last executing test programs: 57.634846171s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.472484696s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 35.833873458s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25.927803844s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.31695272s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.141842285s ago: executing program 4 (id=1946): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r7 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r7, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) recvmmsg(r1, &(0x7f00000029c0)=[{{&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000280)=""/99, 0x63}, {&(0x7f0000000300)=""/26, 0x1a}, {&(0x7f0000000340)=""/151, 0x97}], 0x5}, 0x7f}, {{&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/117, 0x75}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000002b80)=""/4100, 0x1000}, {&(0x7f0000001700)=""/78, 0x4e}, {&(0x7f0000001780)=""/148, 0x94}, {&(0x7f0000001840)=""/78, 0x4e}], 0x8, &(0x7f0000001940)=""/22, 0x16}, 0x9}, {{&(0x7f0000001980)=@ll, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001a00)=""/135, 0x87}, {&(0x7f0000001ac0)=""/179, 0xb3}, {&(0x7f0000001b80)=""/61, 0x3d}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/48, 0x30}, {&(0x7f0000001c80)=""/32, 0x20}, {&(0x7f0000001cc0)=""/43, 0x2b}], 0x7, &(0x7f0000001d80)=""/255, 0xff}, 0x4}, {{&(0x7f0000001e80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001f00)=""/14, 0xe}, {&(0x7f0000001f40)=""/72, 0xffffffffffffff55}, {&(0x7f0000001fc0)=""/108, 0x6c}], 0x3, &(0x7f0000002080)=""/173, 0xad}, 0x4}, {{&(0x7f0000002140)=@caif=@dbg, 0x80, &(0x7f0000002280)=[{&(0x7f00000021c0)=""/185, 0xb9}], 0x1, &(0x7f00000022c0)=""/234, 0xea}}, {{&(0x7f00000023c0)=@generic, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002440)=""/137, 0x89}, {&(0x7f0000002500)=""/151, 0x97}, {&(0x7f00000025c0)=""/206, 0xce}], 0x3, &(0x7f0000002700)=""/67, 0x43}, 0xf926}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002800)=""/38, 0x26}, {&(0x7f0000002840)=""/252, 0xfc}], 0x2, &(0x7f0000002980)=""/45, 0x2d}, 0xc}], 0x7, 0x60, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'veth0\x00'}]}, 0x2c}}, 0x0) 4.88639789s ago: executing program 1 (id=1307): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060018001801000020696c2500000000002020207b0af0ff00000000c3850000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.827584205s ago: executing program 4 (id=1953): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x10001}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000080)="8741", 0x2}], 0x1}}], 0x1, 0x880) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x1bc, 0x1a, 0x400, 0x70bd27, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, @in=@multicast1, 0x4e22, 0x0, 0x4e24, 0x2, 0xa, 0x20, 0x20, 0x32}, {@in=@local, 0x4d6, 0x3c}, @in6=@mcast1, {0x15f, 0x3, 0x1cb4, 0x4, 0x6, 0x1000, 0x7}, {0x590, 0x7fffffff, 0x3, 0x3}, {0x3, 0x101, 0x4}, 0x70bd25, 0x0, 0x2, 0x3, 0x9, 0x4a3c04d8ea42c5c2}, [@replay_thresh={0x8, 0xb, 0x1}, @sec_ctx={0xc1, 0x8, {0xbd, 0x8, 0x1, 0xa, 0xb5, "30679c833b912f54d37aa8dea85b48a5f9eb783a373d57232e06c234a9a2be4145ba923c30285e6b52b111dc2e5b2503d9769af8fd07f5e0289f0c5e9d660ae0fe4f0123fbe199bb86dada8fd47306b870b539a6951fdbf2c6cbdff9aa0cb0cbd1a1b08a07dc7cc3ed3709778eab8d3210a802f1a6efae44aa9b212e9860cffad67f8151db550de7aca53496b39c9f3452fa46e6af2f549a0d7eead8ca5bcdaa5c7b55f2909a8a6f3d510a7a0e55050dd6ed26597a"}}]}, 0x1bc}}, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x9, 0x6}, &(0x7f0000000100)=0x18) r3 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000300)=0x8, 0x4) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x1000) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e) r5 = accept(r3, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6015690900442f"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r8, 0x112, 0x7, 0x0, 0xf) setsockopt$sock_timeval(r5, 0x1, 0x42, &(0x7f0000000280)={0x77359400}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 2.861498157s ago: executing program 4 (id=1966): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2, 0x4}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000280)=""/122, 0x7a}, {0x0}, {&(0x7f00000004c0)=""/142, 0x8e}, {0x0}], 0x5}}], 0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100003053bbd70c1f5a8001b4c98b200", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e002400028008000100100000001000058000000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) connect$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x6e, @private0, 0x2}}, 0x24) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x24, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2, 0x4}, 0x1c) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000280)=""/122, 0x7a}, {0x0}, {&(0x7f00000004c0)=""/142, 0x8e}, {0x0}], 0x5}}], 0x1, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c000000100003053bbd70c1f5a8001b4c98b200", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e002400028008000100100000001000058000000400aaaaaaaaaabb0000080003000300000008000500", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) connect$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x6e, @private0, 0x2}}, 0x24) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) 2.30353054s ago: executing program 0 (id=1971): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)={'gre0\x00', 0x0, 0x10, 0x7800, 0x1f, 0xde9b, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRESHEX=r1, @ANYBLOB="02"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000000061114c0000000000850000001d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.27665892s ago: executing program 4 (id=1972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="94aa81766380"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x54}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0x30, 0x0, &(0x7f0000000240)="6ebca58ce622ffffffc9252388f74c818387fe2a8d4ca77531639bd6b80074fda1a93dea20ed52ab9b69dd560cd8d20c", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 2.233014958s ago: executing program 0 (id=1973): clock_gettime(0x2, &(0x7f00000002c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000400000001785d272d241833", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000010402000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="0cd10200000000002800128009000100766c616e000000001800028004000380100004800c000100ff01000074ffffff14000300766c616e3000"/68], 0x5c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r8, 0x1}, 0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) socket(0x22, 0x2, 0x1) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000280)={r8, 0xb}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 2.079407605s ago: executing program 0 (id=1976): unshare(0x22020600) socket$inet_sctp(0x2, 0x1, 0x84) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5, 0x600, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.997610954s ago: executing program 3 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="35716eb856a076ccc6525b8e94d20ddbc433d66372e8c91fbd365486", 0x1c}, {&(0x7f00000000c0)="6ccf48d4356643a850c0c3fd8247335a9313f21f6da81a071fea013e04ef80b12e80521d88292773778590600645d1d54b5e1a480adbe37f584926650c1993780016ab40db", 0x45}, {&(0x7f0000000180)="5e71766e0808eee09e77992371ab58fd1b152aec742c007499be7a91a1feac8c95c4689b6424cabc293cd779870a78e9df68e0076554bbc552109b0a670edbf8643db4be174ab21528f4b85ed65e4e6a77fbab3a263ce1d068223e53155963da045c72fad561ee3f7fdc05c9164a9199c018dedf60558ad032eef9c22eeefc23cf33a61cd25ff832105ad2baf5d76541b35e4b043f16670dacbcf1a025651e6bc2f8a346df66888deb40896cc3191e1a991215c9272442ab1825b137d7313094c84de1cc1b741eed2a5de9465ac7d9d1", 