlink: 'syz.3.639': attribute type 11 has an invalid length. [ 140.923323][ T7595] netlink: 'syz.3.639': attribute type 12 has an invalid length. [ 140.973883][ T7595] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.639'. [ 140.984545][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 141.549330][ T7614] ip6gre1: entered promiscuous mode [ 141.556999][ T7614] ip6gre1: entered allmulticast mode [ 142.659406][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 142.837653][ T7659] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 142.852048][ T7659] syzkaller1: Linktype set failed because interface is up [ 142.862707][ T5844] syzkaller1: tun_net_xmit 90 [ 143.113612][ T7670] sock: sock_set_timeout: `syz.3.661' (pid 7670) tries to set negative timeout [ 143.248610][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 143.672259][ T7698] Illegal XDP return value 4294967262 on prog (id 92) dev syz_tun, expect packet loss! [ 143.740918][ T7688] "syz.0.666" (7688) uses obsolete ecb(arc4) skcipher [ 146.125545][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.686'. [ 146.179789][ T7790] netlink: 121 bytes leftover after parsing attributes in process `syz.3.686'. [ 146.300534][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 146.400982][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 146.527044][ T7809] bond1: option mode: unable to set because the bond device has slaves [ 146.554195][ T7809] bond1: option mode: unable to set because the bond device has slaves [ 147.414733][ T7845] netlink: 3 bytes leftover after parsing attributes in process `syz.2.703'. [ 147.503696][ T7851] delete_channel: no stack [ 147.952819][ T7861] bridge0: port 3(team0) entered disabled state [ 147.959384][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.967197][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.327570][ T7861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.388423][ T7861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.946725][ T7879] veth0: entered promiscuous mode [ 148.961373][ T7881] bond0: entered promiscuous mode [ 149.007394][ T7881] bond_slave_0: entered promiscuous mode [ 149.032954][ T7881] bond_slave_1: entered promiscuous mode [ 149.039128][ T7881] bond0: left promiscuous mode [ 149.056203][ T7881] bond_slave_0: left promiscuous mode [ 149.074477][ T7881] bond_slave_1: left promiscuous mode [ 149.080550][ T7881] veth0: left promiscuous mode [ 149.119263][ T7424] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.135654][ T7424] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.192951][ T7424] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.222474][ T7424] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.878587][ T7424] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.892010][ T7424] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.993346][ T7919] netlink: 'syz.0.723': attribute type 5 has an invalid length. [ 150.004328][ T7424] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.042160][ T7424] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.046192][ T7970] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.739'. [ 151.755135][ T7996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 152.991322][ T8040] lo: Caught tx_queue_len zero misconfig [ 153.084565][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.764'. [ 153.104899][ T8037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.764'. [ 153.114974][ T8037] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 153.447283][ T8052] tipc: Failed to remove unknown binding: 66,1,1/0:684506519/684506521 [ 153.787015][ T8064] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.773'. [ 154.302698][ T8079] pim6reg1: entered promiscuous mode [ 154.308209][ T8079] pim6reg1: entered allmulticast mode [ 154.558066][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 154.603875][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 154.626108][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 154.834345][ T8101] netlink: 240 bytes leftover after parsing attributes in process `syz.0.787'. [ 155.643884][ T8026] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 156.811214][ T29] IPVS: starting estimator thread 0... [ 156.922174][ T8166] IPVS: using max 29 ests per chain, 69600 per kthread [ 157.215645][ T8180] batadv_slave_1: entered promiscuous mode [ 157.244321][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 157.271411][ T8180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.333536][ T8180] batadv_slave_1 (unregistering): left promiscuous mode [ 157.346383][ T8180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.438776][ T8191] netlink: 'syz.0.823': attribute type 1 has an invalid length. [ 157.553339][ T8191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.577704][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 157.617174][ T8199] bond1 (unregistering): Released all slaves [ 157.933068][ T8210] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 158.109378][ T8210] bond3: entered promiscuous mode [ 158.122381][ T8210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.141437][ T8213] gre0 speed is unknown, defaulting to 1000 [ 158.186134][ T8218] 8021q: adding VLAN 0 to HW filter on device bond3 [ 158.193613][ T8218] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 158.214415][ T8218] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 158.237914][ T8218] bond3: (slave ip6gre1): making interface the new active one [ 158.245979][ T8218] ip6gre1: entered promiscuous mode [ 158.253839][ T8218] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 158.297071][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.306610][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.327673][ T8221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.408687][ T8213] gre0 speed is unknown, defaulting to 1000 [ 158.454474][ T8213] gre0 speed is unknown, defaulting to 1000 [ 158.864339][ T8213] infiniband syz1: set active [ 158.884394][ T8213] infiniband syz1: added gre0 [ 158.899429][ T29] gre0 speed is unknown, defaulting to 1000 [ 159.114420][ T8245] netlink: 'syz.4.840': attribute type 21 has an invalid length. [ 159.132882][ T8245] netlink: 'syz.4.840': attribute type 22 has an invalid length. [ 159.143843][ T8213] RDS/IB: syz1: added [ 159.148587][ T8213] smc: adding ib device syz1 with port count 1 [ 159.152550][ T8245] netlink: 'syz.4.840': attribute type 23 has an invalid length. [ 159.164811][ T8213] smc: ib device syz1 port 1 has no pnetid [ 159.173989][ T29] gre0 speed is unknown, defaulting to 1000 [ 159.188825][ T8213] gre0 speed is unknown, defaulting to 1000 [ 159.190293][ T8245] netlink: 'syz.4.840': attribute type 25 has an invalid length. [ 159.219338][ T8252] netlink: 'syz.2.842': attribute type 83 has an invalid length. [ 159.242472][ T8245] netlink: 96 bytes leftover after parsing attributes in process `syz.4.840'. [ 159.851468][ T8213] gre0 speed is unknown, defaulting to 1000 [ 160.617037][ T8213] gre0 speed is unknown, defaulting to 1000 [ 160.643640][ T8288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.260655][ T8213] gre0 speed is unknown, defaulting to 1000 [ 161.261501][ T8308] pim6reg1: entered promiscuous mode [ 161.341954][ T8308] pim6reg1: entered allmulticast mode [ 161.372312][ T8307] syzkaller1: entered promiscuous mode [ 161.378087][ T8307] syzkaller1: entered allmulticast mode [ 161.699598][ T8323] trusted_key: syz.1.867 sent an empty control message without MSG_MORE. [ 161.727218][ T8213] gre0 speed is unknown, defaulting to 1000 [ 162.147447][ T8337] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.877'. [ 162.273450][ T8344] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 162.462775][ T8316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.369639][ T8397] gre0 speed is unknown, defaulting to 1000 [ 163.588021][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.902'. [ 164.752471][ T8436] PKCS7: Unknown OID: [4] (bad) [ 164.760243][ T8436] PKCS7: Only support pkcs7_signedData type [ 165.457476][ T8455] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 165.484116][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.925'. [ 165.521378][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 165.545654][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.925'. [ 165.556006][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.927'. [ 166.063379][ T8480] netlink: 'syz.0.934': attribute type 3 has an invalid length. [ 166.219401][ T8488] No such timeout policy "syz1" [ 166.559728][ T8499] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.943'. [ 166.573026][ T8499] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.943'. [ 166.782767][ T8489] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 166.790672][ T8489] netlink: 264 bytes leftover after parsing attributes in process `syz.0.939'. [ 166.871624][ T8489] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 166.902234][ T8489] netlink: 264 bytes leftover after parsing attributes in process `syz.0.939'. [ 167.236883][ T8511] gre0 speed is unknown, defaulting to 1000 [ 167.272347][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 167.535762][ T8514] team1: entered promiscuous mode [ 167.552597][ T8514] team1: entered allmulticast mode [ 167.575933][ T8514] 8021q: adding VLAN 0 to HW filter on device team1 [ 167.832281][ T8520] team2: entered promiscuous mode [ 167.837391][ T8520] team2: entered allmulticast mode [ 167.879620][ T8520] 8021q: adding VLAN 0 to HW filter on device team2 [ 168.224032][ T9] gre0 speed is unknown, defaulting to 1000 [ 168.530914][ T8535] erspan0: entered promiscuous mode [ 168.542454][ T8535] erspan0: entered allmulticast mode [ 169.073994][ T8580] syzkaller1: entered promiscuous mode [ 169.100144][ T8580] syzkaller1: entered allmulticast mode [ 169.759153][ T8603] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 169.802452][ T8603] netlink: 'syz.2.984': attribute type 22 has an invalid length. [ 169.888195][ T8605] netlink: 'syz.0.985': attribute type 2 has an invalid length. [ 170.101129][ T8618] __nla_validate_parse: 1 callbacks suppressed [ 170.101150][ T8618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.992'. [ 170.154619][ T8620] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.991'. [ 170.227409][ T8622] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 170.779838][ T8648] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 2, id = 0 [ 172.929947][ T8703] netlink: 'syz.1.1021': attribute type 1 has an invalid length. [ 172.952112][ T8703] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1021'. [ 172.972513][ T8703] netlink: 'syz.1.1021': attribute type 1 has an invalid length. [ 172.986915][ T8703] netlink: 352 bytes leftover after parsing attributes in process `syz.1.1021'. [ 173.640281][ T8722] netlink: 'syz.4.1028': attribute type 21 has an invalid length. [ 173.658576][ T8722] netlink: 'syz.4.1028': attribute type 22 has an invalid length. [ 173.692032][ T8722] netlink: 'syz.4.1028': attribute type 23 has an invalid length. [ 173.707672][ T8722] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1028'. [ 173.843485][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1031'. [ 173.889023][ T8728] netem: change failed [ 174.156495][ T8738] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1036'. [ 177.454834][ T8816] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1066'. [ 177.582460][ T8819] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1067'. [ 177.641996][ T8819] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 178.228388][ T8844] syzkaller1: entered promiscuous mode [ 178.245035][ T8844] syzkaller1: entered allmulticast mode [ 178.298643][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 178.427188][ T8854] GUP no longer grows the stack in syz.4.1081 (8854): 200000003000-20000000a000 (200000001000) [ 178.439059][ T8854] CPU: 1 UID: 0 PID: 8854 Comm: syz.4.1081 Not tainted syzkaller #0 PREEMPT(full) [ 178.439091][ T8854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.439113][ T8854] Call Trace: [ 178.439122][ T8854] [ 178.439131][ T8854] dump_stack_lvl+0xe8/0x150 [ 178.439171][ T8854] __get_user_pages+0x2453/0x29d0 [ 178.439207][ T8854] ? __lock_acquire+0x6b5/0x2cf0 [ 178.439258][ T8854] ? __gup_longterm_locked+0xc4e/0x1630 [ 178.439298][ T8854] ? down_read_killable+0x1bb/0x340 [ 178.439328][ T8854] __gup_longterm_locked+0xdcf/0x1630 [ 178.439391][ T8854] gup_fast_fallback+0x1d82/0x22e0 [ 178.439462][ T8854] ? __pfx_gup_fast_fallback+0x10/0x10 [ 178.439499][ T8854] ? is_valid_gup_args+0x11f/0x200 [ 178.439535][ T8854] ? get_user_pages_fast+0x4d/0xb0 [ 178.439571][ T8854] __iov_iter_get_pages_alloc+0x3b6/0xb10 [ 178.439605][ T8854] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 178.439633][ T8854] iov_iter_get_pages2+0x5e/0xa0 [ 178.439661][ T8854] __se_sys_vmsplice+0x7b3/0x1490 [ 178.439717][ T8854] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 178.439756][ T8854] ? __pfx_futex_wake+0x10/0x10 [ 178.439798][ T8854] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.439893][ T8854] do_syscall_64+0x14d/0xf80 [ 178.439924][ T8854] ? trace_irq_disable+0x3b/0x150 [ 178.439944][ T8854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.439966][ T8854] ? clear_bhb_loop+0x40/0x90 [ 178.439993][ T8854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.440015][ T8854] RIP: 0033:0x7facf899c819 [ 178.440042][ T8854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.440062][ T8854] RSP: 002b:00007facf9827028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 178.440093][ T8854] RAX: ffffffffffffffda RBX: 00007facf8c15fa0 RCX: 00007facf899c819 [ 178.440110][ T8854] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 178.440125][ T8854] RBP: 00007facf8a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 178.440138][ T8854] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 178.440151][ T8854] R13: 00007facf8c16038 R14: 00007facf8c15fa0 R15: 00007ffd41b01c78 [ 178.440187][ T8854] [ 179.072115][ T8870] bridge_slave_0 (unregistering): left allmulticast mode [ 179.079394][ T8870] bridge_slave_0 (unregistering): left promiscuous mode [ 179.090070][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.122688][ T8871] syzkaller1: entered promiscuous mode [ 179.133637][ T8871] syzkaller1: entered allmulticast mode [ 179.681278][ T8893] syzkaller1: entered promiscuous mode [ 179.692796][ T8893] syzkaller1: entered allmulticast mode [ 179.911393][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 180.085192][ T8913] delete_channel: no stack [ 180.106347][ T8918] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 180.160237][ T8918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.258400][ T8921] bond2: (slave ip6erspan0): making interface the new active one [ 180.293409][ T8921] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 180.467491][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1112'. [ 180.520334][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 180.551129][ T8937] bond4: entered promiscuous mode [ 180.556748][ T8937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.640420][ T8937] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.648921][ T8937] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 180.660459][ T8937] bond4: (slave vcan1): Error -95 calling set_mac_address [ 181.184959][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 181.199340][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 181.464417][ T8944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.678318][ T8980] bond0: entered promiscuous mode [ 181.704250][ T8980] bond_slave_0: entered promiscuous mode [ 181.704295][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1129'. [ 181.723477][ T8980] bond_slave_1: entered promiscuous mode [ 181.736716][ T8980] batadv0: entered promiscuous mode [ 181.751701][ T8979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.790525][ T8979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.824490][ T8979] batadv0 (unregistering): left promiscuous mode [ 181.948460][ T8991] gre0 speed is unknown, defaulting to 1000 [ 181.993528][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.000930][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.008283][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.015779][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.023125][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.030447][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.037782][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.045219][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.052600][ T8988] aoe: error packet from 0.0@lo; ecode=101 'no such error' [ 182.155150][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 182.579279][ T7430] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf5 [ 182.809621][ T9018] syzkaller1: entered promiscuous mode [ 182.815466][ T9018] syzkaller1: entered allmulticast mode [ 183.224513][ T9035] sctp: [Deprecated]: syz.2.1148 (pid 9035) Use of int in maxseg socket option. [ 183.224513][ T9035] Use struct sctp_assoc_value instead [ 183.298418][ T9007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.558132][ T9094] syzkaller1: entered promiscuous mode [ 184.581215][ T9094] syzkaller1: entered allmulticast mode [ 184.608940][ T9096] syzkaller1: entered promiscuous mode [ 184.624511][ T9096] syzkaller1: entered allmulticast mode [ 185.091455][ T9113] IPVS: Scheduler module ip_vs_ not found [ 185.306677][ T9128] ipvlan2: entered promiscuous mode [ 185.319430][ T9128] ipvlan2: entered allmulticast mode [ 185.331662][ T9128] gretap0: entered allmulticast mode [ 185.354670][ T9128] team0: Device ipvlan2 failed to register rx_handler [ 185.412423][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'. [ 