last executing test programs: 55.452729287s ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 43.415261419s ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 33.412120606s ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 23.128504609s ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 11.370393659s ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 2.235792359s ago: executing program 4 (id=1586): shutdown(0xffffffffffffffff, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 2.072263322s ago: executing program 4 (id=1588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000001401"], 0x30}}, 0x0) 1.661461663s ago: executing program 4 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001000700000014000880100a"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001000700000014000880100a"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) (async) 1.552561047s ago: executing program 0 (id=1594): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000300000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) shutdown(r3, 0x1) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x36e376fd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x1c) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20048880, &(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @local, 0xa}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) (async) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000300000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) shutdown(r3, 0x1) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x36e376fd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}], 0x1c) (async) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x20048880, &(0x7f0000000040)={0xa, 0x4e22, 0x3ff, @local, 0xa}, 0x1c) (async) 1.421049679s ago: executing program 1 (id=1596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=r3, @ANYBLOB="10005a800c00008004000100040003"], 0x2c}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) 1.277564002s ago: executing program 4 (id=1598): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {}, {0xb, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x40, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0xe69, 0x1, 0x40}, {0x101, 0xbf, 0xc, 0x8}, {0xc, 0xd, 0x3, 0xffffffff}, {0x0, 0x2, 0x9, 0x2}, {0x7f, 0x4, 0x8, 0xffffff01}, {0xffff, 0x7, 0x0, 0x5}]}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008884) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r1) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x38, 0x0, "56dbc1e8417fffc3afdcf40c8e13f3151851d4ac3870c5651ff29b7c46af34ae1f337223b9404b26f5de4e01d16c172a5291fff83e4d5a0f58905486fe5e3a89d3a901cddf60835a498bf31954b4f7e2"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x9, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) (async) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) (async) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x20004054) 1.273071326s ago: executing program 3 (id=1599): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x20000000000000f5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0x20000000000000f5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r5, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x128}, 0x0) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000007580)=ANY=[], 0x34}}, 0x4000854) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r7, 0x0, 0x0, 0x800) (async) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r10, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004"], 0x50) socket$can_j1939(0x1d, 0x2, 0x7) 1.20750688s ago: executing program 0 (id=1600): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = accept(r1, &(0x7f0000000100), &(0x7f0000000080)=0x80) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x7, @local, 0x80000000}], 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000d28d", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r3}, 0xfffffffffffffe91) ioctl$sock_bt_hci(r8, 0x400448cc, &(0x7f0000000300)="4747bf625e82822731da88a7b1a8cb33a7fb57847df8ee398de65b9b0e8a92c634ae62cf1918b6555ad8d760c059d1567799829e72ec0bff1dc0453ce9c7d65e38d21a3065f30cbf828f2469579edf571eaf1a890dea4798dff92d08891a47118e32df95af755cbcae9c25dc9385f42916ff35ec04da54e454b5e1f91989f23c6009cd0769ba76c927319587de6e97a7cc2102deb08b45927a0c4a5b33b97b1bc80035cabbb2a609ff0f416d9284387a8600ae7bc272ed5567bf8dc01d42acc1286047abc237b8219c7f4ceb1b358036dd6ea5f484c6de5a47f1c9aba076588c0f8741b11f") r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendto$inet(r2, &(0x7f0000000180)="a689b312abed03f1c230b4a58cf7aae9f96f750fbbd797c0d0ef27cffab4173e400969d93c28db7455a88e4e4de625a2b333efa7b800fa5fbafa5b3884780608494d7aad4ea17b75efe560445bfd", 0x4e, 0x80015, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 1.097780291s ago: executing program 1 (id=1601): syz_emit_ethernet(0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604a00a601000000fc000000000000000000000000000000fe8000000000000000000000000000bb00010000000000000502000031020000"], 0x0) 1.039499748s ago: executing program 4 (id=1602): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3a}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x240400d1}, 0x800) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 932.269444ms ago: executing program 3 (id=1603): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 869.740549ms ago: executing program 0 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000740)={0x28, r1, 0x1, 0x40000, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000881}, 0x4054) 850.053057ms ago: executing program 1 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003b61e110013904fcff00"/23, @ANYRES32=r2, @ANYBLOB="00000000c22200001800128008000100677265000c00028008000700ac14142a"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x844) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x10}]}]}, 0x28}}, 0x0) 801.85479ms ago: executing program 4 (id=1606): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r3, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xb) accept(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x5, 0x7fffffff, 0x201, 0x4099d, r2, 0xfffffff8, '\x00', r5, r2, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x10e, 0x40, 0x0, 0x0) socket(0x28, 0x5, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r1, 0x4) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) listen(r3, 0x0) (async) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xb) (async) accept(r3, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@can={{0x4, 0x1}, 0xfc, 0x2, 0x0, 0x0, "33ee736ec0420be4"}, 0x10}}, 0x4004800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xf, 0x5, 0x7fffffff, 0x201, 0x4099d, r2, 0xfffffff8, '\x00', r5, r2, 0x0, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) accept4$unix(r1, 0x0, 0x0, 0x800) (async) recvfrom$unix(r6, &(0x7f0000000140)=""/248, 0x10e, 0x40, 0x0, 0x0) (async) 701.555386ms ago: executing program 3 (id=1607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000000000e8ff0924000000050a00000000000000000000e9ffff0608000a400000000608000540fffffffe4c000000140a01020000000000000000006300020900020073797a320000000008000340000000092100080053c3c3e2a23361ba322d859fb81f75e1dd8443c78d7190617ae4abe00c000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc040000}, 0x850) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000dc0)={{r0}, "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"}) r2 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r2, 0x0, 0x32, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="17000e1015d271f2dc09f743dcfe074b0fc2e7dba019b0c28acf589bfff19ee86e38aa4812945c4c1ad61af4e65fca1a9c9291eab8b084f779f2296a0dc86a86dc9a1e005762b82f6731998d83e2ec81ebd9fa9fd856004f490600f352b88cff", @ANYRES16=r4, @ANYBLOB="030b00000000000000001300000004000980"], 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000002900)={@local, 0x4, 0x0, 0x3, 0xc, 0x8, 0x9}, &(0x7f0000002940)=0x20) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000000000e8ff0924000000050a00000000000000000000e9ffff0608000a400000000608000540fffffffe4c000000140a01020000000000000000006300020900020073797a320000000008000340000000092100080053c3c3e2a23361ba322d859fb81f75e1dd8443c78d7190617ae4abe00c000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0xc040000}, 0x850) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000dc0)={{r0}, "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"}) (async) socket(0x840000000002, 0x3, 0x100) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x32, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="17000e1015d271f2dc09f743dcfe074b0fc2e7dba019b0c28acf589bfff19ee86e38aa4812945c4c1ad61af4e65fca1a9c9291eab8b084f779f2296a0dc86a86dc9a1e005762b82f6731998d83e2ec81ebd9fa9fd856004f490600f352b88cff", @ANYRES16=r4, @ANYBLOB="030b00000000000000001300000004000980"], 0x18}}, 0x0) (async) 594.896876ms ago: executing program 1 (id=1608): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503, 0x10403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) 552.493945ms ago: executing program 3 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x3c, r6, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "5d7a000600"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0a}]}]}, 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delrule={0x4c, 0x21, 0x20, 0x70bd2a, 0x25dfdbfb, {0xa, 0x80, 0x0, 0xc0, 0x36, 0x0, 0x0, 0x5, 0x4}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6a86201c}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x30}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@getneightbl={0x14, 0x42, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}}, 0x40010) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB='P'], 0x3c}}, 0x10) 449.624123ms ago: executing program 0 (id=1610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="21ad0000000400056ed26818342f7200000000000000000000000000000200b4d7281a4b4a91077f277771b72f13de416866d2fae099ab8cdfa9f3c5e478ea1c3c0e0100000000000000632dc9326e"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x0, @multicast1}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="d072412ce120"], 0x6) sendfile(r0, r4, 0x0, 0xffffffff004) 404.410383ms ago: executing program 1 (id=1611): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1000000c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0c0000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000308000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r4, 0xff, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x1, 0x70bd2d, 0x25dbdbfe, {0x1}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xd7, '\x00', @remote}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'nr0\x00', 0x200}) 299.523441ms ago: executing program 3 (id=1612): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x50000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x89b475f05ab72f07, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x28, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@dev, @dev, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x54, 0x4a, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x1f, 0x0, r4, 0x3}, [@IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x54}, 0x1, 0x0, 0x0, 0x40055}, 0x4800) sendto$inet(r3, &(0x7f0000000340)="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", 0xff, 0x40800, &(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000480)={@empty, 0x0}, &(0x7f00000004c0)=0x14) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000500)={r5, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000540), &(0x7f00000005c0)=0x60) getsockopt$nfc_llcp(r6, 0x118, 0x3, &(0x7f0000000600)=""/72, 0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f00000006c0)={'erspan0\x00', &(0x7f0000000680)={'ip_vti0\x00', r4, 0x7800, 0x7850, 0xdc, 0x94c9, {{0x6, 0x4, 0x3, 0x30, 0x18, 0x66, 0x0, 0x8, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000000700)={0x32, @loopback, 0x4e24, 0x4, 'wrr\x00', 0x20, 0xd, 0x41}, 0x2c) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000740), 0x0) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000780)={0x0, "6511e596c604a440fd4388920dc9e439"}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000001780)={0x2, 0x3ff, @start={r9, 0x0, "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", "e74fd6f8132c8fa45d3d384386db0a095d92ccb69ddb93a5ae9145d205e8566d0a8c203bf82c3a27d52cade4970f849e04e232bac2a40d1728c00ebe10aba340a8c791ccac75b88975bb26910608b0b45c5e136ca5096b95b0daa6f9eb5228ff1d5c21632119ba5be275f3eb94419b152446edd6717408cc18126f29aa025e85016ad5c9f42989ed9eb5d824646276438490efcd986bdfe1982947ed02c70f7dd4bf70a325371bd3468e89253d50c5d17919548190432ce5d99a8505996eac7ff965b5a675b96e74d82bf756fe77f4603299b85b5d9b2d6f848ea54ae2c3ef883da44969dfa32c7e2698543854d8825fe20295c41994acdf639d443e1a22d5b9fdc14e858af23c9e1f1e4122eeec32d0c9c743dd4b848a74f8ac6290e50e20882b1b8b3a82ae4353d6efbb5f26ec7cd7260a13bba20a42b7e57864bca97c02cd84a22dca1837932c3295411121d5c08fb4fd260892e0787345eeb7797be720e9016e101bd66d6eaea27f82b195e5c98d6f6522546316ef025e860d3aed191922adae9ebc9e6159dfcf269f427fce6fb7f433cca3508f7b38be29f1e61cc29f4ccb2cec41ffe438341b5a23d35510139ce3d9f96f8c0f402d80c1e7157edaca1c24a19d0164062707bb935b592fe6db239633810ff32028ba444f6107e22e27c3d3d031ab0923705236cab3261d8fc12474d07341558882da781543159b135defeac5d9e769dc5db2b25da5f3e25d611bf788e08a8916201b3c925435dcb182d14cff2bf41e288c3424c90599c41f338415323ab7540c89b6ad2a5d100fee7f3d1760c28879eb3779aa2c9a5214a7bbf56e7169a525a91fcc873a6fe10e1279a7df8af539342284d6b17e323e5586f07d7bce24adf66a131c40e8518899ec52d41a90a01a809e3dc42e0c6aa44a72b71e04df696061ab79819fdee5afed220e187f86ff78190919f1f3e4bbf7efcc76fbaade99914b6a79e90ec2540e257e1031f8053d1a89466a23a273ac7c5719f0ee6312770f766dd240192bbc065b8d6bdd8e6bfc75387c0ec76f1d74c66a5971ac54c39eca17e905087b7eb8b5ee2d0d95e4e4749879705bc969013a806660e5d6083f466a2b96c1364d38633e628edc5a81ac2f5643f78bf94634e952add012b46b045b89904c9711c2ca14e75db3a771285e9b195b818aaf4f0263b1e8914e623fac25db1c25ca9b17ee6bb474ea60b9b7bdf7f39762483febc95d5dcd40e3426f226841bebe967d83130f174c750e1b990608a65c3abde90cfc48777516c478de2d4b4224c355233d93c814214c3f3cc131aa8198f4d8ab17e0ef0785aeb2c316a68f9158927c5ee0ab5e37de10b67869bbf970ffb9181b689173eaf3ef0c7f961a59a0307848c9a9b0ae9a95713b9d9d01cf1571cf4ca267b96d3bd4cb4460105a0f4d05b4b5ccf06104908809a53dd8"}, [0x9, 0x2, 0x3, 0x5, 0x9, 0x5, 0x10, 0x167, 0x2, 0x6, 0xd466, 0x7, 0x5, 0xfffffffffffffff8, 0x1f4254da, 0xffffffffffffffff, 0x2000000, 0x4, 0x6c8690e9, 0x9, 0x4, 0x9, 0x3, 0x2, 0x8001, 0xb63, 0x2, 0xc, 0x8, 0x5, 0xfffffffffffffff7, 0xffffffff80000000, 0x5e, 0x2, 0xfffffffffffffc51, 0x6, 0x6, 0x9, 0xff, 0x8, 0xb9, 0x10000, 0x7, 0x9, 0xa23, 0xf, 0x5, 0x0, 0x101, 0x7ff, 0x2, 0x6, 0x7, 0xe, 0x9, 0xffe0000000000000, 0x40, 0x8000000000000000, 0x1d7b, 0x6, 0x2, 0xd8f, 0x4, 0x7]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000021c0)={0x0, 0xd58b, 0x1, [0x0]}, 0xa) bind$can_raw(r2, &(0x7f0000002200)={0x1d, r4}, 0x10) r10 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r10, &(0x7f0000002240)={0xa, 0x0, 0x6, @loopback, 0x1, 0x1}, 0x20) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f0000002280)=0x1, 0x4) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x110}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008010) syz_genetlink_get_family_id$l2tp(&(0x7f00000023c0), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002580)={'vcan0\x00', 0x0}) sendmsg$inet(r3, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002400)="a1669955c9dd4f4d28558fda86f1fdd062e00de8bde2ec05278764e6fb7016c185b964f12c9beed87ca855522483f14ef7afc92f5929aec014166cd46db99ea2f0e02874249954b5dbd400d931151cb76eb0ddb39531b819f513c3f77bcf46ee20838e62be88c09364f82b65fb6df58612819d078a19e402d1a872ce382a758de6285efa33bf23db8ff8394059d48676df3b6bec7eac1c8d354cc375f210d0099e", 0xa1}, {&(0x7f00000024c0)="d791b4252927b1fac9eb287cf4df4f2d8360cb3eb6e97406a274efc061b724f039faf7ade8aa1c03104c61a39783777697430a1fa8b7d994e353f07ae35287fa367c48f8b3b4e6f87df08d6e6eed5ea3f4064a3a560924015a993ec2a0059244bffd7306bde4e178485cd76578e62ac065001229", 0x74}], 0x2, &(0x7f00000025c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010100, @empty}}}], 0x20}, 0xc041) socket(0x28, 0x800, 