0xd0}, {&(0x7f0000000340)="a9b2c4d917ccf0c51cd11e0a8eeba2a75918ebf8d8eaec64ff67cd8aeb0be30417628568753f6386dafaec1c228af8ccecbe5954cc5c0fe8302e8a9b27a48ee18de34b3868a3e59ba883f726b6724ed46be9c63b9a39d684891fa7b9555b1e52f4344b33e4164ac0587ee57fe7cfdfdeacba10cc2d3e0f90ecb0ea1354bf7d", 0x7f}], 0x4, &(0x7f0000000400)=[@iv={0xa0, 0x117, 0x2, 0x85, "e95fab6394defee5012e14d8a222d63f9516ccde1366ae96ba7b94b69ad403f8d9173bfc4f205039b27893bdd00f6974f442987512fbaf2cd4065b534edb90dc765b8280db5251dd92a1c06dc21566b15a6308a9de725252fd07308f9826c7cdbad159d02360d86ad523c85610839128bea57bf978e329ec4bef7b6cb01dc5c4a3165d354d"}, @iv={0x20, 0x117, 0x2, 0x9, "77614db7f92683b83f"}, @iv={0xb8, 0x117, 0x2, 0x9f, "9ae9ba378e28f9f55245fa150e5b5b1c55084356b25e3e92ac349343397239e94ce2b53bdfc04c53766c9ec19ba4e41d967233ebe7678c63d517a6cc7b960508519dff46a0748cd95a6a786a1b8cf40db3461a30daeb7e583906207f433092ca346265d830f644eac64d89cd44ea506c1567bb72c535eca7225c54c3fc82821d0fecdb19fb2b1b8905a2966ffe0fa76eddc0f2435b2317f8da65912c35b091"}, @iv={0xe0, 0x117, 0x2, 0xc7, "092fa19280f8118cd4bc85904d0084edf3146a89c4729d00f1b8d02fba59de2abdc9d83ddbe6a9a3e5ced399b71d03424d56af700106f0876646aabf9a6f1bb4fa9982b40329ac9b53c316b767aae87507f81ff20c4dcba950d51f75d1530db2b84a68c2668dcd61342f7531ca3005b8557c2f326ed95bdad2e55597c81e367422dd69c82766b7eedfab68ebaa101b7d777d89c08d68c7955ac81e85eb3ee56f44c95a66103e28ae2e73bd41b2d6275c2cebe947cda5c4534263577f8b5cda3e322513de03e0de"}, @iv={0x78, 0x117, 0x2, 0x5f, "e2c90a8db65084efd0fce202441a1ae5dc2c1b7ef6b18e5f00a6c3cff35bc5f7a8972b051536a24e68d0970550413dd0458398c71596164d62ae174b440e4aa776f5080fa886afd90e803f3a08deba13cb157dfdeb9842b29109a333e5c286"}, @op={0x18}], 0x2e8, 0x8}, {0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)="e59f78cb84b1d808d244269cdbf47f3f5ee5bcea8f6beeac121571d33815104806af2d7aa598a1dbfe7a465a295b85c731a2f6ada65e8f4aec283028a234128f937edaa8a2580b538360c2070023a78cb7ae68eb7e0edef801311e38e948169d51e4e522f44469c36d042c3d868c5afddf7cbb38b57c79bb2aa8", 0x7a}, {&(0x7f0000000780)="ab676e9cc8e14dc0e193bb13e23d1febbf6851bfb29ce1641e94e5835271af1572e5b5d21bb3576f6c8c63af1c50586fe2dbb689c04ab2f1299d75c78d0a98e79a27418eaea07ca3147c43c3f5a9f16fc9ab585c39904c0e2fc7f039e0065152658d8dd8", 0x64}, {&(0x7f0000000800)="720d5ee0cf536b058892abfefd1b819264a60a08e87db1c68f3985825d9a9aa23a13f70bea14761b209feee28a8d0d558c76f5332ce93d01026c20b5", 0x3c}], 0x3, &(0x7f0000000880)=[@iv={0xb0, 0x117, 0x2, 0x99, "9b8f3e920d83600cd295d853afb26898ac0b64c3ede35b1b1456f6ebfbd4d763286888c80fd9cc8803e6284a9cddebf0afbac38566b28e6669514c521d83a079a860ac045bcad33d0b2c55b98ecd98fb3c89b57a52f7e6d6627973b0cfc8ea6dc7e17e9135eb6b99dbdda066f8e606155dc2ed82bb98f9bda5bde887d0d25587fbfeadabb8289ef51d4ea17c2cced5e7ea16243c8517eec9ab"}, @op={0x18, 0x117, 0x3, 0x1}], 0xc8, 0x4004}, {0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000980)="84c7d8cfff658a909b6e44b22c03d8e8956a8a4155dacf3cc0e5f3cec46f56e396778df6fd2fddb256af1fa277882b189a7744f2060bafab4da42155312e1a889f", 0x41}, {&(0x7f0000000a00)="625fdc8119c65c5e6f3465235423eba2c457e14334810f4c1397aaf9ff524a6173aa107dcd16611a209eaa55509a4baa4b3d1508f6d2a6e1f52cd28a3a33b2e82220559e461859af03e885a016208fc3f981ffea2241a70ea5c737083cadee8e25ba751ed793e0e38512dc8333346539d73b04fbd57c536b9e931b695d76277ab7b30aafb9d8207e286e5b7b0f9b3f1168e122af89bcbba14a5c6b51734fe1347ffc30cce3a270b5936f32869f21123eaa581a517a0ba348c78b76f7adb4ac9bf11da0fae330deae84a9ad638f45a96c8a1248c7af862eac03ebb574c9", 0xdd}, {&(0x7f0000000b00)="26d92d40ecd658d983978b093b06e31a5aad4c2d0bc692fb58014875ca8ba1", 0x1f}, {&(0x7f0000000b40)="98b943343e4996c0dcba0542c3552025558673898f08b7cc6df56f6352b392fd37e89487e69cdaeca06a367160a94142fd7b8355a80d191db92ce8b54155b234bbc6ce860c2b6453c66d2d7547a9f40c35cbba67b748918d7593f6a29784f7256a3ceb25aec7c396b6e0ccee478a1e644d83a238a0b2795e658b369ccd11453cfff1df309768c1957f173e35d950e3407b19898560236450b9f859fa8beecc2c678962182225f296ae89d413c88a942b008b96b6df7ce2e928c154371c4ec85fd26d4960e106c13a3b45bf9821", 0xcd}, {&(0x7f0000000c40)="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", 0x1000}, {&(0x7f0000001c40)="9fa9d0b351cb45d09a19cb37c47d01275c54b615589953c4a35bd9299a8fdbe6720a73", 0x23}, {&(0x7f0000001c80)="d0d75207a92e36027eb4bdbd66f9e6aed294528fcb31b2c78a64daa18fc6e91036caf1810c4fba24323f9fcce9d604851940accdb91b281fa085fb1040e5a47fe5200057eb3519d2e213c9992887ace3917cc1ca545962c4b5526ab58526a40d105a7f307eac4f3b7520a96377baa03123a4414036aebf98cf933e3d0f77f32e056a4f50c7a1aa10218334264717fd064f71", 0x92}, {&(0x7f0000001d40)="79f13bd788adb9d87efbb82be954b899e51e603feda9f0053a8c8a41277e08764e72234d73bed546f35850b2b2fadb2024b6b26cb9794cf776a1e83d3ac9fbc43e2c4d7ce250714d76c44a84f8250bfd19e9e11baa7a83d43ad1d4afe10177e24390834a9eaf33276ecc6f5996c8a742c37000599770fbe8082b", 0x7a}], 0x8, &(0x7f0000001e40)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x6a, "f4e6a331daff880085a11c54ff8333cb765f508b8688d89a6f2062615601a295820ddbe4b6aad6b31cda8e6cabef1f58d97abbe78779eec9ff81d35846064ca6013efbf88ee0381fc155a84132f748b347352a0c8d1e74cc8a5405a003558771dbbb191f4b9e3501b41a"}], 0x98, 0x8c1}, {0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="9c4c7217a0751a383b0a8cfc58bae03638f9cbafd1928521486d0bd6c6c6deb172e40acd40e510eb64b9de1a2bfe4057943dfd827d35e38b5017a54d4b08746fbcc08d490d8939b1ac25ec40337cdc18117b149ed2a24ea871a404e80a879d02a80ab54f83a62f26b4467f1e297a0c6c976591c4e3173b1cbaf4c84dc9f8548a81c9e80c5f573fd2fcfc169ce130f46bd1824d56f23087de5df1c4a3c8d27432d328bf562e464774fe118dbc6ea322e26d6966b113c4d32380", 0xb9}, {&(0x7f0000002fc0)="da1462cb07b7557f2e52f942c63972fcc2ba1ee5afc83fd76325a8621f87c5407fd855ef24eb16b5b2369e6aa4793e11df17880b", 0x34}, {&(0x7f0000003000)="9e59a6503a5ef17cbbe1c6cd11b9aa11dbbe906fef278d23a709c2a514d436f7029f7507d6e38b144654ee52267e52076d9f171c4aaf739a685f20b1f7085adeadae95eb5a1ab6c5b7f354265e14c15e2c91e85738bc457c78e20af890d04fb7b001dd5f21831cb2fd0b7b44f69eb92129e3c5bac843dad13902299a067a6752a173b6405f676de68b09e9056b9210cc", 0x90}], 0x4, &(0x7f0000003100)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x44}], 0x4, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40500000000000061104e0000000000070000000000000095200000000000006e8aa9beb44f48cc644d7da121843c97717ab47a048720b9c88bbe308ab01f4ac6c4b3b0662fc707189f033cbc6c17abb4f2b90c42c5dcdadd84d48fe4d874f45d7263153498602dbbc3b5f2929625aa0dbe021579821f9b7a3ce29d8baa4b8ee0b94df1f2de75c19629ed12949c8b3eecb11772d4e6ee070b2c3ff6e3d6a67dd3e213ecd89c1a65c4efda"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0xf11, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1.886244968s ago: executing program 0 (id=1980): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) (async) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x90, 0xc5, "9939f0fe80fbf6cc0ef0208b7dd38b50e31e5795ddffbfb952c073dac548364467cb8ea227d625b1637a98de98ac26efa59c18f75a8c3a12c1e6619eb77c8e1e2d9d86795b0251c731dde5475daae1f67aa5bcc9affd0d3d2c303b59d97d6b571a3c61177ac9dcef2e662fd2c3234f199bf849d14bcded69643df529f3afd98fda11d63d3eebc1b13b0bfa89"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xff}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000004}, 0x40000) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) (async, rerun: 64) r2 = accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) sendmmsg$unix(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000009c0)='\a0\v', 0x3}], 0x1}}], 0x1, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x4064810) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) (rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) (async, rerun: 32) r5 = socket$rxrpc(0x21, 0x2, 0x2) (rerun: 32) bind$rxrpc(r5, &(0x7f0000000400)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x6e24, @empty}}, 