187.145091][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 187.714716][ T9189] netlink: 'syz.3.1208': attribute type 39 has an invalid length. [ 188.056331][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1212'. [ 188.543247][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1219'. [ 188.614130][ T9221] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.667828][ T9221] syzkaller0: entered promiscuous mode [ 188.686912][ T9221] syzkaller0: entered allmulticast mode [ 188.712147][ T9220] syzkaller1: entered promiscuous mode [ 188.721939][ T9220] syzkaller1: entered allmulticast mode [ 189.648851][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1235'. [ 189.967748][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 190.032738][ T9263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1236'. [ 190.940891][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 190.985695][ T9269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.230476][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 191.293287][ T9298] netlink: 'syz.1.1249': attribute type 1 has an invalid length. [ 191.396957][ T9304] bridge0: port 3(syz_tun) entered blocking state [ 191.424927][ T9304] bridge0: port 3(syz_tun) entered disabled state [ 191.431681][ T9304] syz_tun: entered allmulticast mode [ 191.468449][ T9304] syz_tun: entered promiscuous mode [ 191.496366][ T9304] bridge0: port 3(syz_tun) entered blocking state [ 191.503093][ T9304] bridge0: port 3(syz_tun) entered forwarding state [ 191.852447][ T9325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 192.128862][ T9333] bond2: entered promiscuous mode [ 192.138932][ T9333] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.150205][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 192.192301][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1264'. [ 192.276714][ T9343] sctp: [Deprecated]: syz.0.1268 (pid 9343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.276714][ T9343] Use struct sctp_sack_info instead [ 192.371173][ T9333] bond2: (slave gre1): refused to change device type [ 192.863930][ T9371] netlink: 'syz.1.1279': attribute type 25 has an invalid length. [ 192.891987][ T9371] netlink: 'syz.1.1279': attribute type 29 has an invalid length. [ 193.000444][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 193.099987][ T9382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1284'. [ 193.715459][ T9407] gre0 speed is unknown, defaulting to 1000 [ 193.810177][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1297'. [ 193.935346][ T9417] bond5: entered promiscuous mode [ 193.941581][ T9417] bond5: entered allmulticast mode [ 193.951068][ T9417] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.112467][ T9413] gre0 speed is unknown, defaulting to 1000 [ 194.405800][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412606][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.585292][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 195.260762][ T9455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 195.774159][ T9470] sctp: [Deprecated]: syz.0.1316 (pid 9470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.774159][ T9470] Use struct sctp_sack_info instead [ 199.013656][ T9566] __nla_validate_parse: 2 callbacks suppressed [ 199.013677][ T9566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1350'. [ 199.253626][ T9574] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1353'. [ 199.950469][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1365'. [ 199.961730][ T9605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 200.712193][ T9618] syzkaller0: refused to change device tx_queue_len [ 200.725077][ T5144] Bluetooth: hci4: command tx timeout [ 200.922511][ T7428] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 201.044634][ T9646] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1378'. [ 201.057175][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1378'. [ 201.124779][ T9649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'. [ 201.516159][ T9663] IPVS: Scheduler module ip_vs_ not found [ 201.599223][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1390'. [ 201.645822][ T9672] team0 (unregistering): Port device team_slave_0 removed [ 201.654400][ T9630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.673495][ T9672] team0 (unregistering): Port device team_slave_1 removed [ 201.725777][ T9674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1391'. [ 201.807010][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 202.099845][ T9684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.436048][ T9689] syz.2.1396 (9689) used greatest stack depth: 17472 bytes left [ 202.814021][ T9714] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 202.865939][ T9716] netlink: 'syz.3.1407': attribute type 4 has an invalid length. [ 203.033320][ T9720] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 204.952654][ T9787] __nla_validate_parse: 8 callbacks suppressed [ 204.952675][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 205.085202][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1436'. [ 205.129106][ T9795] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.193569][ T9795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.202998][ T9795] bond1: (slave bond2): Enslaving as an active interface with an up link [ 205.224009][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 205.287710][ T9795] bond1 (unregistering): (slave bond2): Releasing backup interface [ 205.305514][ T9795] bond1 (unregistering): Released all slaves [ 205.942284][ T9825] syzkaller1: entered promiscuous mode [ 205.947830][ T9825] syzkaller1: entered allmulticast mode [ 206.830311][ T9751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.854229][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.016153][ T9835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1448'. [ 208.718654][ T9896] syzkaller0: entered promiscuous mode [ 208.753484][ T9896] syzkaller0: entered allmulticast mode [ 208.812877][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 208.831345][ T9896] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 208.840311][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 208.923921][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 208.941726][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'. [ 208.981616][ T9905] geneve3: entered promiscuous mode [ 209.054413][ T3461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.094233][ T3461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.124164][ T3461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.138229][ T3461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.252356][ T9912] gre0 speed is unknown, defaulting to 1000 [ 209.421002][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1483'. [ 209.463863][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1483'. [ 209.630959][ T9937] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 210.128050][ T9957] __nla_validate_parse: 2 callbacks suppressed [ 210.128072][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 210.178469][ T9955] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1490'. [ 210.567967][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 210.644404][ T9971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1495'. [ 210.846471][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 211.092035][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 211.402684][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 211.458277][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 211.852047][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 211.858228][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.864417][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.868644][ T5835] Bluetooth: hci2: command 0x0401 tx timeout [ 211.912548][T10005] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1510'. [ 212.109744][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1513'. [ 212.121603][T10011] gre0 speed is unknown, defaulting to 1000 [ 214.025540][T10041] syzkaller1: entered promiscuous mode [ 214.031084][T10041] syzkaller1: entered allmulticast mode [ 214.120616][T10043] syz_tun: entered allmulticast mode [ 214.134556][T10042] syz_tun: left allmulticast mode [ 214.460357][T10051] netlink: 'syz.1.1526': attribute type 1 has an invalid length. [ 214.700309][T10068] xt_hashlimit: size too large, truncated to 1048576 [ 214.810375][T10071] syzkaller1: entered promiscuous mode [ 214.851943][T10071] syzkaller1: entered allmulticast mode [ 215.394080][T10085] __nla_validate_parse: 3 callbacks suppressed [ 215.394102][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 215.649973][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 215.840505][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 216.252144][T10115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1551'. [ 216.350869][T10123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1554'. [ 216.451547][T10124] gre0 speed is unknown, defaulting to 1000 [ 218.818277][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1569'. [ 218.965910][T10174] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1569'. [ 219.067010][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 219.130604][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1572'. [ 219.248830][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1573'. [ 219.733846][T10196] netlink: 'syz.1.1578': attribute type 4 has an invalid length. [ 219.867188][T10203] dummy0: entered promiscuous mode [ 219.874017][T10203] dummy0: entered allmulticast mode [ 220.068310][T10208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 220.087226][T10211] bond3: option ad_select: unable to set because the bond device is up [ 221.296978][T10236] syzkaller0: entered allmulticast mode [ 221.393330][T10236] syzkaller0 (unregistering): left allmulticast mode [ 221.577098][T10243] __nla_validate_parse: 4 callbacks suppressed [ 221.577120][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'. [ 221.672975][T10247] netlink: 'syz.2.1599': attribute type 1 has an invalid length. [ 221.744577][T10254] dummy0: left promiscuous mode [ 221.749563][T10254] dummy0: left allmulticast mode [ 221.839934][T10247] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.879730][T10254] bond4 (unregistering): Released all slaves [ 222.185085][T10269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1606'. [ 222.200192][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'. [ 222.268629][T10266] syzkaller0: entered promiscuous mode [ 222.274434][T10266] syzkaller0: entered allmulticast mode [ 224.092725][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 224.102188][T10287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1611'. [ 224.111192][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1611'. [ 224.122904][T10287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1611'. [ 224.396327][T10306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1617'. [ 224.466368][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1617'. [ 225.071863][T10333] netlink: 'syz.2.1632': attribute type 10 has an invalid length. [ 225.079773][T10333] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 225.243400][T10317] mpoa:mpoad_close: () going down [ 225.632308][T10359] netlink: 'syz.4.1640': attribute type 1 has an invalid length. [ 225.702912][T10359] bond4: entered promiscuous mode [ 225.708438][T10359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.274945][T10367] bond4: (slave bridge3): making interface the new active one [ 226.302426][T10367] bridge3: entered promiscuous mode [ 226.429084][T10367] bridge3: left promiscuous mode [ 226.593151][T10379] Bluetooth: MGMT ver 1.23 [ 226.656567][T10382] sctp: [Deprecated]: syz.3.1648 (pid 10382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.656567][T10382] Use struct