0x5) sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000002640)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000026c0)=[{&(0x7f0000002680)="0eb19fcf414a00b433ea2b4e52b9dc9cab050285b1ae7fab5183b38d1bcc5554ec69dd1afbe9f33d3c8c9ffe4558e706d58958f5", 0x34}], 0x1}, 0x4041) 173.630085ms ago: executing program 1 (id=1613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x48582, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x7, 0x5, 0x6685, 0x2, 0x9, 0x80000001, 0x2, 0x3800000}}}}]}, 0x58}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0xa}, {0x1, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4041080) socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x20) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 172.926483ms ago: executing program 0 (id=1614): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r1}, 0x20) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/112, 0x70}], 0x1}}], 0x2, 0x142, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x35, &(0x7f0000000340)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x20000006, 0x4) shutdown(r0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = accept$alg(r3, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000280)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/29, 0x1d}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000100)=""/53, 0x35}, {&(0x7f0000001380)=""/4078, 0xfee}], 0x4, &(0x7f0000000180)=""/214, 0xd6}, 0x1}], 0x1, 0x0, 0x0) 57.451286ms ago: executing program 3 (id=1615): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374"], 0x140}}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0x0, 0x1, {0x1, 0x0, 0x4}, {0x1}, 0xff, 0xfe}], 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'ip6gretap0\x00', {0x2, 0x4e22, @empty}}) 45.361198ms ago: executing program 2 (id=777): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000e4ff0000000000020202000900030073797a32000000000500040002000000090001"], 0x34}, 0x1, 0x40030000000000}, 0x0) (async) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x303}, "9aa092891e3ad0af", "db9f2677901e5f14aa9f5df88784e5a37cb5c83afec49fd6121f3de21ea0bf37", "54d67f8e", "3f82b3007a6e9afa"}, 0x38) 0s ago: executing program 0 (id=1616): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000280)=0xd, 0x12) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) (async, rerun: 32) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}], 0x1) (rerun: 32) kernel console output (not intermixed with test programs): ped from 122 to 4294967286. macoff=82 [ 97.948083][ T9] IPVS: starting estimator thread 0... [ 98.077914][ T6049] IPVS: using max 26 ests per chain, 62400 per kthread [ 98.220551][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 98.367880][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.4.34'. [ 98.427308][ T6069] netlink: 76 bytes leftover after parsing attributes in process `syz.4.34'. [ 98.934640][ T6090] 8021q: VLANs not supported on wg2 [ 99.170987][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.203938][ T6099] x_tables: unsorted entry at hook 2 [ 99.469966][ T6112] vlan2: entered allmulticast mode [ 99.475165][ T6112] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 122.674908][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.52'. [ 122.676756][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.54'. [ 122.717408][ T6140] netlink: 'syz.1.52': attribute type 64 has an invalid length. [ 122.735313][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.746579][ T6138] netlink: 'syz.1.52': attribute type 64 has an invalid length. [ 122.765160][ T6140] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 122.804010][ T6138] netlink: 20 bytes leftover after parsing attributes in process `syz.1.52'. [ 122.868640][ T6136] bridge_slave_1 (unregistering): left allmulticast mode [ 122.875744][ T6136] bridge_slave_1 (unregistering): left promiscuous mode [ 122.900936][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.941839][ T6145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 123.373115][ T6173] x_tables: duplicate underflow at hook 1 [ 123.400175][ T6173] netlink: 31 bytes leftover after parsing attributes in process `syz.3.65'. [ 123.442521][ T6173] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 123.462659][ T6173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.65'. [ 123.522009][ T6173] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 123.572518][ T6183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 126.120502][ T6206] netlink: 'syz.0.74': attribute type 6 has an invalid length. [ 126.172112][ T6213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.73'. [ 126.197837][ T6215] ipt_ECN: cannot use operation on non-tcp rule [ 126.272646][ T6216] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 126.514477][ T6223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.78'. [ 127.066228][ T6243] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.151931][ T6247] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 127.304364][ T6252] netlink: 'syz.2.86': attribute type 16 has an invalid length. [ 127.337405][ T6252] netlink: 'syz.2.86': attribute type 17 has an invalid length. [ 127.380764][ T6255] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 127.406037][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.423432][ T6255] IPVS: set_ctl: invalid protocol: 1 172.20.20.43:20000 [ 127.492417][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.695735][ T6252] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.703008][ T6252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.750788][ T6252] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.758080][ T6252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.114707][ T6273] __nla_validate_parse: 2 callbacks suppressed [ 128.114724][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 128.425344][ T6286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 128.873958][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 128.942379][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 128.977615][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 129.170318][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.107'. [ 129.334571][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.111'. [ 129.371698][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.110'. [ 129.580588][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'. [ 129.960606][ T6348] netlink: 'syz.2.115': attribute type 33 has an invalid length. [ 129.969251][ T6348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.115'. [ 131.732611][ T6198] Set syz1 is full, maxelem 65536 reached [ 132.193711][ T6383] Zero length message leads to an empty skb [ 132.309988][ T6390] netlink: 'syz.0.125': attribute type 1 has an invalid length. [ 132.453085][ T6397] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 132.767898][ T6408] vlan2: entered allmulticast mode [ 132.773088][ T6408] gretap0: entered allmulticast mode [ 132.797625][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.820844][ T6425] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 132.857985][ T6394] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 133.054629][ T6425] xt_CT: No such helper "netbios-ns" [ 133.170998][ T6434] batadv_slave_1: entered promiscuous mode [ 133.207955][ T6433] batadv_slave_1: left promiscuous mode [ 133.243769][ T6437] __nla_validate_parse: 7 callbacks suppressed [ 133.243786][ T6437] netlink: 88 bytes leftover after parsing attributes in process `syz.4.140'. [ 133.317613][ T6437] netem: invalid attributes len -24 [ 133.536256][ T6459] netlink: ct family unspecified [ 133.553361][ T6459] openvswitch: netlink: Actions may not be safe on all matching packets [ 133.573026][ T6461] No such timeout policy "syz0" [ 133.593653][ T6459] netlink: 36 bytes leftover after parsing attributes in process `syz.4.146'. [ 133.673710][ T6466] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 133.957202][ T6474] netlink: 80 bytes leftover after parsing attributes in process `syz.0.150'. [ 133.966255][ T6474] openvswitch: netlink: Flow key attr not present in new flow. [ 133.999879][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 134.205501][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 134.328129][ T6488] bond1: entered allmulticast mode [ 134.347855][ T6491] syz.0.155 uses obsolete (PF_INET,SOCK_PACKET) [ 134.441331][ T6504] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 134.468408][ T6504] openvswitch: netlink: Tunnel attr 16383 out of range max 16 [ 134.520256][ T6508] netlink: 2 bytes leftover after parsing attributes in process `syz.4.161'. [ 134.551371][ T6508] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.560382][ T6510] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 134.916603][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 134.925400][ T6526] xt_l2tp: missing protocol rule (udp|l2tpip) [ 134.930638][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 134.941187][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 135.060608][ T6533] sctp: [Deprecated]: syz.1.169 (pid 6533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.060608][ T6533] Use struct sctp_sack_info instead [ 135.080617][ T6536] sctp: [Deprecated]: syz.1.169 (pid 6536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.080617][ T6536] Use struct sctp_sack_info instead [ 135.099872][ T6533] sctp: [Deprecated]: syz.1.169 (pid 6533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.099872][ T6533] Use struct sctp_sack_info instead [ 135.164903][ T6536] sctp: [Deprecated]: syz.1.169 (pid 6536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 135.164903][ T6536] Use struct sctp_sack_info instead [ 135.183556][ T6538] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.170'. [ 135.373843][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.4.172'. [ 135.436914][ T6524] infiniband syz2: set active [ 135.442058][ T6524] infiniband syz2: added vxcan1 [ 135.458801][ T6546] netlink: 252 bytes leftover after parsing attributes in process `syz.2.174'. [ 135.501258][ T6524] RDS/IB: syz2: added [ 135.505943][ T6524] smc: adding ib device syz2 with port count 1 [ 135.517460][ T6524] smc: ib device syz2 port 1 has pnetid [ 135.539599][ T5894] vxcan1 speed is unknown, defaulting to 1000 [ 135.564854][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 135.656075][ T6561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.176'. [ 135.699686][ T6562] netlink: 'syz.4.175': attribute type 1 has an invalid length. [ 135.758308][ T5894] vxcan1 speed is unknown, defaulting to 1000 [ 135.848272][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 135.961602][ T6568] netlink: 'syz.1.178': attribute type 3 has an invalid length. [ 136.169801][ T6580] veth0: entered promiscuous mode [ 136.177935][ T6580] veth0: left promiscuous mode [ 136.551310][ T6597] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 136.598650][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 137.088994][ T6624] tipc: Enabling of bearer rejected, failed to enable media [ 137.141402][ T6626] netlink: 'syz.4.200': attribute type 4 has an invalid length. [ 137.273054][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 137.308037][ T6635] xt_hashlimit: size too large, truncated to 1048576 [ 137.324975][ T6633] IPv6: NLM_F_REPLACE set, but no existing node found! [ 137.383748][ T6642] xfrm1: entered promiscuous mode [ 137.433879][ T6643] xt_connbytes: Forcing CT accounting to be enabled [ 137.437447][ T6642] xfrm1: entered allmulticast mode [ 137.487248][ T6643] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.583287][ T6646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.816629][ T6524] vxcan1 speed is unknown, defaulting to 1000 [ 138.244363][ T6678] IPVS: length: 53 != 24 [ 138.377760][ T6685] __nla_validate_parse: 13 callbacks suppressed [ 138.377779][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 138.458223][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 138.510028][ T6699] ip6t_srh: unknown srh match flags 536B [ 138.748165][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.223'. [ 139.120199][ T6734] netlink: 64 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.161539][ T6738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.235'. [ 139.227221][ T6740] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 139.328993][ T6742] openvswitch: netlink: Missing key (keys=40, expected=80) [ 139.348618][ T6746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.420690][ T6745] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.601367][ T6767] Bluetooth: MGMT ver 1.23 [ 139.749942][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 139.775850][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.245'. [ 139.784760][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.248'. [ 139.845080][ T6780] sctp: [Deprecated]: syz.3.249 (pid 6780) Use of int in maxseg socket option. [ 139.845080][ T6780] Use struct sctp_assoc_value instead [ 139.991958][ T6790] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.250'. [ 140.206410][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 140.996003][ T6836] vxcan1 speed is unknown, defaulting to 1000 [ 141.374639][ T6856] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 141.399768][ T6860] netlink: 'syz.4.274': attribute type 1 has an invalid length. [ 141.461660][ T6856] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 142.413517][ T6902] netlink: 'syz.2.287': attribute type 21 has an invalid length. [ 142.576465][ T6910] netlink: 'syz.0.290': attribute type 3 has an invalid length. [ 142.726817][ T6921] macvtap1: entered promiscuous mode [ 142.743095][ T6921] vlan0: entered promiscuous mode [ 142.761239][ T6921] macvtap1: entered allmulticast mode [ 142.766781][ T6921] vlan0: entered allmulticast mode [ 142.772177][ T6921] veth0_vlan: entered allmulticast mode [ 142.783928][ T6921] vlan0: left allmulticast mode [ 142.792933][ T6921] veth0_vlan: left allmulticast mode [ 142.832455][ T6921] vlan0: left promiscuous mode [ 142.930243][ T6926] netlink: 'syz.4.293': attribute type 7 has an invalid length. [ 143.267862][ T6902] syz.2.287 (6902) used greatest stack depth: 19896 bytes left [ 143.632814][ T6977] __nla_validate_parse: 7 callbacks suppressed [ 143.632834][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 144.157321][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 144.318340][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 144.351735][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 144.483819][ T7019] netlink: 144 bytes leftover after parsing attributes in process `syz.2.316'. [ 144.783848][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.323'. [ 144.793970][ T7038] IPv6: sit1: Disabled Multicast RS [ 144.834365][ T7042] vxcan1 speed is unknown, defaulting to 1000 [ 144.866081][ T7038] netlink: 52 bytes leftover after parsing attributes in process `syz.1.322'. [ 145.391016][ T7061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.329'. [ 145.479433][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 145.515236][ T7066] bond_slave_0: entered allmulticast mode [ 145.976629][ T7087] netlink: 'syz.2.335': attribute type 23 has an invalid length. [ 146.043595][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 146.232854][ T7103] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 146.994830][ T7128] vxcan1 speed is unknown, defaulting to 1000 [ 147.881998][ T7177] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 148.294817][ T7203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.896746][ T7220] __nla_validate_parse: 10 callbacks suppressed [ 148.896767][ T7220] netlink: 165 bytes leftover after parsing attributes in process `syz.2.375'. [ 148.961660][ T7222] netlink: 165 bytes leftover after parsing attributes in process `syz.2.375'. [ 149.228148][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 149.277446][ T7231] trusted_key: syz.0.380 sent an empty control message without MSG_MORE. [ 149.299142][ T7237] netlink: 'syz.2.382': attribute type 12 has an invalid length. [ 149.312256][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 149.386322][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.384'. [ 149.414613][ T7243] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 149.495153][ T7257] netlink: 'syz.0.387': attribute type 24 has an invalid length. [ 149.632442][ T7264] netlink: 168 bytes