0x24) (async, rerun: 64) listen(r5, 0x0) (rerun: 64) close(r5) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) (async) close(r2) (async) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='contention_end\x00', r6, 0x0, 0x3}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c00000068009753d74093eaf656df2500000000000000000c00020001000000060000000800010001"], 0x2c}}, 0x4000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)={0x2, [0x4, 0x2]}, 0x8) (async) socket$alg(0x26, 0x5, 0x0) (async) socket(0x10, 0x800, 0xa75e) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='block_plug\x00', r6, 0x0, 0x7fff}, 0x18) (async) socket$key(0xf, 0x3, 0x2) 1.780525474s ago: executing program 2 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = accept4(r0, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x80, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042abd7000fcdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="2800508010e70780040001000400010004008100050002000100000009000100c3373e5ee0000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r8, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000180)=0x200, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x44001, &(0x7f0000000080)={0xa, 0x4e20, 0x800000, @empty, 0x101}, 0x1c) recvmmsg(r8, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0xfffffffc}], 0x1, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100003053bbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01480000000000001c0012800c0001006d6163766c616e000c000280080003000300000008000500", @ANYRES32=r9, @ANYBLOB="26e28a0b94c64aaf808c71e84593f8533db54f093c7fe39a56f8ae8fa06a19105bed6e593f75af02b08cc96450f5ec67c8a01171ee55ce24fc562ec9ea318b8543c5219bf452c4504d56bfcb08ba196ae11f346559308b562cd304e3a6b53ccd040b5d0e183511fe1ec0244e64e06fc646943a4202fe"], 0x44}}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001900010000000000000000000a000000000000010000000008001e00000400000c0012"], 0x30}}, 0x0) 1.706064541s ago: executing program 3 (id=1983): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x9, 0x1, 0x2, 0x2, 0x2, 0x2}, 0x20) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}, @typed={0x4, 0x1d}]}, 0x20}], 0x1}, 0x300) socket$rds(0x15, 0x5, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c894}, 0x4040800) connect$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x1, 0x0, 0x2}, 0xfc}, 0x18) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x3c}, 0x9, 0x1, 0x2, 0x2, 0x2, 0x2}, 0x20) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}, @typed={0x4, 0x1d}]}, 0x20}], 0x1}, 0x300) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b4000000000340004803000018008000100636d7000240002801000038009000100efbb17b799000000080001400000200b08000240000000000900010073797a3000"], 0xd0}}, 0x0) (async) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x20, 0x1405, 0x1, 0x70bd28, 0x25dfdbfc, "", [{{0x8}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c894}, 0x4040800) (async) connect$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x1, 0x0, 0x2}, 0xfc}, 0x18) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) 1.620551865s ago: executing program 2 (id=1984): openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x318982, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00\x00o\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000400000002000000a0000000", @ANYRES32=0x1, @ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0x12, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6fb", 0x2}], 0x1}}], 0x5, 0x4040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r4, &(0x7f0000000740), 0x8) listen(r4, 0x0) setsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x18, &(0x7f0000000140)={&(0x7f0000000180)={0x1, 0x923, 0x1, {0x77359400}, {}, {}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x28, 0x2, 0x0, 0x0, "5a9a115fb0d6f639e1170f6d732364e93b4eccdd47e0cda4aeb835d1c2f5502c648d23890517e3a407438be5aebdd35a95b240f103eeeea30d4639a4c5df529d"}}, 0x80}}, 0x44000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000070000000700000000b000e00000000000000001103000000010000000a0000000000000c04000000100000000000000800000000000000000300000d00000000000000000200000000000000040000000a000000040000000300000000000009010000000f00000000000008420000000e0000000000000804000000002e002e00612e00005f00"], &(0x7f0000000480)=""/145, 0x93, 0x91, 0x1, 0x8, 0x0, @void, @value}, 0x28) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x11000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x20000800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="050000000040000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) 1.525823334s ago: executing program 4 (id=1985): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) 445.794789ms ago: executing program 4 (id=1986): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = accept4(r0, &(0x7f0000000180)=@caif, 0x0, 0x800) sendmmsg(r1, 0x0, 0x0, 0x20000000) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = accept(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2, 0x1}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r7, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 407.577171ms ago: executing program 3 (id=1987): r0 = socket(0x10, 0x80000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 319.465842ms ago: executing program 2 (id=1988): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001300)={&(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/203, 0x87, 0x0, &(0x7f0000001200), 0xfffffff3}, &(0x7f0000001340)=0x24) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@rand_addr, 0x0}, &(0x7f0000000180)=0x14) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x5, 0xe3, @vifc_lcl_ifindex=r3, @remote}, 0x51) (async) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x5, 0xe3, @vifc_lcl_ifindex=r3, @remote}, 0x51) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x4c, r4, 0x200, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @broadcast}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x38}}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}]}, 0x4c}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x16, 0x33, @deauth={{{}, {}, @device_b, @broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "0262c80200", @long="d8e94d549ee8b72ddc078c49cf2e06db"}}}}]}, 0x54}}, 0x24048854) socket$nl_rdma(0x10, 0x3, 0x14) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) (async) getsockopt(r0, 0x200000000114, 0x2710, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0274204690d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000840)="e0274204690d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791192000000000063004800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x7, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff70, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 316.671111ms ago: executing program 3 (id=1989): socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 284.232034ms ago: executing program 0 (id=1990): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x18, 0x3d, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r3, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x21, 0x401, 0x6c947c14, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r1}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$netlink(0x10, 0x3, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500000044001500010000000000000000000eabdac5a3619b2c010000001e0106000000ff"], 0x154}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a80)={0x18, 0x3d, 0x107, 0x70bd2b, 0x0, {0x2, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004094}, 0xc000) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000004c0)={r3, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x21, 