sctp_sack_info instead [ 226.972413][T10392] netlink: 'syz.1.1653': attribute type 1 has an invalid length. [ 227.213047][T10399] gre0 speed is unknown, defaulting to 1000 [ 227.513952][T10411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1660'. [ 227.737754][T10419] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1662'. [ 227.760680][T10415] gre0 speed is unknown, defaulting to 1000 [ 228.369598][T10436] syzkaller1: entered promiscuous mode [ 228.384509][T10436] syzkaller1: entered allmulticast mode [ 228.606437][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1671'. [ 228.701234][T10449] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 228.985118][T10454] bridge0: port 3(syz_tun) entered disabled state [ 229.014153][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.023328][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.086476][ T7424] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 229.190602][T10454] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.373571][T10454] bond4: left promiscuous mode [ 229.441265][ T7433] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.473176][ T7433] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.501887][ T7433] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.510835][ T7433] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.586370][ T7433] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.629598][ T7433] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.672011][ T7433] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.680959][ T7433] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.789162][T10463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.027550][T10493] gre0 speed is unknown, defaulting to 1000 [ 230.361708][T10508] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1686'. [ 230.587221][ T3461] nci: nci_rx_work: unknown MT 0x7 [ 231.114675][T10545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1689'. [ 231.213131][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 231.222992][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1683'. [ 231.267889][T10504] gre0 speed is unknown, defaulting to 1000 [ 232.734654][T10597] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 232.755666][T10597] netlink: 'syz.3.1706': attribute type 4 has an invalid length. [ 233.085218][T10615] xt_hashlimit: size too large, truncated to 1048576 [ 233.172910][T10616] gre0 speed is unknown, defaulting to 1000 [ 233.479736][T10512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.661247][T10628] gre0 speed is unknown, defaulting to 1000 [ 233.908349][T10644] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1721'. [ 233.947498][T10644] netlink: 'syz.2.1721': attribute type 1 has an invalid length. [ 233.987277][T10644] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1721'. [ 234.514412][T10658] tipc: Failed to remove unknown binding: 66,1,1/0:1626682685/1626682687 [ 234.548781][T10658] tipc: Failed to remove unknown binding: 66,1,1/0:1626682685/1626682687 [ 234.562418][T10658] tipc: Failed to remove unknown binding: 66,1,1/0:1626682685/1626682687 [ 234.724460][T10664] syzkaller1: entered promiscuous mode [ 234.748551][T10664] syzkaller1: entered allmulticast mode [ 234.914069][T10680] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.1737'. [ 235.560626][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1748'. [ 235.614824][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1748'. [ 236.163829][T10726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 236.184520][T10727] netlink: 'syz.2.1757': attribute type 4 has an invalid length. [ 236.224932][T10727] netlink: 'syz.2.1757': attribute type 4 has an invalid length. [ 236.320654][T10734] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1759'. [ 236.338508][ T167] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.351913][ T167] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.361068][ T167] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.370522][ T167] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.397949][T10735] tipc: Started in network mode [ 236.403247][T10735] tipc: Node identity 62bfa7fc83e3, cluster identity 4711 [ 236.410797][T10735] tipc: Enabled bearer , priority 0 [ 236.443031][T10734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.455168][T10734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.468492][T10734] bond0 (unregistering): Released all slaves [ 236.667593][T10735] syzkaller0: entered promiscuous mode [ 236.693460][T10735] syzkaller0: entered allmulticast mode [ 236.712774][T10735] tipc: Resetting bearer [ 236.740424][T10733] tipc: Resetting bearer [ 238.671008][T10733] tipc: Disabling bearer [ 238.685056][ T5915] tipc: Node number set to 3780945916 [ 240.260118][T10804] bond4: entered promiscuous mode [ 240.320909][T10806] vcan1: entered promiscuous mode [ 240.354683][T10806] vcan1: entered allmulticast mode [ 240.370445][T10806] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 240.397387][T10806] bond4: (slave vcan1): Error -95 calling set_mac_address [ 240.796202][T10816] gre0 speed is unknown, defaulting to 1000 [ 242.085917][T10848] rdma_rxe: rxe_newlink: failed to add gre0 [ 242.172474][T10848] erspan0: left promiscuous mode [ 242.214791][T10848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.228348][T10848] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.243513][T10848] net_ratelimit: 3256 callbacks suppressed [ 242.243527][T10848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.719324][T10865] gre0 speed is unknown, defaulting to 1000 [ 242.887954][T10849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.449090][T10876] netlink: 'syz.4.1807': attribute type 9 has an invalid length. [ 244.855811][T10924] netlink: 'syz.0.1823': attribute type 1 has an invalid length. [ 245.651054][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1829'. [ 246.034873][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 