leftover after parsing attributes in process `syz.2.391'. [ 150.118259][ T7293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.399'. [ 150.144109][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 150.346742][ T7305] C: renamed from team_slave_0 [ 150.374697][ T7305] netlink: 'syz.2.402': attribute type 1 has an invalid length. [ 150.387988][ T7305] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.533790][ T7314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 150.547906][ T7315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.405'. [ 150.973033][ T7341] erspan0: entered allmulticast mode [ 151.390629][ T7367] batadv_slave_1: entered promiscuous mode [ 151.398801][ T7367] macsec1: entered promiscuous mode [ 151.404263][ T7367] macsec1: entered allmulticast mode [ 151.429042][ T7367] batadv_slave_1: entered allmulticast mode [ 151.559545][ T7371] syzkaller0: entered promiscuous mode [ 151.577271][ T7371] syzkaller0: entered allmulticast mode [ 151.816068][ T7389] wg2: entered promiscuous mode [ 151.827869][ T7389] wg2: entered allmulticast mode [ 151.884696][ T5894] hid-generic 0005:0458:005A.0001: item fetching failed at offset 0/1 [ 151.905664][ T5894] hid-generic 0005:0458:005A.0001: probe with driver hid-generic failed with error -22 [ 152.066648][ T7409] netlink: 'syz.4.435': attribute type 5 has an invalid length. [ 152.630511][ T7430] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 153.079899][ T7453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.540957][ T7494] xt_socket: unknown flags 0x3c [ 153.801022][ T7502] bond_slave_0: entered promiscuous mode [ 153.807021][ T7502] bond_slave_1: entered promiscuous mode [ 153.839343][ T7502] vlan2: entered promiscuous mode [ 153.847236][ T7502] bond0: entered promiscuous mode [ 153.898807][ T7500] __nla_validate_parse: 8 callbacks suppressed [ 153.898824][ T7500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 154.000502][ T7510] xt_TCPMSS: Only works on TCP SYN packets [ 154.276782][ T7522] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 154.920606][ T7555] netlink: 'syz.0.474': attribute type 10 has an invalid length. [ 154.933390][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.962942][ T7555] bridge_slave_1: left allmulticast mode [ 154.972831][ T7555] bridge_slave_1: left promiscuous mode [ 154.982038][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.000652][ T7560] netlink: 14 bytes leftover after parsing attributes in process `syz.0.474'. [ 155.010759][ T7555] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 155.084633][ C0] Illegal XDP return value 16128 on prog (id 246) dev bridge_slave_1, expect packet loss! [ 155.097312][ T24] page_pool_release_retry() stalled pool shutdown: id 23, 1 inflight 60 sec [ 155.134199][ T7567] Cannot find add_set index 0 as target [ 155.285806][ T7560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.305091][ T7560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.317833][ T7560] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 155.328828][ T7560] bond0 (unregistering): Released all slaves [ 155.525475][ T7579] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 155.697796][ T7589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.486'. [ 155.774329][ T7596] netlink: 36 bytes leftover after parsing attributes in process `syz.3.489'. [ 155.981863][ T7607] x_tables: duplicate underflow at hook 1 [ 156.191793][ T7617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 156.199914][ T7617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 156.371763][ T7628] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 156.431944][ T7628] bridge_slave_0: left allmulticast mode [ 156.439068][ T7628] bridge_slave_0: left promiscuous mode [ 156.445020][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.485342][ T7628] bond0: (slave bond_slave_0): Releasing backup interface [ 156.542340][ T7628] bond_slave_0: left promiscuous mode [ 156.623077][ T7628] bond0: (slave bond_slave_1): Releasing backup interface [ 156.651075][ T7645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.681107][ T7628] bond_slave_1: left promiscuous mode [ 156.713158][ T7628] team0: Port device team_slave_0 removed [ 156.743590][ T7628] team0: Port device team_slave_1 removed [ 156.754502][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.786448][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.825644][ T7628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.848077][ T7628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.914653][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 156.963612][ T7635] bridge_slave_0: left allmulticast mode [ 156.989765][ T7635] bridge_slave_0: left promiscuous mode [ 156.995809][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.009003][ T7635] bridge_slave_1: left allmulticast mode [ 157.014762][ T7635] bridge_slave_1: left promiscuous mode [ 157.020780][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.077380][ T7635] bond0: (slave bond_slave_0): Releasing backup interface [ 157.112415][ T7635] bond0: (slave bond_slave_1): Releasing backup interface [ 157.139423][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.155876][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.175699][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.186443][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.656148][ T7682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'. [ 157.826661][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.512'. [ 157.851441][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 158.190415][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 158.206327][ T7710] bridge_slave_0: left allmulticast mode [ 158.272105][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.602391][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.523'. [ 158.731759][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 159.206560][ T7766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.235564][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 159.401368][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.455869][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 159.468374][ T7786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.538'. [ 160.060552][ T7813] can: request_module (can-proto-3) failed. [ 160.164994][ T7822] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 160.195270][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 160.219544][ T7822] netlink: 28 bytes leftover after parsing attributes in process `syz.3.549'. [ 160.439457][ T7833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.576389][ T7837] netlink: 'syz.1.555': attribute type 13 has an invalid length. [ 160.602483][ T7837] veth0_macvtap: left promiscuous mode [ 160.615119][ T7837] macvtap0: entered allmulticast mode [ 160.675811][ T7837] macvtap0: refused to change device tx_queue_len [ 160.741990][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.4.559'. [ 160.854551][ T7862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 160.863864][ T7862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 160.873002][ T7862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 160.882139][ T7862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 160.891261][ T7862] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 161.196102][ T7875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 161.223382][ T7877] netlink: 'syz.4.568': attribute type 2 has an invalid length. [ 161.242258][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 161.255266][ T7880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.569'. [ 161.287023][ T7881] netlink: 'syz.4.568': attribute type 1 has an invalid length. [ 161.309686][ T7880] 8021q: adding VLAN 0 to HW filter on device team1 [ 161.503215][ T5849] Bluetooth: hci2: command tx timeout [ 161.754639][ T7907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.795067][ T7907] nft_compat: unsupported protocol 1 [ 162.708573][ T7945] geneve2: entered promiscuous mode [ 162.713861][ T7945] geneve2: entered allmulticast mode [ 162.983960][ T7970] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 163.091862][ T7982] tipc: Failed to obtain node identity [ 163.098557][ T7982] tipc: Enabling of bearer rejected, failed to enable media [ 163.126667][ T7982] tipc: Failed to obtain node identity [ 163.136362][ T7982] tipc: Enabling of bearer rejected, failed to enable media [ 163.153968][ T7985] Cannot find add_set index 0 as target [ 163.517462][ T8001] ip6t_rpfilter: unknown options [ 163.618143][ T8006] IPVS: Error joining to the multicast group [ 163.891180][ T8021] batadv1: entered promiscuous mode [ 164.124609][ T8038] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.132473][ T8038] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.302008][ T5843] Bluetooth: hci3: command 0x0405 tx timeout [ 164.586267][ T8065] net_ratelimit: 3324 callbacks suppressed [ 164.586286][ T8065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.903457][ T8085] __nla_validate_parse: 18 callbacks suppressed [ 164.903477][ T8085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.632'. [ 165.046585][ T8095] netlink: 44 bytes leftover after parsing attributes in process `syz.3.635'. [ 165.186426][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 165.196813][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'. [ 165.423928][ T8110] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.640'. [ 165.511252][ T8116] netlink: 'syz.4.644': attribute type 1 has an invalid length. [ 165.673371][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 165.800952][ T8127] netlink: 256 bytes leftover after parsing attributes in process `syz.4.646'. [ 165.805239][ T8125] vlan3: entered promiscuous mode [ 165.839166][ T8125] bridge0: entered promiscuous mode [ 165.993445][ T8133] netlink: 'syz.1.650': attribute type 83 has an invalid length. [ 166.014351][ T8134] netlink: 'syz.1.650': attribute type 83 has an invalid length. [ 166.137884][ T8139] netlink: 'syz.4.651': attribute type 1 has an invalid length. [ 166.211658][ T8144] netlink: 68 bytes leftover after parsing attributes in process `syz.1.652'. [ 166.212466][ T8139] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.270401][ T8141] bond2: (slave geneve3): making interface the new active one [ 166.324634][ T8141] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 166.392305][ T8141] bond2: entered promiscuous mode [ 166.403934][ T8141] geneve3: entered promiscuous mode [ 166.525623][ T8158] xt_hashlimit: size too large, truncated to 1048576 [ 166.630415][ T8164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.708376][ T8158] syz.2.656: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.751637][ T8158] CPU: 1 UID: 0 PID: 8158 Comm: syz.2.656 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 166.751666][ T8158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.751685][ T8158] Call Trace: [ 166.751693][ T8158] [ 166.751702][ T8158] dump_stack_lvl+0x189/0x250 [ 166.751742][ T8158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.751772][ T8158] ? __pfx__printk+0x10/0x10 [ 166.751795][ T8158] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.751819][ T8158] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 166.751844][ T8158] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 166.751870][ T8158] warn_alloc+0x214/0x310 [ 166.751902][ T8158] ? __pfx_warn_alloc+0x10/0x10 [ 166.751935][ T8158] ? __get_vm_area_node+0x28f/0x300 [ 166.751958][ T8158] ? htable_create+0xfc/0x7a0 [ 166.751988][ T8158] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 166.752045][ T8158] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.752076][ T8158] ? rcu_is_watching+0x15/0xb0 [ 166.752097][ T8158] ? htable_create+0xfc/0x7a0 [ 166.752120][ T8158] ? htable_create+0xfc/0x7a0 [ 166.752141][ T8158] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 166.752163][ T8158] ? htable_create+0xfc/0x7a0 [ 166.752185][ T8158] ? hashlimit_pernet+0x23/0x240 [ 166.752218][ T8158] htable_create+0xfc/0x7a0 [ 166.752261][ T8158] hashlimit_mt_check_common+0x719/0xa10 [ 166.752297][ T8158] xt_check_match+0x3ce/0xab0 [ 166.752320][ T8158] ? __pfx___mutex_lock+0x10/0x10 [ 166.752350][ T8158] ? __pfx_xt_check_match+0x10/0x10 [ 166.752377][ T8158] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 166.752409][ T8158] ? xt_find_match+0x1f7/0x250 [ 166.752438][ T8158] translate_table+0x1553/0x2040 [ 166.752487][ T8158] ? __pfx_translate_table+0x10/0x10 [ 166.752512][ T8158] ? __might_fault+0xb0/0x130 [ 166.752554][ T8158] ? _copy_from_user+0x94/0xb0 [ 166.752581][ T8158] do_ip6t_set_ctl+0x970/0xce0 [ 166.752612][ T8158] ? rcu_is_watching+0x15/0xb0 [ 166.752630][ T8158] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 166.752674][ T8158] ? __pfx___mutex_lock+0x10/0x10 [ 166.752702][ T8158] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.752738][ T8158] ? __pfx_futex_wait+0x10/0x10 [ 166.752775][ T8158] nf_setsockopt+0x26c/0x290 [ 166.752805][ T8158] rawv6_setsockopt+0x23b/0x5b0 [ 166.752829][ T8158] ? __lock_acquire+0xab9/0xd20 [ 166.752860][ T8158] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 166.752886][ T8158] ? aa_sock_opt_perm+0x74/0x110 [ 166.752913][ T8158] ? sock_common_setsockopt+0x36/0xc0 [ 166.752941][ T8158] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 166.752973][ T8158] do_sock_setsockopt+0x25a/0x3e0 [ 166.752998][ T8158] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.753024][ T8158] ? __fget_files+0x2a/0x420 [ 166.753058][ T8158] __x64_sys_setsockopt+0x18b/0x220 [ 166.753086][ T8158] do_syscall_64+0xfa/0x3b0 [ 166.753112][ T8158] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.753136][ T8158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.753156][ T8158] ? clear_bhb_loop+0x60/0xb0 [ 166.753181][ T8158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.753200][ T8158] RIP: 0033:0x7f0bef98e929 [ 166.753233][ T8158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.753248][ T8158] RSP: 002b:00007f0bf087c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.753269][ T8158] RAX: ffffffffffffffda RBX: 00007f0befbb6080 RCX: 00007f0bef98e929 [ 166.753282][ T8158] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 166.753293][ T8158] RBP: 00007f0befa10b39 R08: 0000000000000588 R09: 0000000000000000 [ 166.753305][ T8158] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 166.753316][ T8158] R13: 0000000000000000 R14: 00007f0befbb6080 R15: 00007ffe424eafe8 [ 166.753347][ T8158] [ 167.123481][ T8158] Mem-Info: [ 167.126656][ T8158] active_anon:3536 inactive_anon:0 isolated_anon:0 [ 167.126656][ T8158] active_file:1170 inactive_file:39853 isolated_file:0 [ 167.126656][ T8158] unevictable:768 dirty:76 writeback:0 [ 167.126656][ T8158] slab_reclaimable:10526 slab_unreclaimable:100963 [ 167.126656][ T8158] mapped:28753 shmem:1385 pagetables:1183 [ 167.126656][ T8158] sec_pagetables:0 bounce:0 [ 167.126656][ T8158] kernel_misc_reclaimable:0 [ 167.126656][ T8158] free:1328444 free_pcp:17865 free_cma:0 [ 167.174944][ T8158] Node 0 active_anon:14180kB inactive_anon:0kB active_file:4680kB inactive_file:159208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115020kB dirty:300kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.208384][ T8158] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 167.239912][ T8158] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 167.270192][ T8158] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 167.276055][ T8158] Node 0 DMA32 free:1395540kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14236kB inactive_anon:0kB active_file:4680kB inactive_file:157384kB unevictable:1536kB writepending:300kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:50096kB local_pcp:23568kB free_cma:0kB [ 167.308509][ T8158] lowmem_reserve[]: 0 0 1 1 1 [ 167.313277][ T8158] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 167.342688][ T8158] lowmem_reserve[]: 0 0 0 0 0 [ 167.347507][ T8158] Node 1 Normal free:3904212kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19428kB local_pcp:8992kB free_cma:0kB [ 167.379536][ T8158] lowmem_reserve[]: 0 0 0 0 0 [ 167.384310][ T8158] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.397087][ T8158] Node 0 DMA32: 873*4kB (UME) 661*8kB (UME) 578*16kB (UME) 759*32kB (UME) 102*64kB (UME) 286*128kB (UME) 347*256kB (UM) 271*512kB (UE) 191*1024kB (UM) 3*2048kB (M) 215*4096kB (UM) = 1395404kB [ 167.416198][ T8158] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 167.431649][ T8158] Node 1 Normal: 189*4kB (UME) 58*8kB (UME) 49*16kB (UME) 132*32kB (UME) 24*64kB (UME) 9*128kB (UME) 4*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 949*4096kB (M) = 3904212kB [ 167.450008][ T8158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.459650][ T8158] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 167.469006][ T8158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.479504][ T8158] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.488880][ T8158] 42379 total pagecache pages [ 167.493591][ T8158] 0 pages in swap cache [ 167.497919][ T8158] Free swap = 124996kB [ 167.502107][ T8158] Total swap = 124996kB [ 167.506291][ T8158] 2097051 pages RAM [ 167.510245][ T8158] 0 pages HighMem/MovableOnly [ 167.514954][ T8158] 424675 pages reserved [ 167.519355][ T8158] 0 pages cma reserved [ 168.075151][ T8207] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.075854][ T10] IPVS: starting estimator thread 0... [ 168.207270][ T8211] IPVS: using max 28 ests per chain, 67200 per kthread [ 168.236817][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 168.276031][ T8219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 168.319336][ T8224] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.329364][ T8223] Cannot find del_set index 4 as target [ 168.551428][ T8235] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 168.642061][ T8239] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 168.712989][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.755372][ T8245] x_tables: duplicate underflow at hook 1 [ 168.768815][ T8246] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 168.776897][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.785819][ T8246] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 168.796561][ T8245] sctp: [Deprecated]: syz.4.681 (pid 8245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.796561][ T8245] Use struct sctp_sack_info instead [ 168.836330][ T8243] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.864178][ T8243] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 168.936332][ T8239] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 169.009553][ T8239] bond0: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 169.093996][ T8257] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 169.582356][ T8283] vlan2: entered allmulticast mode [ 169.611377][ T8283] team_slave_0: entered allmulticast mode [ 170.092162][ T8310] netlink: 'syz.1.700': attribute type 10 has an invalid length. [ 170.127370][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.134634][ T8310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.142317][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.149650][ T8310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.191461][ T8310] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.844606][ T8346] netlink: 'syz.1.712': attribute type 1 has an invalid length. [ 170.853728][ T8346] netlink: 'syz.1.712': attribute type 2 has an invalid length. [ 170.861711][ T8346] __nla_validate_parse: 4 callbacks suppressed [ 170.861726][ T8346] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.712'. [ 171.236020][ T8366] netlink: 36 bytes leftover after parsing attributes in process `syz.0.719'. [ 171.283443][ T8370] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'. [ 171.299516][ T8372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.417026][ T8377] Bluetooth: MGMT ver 1.23 [ 171.548985][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'. [ 171.627759][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 171.887954][ T8411] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.909247][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 171.920453][ T8409] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 171.954193][ T8415] pimreg3: entered allmulticast mode [ 171.990296][ T8412] netlink: 788 bytes leftover after parsing attributes in process `syz.2.735'. [ 172.142152][ T8431] netlink: 476 bytes leftover after parsing attributes in process `syz.2.741'. [ 172.155430][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 172.622045][ T8459] xt_l2tp: unknown flags: 18 [ 172.711656][ T8466] netlink: 'syz.4.752': attribute type 1 has an invalid length. [ 172.859457][ T1105] wlan0: Trigger new scan to find an IBSS to join [ 172.873817][ T8471] syzkaller0: entered promiscuous mode [ 172.891729][ T8471] syzkaller0: entered allmulticast mode [ 172.901189][ T8479] xt_nat: multiple ranges no longer supported [ 172.925134][ T8479] xt_nat: multiple ranges no longer supported [ 172.947500][ T8479] xt_nat: multiple ranges no longer supported [ 172.954907][ T8479] xt_nat: multiple ranges no longer supported [ 172.968619][ T8479] xt_nat: multiple ranges no longer supported [ 172.985324][ T8479] xt_nat: multiple ranges no longer supported [ 173.043349][ T8479] xt_nat: multiple ranges no longer supported [ 173.051851][ T8479] xt_nat: multiple ranges no longer supported [ 173.061195][ T8479] xt_nat: multiple ranges no longer supported [ 173.068034][ T8479] xt_nat: multiple ranges no longer supported [ 173.499643][ T5843] Bluetooth: hci0: command 0x0401 tx timeout [ 173.505755][ T5849] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 174.329731][ T8499] batadv_slave_1: entered promiscuous mode [ 174.352029][ T8499] macsec1: entered promiscuous mode [ 174.363670][ T8499] macsec1: entered allmulticast mode [ 174.369422][ T8499] batadv_slave_1: entered allmulticast mode [ 174.414710][ T8502] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 174.451055][ T8502] dummy0: entered promiscuous mode [ 174.460234][ T8502] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 174.637858][ T8514] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.043134][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.054977][ T8531] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 175.090471][ T8532] xt_limit: Overflow, try lower: 0/0 [ 175.164450][ T8531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.195429][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.265623][ T8534] veth3: entered promiscuous mode [ 175.313513][ T8534] bond2: (slave veth3): Enslaving as an active interface with a down link [ 175.362968][ T8531] vlan2: entered allmulticast mode [ 175.376476][ T8531] bond2: entered allmulticast mode [ 175.445559][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.566039][ T8516] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 175.642796][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.818178][ T1033] wlan0: Trigger new scan to find an IBSS to join [ 176.171284][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.186752][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.202605][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.218771][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.228395][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.363428][ T8585] netlink: 'syz.3.789': attribute type 11 has an invalid length. [ 176.372843][ T8585] __nla_validate_parse: 10 callbacks suppressed [ 176.372860][ T8585] netlink: 224 bytes leftover after parsing attributes in process `syz.3.789'. [ 176.846093][ T12] bond0 (unregistering): Released all slaves [ 176.862779][ T8573] vxcan1 speed is unknown, defaulting to 1000 [ 176.862829][ T8577] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.890453][ T8588] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 176.967583][ T8587] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 177.119130][ T8604] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.796'. [ 177.268084][ T8610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.797'. [ 177.315082][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.801'. [ 177.337352][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 177.346273][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.801'. [ 177.588574][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 177.860148][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 178.211925][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.810'. [ 178.297210][ T5843] Bluetooth: hci4: command tx timeout [ 178.305240][ T12] hsr_slave_0: left promiscuous mode [ 178.311922][ T12] hsr_slave_1: left promiscuous mode [ 178.332040][ T12] veth1_macvtap: left promiscuous mode [ 178.338022][ T12] veth0_macvtap: left promiscuous mode [ 178.343762][ T12] veth1_vlan: left promiscuous mode [ 178.349268][ T12] veth0_vlan: left promiscuous mode [ 178.787569][ T1033] wlan0: Trigger new scan to find an IBSS to join [ 179.203201][ T8573] chnl_net:caif_netlink_parms(): no params data found [ 179.273854][ T8665] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 179.393274][ T8665] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.483161][ T8670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.502680][ T8670] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.519387][ T8670] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 179.607960][ T8671] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 179.644377][ T8671] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 179.664876][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.817'. [ 179.751550][ T1111] wlan0: Creating new IBSS network, BSSID 32:03:17:d6:00:2a [ 179.773617][ T8689] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 179.804414][ T8681] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.029724][ T8689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.040988][ T8695] bond3: (slave wlan1): Enslaving as an active interface with a down link [ 180.079592][ T8573] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.097815][ T8573] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.149792][ T8573] bridge_slave_0: entered allmulticast mode [ 180.181806][ T8573] bridge_slave_0: entered promiscuous mode [ 180.228958][ T8708] xt_hashlimit: size too large, truncated to 1048576 [ 180.248515][ T8573] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.267484][ T8573] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.283106][ T8573] bridge_slave_1: entered allmulticast mode [ 180.291329][ T8573] bridge_slave_1: entered promiscuous mode [ 180.387834][ T5843] Bluetooth: hci4: command tx timeout [ 180.535813][ T8573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.578149][ T8573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.706940][ T8733] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.749885][ T8573] team0: Port device team_slave_0 added [ 180.792223][ T8573] team0: Port device team_slave_1 added [ 180.859961][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.869806][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.917160][ T8573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.949399][ T8573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.965459][ T8573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.024525][ T8573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.133152][ T8747] xt_hashlimit: size too large, truncated to 1048576 [ 181.192392][ T8573] hsr_slave_0: entered promiscuous mode [ 181.228231][ T8573] hsr_slave_1: entered promiscuous mode [ 181.234623][ T8573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.277535][ T8573] Cannot create hsr debugfs directory [ 181.684985][ T8763] __nla_validate_parse: 3 callbacks suppressed [ 181.685004][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 182.078632][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 182.089047][ T8781] netlink: 50 bytes leftover after parsing attributes in process `syz.0.849'. [ 182.098123][ T8781] netlink: 50 bytes leftover after parsing attributes in process `syz.0.849'. [ 182.114935][ T8784] dvmrp0: entered allmulticast mode [ 182.126952][ T8783] sch_fq: defrate 0 ignored. [ 182.216747][ T8785] vxcan1 speed is unknown, defaulting to 1000 [ 182.262403][ T8573] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.301342][ T8573] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 182.354047][ T8573] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 182.391410][ T8573] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 182.457423][ T5843] Bluetooth: hci4: command tx timeout [ 182.528968][ T8807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.853'. [ 182.550963][ T8809] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 182.766411][ T8573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.829867][ T8573] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.893881][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.901286][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.981492][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 182.993211][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.000435][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.265980][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.860'. [ 183.276326][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.860'. [ 183.960867][ T8573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.984673][ T8858] sctp: [Deprecated]: syz.4.867 (pid 8858) Use of int in max_burst socket option. [ 183.984673][ T8858] Use struct sctp_assoc_value instead [ 184.012927][ T24] IPVS: starting estimator thread 0... [ 184.117763][ T8868] IPVS: using max 24 ests per chain, 57600 per kthread [ 184.144642][ T8573] veth0_vlan: entered promiscuous mode [ 184.201037][ T8573] veth1_vlan: entered promiscuous mode [ 184.485290][ T8573] veth0_macvtap: entered promiscuous mode [ 184.546879][ T8573] veth1_macvtap: entered promiscuous mode [ 184.557143][ T5843] Bluetooth: hci4: command tx timeout [ 184.689082][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.746074][ T8889] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 184.766420][ T8573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.795001][ T8573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.810294][ T8889] netlink: 'syz.4.873': attribute type 2 has an invalid length. [ 184.819702][ T8573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.828800][ T8573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.841295][ T8573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.851504][ T8900] netlink: 'syz.0.875': attribute type 1 has an invalid length. [ 184.893349][ T8897] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 184.901172][ T8900] netlink: 224 bytes leftover after parsing attributes in process `syz.0.875'. [ 185.117470][ T8911] syzkaller1: entered promiscuous mode [ 185.124018][ T8911] syzkaller1: entered allmulticast mode [ 185.343686][ T8916] can: request_module (can-proto-4) failed. [ 185.379437][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.404579][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.454846][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.464051][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.073905][ T8949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.246593][ T1111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.428685][ T1111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.587812][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 186.609355][ T1111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.671886][ T8966] lo: entered promiscuous mode [ 186.721646][ T8966] netlink: 'syz.1.889': attribute type 2 has an invalid length. [ 186.740076][ T8966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.777404][ T8966] netlink: 'syz.1.889': attribute type 21 has an invalid length. [ 186.785207][ T8966] __nla_validate_parse: 1 callbacks suppressed [ 186.785222][ T8966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.889'. [ 186.803287][ T1111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.952811][ T8966] netlink: 'syz.1.889': attribute type 5 has an invalid length. [ 186.991438][ T8966] netlink: 3 bytes leftover after parsing attributes in process `syz.1.889'. [ 187.036614][ T8983] netlink: 76 bytes leftover after parsing attributes in process `syz.1.889'. [ 187.096339][ T8986] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.893'. [ 187.226343][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.247273][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.255082][ T1111] bridge_slave_1: left allmulticast mode [ 187.262826][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.287520][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.296103][ T1111] bridge_slave_1: left promiscuous mode [ 187.303662][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.358114][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.372491][ T1111] bridge_slave_0: left allmulticast mode [ 187.385663][ T1111] bridge_slave_0: left promiscuous mode [ 187.391866][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.578152][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 187.827529][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880217b0400: rx timeout, send abort [ 187.948280][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.962872][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.973328][ T1111] bond0 (unregistering): Released all slaves [ 188.080104][ T8991] vxcan1 speed is unknown, defaulting to 1000 [ 188.196771][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.683075][ T9056] tipc: Can't bind to reserved service type 1 [ 189.168057][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.350598][ T1111] hsr_slave_0: left promiscuous mode [ 189.357805][ T1111] hsr_slave_1: left promiscuous mode [ 189.363752][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.387878][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.404251][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.414207][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.417881][ T5849] Bluetooth: hci4: command tx timeout [ 189.433010][ T9083] netlink: 48 bytes leftover after parsing attributes in process `syz.4.922'. [ 189.460208][ T1111] veth1_macvtap: left promiscuous mode [ 189.465928][ T1111] veth0_macvtap: left promiscuous mode [ 189.472046][ T1111] veth1_vlan: left promiscuous mode [ 189.477582][ T1111] veth0_vlan: left promiscuous mode [ 189.963919][ T9099] Cannot find add_set index 4 as target [ 190.204154][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 190.244523][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 190.586579][ T9082] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.922'. [ 190.660571][ T9098] bridge0: port 3(vlan2) entered blocking state [ 190.678786][ T9098] bridge0: port 3(vlan2) entered disabled state [ 190.696131][ T9098] vlan2: entered allmulticast mode [ 190.712032][ T9098] bridge0: entered allmulticast mode [ 190.735348][ T9098] vlan2: left allmulticast mode [ 190.743014][ T9106] netlink: 7 bytes leftover after parsing attributes in process `syz.0.928'. [ 190.748254][ T9098] bridge0: left allmulticast mode [ 190.931413][ T8991] chnl_net:caif_netlink_parms(): no params data found [ 191.187978][ T9122] xfrm1: entered allmulticast mode [ 191.297199][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.304458][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.316183][ T8991] bridge_slave_0: entered allmulticast mode [ 191.324209][ T8991] bridge_slave_0: entered promiscuous mode [ 191.339535][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.346941][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.356983][ T9139] Bluetooth: MGMT ver 1.23 [ 191.358265][ T8991] bridge_slave_1: entered allmulticast mode [ 191.373946][ T8991] bridge_slave_1: entered promiscuous mode [ 191.435300][ T9133] tipc: Started in network mode [ 191.444325][ T9133] tipc: Node identity c6d9b5ca8187, cluster identity 4711 [ 191.456049][ T9133] tipc: Enabled bearer , priority 0 [ 191.483619][ T9144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.937'. [ 191.498231][ T5849] Bluetooth: hci4: command tx timeout [ 191.557582][ T9138] syzkaller0: entered promiscuous mode [ 191.563126][ T9138] syzkaller0: entered allmulticast mode [ 191.587714][ T9138] tipc: Resetting bearer [ 191.600976][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.629317][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.759171][ T8991] team0: Port device team_slave_0 added [ 191.789425][ T8991] team0: Port device team_slave_1 added [ 191.945436][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.944'. [ 191.961041][ T13] tipc: Resetting bearer [ 191.994230][ T9121] tipc: Resetting bearer [ 192.088717][ T9171] netlink: 'syz.4.945': attribute type 24 has an invalid length. [ 192.448342][ T5854] tipc: Node number set to 1197389258 [ 193.577878][ T5849] Bluetooth: hci4: command tx timeout [ 194.044606][ T9121] tipc: Disabling bearer [ 194.063419][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 194.085173][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.159624][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.200918][ T8991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.266826][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.314257][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.407539][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.502204][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 194.568550][ T9190] vcan0: entered promiscuous mode [ 194.568967][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.953'. [ 194.609902][ T8991] hsr_slave_0: entered promiscuous mode [ 194.616895][ T8991] hsr_slave_1: entered promiscuous mode [ 194.620825][ T9201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 194.623770][ T8991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.640565][ T8991] Cannot create hsr debugfs directory [ 194.655275][ T9197] dvmrp1: entered allmulticast mode [ 194.819748][ T9205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.985591][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.1.958'. [ 195.042472][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 195.178208][ T9222] openvswitch: netlink: Missing key (keys=40, expected=80) [ 195.444832][ T9243] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20002 [ 195.486527][ T9245] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.969'. [ 195.625597][ T9251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.971'. [ 195.667975][ T5849] Bluetooth: hci4: command tx timeout [ 195.700130][ T8991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.748659][ T8991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.778485][ T8991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.803552][ T9260] netlink: 48 bytes leftover after parsing attributes in process `syz.4.973'. [ 195.818464][ T8991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.873511][ T9255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.009959][ T9255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.316837][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.381679][ T8991] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.417804][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.425004][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.453441][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.461428][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.570841][ T9293] bridge0: port 1(batadv1) entered blocking state [ 196.577635][ T9293] bridge0: port 1(batadv1) entered disabled state [ 196.589612][ T9293] batadv1: entered allmulticast mode [ 196.598987][ T9293] batadv1: entered promiscuous mode [ 196.654387][ T8991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.878124][ T9311] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 196.896044][ T9313] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 197.070306][ T1111] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 197.080119][ T1111] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 197.107561][ T9325] __nla_validate_parse: 2 callbacks suppressed [ 197.107579][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 197.228146][ T9330] xt_socket: unknown flags 0x2 [ 197.306648][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.555849][ T9343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.997'. [ 197.569100][ T8991] veth0_vlan: entered promiscuous mode [ 197.593016][ T8991] veth1_vlan: entered promiscuous mode [ 197.649396][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 197.681321][ T8991] veth0_macvtap: entered promiscuous mode [ 197.692603][ T8991] veth1_macvtap: entered promiscuous mode [ 197.742919][ T9343] veth3: entered allmulticast mode [ 197.754758][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 197.813701][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.852384][ T9352] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 197.876042][ T9359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1004'. [ 197.895951][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.929832][ T8991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.957497][ T8991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.966259][ T8991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.997212][ T8991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.095235][ T9366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1007'. [ 198.289144][ T5894] hid-generic 0005:16C4:5505.0002: unknown main item tag 0x6 [ 198.301232][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.309309][ T5894] hid-generic 0005:16C4:5505.0002: unknown main item tag 0x3 [ 198.330772][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.338812][ T5894] hid-generic 0005:16C4:5505.0002: hidraw0: BLUETOOTH HID v0.8f Device [syz0] on aa:aa:aa:aa:aa:aa [ 198.376544][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1012'. [ 198.414886][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.431534][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.582933][ T9388] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1017'. [ 198.593692][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 198.612964][ T9390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 198.655538][ T9390] erspan0: entered promiscuous mode [ 198.662241][ T9390] gretap0: entered promiscuous mode [ 198.892339][ T9391] xt_CT: No such helper "pptp" [ 199.008626][ T9401] netlink: 'syz.4.1019': attribute type 10 has an invalid length. [ 199.085006][ T9401] team0: Port device geneve0 added [ 199.220906][ T9409] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 199.309659][ T9411] syzkaller1: entered promiscuous mode [ 199.326446][ T9411] syzkaller1: entered allmulticast mode [ 199.506107][ T9423] netlink: 'syz.0.1027': attribute type 23 has an invalid length. [ 199.657406][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 200.483945][ T1111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.803995][ T1111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.932764][ T1111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.039791][ T9451] : renamed from veth0_vlan (while UP) [ 201.144882][ T9458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.204650][ T1111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.308429][ T9460] netlink: 'syz.3.1039': attribute type 7 has an invalid length. [ 201.487373][ T1111] bridge_slave_1: left allmulticast mode [ 201.493087][ T1111] bridge_slave_1: left promiscuous mode [ 201.526038][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.576471][ T1111] bridge_slave_0: left allmulticast mode [ 201.600463][ T1111] bridge_slave_0: left promiscuous mode [ 201.606301][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.663417][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 201.675903][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 201.687723][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 201.696306][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 201.705077][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.067282][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.080368][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.091272][ T1111] bond0 (unregistering): Released all slaves [ 202.163234][ T9477] vxcan1 speed is unknown, defaulting to 1000 [ 202.295153][ T9490] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 202.348279][ T9494] __nla_validate_parse: 6 callbacks suppressed [ 202.348298][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'. [ 202.367397][ T24] hid-generic 0005:16C0:0006.0003: unknown main item tag 0x0 [ 202.370363][ T9494] netlink: 'syz.3.1049': attribute type 30 has an invalid length. [ 202.399068][ T24] hid-generic 0005:16C0:0006.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz1] on aa:aa:aa:aa:aa:aa [ 202.428795][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 203.100878][ T1111] hsr_slave_0: left promiscuous mode [ 203.113732][ T1111] hsr_slave_1: left promiscuous mode [ 203.120287][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.128705][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.148112][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.155783][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.202980][ T1111] veth1_macvtap: left promiscuous mode [ 203.205111][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 203.213808][ T1111] veth0_macvtap: left promiscuous mode [ 203.224991][ T1111] veth1_vlan: left promiscuous mode [ 203.230961][ T1111] veth0_vlan: left promiscuous mode [ 203.700260][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 203.737210][ T5849] Bluetooth: hci4: command tx timeout [ 203.744008][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 204.163598][ T9529] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1057'. [ 204.192905][ T9530] IPv6: sit1: Disabled Multicast RS [ 204.204022][ T9530] sit1: entered allmulticast mode [ 204.289033][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'. [ 204.782760][ T9477] chnl_net:caif_netlink_parms(): no params data found [ 204.927901][ T9574] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1068'. [ 205.136657][ T9477] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.171412][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.179055][ T9477] bridge_slave_0: entered allmulticast mode [ 205.186790][ T9477] bridge_slave_0: entered promiscuous mode [ 205.198753][ T9590] veth1_macvtap: left promiscuous mode [ 205.204271][ T9590] macsec0: entered promiscuous mode [ 205.225892][ T9477] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.233659][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.255590][ T9477] bridge_slave_1: entered allmulticast mode [ 205.273157][ T9477] bridge_slave_1: entered promiscuous mode [ 205.281270][ T9593] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 205.415926][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1077'. [ 205.443841][ T9477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.499973][ T9477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.606742][ T9599] syz.1.1077 (9599) used greatest stack depth: 17992 bytes left [ 205.616704][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 205.664543][ T9477] team0: Port device team_slave_0 added [ 205.695080][ T9477] team0: Port device team_slave_1 added [ 205.793526][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.801576][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.837394][ T5849] Bluetooth: hci4: command tx timeout [ 205.877248][ T9477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.896155][ T9477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.904640][ T9477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.930885][ T9477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.014235][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1086'. [ 206.040525][ T9477] hsr_slave_0: entered promiscuous mode [ 206.053266][ T9477] hsr_slave_1: entered promiscuous mode [ 206.060821][ T9477] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.076542][ T9477] Cannot create hsr debugfs directory [ 206.351268][ T9635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.400176][ T9631] bond4: entered promiscuous mode [ 206.411481][ T9635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.419918][ T9631] bond4: entered allmulticast mode [ 206.425695][ T9631] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.712428][ T9650] x_tables: duplicate underflow at hook 3 [ 207.118755][ T9664] can: request_module (can-proto-0) failed. [ 207.202317][ T9477] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.224953][ T9477] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.247318][ T9477] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.298118][ T9477] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.331406][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1099'. [ 207.531520][ T9675] syzkaller0: entered promiscuous mode [ 207.540545][ T9675] syzkaller0: entered allmulticast mode [ 207.588488][ T9697] netlink: 1152 bytes leftover after parsing attributes in process `syz.4.1104'. [ 207.597976][ T9697] openvswitch: netlink: Flow key attr not present in new flow. [ 207.622450][ T9692] 8021q: VLANs not supported on wg1 [ 207.632348][ T9692] netlink: 'syz.0.1105': attribute type 10 has an invalid length. [ 207.764970][ T9701] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 207.900961][ T5849] Bluetooth: hci4: command tx timeout [ 209.085184][ T9477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.106634][ T9713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 209.145867][ T9477] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.153184][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 209.176586][ T9713] xfrm1: entered promiscuous mode [ 209.183373][ T9713] xfrm1: entered allmulticast mode [ 209.196068][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1111'. [ 209.217571][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.224803][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.246993][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.254306][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.356496][ T9715] xt_CT: No such helper "syz1" [ 209.386369][ T9719] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 209.423195][ T9721] x_tables: unsorted underflow at hook 4 [ 209.515355][ T9724] netlink: 'syz.0.1114': attribute type 7 has an invalid length. [ 209.539809][ T9724] netlink: 'syz.0.1114': attribute type 8 has an invalid length. [ 209.683292][ T9732] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1117'. [ 209.930821][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 209.959589][ T9477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.978210][ T51] Bluetooth: hci4: command tx timeout [ 210.007810][ T9744] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 210.015616][ T9744] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1122'. [ 210.040054][ T9744] netlink: 'syz.0.1122': attribute type 1 has an invalid length. [ 210.112576][ T9477] veth0_vlan: entered promiscuous mode [ 210.147695][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 210.228897][ T9477] veth1_vlan: entered promiscuous mode [ 210.345125][ T9761] netlink: 'syz.0.1126': attribute type 39 has an invalid length. [ 210.355560][ T9477] veth0_macvtap: entered promiscuous mode [ 210.420472][ T9760] netlink: 'syz.1.1125': attribute type 13 has an invalid length. [ 210.471227][ T9477] veth1_macvtap: entered promiscuous mode [ 210.519588][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.548336][ T9477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.601503][ T9477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.627675][ T9477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.648879][ T9477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.667082][ T9477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.682662][ T9774] bridge0: port 3(gretap0) entered blocking state [ 210.691460][ T9774] bridge0: port 3(gretap0) entered disabled state [ 210.698457][ T9774] gretap0: entered allmulticast mode [ 210.706624][ T9774] gretap0: entered promiscuous mode [ 210.718693][ T9774] bridge0: port 3(gretap0) entered blocking state [ 210.725428][ T9774] bridge0: port 3(gretap0) entered forwarding state [ 210.768457][ T9769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.824614][ T9769] macsec2: entered allmulticast mode [ 210.835345][ T9769] veth1_macvtap: entered allmulticast mode [ 210.845618][ T9769] veth1_macvtap: left allmulticast mode [ 210.873971][ T9776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1131'. [ 210.978369][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.996123][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.043968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.052642][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.152768][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1134'. [ 211.657756][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.658494][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.745978][ T9817] sock: sock_set_timeout: `syz.1.1144' (pid 9817) tries to set negative timeout [ 211.807449][ T9825] macvlan0: entered promiscuous mode [ 211.813492][ T9825] macvlan0: entered allmulticast mode [ 211.832385][ T9825] veth1_vlan: entered allmulticast mode [ 211.940670][ T1033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.982293][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e0b3800: rx timeout, send abort [ 212.138146][ T5971] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.465802][ T1033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.482455][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e0b1c00: rx timeout, send abort [ 212.490872][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e0b3800: abort rx timeout. Force session deactivation [ 212.619620][ T9837] __nla_validate_parse: 4 callbacks suppressed [ 212.619638][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1150'. [ 212.754689][ T1033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.819754][ T9845] netlink: 'syz.3.1152': attribute type 13 has an invalid length. [ 212.842491][ T9845] netlink: 'syz.3.1152': attribute type 17 has an invalid length. [ 212.915055][ T1033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.990827][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e0b1c00: abort rx timeout. Force session deactivation [ 213.092584][ T9845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.110824][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.124551][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.132602][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.141917][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.152525][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.201553][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1156'. [ 213.301595][ T9859] vxcan1 speed is unknown, defaulting to 1000 [ 213.367299][ T1033] bridge_slave_1: left allmulticast mode [ 213.373011][ T1033] bridge_slave_1: left promiscuous mode [ 213.391798][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1159'. [ 213.397451][ T1033] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.405095][ T9871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.419615][ T1033] bridge_slave_0: left allmulticast mode [ 213.425289][ T1033] bridge_slave_0: left promiscuous mode [ 213.435863][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1159'. [ 213.446426][ T1033] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.042738][ T1033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.053849][ T1033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.066606][ T1033] bond0 (unregistering): Released all slaves [ 214.562353][ T9910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.053867][ T9859] chnl_net:caif_netlink_parms(): no params data found [ 215.177175][ T5843] Bluetooth: hci4: command tx timeout [ 215.362366][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'. [ 215.386959][ T1033] hsr_slave_0: left promiscuous mode [ 215.448523][ T1033] hsr_slave_1: left promiscuous mode [ 215.454477][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.483543][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.517561][ T1033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.547598][ T1033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.588973][ T1033] veth1_macvtap: left promiscuous mode [ 215.594706][ T1033] veth0_macvtap: left promiscuous mode [ 215.605616][ T1033] veth1_vlan: left promiscuous mode [ 215.613122][ T1033] veth0_vlan: left promiscuous mode [ 216.216166][ T1033] team0 (unregistering): Port device team_slave_1 removed [ 216.260861][ T1033] team0 (unregistering): Port device team_slave_0 removed [ 216.731531][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.743481][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.753221][ T9859] bridge_slave_0: entered allmulticast mode [ 216.799157][ T9859] bridge_slave_0: entered promiscuous mode [ 216.820411][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.844468][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.854680][ T9859] bridge_slave_1: entered allmulticast mode [ 216.865125][ T9859] bridge_slave_1: entered promiscuous mode [ 216.899591][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 216.948087][ T30] audit: type=1107 audit(1749586523.864:2): pid=9972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ª†|•U–»håʈŠ »¨É¯îwÿ÷ýpU oÎœð+ƒù?ƒˆe)ªÆYœJ7~°±øîn{rjÝ•Š2}‡¾r~¼ö>ħ¤î#û¼é$dÏ©$hÿ' [ 216.989979][ T9981] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1191'. [ 217.001144][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.023437][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.179847][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'. [ 217.198281][ T9859] team0: Port device team_slave_0 added [ 217.210269][ T9859] team0: Port device team_slave_1 added [ 217.237203][ T9987] veth1_vlan: left allmulticast mode [ 217.247637][ T9987] macvlan0: left promiscuous mode [ 217.253493][ T9987] macvlan0: left allmulticast mode [ 217.267923][ T5843] Bluetooth: hci4: command tx timeout [ 217.284409][ T9987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1193'. [ 217.343423][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.355405][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.386974][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.410204][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.422198][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.458837][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.486953][ T9999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 217.556786][ T9859] hsr_slave_0: entered promiscuous mode [ 217.572253][ T9859] hsr_slave_1: entered promiscuous mode [ 217.580930][ T9859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.588585][ T9859] Cannot create hsr debugfs directory [ 217.686942][T10001] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 217.780884][T10006] netlink: 'syz.1.1200': attribute type 2 has an invalid length. [ 217.813611][T10010] x_tables: duplicate underflow at hook 1 [ 218.223803][T10024] __nla_validate_parse: 1 callbacks suppressed [ 218.223837][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'. [ 218.511372][ T9859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.527262][ T9859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.546857][ T9859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.560891][ T9859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.703843][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.743646][T10049] syzkaller1: entered promiscuous mode [ 218.759383][T10049] syzkaller1: entered allmulticast mode [ 218.780878][T10049] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 218.810881][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.909403][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.916686][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.933362][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.940602][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.952258][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 219.008666][T10058] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 219.149676][T10062] bond5: (slave gretap1): making interface the new active one [ 219.159655][T10062] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 219.284295][T10067] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1219'. [ 219.347148][ T5843] Bluetooth: hci4: command tx timeout [ 219.438259][T10075] bridge0: port 4(batadv1) entered blocking state [ 219.462523][T10075] bridge0: port 4(batadv1) entered disabled state [ 219.484414][T10075] batadv1: entered allmulticast mode [ 219.511079][T10075] batadv1: entered promiscuous mode [ 219.755691][ T9859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.796940][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1228'. [ 219.854230][ T9859] veth0_vlan: entered promiscuous mode [ 219.894035][ T9859] veth1_vlan: entered promiscuous mode [ 219.970440][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 219.979892][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 219.986240][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1228'. [ 220.066813][ T9859] veth0_macvtap: entered promiscuous mode [ 220.088778][ T9859] veth1_macvtap: entered promiscuous mode [ 220.122828][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.137422][T10092] IPVS: Unknown mcast interface: pim6reg1 [ 220.155108][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 220.166675][T10103] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1229'. [ 220.173560][ T9859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.215667][ T9859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.230984][ T9859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.241982][ T9859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.254705][ T9859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.275026][T10105] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 220.445979][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1234'. [ 220.466049][T10118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1234'. [ 220.564544][ T1033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.572798][ T1033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.658543][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 220.674171][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.692992][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.625389][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.130717][ T1111] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.745498][ T1111] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.802714][ T1111] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.006844][ T1111] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.073920][T10219] netlink: 'syz.1.1269': attribute type 1 has an invalid length. [ 223.210668][T10219] bond6: entered promiscuous mode [ 223.236590][T10219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 223.331954][T10229] __nla_validate_parse: 9 callbacks suppressed [ 223.331972][T10229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1272'. [ 223.353229][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.362263][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.370352][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.378614][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.394061][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.414473][T10227] netlink: 'syz.0.1271': attribute type 4 has an invalid length. [ 223.448094][T10227] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1271'. [ 223.602308][T10230] vxcan1 speed is unknown, defaulting to 1000 [ 223.613596][ T1111] bridge_slave_1: left allmulticast mode [ 223.627074][ T1111] bridge_slave_1: left promiscuous mode [ 223.653183][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.691766][ T1111] bridge_slave_0: left allmulticast mode [ 223.707421][ T1111] bridge_slave_0: left promiscuous mode [ 223.717724][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.543619][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.560994][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.572377][ T1111] bond0 (unregistering): Released all slaves [ 224.599613][T10255] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1279'. [ 225.190095][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 225.356739][T10314] xt_l2tp: invalid flags combination: c [ 225.418089][ T5843] Bluetooth: hci4: command tx timeout [ 225.646337][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 225.974939][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.008393][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1304'. [ 226.017931][ T1111] hsr_slave_0: left promiscuous mode [ 226.027861][ T1111] hsr_slave_1: left promiscuous mode [ 