0x401, 0x6c947c14, 0x2, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={r1}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f00000000c0)}, 0x10) (async) socket$netlink(0x10, 0x3, 0x4) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xf0}, 0xfd}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=ANY=[@ANYBLOB="540100001900010000000000000000001d01000008000500000044001500010000000000000000000eabdac5a3619b2c010000001e0106000000ff"], 0x154}}, 0x0) (async) 222.217577ms ago: executing program 3 (id=1991): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="d400000010000d0400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000b400128009000100766c616e00000000a4000280"], 0xd4}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x0, 0x0, {{@in, @in=@loopback}}, [@migrate={0x50, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}]}, @policy_type={0xa}]}, 0xac}}, 0x0) 215.606639ms ago: executing program 2 (id=1992): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000001bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x10, 0xecc, @void, @value}, 0x94) 95.633881ms ago: executing program 0 (id=1993): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6}]}, {0x4}, {0xc, 0x8}, {0xc, 0x9}}}]}]}, 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close(r1) (async) socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 94.114612ms ago: executing program 2 (id=1994): r0 = socket$caif_stream(0x25, 0x1, 0x3) recvfrom(r0, &(0x7f0000000140)=""/251, 0xfb, 0x40, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept4(r2, 0x0, 0x0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x30}}, 0x0) 25.303943ms ago: executing program 3 (id=1995): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380008003df1760daacfe2714ec1e38c9bdd33aeab00e3fae6b2c333e526dbf1a7a190c9a94130bb92ad58db3ca5e21b4f72c42b40de93321351a7bc801aac90c53e148ceeaed5345c21648e6ce4b3141f38513f8f92250dc30f32703593efcac3ce66ba086bc6fdca06a878", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', r2, 0x4, 0x81, 0x4, 0x9, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x7800, 0x1, 0x40}}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value=0x3f000000}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) getsockopt$MRT(r6, 0x0, 0xcf, 0x0, &(0x7f0000000080)) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="5800000014001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c10000000000000000000", 0x58}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x64, 0x803e, 0x201, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x40, 0x1, 0x0, 0x1, [@nested={0x3b, 0x10, 0x0, 0x1, [@generic="587c75997e91568540e580675327c198785912c0b02a6eb9fa4432a551d706610b21a30528387fc7835332bc2dbbcbdca351860c952d73"]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4008094) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x24, 0x301, 0x0, 0x80, {0x11}, [@nested={0x4, 0x12f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000040)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="a739dfe54ad99ffa18c27526b51001fb4f778791377c"], 0x1c}}, 0x4000054) 0s ago: executing program 2 (id=1996): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$inet6(0xa, 0x1, 0x100) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=@security={'security\x00', 0xe, 0x4, 0x498, 0xffffffff, 0x0, 0x168, 0x288, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@srh={{0x30}, {0xff, 0xc, 0xcb, 0x0, 0x9, 0x800, 0x2032}}, @common=@srh={{0x30}, {0x36, 0x5, 0x7f, 0x0, 0x1, 0x2224, 0x1008}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x1, 0x4, 0x2, 0x7f, 0x9}}}, {{@ipv6={@local, @local, [0xff000000, 0x100fffe00, 0xffffffff], [0xff, 0xff], 'wg2\x00', 'vlan0\x00', {0xff}, {0xff}, 0x29, 0x2, 0x4, 0x20}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x8001}}, @common=@icmp6={{0x28}, {0x0, "5d83", 0x1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x8}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x6, 0x5, 0x1, [0x10, 0x7, 0x879, 0x2, 0x1, 0xfffc, 0x1000, 0x8, 0xff8d, 0x9, 0x9, 0x9, 0x7ff, 0x1, 0x6, 0x9], 0x9}}, @common=@eui64={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f8) kernel console output (not intermixed with test programs): zkaller0: entered promiscuous mode [ 116.773644][ T7580] syzkaller0: entered allmulticast mode [ 116.867799][ T7593] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 117.069647][ T7605] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 117.237591][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.253021][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.264222][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.282293][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.302055][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.311418][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.324445][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.466'. [ 117.506952][ T7624] netlink: set zone limit has 8 unknown bytes [ 117.701983][ T7639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.948857][ T7655] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 118.068957][ T7658] netlink: 'syz.0.483': attribute type 6 has an invalid length. [ 118.338501][ T7672] tipc: Started in network mode [ 118.346111][ T7672] tipc: Node identity b219d605205f, cluster identity 4711 [ 118.357955][ T7672] tipc: Enabled bearer , priority 0 [ 118.399534][ T7672] tipc: Disabling bearer [ 118.560884][ T7691] netlink: 'syz.2.492': attribute type 3 has an invalid length. [ 119.641514][ T7743] bridge0: port 3(ipvlan2) entered blocking state [ 119.648254][ T7743] bridge0: port 3(ipvlan2) entered disabled state [ 119.655187][ T7743] ipvlan2: entered allmulticast mode [ 119.660605][ T7743] bridge0: entered allmulticast mode [ 119.669505][ T7743] ipvlan2: left allmulticast mode [ 119.678076][ T7743] bridge0: left allmulticast mode [ 120.283537][ T7792] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.872804][ T7814] dummy0: left allmulticast mode [ 120.879725][ T7814] bridge0: port 3(dummy0) entered disabled state [ 120.900008][ T7814] bridge_slave_0: left allmulticast mode [ 120.914640][ T7814] bridge_slave_0: left promiscuous mode [ 120.934103][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.015660][ T7814] bridge_slave_1: left allmulticast mode [ 121.024775][ T7814] bridge_slave_1: left promiscuous mode [ 121.030524][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.052501][ T7814] bond0: (slave bond_slave_0): Releasing backup interface [ 121.080070][ T7814] bond0: (slave bond_slave_1): Releasing backup interface [ 121.105952][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.124197][ T7814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.180196][ T7839] netlink: 'syz.4.532': attribute type 8 has an invalid length. [ 121.463447][ T7855] __nla_validate_parse: 60 callbacks suppressed [ 121.463463][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 121.525350][ T7849] netlink: 248 bytes leftover after parsing attributes in process `syz.2.534'. [ 121.598788][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 121.956842][ T7880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 122.232072][ T7895] netlink: 'syz.1.549': attribute type 3 has an invalid length. [ 122.243136][ T7895] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 122.254096][ T7895] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.549'. [ 122.320688][ T7897] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 122.519255][ T7912] netlink: 196 bytes leftover after parsing attributes in process `syz.1.553'. [ 122.528820][ T7912] netlink: 196 bytes leftover after parsing attributes in process `syz.1.553'. [ 122.552506][ T7912] netlink: 19 bytes leftover after parsing attributes