246.061526][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 246.094527][T10956] netlink: 'syz.2.1835': attribute type 1 has an invalid length. [ 246.392238][T10956] bond5: (slave veth9): Enslaving as an active interface with a down link [ 246.586238][T10969] bond5: (slave veth11): Enslaving as an active interface with a down link [ 247.311312][T11017] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1844'. [ 247.355665][T11019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1845'. [ 247.411628][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 247.484966][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1846'. [ 247.952608][T11047] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1858'. [ 248.170539][T11053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 248.312512][T11013] ================================================================== [ 248.320739][T11013] BUG: KASAN: slab-use-after-free in sk_psock_verdict_data_ready+0xec/0x590 [ 248.329470][T11013] Read of size 8 at addr ffff8880594da860 by task syz.4.1842/11013 [ 248.337412][T11013] [ 248.339787][T11013] CPU: 1 UID: 0 PID: 11013 Comm: syz.4.1842 Not tainted syzkaller #0 PREEMPT(full) [ 248.339813][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 248.339827][T11013] Call Trace: [ 248.339835][T11013] [ 248.339844][T11013] dump_stack_lvl+0xe8/0x150 [ 248.339879][T11013] print_report+0xba/0x230 [ 248.339905][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 248.339930][T11013] kasan_report+0x117/0x150 [ 248.339959][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 248.339989][T11013] sk_psock_verdict_data_ready+0xec/0x590 [ 248.340016][T11013] unix_stream_sendmsg+0x8a3/0xe80 [ 248.340057][T11013] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 248.340091][T11013] ? aa_sock_msg_perm+0xda/0x1b0 [ 248.340124][T11013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 248.340159][T11013] ____sys_sendmsg+0x972/0x9f0 [ 248.340193][T11013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.340226][T11013] ? import_iovec+0x73/0xa0 [ 248.340251][T11013] ___sys_sendmsg+0x2a5/0x360 [ 248.340281][T11013] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.340313][T11013] ? futex_wake+0x4ac/0x580 [ 248.340359][T11013] ? __fget_files+0x2a/0x420 [ 248.340390][T11013] ? __fget_files+0x3a0/0x420 [ 248.340428][T11013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 248.340469][T11013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 248.340503][T11013] ? rcu_is_watching+0x15/0xb0 [ 248.340539][T11013] do_syscall_64+0x14d/0xf80 [ 248.340571][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.340592][T11013] ? clear_bhb_loop+0x40/0x90 [ 248.340617][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.340638][T11013] RIP: 0033:0x7facf899c819 [ 248.340657][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.340676][T11013] RSP: 002b:00007facf9827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.340699][T11013] RAX: ffffffffffffffda RBX: 00007facf8c15fa0 RCX: 00007facf899c819 [ 248.340715][T11013] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 248.340729][T11013] RBP: 00007facf8a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 248.340743][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.340756][T11013] R13: 00007facf8c16038 R14: 00007facf8c15fa0 R15: 00007ffd41b01c78 [ 248.340781][T11013] [ 248.340789][T11013] [ 248.572457][T11013] Allocated by task 11013: [ 248.576894][T11013] kasan_save_track+0x3e/0x80 [ 248.581601][T11013] __kasan_slab_alloc+0x6c/0x80 [ 248.586489][T11013] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 248.592332][T11013] sock_alloc_inode+0x28/0xc0 [ 248.597042][T11013] alloc_inode+0x6a/0x1b0 [ 248.601495][T11013] __sock_create+0x12d/0x9d0 [ 248.606197][T11013] __sys_socketpair+0x1c4/0x560 [ 248.611082][T11013] __x64_sys_socketpair+0x9b/0xb0 [ 248.616132][T11013] do_syscall_64+0x14d/0xf80 [ 248.620749][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.626664][T11013] [ 248.629008][T11013] Freed by task 15: [ 248.632834][T11013] kasan_save_track+0x3e/0x80 [ 248.637546][T11013] kasan_save_free_info+0x46/0x50 [ 248.642776][T11013] __kasan_slab_free+0x5c/0x80 [ 248.647665][T11013] kmem_cache_free+0x187/0x630 [ 248.652457][T11013] rcu_core+0x7cd/0x1070 [ 248.656729][T11013] handle_softirqs+0x22a/0x870 [ 248.661538][T11013] run_ksoftirqd+0x36/0x60 [ 248.666078][T11013] smpboot_thread_fn+0x541/0xa50 [ 248.671070][T11013] kthread+0x388/0x470 [ 248.675261][T11013] ret_from_fork+0x51e/0xb90 [ 248.679926][T11013] ret_from_fork_asm+0x1a/0x30 [ 248.684864][T11013] [ 248.687204][T11013] Last potentially related work creation: [ 248.692943][T11013] kasan_save_stack+0x3e/0x60 [ 248.698062][T11013] kasan_record_aux_stack+0xbd/0xd0 [ 248.703508][T11013] call_rcu+0xee/0x890 [ 248.707616][T11013] evict+0x95b/0xb10 [ 248.711545][T11013] __dentry_kill+0x1a2/0x5e0 [ 248.716160][T11013] finish_dput+0xc9/0x480 [ 248.720538][T11013] __fput+0x691/0xa70 [ 248.724551][T11013] task_work_run+0x1d9/0x270 [ 248.729345][T11013] exit_to_user_mode_loop+0xed/0x480 [ 248.734655][T11013] do_syscall_64+0x32d/0xf80 [ 248.739276][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.745277][T11013] [ 248.747711][T11013] The buggy address belongs to the object at ffff8880594da840 [ 248.747711][T11013] which belongs to the cache sock_inode_cache of size 1344 [ 248.762488][T11013] The buggy address is located 32 bytes inside of [ 248.762488][T11013] freed 1344-byte region [ffff8880594da840, ffff8880594dad80) [ 248.776509][T11013] [ 248.778862][T11013] The buggy address belongs to the physical page: [ 248.785401][T11013] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x594d8 [ 248.794480][T11013] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 248.803011][T11013] memcg:ffff8880594dfe81 [ 248.807267][T11013] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 248.814838][T11013] page_type: f5(slab) [ 