226.033968][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.054107][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.056043][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.083376][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.104176][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.155429][ T1111] veth1_macvtap: left promiscuous mode [ 226.161392][ T1111] veth0_macvtap: left promiscuous mode [ 226.167078][ T1111] veth1_vlan: left promiscuous mode [ 226.172540][ T1111] veth0_vlan: left promiscuous mode [ 226.621761][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 226.664632][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 227.034102][T10230] chnl_net:caif_netlink_parms(): no params data found [ 227.295322][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.303929][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.312037][T10230] bridge_slave_0: entered allmulticast mode [ 227.320652][T10230] bridge_slave_0: entered promiscuous mode [ 227.338179][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.345503][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.358337][T10230] bridge_slave_1: entered allmulticast mode [ 227.366762][T10230] bridge_slave_1: entered promiscuous mode [ 227.444881][T10368] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1310'. [ 227.482052][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.498469][ T5843] Bluetooth: hci4: command tx timeout [ 227.506638][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.558110][T10230] team0: Port device team_slave_0 added [ 227.568228][T10230] team0: Port device team_slave_1 added [ 227.618901][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.625974][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.653058][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.679229][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.686876][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.714392][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.777346][T10230] hsr_slave_0: entered promiscuous mode [ 227.784306][T10230] hsr_slave_1: entered promiscuous mode [ 227.793688][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.802421][T10230] Cannot create hsr debugfs directory [ 228.314993][T10383] veth3: entered allmulticast mode [ 228.369664][T10387] netlink: 'syz.1.1315': attribute type 1 has an invalid length. [ 228.408338][T10387] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 228.665041][T10230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.856471][T10412] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 228.886574][T10230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.934023][T10230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.941787][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 228.976093][T10412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.993888][T10409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1322'. [ 228.995567][T10412] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 229.037692][T10230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.182443][T10427] delete_channel: no stack [ 229.206360][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1326'. [ 229.248166][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 229.293009][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 229.345212][T10440] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'. [ 229.401688][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.472230][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.501749][T10444] tipc: Started in network mode [ 229.506681][T10444] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 229.536497][T10444] tipc: Enabled bearer , priority 10 [ 229.572831][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1329'. [ 229.577779][ T5843] Bluetooth: hci4: command tx timeout [ 229.620227][T10451] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1331'. [ 229.700948][T10457] netlink: 'syz.0.1333': attribute type 11 has an invalid length. [ 229.812936][T10465] nft_compat: unsupported protocol 1 [ 229.871786][ T5971] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.879029][ T5971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.952057][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.959329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.005432][T10467] netlink: 'syz.4.1336': attribute type 11 has an invalid length. [ 230.013427][T10467] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1336'. [ 230.072684][T10469] bond0: entered promiscuous mode [ 230.077920][T10469] bond_slave_0: entered promiscuous mode [ 230.085350][T10469] bond_slave_1: entered promiscuous mode [ 230.095819][T10469] bridge0: entered promiscuous mode [ 230.106694][T10469] batadv0: entered promiscuous mode [ 230.390811][T10487] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.1342'. [ 230.647260][ T5854] tipc: Node number set to 10136234 [ 230.763239][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.842609][T10520] netlink: 'syz.4.1351': attribute type 2 has an invalid length. [ 230.900128][T10522] netlink: 'syz.1.1352': attribute type 21 has an invalid length. [ 230.902200][T10230] veth0_vlan: entered promiscuous mode [ 230.949387][T10230] veth1_vlan: entered promiscuous mode [ 231.008800][T10530] tipc: Enabling of bearer rejected, failed to enable media [ 231.073913][T10230] veth0_macvtap: entered promiscuous mode [ 231.104733][T10230] veth1_macvtap: entered promiscuous mode [ 231.164369][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.187988][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.212706][T10230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.233687][T10230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.244289][T10230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.253380][T10230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.469110][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.484278][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.543395][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.575184][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.657445][ T5843] Bluetooth: hci4: command tx timeout [ 231.692653][T10553] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 231.758756][T10557] netlink: 'syz.0.1362': attribute type 1 has an invalid length. [ 231.774604][T10557] netlink: 'syz.0.1362': attribute type 3 has an invalid length. [ 231.788899][T10557] NCSI netlink: No device for ifindex 131080 [ 232.389093][T10591] netlink: 'syz.0.1373': attribute type 9 has an invalid length. [ 232.402623][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.774736][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.116316][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.261692][T10595] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 233.464597][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.722626][T10618] raw_sendmsg: syz.3.1378 forgot to set AF_INET. Fix it! [ 233.950212][ T12] bridge_slave_1: left allmulticast mode [ 233.971221][ T12] bridge_slave_1: left promiscuous mode [ 233.998871][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.020116][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.029442][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.044761][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.054882][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.064365][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.064455][ T12] bridge_slave_0: left allmulticast mode [ 234.098422][ T12] bridge_slave_0: left promiscuous mode [ 234.104291][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.222513][T10645] __nla_validate_parse: 7 callbacks suppressed [ 234.222532][T10645] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1387'. [ 234.408624][T10652] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.432492][T10652] x_tables: unsorted entry at hook 3 [ 234.648657][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.660822][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.671416][ T12] bond0 (unregistering): Released all slaves [ 234.809257][T10634] vxcan1 speed is unknown, defaulting to 1000 [ 235.561252][T10693] netlink: 'syz.0.1401': attribute type 2 has an invalid length. [ 235.775298][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'. [ 235.796646][T10705] netlink: 'syz.4.1406': attribute type 5 has an invalid length. [ 235.807166][T10705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1406'. [ 235.864997][ T12] hsr_slave_0: left promiscuous mode [ 235.886899][ T12] hsr_slave_1: left promiscuous mode [ 235.904733][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.916796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.929146][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.936783][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.988266][ T12] veth1_macvtap: left promiscuous mode [ 236.007494][ T12] veth0_macvtap: left promiscuous mode [ 236.013166][ T12] veth1_vlan: left promiscuous mode [ 236.032600][ T12] veth0_vlan: left promiscuous mode [ 236.138314][ T5849] Bluetooth: hci4: command tx timeout [ 236.219543][T10720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 236.595351][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.632649][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.018551][T10708] sch_tbf: peakrate 82 is lower than or equals to rate 6963433799754025459 ! [ 237.028339][T10711] tipc: Started in network mode [ 237.033386][T10711] tipc: Node identity 00000000000000000000000000000001, cluster identity 292 [ 237.047235][T10711] tipc: Enabling of bearer rejected, failed to enable media [ 237.509363][T10745] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1416'. [ 237.568155][T10748] netlink: 'syz.1.1418': attribute type 4 has an invalid length. [ 237.592564][T10634] chnl_net:caif_netlink_parms(): no params data found [ 237.752568][T10760] netlink: 'syz.3.1421': attribute type 2 has an invalid length. [ 237.802804][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1420'. [ 237.927650][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.934951][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.968518][T10634] bridge_slave_0: entered allmulticast mode [ 237.976434][T10634] bridge_slave_0: entered promiscuous mode [ 238.027835][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.035090][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.048870][T10634] bridge_slave_1: entered allmulticast mode [ 238.056774][T10634] bridge_slave_1: entered promiscuous mode [ 238.059261][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 238.201515][T10777] macvtap0: entered promiscuous mode [ 238.206965][T10777] vlan0: entered promiscuous mode [ 238.212548][T10777] macvtap0: entered allmulticast mode [ 238.218219][ T5849] Bluetooth: hci4: command tx timeout [ 238.223720][T10777] vlan0: entered allmulticast mode [ 238.229500][T10777] veth0_vlan: entered allmulticast mode [ 238.261572][T10634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.310450][T10786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1428'. [ 238.320815][T10783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.343614][T10634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.362076][T10786] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.370817][T10786] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.533233][T10634] team0: Port device team_slave_0 added [ 238.562010][T10634] team0: Port device team_slave_1 added [ 238.839200][T10634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.846503][T10805] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 238.856009][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.876423][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1434'. [ 238.900033][T10634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.963797][T10634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.997319][T10634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.043338][T10634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.144853][T10634] hsr_slave_0: entered promiscuous mode [ 239.151632][T10634] hsr_slave_1: entered promiscuous mode [ 239.173498][T10634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.204480][T10634] Cannot create hsr debugfs directory [ 239.283073][T10835] vxcan1 speed is unknown, defaulting to 1000 [ 239.536019][T10851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1441'. [ 239.714922][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 239.745039][T10856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'. [ 239.847445][T10856] team0: entered promiscuous mode [ 239.867240][T10856] team_slave_0: entered promiscuous mode [ 239.883980][T10856] team_slave_1: entered promiscuous mode [ 239.902180][T10856] team0: left promiscuous mode [ 239.917190][T10856] team_slave_0: left promiscuous mode [ 239.927625][T10856] team_slave_1: left promiscuous mode [ 240.266161][T10872] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1447'. [ 240.298767][ T5849] Bluetooth: hci4: command tx timeout [ 240.314528][T10872] bridge_slave_1: entered allmulticast mode [ 240.342824][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1449'. [ 240.460161][T10634] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.485257][T10634] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.558695][T10634] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.595118][T10634] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.694097][ T5894] IPVS: starting estimator thread 0... [ 240.700201][T10890] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 240.796349][ T24] hid-generic 0005:0B57:3DDA.0004: collection stack underflow [ 240.800155][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 240.811615][ T24] hid-generic 0005:0B57:3DDA.0004: item 0 0 0 12 parsing failed [ 240.813510][T10898] IPVS: using max 26 ests per chain, 62400 per kthread [ 240.838440][T10904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1454'. [ 240.857929][ T5849] Bluetooth: hci0: command tx timeout [ 240.878233][T10911] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1456'. [ 240.880655][ T24] hid-generic 0005:0B57:3DDA.0004: probe with driver hid-generic failed with error -22 [ 240.914526][T10899] vxcan2: entered promiscuous mode [ 241.192817][T10634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.261283][T10634] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.324120][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.331378][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.386930][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.394186][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.501953][T10928] tun0: tun_chr_ioctl cmd 1074025675 [ 241.542955][T10928] tun0: persist disabled [ 241.644217][T10936] xt_hashlimit: size too large, truncated to 1048576 [ 241.714417][T10940] +: renamed from syzkaller0 [ 241.733064][T10941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 241.790395][T10943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1467'. [ 241.804020][T10942] : renamed from bridge_slave_0 (while UP) [ 242.241351][T10965] netlink: 'syz.3.1473': attribute type 5 has an invalid length. [ 242.274193][T10965] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 242.293807][T10965] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 242.305585][T10965] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 242.322398][T10965] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 242.334958][T10968] netlink: 'syz.1.1474': attribute type 62 has an invalid length. [ 242.346652][T10965] geneve2: entered promiscuous mode [ 242.352152][T10965] geneve2: entered allmulticast mode [ 242.364108][T10634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.378151][ T5849] Bluetooth: hci4: command tx timeout [ 242.432403][T10970] unknown channel width for channel at 909000KHz? [ 242.478432][T10970] unknown channel width for channel at 909000KHz? [ 242.555907][T10634] veth0_vlan: entered promiscuous mode [ 242.593048][T10634] veth1_vlan: entered promiscuous mode [ 242.668323][T10634] veth0_macvtap: entered promiscuous mode [ 242.693786][T10634] veth1_macvtap: entered promiscuous mode [ 242.753693][T10634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.799811][T10634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.823681][T10634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.833435][T10634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.843477][T10634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.852680][T10634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.054700][T10990] netlink: 