in process `syz.1.553'. [ 122.795887][ T7923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.834845][ T7923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.841370][ T7930] netlink: 'syz.4.560': attribute type 11 has an invalid length. [ 122.851517][ T7923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.851569][ T7923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.869960][ T7923] geneve2: entered promiscuous mode [ 122.936621][ T7934] Bluetooth: MGMT ver 1.23 [ 123.267419][ T7965] netlink: 248 bytes leftover after parsing attributes in process `syz.2.570'. [ 123.443659][ T7978] lo speed is unknown, defaulting to 1000 [ 123.453102][ T7982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 123.463225][ T7977] netlink: 'syz.2.575': attribute type 39 has an invalid length. [ 123.472522][ T7977] veth0_macvtap: left promiscuous mode [ 123.490072][ T7981] x_tables: duplicate underflow at hook 1 [ 123.520504][ T7978] lo speed is unknown, defaulting to 1000 [ 123.622749][ T7978] lo speed is unknown, defaulting to 1000 [ 123.651178][ T7978] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.670956][ T7978] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.772544][ T7978] lo speed is unknown, defaulting to 1000 [ 123.813978][ T7978] lo speed is unknown, defaulting to 1000 [ 123.852097][ T7978] lo speed is unknown, defaulting to 1000 [ 123.883507][ T7998] lo speed is unknown, defaulting to 1000 [ 123.938334][ T7978] lo speed is unknown, defaulting to 1000 [ 124.042989][ T7978] lo speed is unknown, defaulting to 1000 [ 124.109233][ T7978] lo speed is unknown, defaulting to 1000 [ 124.621320][ T8042] netlink: 'syz.1.593': attribute type 142 has an invalid length. [ 124.789823][ T8045] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 125.016129][ T8058] lo speed is unknown, defaulting to 1000 [ 125.373445][ T8089] netlink: zone id is out of range [ 125.386224][ T8089] netlink: zone id is out of range [ 125.401645][ T8089] netlink: zone id is out of range [ 125.410681][ T8089] netlink: zone id is out of range [ 125.417765][ T8092] netlink: 'syz.2.606': attribute type 3 has an invalid length. [ 125.421509][ T8089] netlink: zone id is out of range [ 125.441522][ T8089] netlink: zone id is out of range [ 125.447008][ T8089] netlink: zone id is out of range [ 125.452254][ T8089] netlink: zone id is out of range [ 125.461800][ T8089] netlink: zone id is out of range [ 125.469940][ T8089] netlink: zone id is out of range [ 125.743981][ T8102] tipc: Enabled bearer , priority 19 [ 126.137201][ T1077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.155446][ T1077] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.164958][ T47] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.316038][ T8114] vlan2: entered allmulticast mode [ 126.321204][ T8114] bond0: entered allmulticast mode [ 126.335590][ T8114] bond_slave_0: entered allmulticast mode [ 126.345688][ T8114] bond_slave_1: entered allmulticast mode [ 126.363487][ T8114] batman_adv: batadv0: Adding interface: vlan2 [ 126.372667][ T8114] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.424971][ T8114] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 126.468441][ T8116] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 126.645585][ T8066] lo speed is unknown, defaulting to 1000 [ 126.688969][ T8131] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20004 [ 126.828756][ T8136] lo speed is unknown, defaulting to 1000 [ 126.865778][ T3074] tipc: Node number set to 2454115845 [ 127.095037][ T3074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.102803][ T3074] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 127.378768][ T8147] __nla_validate_parse: 17 callbacks suppressed [ 127.378786][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'. [ 127.615384][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 127.819430][ T8169] netlink: 16 bytes leftover after parsing attributes in process `syz.2.628'. [ 127.956482][ T8177] xt_bpf: check failed: parse error [ 128.056169][ T8176] lo speed is unknown, defaulting to 1000 [ 128.138179][ T8177] IPv6: Can't replace route, no match found [ 128.306081][ T8188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.632'. [ 128.755753][ T8214] netlink: 'syz.2.637': attribute type 4 has an invalid length. [ 128.874503][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.642'. [ 128.883368][ T8219] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 128.913599][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'. [ 128.986877][ T8219] bridge0: port 3(dummy0) entered blocking state [ 128.993334][ T8219] bridge0: port 3(dummy0) entered disabled state [ 129.056138][ T8219] dummy0: entered allmulticast mode [ 129.077500][ T8219] dummy0: entered promiscuous mode [ 129.170565][ T8232] x_tables: duplicate underflow at hook 2 [ 129.197962][ T8232] lo speed is unknown, defaulting to 1000 [ 129.438806][ T8246] !: renamed from dummy0 [ 129.936410][ T8257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.654'. [ 130.010697][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 130.294935][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 130.598178][ T8274] netlink: 830 bytes leftover after parsing attributes in process `syz.0.659'. [ 131.081313][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.666'. [ 131.170960][ T8308] Cannot find add_set index 3 as target [ 131.311191][ T8311] lo speed is unknown, defaulting to 1000 [ 132.039641][ T47] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 132.051079][ T47] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 132.287823][ T8352] net_ratelimit: 2 callbacks suppressed [ 132.287840][ T8352] openvswitch: netlink: Message has 16 unknown bytes. [ 132.447825][ T8360] lo speed is unknown, defaulting to 1000 [ 132.455483][ T8365] __nla_validate_parse: 2 callbacks suppressed [ 132.455498][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 132.620111][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.640089][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.779687][ T8380] netlink: 'syz.1.689': attribute type 3 has an invalid length. [ 132.808653][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.1.689'. [ 133.148564][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 133.233550][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 133.271937][ T8402] syzkaller0: entered promiscuous mode [ 133.276656][ T8404] netlink: 'syz.0.696': attribute type 3 has an invalid length. [ 133.278714][ T8402] syzkaller0: entered allmulticast mode [ 133.286788][ T8404] netlink: 'syz.0.696': attribute type 13 has an invalid length. [ 133.306735][ T8404] gretap0: refused to change device tx_queue_len [ 133.313089][ T8404] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 133.661060][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.698'. [ 133.942962][ T8433] netlink: 'syz.4.703': attribute type 3 has an invalid length. [ 133.965774][ T8433] netlink: 'syz.4.703': attribute type 1 has an invalid length. [ 133.981277][ T8433] netlink: 191152 bytes leftover after parsing attributes in process `syz.4.703'. [ 134.787514][ T8416] batadv_slave_0: entered promiscuous mode [ 134.800863][ T8425] 8021q: VLANs not supported on lo [ 134.815474][ T8424] 8021q: VLANs not supported on lo [ 134.990962][ T47] IPVS: starting estimator thread 0... [ 134.991787][ T8443] lo speed is unknown, defaulting to 1000 [ 135.010550][ T8447] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 135.142414][ T8451] IPVS: using max 36 ests per chain, 86400 per kthread [ 135.262037][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.714'. [ 135.301676][ T8465] netlink: 236 bytes leftover after parsing attributes in process `syz.3.714'. [ 135.453897][ T8463] lo speed is unknown, defaulting to 1000 [ 135.704997][ T8490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.722'. [ 137.165188][ T8573] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 137.172885][ T8573] netlink: 224 bytes leftover after parsing attributes in process `syz.0.741'. [ 137.280088][ T8575] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 137.527156][ T8589] __nla_validate_parse: 4 callbacks suppressed [ 137.527173][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.748'. [ 137.625250][ T8597] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 137.634221][ T8597] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 137.684811][ T8597] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 137.715538][ T8597] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 137.728069][ T8597] geneve3: entered allmulticast mode [ 137.856641][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 137.877079][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 137.906237][ T8606] netlink: 'syz.4.753': attribute type 13 has an invalid length. [ 137.935537][ T8606] netlink: 'syz.4.753': attribute type 11 has an invalid length. [ 137.960922][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.752'. [ 137.973656][ T8611] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.981494][ T8611] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.013152][ T8611] bridge0: entered allmulticast mode [ 138.076769][ T8609] bridge_slave_1: left allmulticast mode [ 138.092982][ T8615] raw_sendmsg: syz.1.755 forgot to set AF_INET. Fix it! [ 138.103420][ T8609] bridge_slave_1: left promiscuous mode [ 138.130883][ T8615] trusted_key: syz.1.755 sent an empty control message without MSG_MORE. [ 138.143049][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.177526][ T8609] bridge_slave_0: left allmulticast mode [ 138.183237][ T8609] bridge_slave_0: left promiscuous mode [ 138.193148][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.300081][ T8615] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.309923][ T8615] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.327240][ T8615] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.435359][ T8615] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.476852][ T8615] geneve2: entered promiscuous mode [ 138.599320][ T8622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.624748][ T8622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 138.651817][ T8622] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 138.817519][ T8622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.838662][ T8622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 138.873925][ T8622] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 138.911768][ T8643] lo speed is unknown, defaulting to 1000 [ 138.996636][ T8650] netlink: 40 bytes leftover after parsing attributes in process `syz.0.765'. [ 139.015092][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 139.067877][ T8622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.080788][ T8622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.095688][ T8622] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 139.231034][ T8622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.255671][ T8622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 139.270056][ T8622] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 139.437031][ T8622] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 139.459136][ T8622] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20001 - 0 [ 139.472812][ T8622] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 139.507495][ T8622] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 139.525509][ T8622] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20001 - 0 [ 139.546585][ T8622] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 139.582998][ T8622] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 139.596684][ T8622] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20001 - 0 [ 139.608317][ T8622] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 139.637691][ T8684] lo speed is unknown, defaulting to 1000 [ 139.656873][ T8622] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 139.665572][ T8622] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20001 - 0 [ 139.676763][ T8622] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 139.728275][ T8691] netlink: 'syz.0.776': attribute type 1 has an invalid length. [ 139.739420][ T8691] netlink: 'syz.0.776': attribute type 2 has an invalid length. [ 140.445773][ T8720] netlink: 'syz.3.786': attribute type 2 has an invalid length. [ 140.498366][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 140.577154][ T8726] xt_CT: No such helper "snmp_trap" [ 140.649551][ T8736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.656845][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 140.664108][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 140.671362][ T8736] IPv6: NLM_F_CREATE should be set when creating new route [ 140.686340][ T8738] netlink: 'syz.2.792': attribute type 1 has an invalid length. [ 140.694169][ T8738] netlink: 244 bytes leftover after parsing attributes in process `syz.2.792'. [ 140.712612][ T8738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.792'. [ 140.726119][ T8736] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.869173][ T8746] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 140.938454][ T8747] syzkaller0: entered promiscuous mode [ 140.948586][ T8747] syzkaller0: entered allmulticast mode [ 141.027992][ T8746] netlink: del zone limit has 4 unknown bytes [ 141.045569][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 141.048745][ T8761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 141.076180][ T8755] xt_CT: No such helper "snmp" [ 141.201605][ T8769] netem: change failed [ 141.340811][ T8777] gretap1: entered promiscuous mode [ 141.355735][ T8783] netlink: 'syz.4.807': attribute type 32 has an invalid length. [ 141.363904][ T8783] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 141.436639][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.452966][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.544132][ T8799] netlink: 'syz.4.811': attribute type 3 has an invalid length. [ 141.691271][ T8809] lo speed is unknown, defaulting to 1000 [ 142.183651][ T8816] netem: change failed [ 142.556450][ T8829] __nla_validate_parse: 5 callbacks suppressed [ 142.556467][ T8829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 142.607501][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'. [ 142.650482][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.819'. [ 142.726792][ T30] audit: type=1800 audit(1748047594.830:2): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.820" name="memory.events" dev="tmpfs" ino=822 res=0 errno=0 [ 142.839583][ T8843] netlink: 'syz.3.822': attribute type 1 has an invalid length. [ 142.847602][ T8843] netlink: 224 bytes leftover after parsing attributes in process `syz.3.822'. [ 143.728623][ T8837] netlink: 32 bytes leftover after parsing attributes in process `syz.1.820'. [ 143.739451][ C0] Unknown status report in ack skb [ 143.746482][ T8844] tipc: Started in network mode [ 143.755946][ T8844] tipc: Node identity 6, cluster identity 4711 [ 143.770494][ T8844] tipc: Node number set to 6 [ 143.781310][ T8847] syzkaller0: Caught tx_queue_len zero misconfig [ 143.961275][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 144.167861][ T8880] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 144.193010][ T8880] dummy0: entered allmulticast mode [ 144.216910][ T8880] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.641368][ T8913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 