248.818846][T11013] raw: 00fff00000000040 ffff888140af9dc0 dead000000000100 dead000000000122 [ 248.827725][T11013] raw: 0000000000000000 0000000800160016 00000000f5000000 ffff8880594dfe81 [ 248.836343][T11013] head: 00fff00000000040 ffff888140af9dc0 dead000000000100 dead000000000122 [ 248.845053][T11013] head: 0000000000000000 0000000800160016 00000000f5000000 ffff8880594dfe81 [ 248.854288][T11013] head: 00fff00000000003 ffffea0001653601 00000000ffffffff 00000000ffffffff [ 248.863073][T11013] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 248.871856][T11013] page dumped because: kasan: bad access detected [ 248.878335][T11013] page_owner tracks the page as allocated [ 248.884084][T11013] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5827, tgid 5827 (syz-executor), ts 157169026983, free_ts 137999783832 [ 248.908187][T11013] post_alloc_hook+0x231/0x280 [ 248.913167][T11013] get_page_from_freelist+0x24dc/0x2580 [ 248.918742][T11013] __alloc_frozen_pages_noprof+0x18d/0x380 [ 248.924574][T11013] allocate_slab+0x77/0x660 [ 248.929309][T11013] refill_objects+0x331/0x3c0 [ 248.934391][T11013] __pcs_replace_empty_main+0x2e6/0x730 [ 248.940112][T11013] kmem_cache_alloc_lru_noprof+0x37c/0x640 [ 248.945967][T11013] sock_alloc_inode+0x28/0xc0 [ 248.951231][T11013] alloc_inode+0x6a/0x1b0 [ 248.955796][T11013] __sock_create+0x12d/0x9d0 [ 248.960586][T11013] __sys_socket+0xd6/0x1b0 [ 248.965032][T11013] __x64_sys_socket+0x7a/0x90 [ 248.969741][T11013] do_syscall_64+0x14d/0xf80 [ 248.974532][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.980455][T11013] page last free pid 7484 tgid 7484 stack trace: [ 248.986800][T11013] __free_frozen_pages+0xc2b/0xdb0 [ 248.991999][T11013] __slab_free+0x263/0x2b0 [ 248.997594][T11013] qlist_free_all+0x97/0x100 [ 249.002226][T11013] kasan_quarantine_reduce+0x148/0x160 [ 249.007710][T11013] __kasan_slab_alloc+0x22/0x80 [ 249.012584][T11013] kmem_cache_alloc_noprof+0x2bc/0x650 [ 249.018077][T11013] vm_area_alloc+0x24/0x140 [ 249.022614][T11013] mmap_region+0x10eb/0x2240 [ 249.027771][T11013] do_mmap+0xc39/0x10c0 [ 249.032362][T11013] vm_mmap_pgoff+0x2c9/0x4f0 [ 249.036994][T11013] elf_load+0x248/0x6a0 [ 249.041196][T11013] load_elf_interp+0x4ce/0xb60 [ 249.045988][T11013] load_elf_binary+0x1b2f/0x2980 [ 249.050957][T11013] bprm_execve+0x93d/0x1460 [ 249.055664][T11013] kernel_execve+0x844/0x930 [ 249.060405][T11013] call_usermodehelper_exec_async+0x20f/0x360 [ 249.066692][T11013] [ 249.069052][T11013] Memory state around the buggy address: [ 249.074713][T11013] ffff8880594da700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.082974][T11013] ffff8880594da780: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 249.091057][T11013] >ffff8880594da800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 249.099140][T11013] ^ [ 249.106354][T11013] ffff8880594da880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.114433][T11013] ffff8880594da900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.122876][T11013] ================================================================== [ 249.164376][T11013] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 249.171651][T11013] CPU: 0 UID: 0 PID: 11013 Comm: syz.4.1842 Not tainted syzkaller #0 PREEMPT(full) [ 249.181059][T11013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.191148][T11013] Call Trace: [ 249.194533][T11013] [ 249.197479][T11013] vpanic+0x56c/0xa60 [ 249.201495][T11013] ? __pfx_vpanic+0x10/0x10 [ 249.206024][T11013] ? __pfx___schedule+0x10/0x10 [ 249.211074][T11013] panic+0xc5/0xd0 [ 249.214838][T11013] ? __pfx_panic+0x10/0x10 [ 249.219290][T11013] ? preempt_schedule_common+0x82/0xd0 [ 249.224795][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 249.230896][T11013] check_panic_on_warn+0x89/0xb0 [ 249.235874][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 249.241909][T11013] end_report+0x73/0x180 [ 249.246219][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 249.252151][T11013] kasan_report+0x128/0x150 [ 249.256708][T11013] ? sk_psock_verdict_data_ready+0xec/0x590 [ 249.262728][T11013] sk_psock_verdict_data_ready+0xec/0x590 [ 249.268542][T11013] unix_stream_sendmsg+0x8a3/0xe80 [ 249.273693][T11013] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 249.280071][T11013] ? aa_sock_msg_perm+0xda/0x1b0 [ 249.285057][T11013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.290440][T11013] ____sys_sendmsg+0x972/0x9f0 [ 249.295364][T11013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.300687][T11013] ? import_iovec+0x73/0xa0 [ 249.305297][T11013] ___sys_sendmsg+0x2a5/0x360 [ 249.310186][T11013] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.315428][T11013] ? futex_wake+0x4ac/0x580 [ 249.319994][T11013] ? __fget_files+0x2a/0x420 [ 249.324722][T11013] ? __fget_files+0x3a0/0x420 [ 249.329727][T11013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.334812][T11013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.340400][T11013] ? rcu_is_watching+0x15/0xb0 [ 249.345227][T11013] do_syscall_64+0x14d/0xf80 [ 249.349870][T11013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.355997][T11013] ? clear_bhb_loop+0x40/0x90 [ 249.360718][T11013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.366672][T11013] RIP: 0033:0x7facf899c819 [ 249.371124][T11013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.391193][T11013] RSP: 002b:00007facf9827028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.399648][T11013] RAX: ffffffffffffffda RBX: 00007facf8c15fa0 RCX: 00007facf899c819 [ 249.407822][T11013] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 249.415823][T11013] RBP: 00007facf8a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 249.424039][T11013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.432039][T11013] R13: 00007facf8c16038 R14: 00007facf8c15fa0 R15: 00007ffd41b01c78 [ 249.440308][T11013] [ 249.443951][T11013] Kernel Offset: disabled [ 249.448377][T11013] Rebooting in 86400 seconds..