'syz.3.1481': attribute type 4 has an invalid length. [ 243.067381][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.080566][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.206627][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.221042][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.393034][T11003] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 243.430643][T11003] xt_hashlimit: size too large, truncated to 1048576 [ 243.480177][T11007] syzkaller1: entered promiscuous mode [ 243.485913][T11007] syzkaller1: entered allmulticast mode [ 244.069928][T11023] netlink: 'syz.3.1494': attribute type 21 has an invalid length. [ 244.096631][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.405830][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.823580][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.882498][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.969575][ T13] bridge_slave_1: left allmulticast mode [ 244.975260][ T13] bridge_slave_1: left promiscuous mode [ 244.981515][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.992616][ T13] bridge_slave_0: left allmulticast mode [ 244.999255][ T13] bridge_slave_0: left promiscuous mode [ 245.004976][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.374165][T11037] __nla_validate_parse: 10 callbacks suppressed [ 245.374187][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 245.529881][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.546623][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.564028][ T13] bond0 (unregistering): Released all slaves [ 245.592255][T11039] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.868365][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.892394][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.912915][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.927667][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.944503][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.999000][T11065] netlink: 'syz.1.1504': attribute type 58 has an invalid length. [ 246.008781][T11065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1504'. [ 246.128310][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1503'. [ 246.276958][T11058] vxcan1 speed is unknown, defaulting to 1000 [ 246.369966][T11080] syzkaller1: entered promiscuous mode [ 246.375506][T11080] syzkaller1: entered allmulticast mode [ 246.670029][T11095] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.698872][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 246.746943][T11095] vlan2: entered allmulticast mode [ 246.784695][T11095] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 246.906973][T11107] netlink: 'syz.0.1517': attribute type 17 has an invalid length. [ 246.916962][T11107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 246.950995][T11107] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1517'. [ 247.444120][ T13] hsr_slave_0: left promiscuous mode [ 247.457711][ T13] hsr_slave_1: left promiscuous mode [ 247.468513][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.485447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.506729][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.520479][T11136] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1524'. [ 247.531685][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.562302][ T13] veth1_macvtap: left promiscuous mode [ 247.568220][ T13] veth0_macvtap: left promiscuous mode [ 247.573963][ T13] veth1_vlan: left promiscuous mode [ 247.584424][ T13] veth0_vlan: left promiscuous mode [ 247.984677][ T5849] Bluetooth: hci4: command tx timeout [ 248.033243][ T13] team0 (unregistering): Port device team_slave_1 removed [ 248.076406][ T13] team0 (unregistering): Port device team_slave_0 removed [ 248.685797][T11159] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1531'. [ 248.738613][T11160] netlink: 'syz.1.1532': attribute type 15 has an invalid length. [ 248.774293][T11165] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 248.806628][T11058] chnl_net:caif_netlink_parms(): no params data found [ 248.965858][T11171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 248.995862][ T5849] block nbd0: Receive control failed (result -32) [ 249.201396][T11058] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.219635][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.231027][T11058] bridge_slave_0: entered allmulticast mode [ 249.243488][T11058] bridge_slave_0: entered promiscuous mode [ 249.268040][T11058] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.288656][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.313133][T11058] bridge_slave_1: entered allmulticast mode [ 249.326915][T11058] bridge_slave_1: entered promiscuous mode [ 249.409369][T11195] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1538'. [ 249.595574][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.660454][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.818439][T11058] team0: Port device team_slave_0 added [ 249.862426][T11211] batadv1: left allmulticast mode [ 249.868491][T11211] batadv1: left promiscuous mode [ 249.873876][T11211] bridge0: port 4(batadv1) entered disabled state [ 249.882936][T11211] gretap0: left allmulticast mode [ 249.888397][T11211] gretap0: left promiscuous mode [ 249.893523][T11211] bridge0: port 3(gretap0) entered disabled state [ 249.909247][T11211] bridge_slave_1: left allmulticast mode [ 249.915178][T11211] bridge_slave_1: left promiscuous mode [ 249.921944][T11211] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.948455][T11211] bridge_slave_0: left allmulticast mode [ 249.955305][T11211] bridge_slave_0: left promiscuous mode [ 249.962526][T11211] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.000189][T11211] bond0: (slave bridge0): Releasing backup interface [ 250.014297][T11211] bridge0 (unregistering): left promiscuous mode [ 250.062915][ T5849] Bluetooth: hci4: command tx timeout [ 250.097526][T11058] team0: Port device team_slave_1 added [ 250.432405][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.439885][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.466507][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.480012][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.487816][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.534349][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.657963][T11058] hsr_slave_0: entered promiscuous mode [ 250.664538][T11058] hsr_slave_1: entered promiscuous mode [ 250.688430][T11058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.696042][T11058] Cannot create hsr debugfs directory [ 250.793386][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1551'. [ 251.033048][T11254] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1554'. [ 251.443457][T11269] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 251.470341][T11270] netlink: 'syz.1.1558': attribute type 1 has an invalid length. [ 251.532153][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 251.557351][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1558'. [ 251.566497][T11270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.585157][T11275] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (8) [ 251.611611][T11279] bond7: entered promiscuous mode [ 251.644378][T11283] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1563'. [ 251.652253][T11285] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 251.663795][T11285] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1564'. [ 251.780600][T11058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.824453][T11058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 251.870994][T11058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.146240][ T5849] Bluetooth: hci4: command tx timeout [ 252.216281][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 252.224315][T11293] team0 (unregistering): Port device team_slave_0 removed [ 252.255689][T11293] team0 (unregistering): Port device team_slave_1 removed [ 252.309337][T11058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.504131][T11327] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1573'. [ 252.655986][T11058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.754575][T11058] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.809267][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.816521][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.816623][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 252.864170][T11343] tipc: Enabling of bearer rejected, failed to enable media [ 252.938213][T10806] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.945433][T10806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.058649][T11355] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.103261][T11349] xt_cgroup: path and classid specified [ 253.369222][T11370] openvswitch: netlink: Flow key attribute not present in set flow. [ 253.458398][T11377] netlink: 'syz.3.1587': attribute type 16 has an invalid length. [ 253.520397][T11377] netlink: 'syz.3.1587': attribute type 17 has an invalid length. [ 253.678730][T11384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1591'. [ 253.736801][T11058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.849294][T11387] netlink: 'syz.4.1592': attribute type 23 has an invalid length. [ 253.909796][T11058] veth0_vlan: entered promiscuous mode [ 253.938681][T11058] veth1_vlan: entered promiscuous mode [ 254.094486][T11058] veth0_macvtap: entered promiscuous mode [ 254.163855][T11058] veth1_macvtap: entered promiscuous mode [ 254.224548][ T5849] Bluetooth: hci4: command tx timeout [ 254.246320][T11058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.270818][T11058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.282884][T11058] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.292530][T11058] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.324688][T11058] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.348434][T11058] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.605652][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.650634][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.739737][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.750996][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.064936][T11456] netlink: 'syz.1.1611': attribute type 7 has an invalid length. [ 255.094971][T11456] nr0: entered allmulticast mode [ 255.133045][T11459] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20004 [ 255.456342][T10806] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.574822][T10806] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.685224][T10806] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.823515][T10806] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.066053][T10806] bridge_slave_1: left allmulticast mode [ 256.071946][T10806] bridge_slave_1: left promiscuous mode [ 256.078366][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.088485][T10806] bridge_slave_0: left allmulticast mode [ 256.094140][T10806] bridge_slave_0: left promiscuous mode [ 256.100216][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.297830][T10809] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 256.308600][T10809] ------------[ cut here ]------------ [ 256.314084][T10809] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 256.322858][T10809] index 11 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 256.336544][T10809] CPU: 1 UID: 0 PID: 10809 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 256.336571][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.336584][T10809] Workqueue: events_unbound cfg80211_wiphy_work [ 256.336642][T10809] Call Trace: [ 256.336650][T10809] [ 256.336659][T10809] dump_stack_lvl+0x189/0x250 [ 256.336696][T10809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.336727][T10809] ? __pfx__printk+0x10/0x10 [ 256.336762][T10809] ubsan_epilogue+0xa/0x40 [ 256.336783][T10809] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 256.336824][T10809] ieee80211_request_ibss_scan+0x600/0x8b0 [ 256.336866][T10809] ieee80211_ibss_work+0xd85/0x1060 [ 256.336890][T10809] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.336917][T10809] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.336942][T10809] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.336967][T10809] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 256.336998][T10809] ? skb_dequeue+0x10e/0x150 [ 256.337032][T10809] ? ieee80211_iface_work+0xcdb/0xfe0 [ 256.337062][T10809] ? ieee80211_iface_work+0xf39/0xfe0 [ 256.337091][T10809] ? rcu_is_watching+0x15/0xb0 [ 256.337116][T10809] cfg80211_wiphy_work+0x2df/0x460 [ 256.337147][T10809] ? process_scheduled_works+0x9ef/0x17b0 [ 256.337179][T10809] process_scheduled_works+0xae1/0x17b0 [ 256.337242][T10809] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.337293][T10809] worker_thread+0x8a0/0xda0 [ 256.337342][T10809] kthread+0x70e/0x8a0 [ 256.337376][T10809] ? __pfx_worker_thread+0x10/0x10 [ 256.337394][T10809] ? __pfx_kthread+0x10/0x10 [ 256.337420][T10809] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.337442][T10809] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.337465][T10809] ? __pfx_kthread+0x10/0x10 [ 256.337489][T10809] ret_from_fork+0x3f9/0x770 [ 256.337520][T10809] ? __pfx_ret_from_fork+0x10/0x10 [ 256.337555][T10809] ? __switch_to_asm+0x39/0x70 [ 256.337574][T10809] ? __switch_to_asm+0x33/0x70 [ 256.337592][T10809] ? __pfx_kthread+0x10/0x10 [ 256.337618][T10809] ret_from_fork_asm+0x1a/0x30 [ 256.337656][T10809] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 256.546993][T10809] ---[ end trace ]--- [ 256.551120][T10809] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 256.558360][T10809] CPU: 1 UID: 0 PID: 10809 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller-12433-gfdd9ebccfc32 #0 PREEMPT(full) [ 256.570401][T10809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.580494][T10809] Workqueue: events_unbound cfg80211_wiphy_work [ 256.586794][T10809] Call Trace: [ 256.590108][T10809] [ 256.593066][T10809] dump_stack_lvl+0x99/0x250 [ 256.597708][T10809] ? __asan_memcpy+0x40/0x70 [ 256.602342][T10809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.607583][T10809] ? __pfx__printk+0x10/0x10 [ 256.612233][T10809] panic+0x2db/0x790 [ 256.616181][T10809] ? __pfx_panic+0x10/0x10 [ 256.620645][T10809] ? _printk+0xcf/0x120 [ 256.624842][T10809] ? __pfx__printk+0x10/0x10 [ 256.629480][T10809] check_panic_on_warn+0x89/0xb0 [ 256.634458][T10809] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 256.640234][T10809] ieee80211_request_ibss_scan+0x600/0x8b0 [ 256.646111][T10809] ieee80211_ibss_work+0xd85/0x1060 [ 256.651357][T10809] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.656603][T10809] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 256.662540][T10809] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 256.668917][T10809] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 256.674592][T10809] ? skb_dequeue+0x10e/0x150 [ 256.679221][T10809] ? ieee80211_iface_work+0xcdb/0xfe0 [ 256.684641][T10809] ? ieee80211_iface_work+0xf39/0xfe0 [ 256.690069][T10809] ? rcu_is_watching+0x15/0xb0 [ 256.694875][T10809] cfg80211_wiphy_work+0x2df/0x460 [ 256.700030][T10809] ? process_scheduled_works+0x9ef/0x17b0 [ 256.705798][T10809] process_scheduled_works+0xae1/0x17b0 [ 256.711442][T10809] ? __pfx_process_scheduled_works+0x10/0x10 [ 256.717489][T10809] worker_thread+0x8a0/0xda0 [ 256.722146][T10809] kthread+0x70e/0x8a0 [ 256.726260][T10809] ? __pfx_worker_thread+0x10/0x10 [ 256.731407][T10809] ? __pfx_kthread+0x10/0x10 [ 256.736022][T10809] ? _raw_spin_unlock_irq+0x23/0x50 [ 256.741245][T10809] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.746459][T10809] ? __pfx_kthread+0x10/0x10 [ 256.751080][T10809] ret_from_fork+0x3f9/0x770 [ 256.755701][T10809] ? __pfx_ret_from_fork+0x10/0x10 [ 256.760839][T10809] ? __switch_to_asm+0x39/0x70 [ 256.765627][T10809] ? __switch_to_asm+0x33/0x70 [ 256.770417][T10809] ? __pfx_kthread+0x10/0x10 [ 256.775026][T10809] ret_from_fork_asm+0x1a/0x30 [ 256.779829][T10809] [ 256.783201][T10809] Kernel Offset: disabled [ 256.787598][T10809] Rebooting in 86400 seconds..