144.889104][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.851'. [ 145.590826][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 145.613818][ T8963] geneve1: entered promiscuous mode [ 145.657305][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.863'. [ 145.685654][ T8961] lo speed is unknown, defaulting to 1000 [ 146.339519][ T8995] lo speed is unknown, defaulting to 1000 [ 146.578309][ T9012] syz.4.876 (9012) used greatest stack depth: 16264 bytes left [ 146.806192][ T9022] lo speed is unknown, defaulting to 1000 [ 146.909885][ T9037] xt_socket: unknown flags 0xfc [ 147.133904][ T9051] netlink: 'syz.0.888': attribute type 20 has an invalid length. [ 147.653982][ T9095] netlink: 'syz.2.901': attribute type 1 has an invalid length. [ 147.774324][ T9101] __nla_validate_parse: 8 callbacks suppressed [ 147.774342][ T9101] netlink: 27 bytes leftover after parsing attributes in process `syz.2.904'. [ 148.351374][ T9113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.395635][ T9113] netlink: 36 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.403143][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.435020][ T9115] netlink: 5 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.459388][ T9115] netlink: 56 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.481321][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 148.656548][ T9126] netlink: 'syz.3.914': attribute type 7 has an invalid length. [ 148.669046][ T9126] netlink: 'syz.3.914': attribute type 8 has an invalid length. [ 148.686710][ T9127] netlink: 'syz.3.914': attribute type 7 has an invalid length. [ 148.696528][ T9127] netlink: 'syz.3.914': attribute type 8 has an invalid length. [ 149.275755][ T9170] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.343490][ T9170] syzkaller1: entered promiscuous mode [ 149.361554][ T9170] syzkaller1: entered allmulticast mode [ 149.393014][ T9162] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 149.395993][ T9175] vlan2: entered promiscuous mode [ 149.418981][ T9175] bridge0: entered promiscuous mode [ 149.510172][ T9186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.042540][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 150.077133][ T9218] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'. [ 150.152971][ T9220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.941'. [ 150.388596][ T9234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.667130][ T9257] netlink: 'syz.2.953': attribute type 3 has an invalid length. [ 150.963365][ T9254] syzkaller1: entered promiscuous mode [ 150.984706][ T9254] syzkaller1: entered allmulticast mode [ 151.501094][ T9266] lo speed is unknown, defaulting to 1000 [ 151.503675][ T9276] netlink: 'syz.0.958': attribute type 7 has an invalid length. [ 151.606441][ T9277] netlink: 'syz.2.957': attribute type 5 has an invalid length. [ 151.627341][ T9280] unsupported nlmsg_type 40 [ 151.733479][ T9289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.763955][ T9289] nbd: must specify a size in bytes for the device [ 151.777182][ T9289] nbd: must specify a device to reconfigure [ 152.118946][ T9316] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 152.139911][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.151160][ T9316] bond0: (slave team0): Enslaving as an active interface with an up link [ 152.460311][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.473048][ T9321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.585209][ T9321] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.597081][ T9321] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.606709][ T9321] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.618481][ T9321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.660945][ T9321] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.670432][ T9321] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.679798][ T9321] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.689084][ T9321] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.704303][ T9321] bond3: left allmulticast mode [ 152.894186][ T9340] __nla_validate_parse: 12 callbacks suppressed [ 152.894204][ T9340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 153.049281][ T9347] delete_channel: no stack [ 153.151513][ T9360] netlink: 'syz.4.985': attribute type 12 has an invalid length. [ 153.247011][ T9365] netlink: 'syz.0.986': attribute type 11 has an invalid length. [ 153.281862][ T9367] lo speed is unknown, defaulting to 1000 [ 153.297741][ T9370] veth0_to_bond: entered promiscuous mode [ 153.315947][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 153.332152][ T9372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.989'. [ 153.375904][ T9372] netlink: 20 bytes leftover after parsing attributes in process `syz.4.989'. [ 153.411014][ T9370] veth0_to_bond (unregistering): left promiscuous mode [ 153.437785][ T9370] bond0: (slave bond_slave_0): Releasing backup interface [ 153.448522][ T9381] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 153.468071][ T9370] bond_slave_0 (unregistering): left allmulticast mode [ 153.533979][ T9378] netlink: 'syz.4.989': attribute type 12 has an invalid length. [ 153.699582][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.996'. [ 153.760235][ T9401] netlink: 48 bytes leftover after parsing attributes in process `syz.3.995'. [ 154.100474][ T9430] netem: incorrect ge model size [ 154.118195][ T9430] netem: change failed [ 154.227311][ T9433] gtp1: entered promiscuous mode [ 154.241110][ T9433] gtp1: entered allmulticast mode [ 154.286233][ T9437] IPVS: Error connecting to the multicast addr [ 154.433778][ T9449] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 154.453508][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 154.664878][ T9460] lo speed is unknown, defaulting to 1000 [ 154.755694][ T9465] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.135038][ T9480] sctp: [Deprecated]: syz.4.1016 (pid 9480) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.135038][ T9480] Use struct sctp_sack_info instead [ 155.198009][ T9484] syzkaller1: entered promiscuous mode [ 155.203516][ T9484] syzkaller1: entered allmulticast mode [ 155.210786][ T9480] netlink: 'syz.4.1016': attribute type 1 has an invalid length. [ 155.217611][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 155.253389][ T9480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.272237][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1019'. [ 155.298286][ T9476] bond5: (slave gretap1): making interface the new active one [ 155.309963][ T9476] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 155.356304][ T9487] gtp2: entered promiscuous mode [ 155.362563][ T9487] gtp2: entered allmulticast mode [ 155.398136][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1020'. [ 155.655187][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 155.672886][ T9499] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 155.704985][ T9502] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 155.714046][ T9502] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 156.078516][ T9523] netlink: 'syz.2.1033': attribute type 10 has an invalid length. [ 156.107430][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.138249][ T9523] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 156.322978][ T9544] IPVS: set_ctl: invalid protocol: 119 100.1.1.0:20000 [ 156.443656][ T9556] sctp: [Deprecated]: syz.1.1043 (pid 9556) Use of int in max_burst socket option. [ 156.443656][ T9556] Use struct sctp_assoc_value instead [ 156.827113][ T9584] tipc: Started in network mode [ 156.832374][ T9584] tipc: Node identity 3efb722a, cluster identity 4711 [ 156.839637][ T9584] tipc: Node number set to 1056666154 [ 156.850541][ C1] Unknown status report in ack skb [ 157.039532][ T9598] lo speed is unknown, defaulting to 1000 [ 157.133544][ T9605] geneve5: entered promiscuous mode [ 157.654400][ T9633] netlink: 'syz.2.1064': attribute type 58 has an invalid length. [ 157.715679][ T9634] x_tables: ip_tables: udp match: only valid for protocol 17 [ 158.162854][ T9661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.332770][ T9671] __nla_validate_parse: 11 callbacks suppressed [ 158.332787][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 158.333003][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1074'. [ 158.343810][ T9671] 8021q: VLANs not supported on ip6tnl0 [ 158.370951][ T9670] 8021q: VLANs not supported on ip6tnl0 [ 158.719416][ T9685] netlink: 'syz.4.1079': attribute type 4 has an invalid length. [ 159.099468][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1091'. [ 159.205117][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1091'. [ 159.314080][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1097'. [ 159.826552][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 159.943334][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1114'. [ 161.903013][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1146'. [ 161.990755][ T9836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 162.004242][ T9834] wg2: entered promiscuous mode [ 162.010620][ T9834] wg2: entered allmulticast mode [ 162.018801][ T9840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 162.032655][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 162.219496][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 162.440437][ T9854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.463725][ T9854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.479479][ T9854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.492820][ T9854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.525105][ T9860] Unknown status report in ack skb [ 162.721382][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.734183][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.749402][ T9862] bridge0: port 3(dummy0) entered blocking state [ 162.756081][ T9862] bridge0: port 3(dummy0) entered forwarding state [ 162.772419][ T9862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.526337][ T9927] veth0_to_bridge: entered promiscuous mode [ 163.566652][ T9926] veth0_to_bridge: left promiscuous mode [ 163.742053][ T9942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.752955][ T9943] __nla_validate_parse: 3 callbacks suppressed [ 163.752969][ T9943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1185'. [ 163.785528][ T9942] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1187'. [ 163.801335][ T9942] tipc: Started in network mode [ 163.806798][ T9942] tipc: Node identity 68a, cluster identity 4711 [ 163.813444][ T9942] tipc: Node number set to 1674 [ 163.964321][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 163.983727][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 164.246676][ T9974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1191'. [ 164.300880][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 164.326680][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'. [ 164.373262][ T9974] bridge2: entered promiscuous mode [ 164.394618][ T9974] bridge2: entered allmulticast mode [ 164.639963][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1198'. [ 164.724327][ T9998] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 164.795353][T10006] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 164.815028][T10004] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 164.822924][T10004] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1200'. [ 164.844916][T10006] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1200'. [ 164.898911][T10012] !: renamed from dummy0 (while UP) [ 165.113527][T10022] netlink: 'syz.4.1207': attribute type 2 has an invalid length. [ 165.153638][T10020] lo speed is unknown, defaulting to 1000 [ 165.720187][T10045] bond3: entered allmulticast mode [ 165.749049][T10045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.108255][T10063] lo speed is unknown, defaulting to 1000 [ 166.283802][T10078] netdevsim netdevsim3 eth0: set [1, 3] type 2 family 0 port 59349 - 0 [ 166.292831][T10078] netdevsim netdevsim3 eth1: set [1, 3] type 2 family 0 port 59349 - 0 [ 166.301703][T10078] netdevsim netdevsim3 eth2: set [1, 3] type 2 family 0 port 59349 - 0 [ 166.310449][T10078] netdevsim netdevsim3 eth3: set [1, 3] type 2 family 0 port 59349 - 0 [ 166.323022][T10078] geneve6: entered promiscuous mode [ 166.335315][T10078] geneve6: entered allmulticast mode [ 166.761757][T10102] openvswitch: netlink: IPv6 tunnel dst address is zero [ 166.825715][T10107] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 167.007801][T10118] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 167.026041][T10118] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.353494][T10130] tipc: Enabling of bearer rejected, failed to enable media [ 167.603290][T10144] FAULT_INJECTION: forcing a failure. [ 167.603290][T10144] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 167.652800][T10144] CPU: 1 UID: 0 PID: 10144 Comm: syz.2.1242 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 167.652826][T10144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.652844][T10144] Call Trace: [ 167.652851][T10144] [ 167.652859][T10144] dump_stack_lvl+0x189/0x250 [ 167.652889][T10144] ? __lock_acquire+0xaac/0xd20 [ 167.652918][T10144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.652944][T10144] ? __pfx__printk+0x10/0x10 [ 167.652962][T10144] ? __might_fault+0xb0/0x130 [ 167.652997][T10144] should_fail_ex+0x414/0x560 [ 167.653021][T10144] _copy_from_iter+0x1db/0x15a0 [ 167.653053][T10144] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 167.653073][T10144] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 167.653098][T10144] ? __pfx__copy_from_iter+0x10/0x10 [ 167.653123][T10144] ? __build_skb_around+0x257/0x3e0 [ 167.653151][T10144] ? netlink_sendmsg+0x642/0xb30 [ 167.653174][T10144] ? skb_put+0x11b/0x210 [ 167.653202][T10144] netlink_sendmsg+0x6b2/0xb30 [ 167.653236][T10144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.653264][T10144] ? aa_sock_msg_perm+0x94/0x160 [ 167.653288][T10144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.653308][T10144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.653333][T10144] __sock_sendmsg+0x21c/0x270 [ 167.653357][T10144] __sys_sendto+0x3bd/0x520 [ 167.653383][T10144] ? __pfx___sys_sendto+0x10/0x10 [ 167.653439][T10144] ? rcu_is_watching+0x15/0xb0 [ 167.653467][T10144] __x64_sys_sendto+0xde/0x100 [ 167.653495][T10144] do_syscall_64+0xf6/0x210 [ 167.653516][T10144] ? clear_bhb_loop+0x60/0xb0 [ 167.653538][T10144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.653554][T10144] RIP: 0033:0x7f504d5907fc [ 167.653570][T10144] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 167.653585][T10144] RSP: 002b:00007f504e4e0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 167.653611][T10144] RAX: ffffffffffffffda RBX: 00007f504e4e0fc0 RCX: 00007f504d5907fc [ 167.653623][T10144] RDX: 0000000000000020 RSI: 00007f504e4e1010 RDI: 0000000000000003 [ 167.653633][T10144] RBP: 0000000000000000 R08: 00007f504e4e0f14 R09: 000000000000000c [ 167.653643][T10144] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 167.653653][T10144] R13: 00007f504e4e0f68 R14: 00007f504e4e1010 R15: 0000000000000000 [ 167.653680][T10144] [ 168.562618][T10180] FAULT_INJECTION: forcing a failure. [ 168.562618][T10180] name failslab, interval 1, probability 0, space 0, times 1 [ 168.563087][T10179] netlink: 'syz.3.1257': attribute type 11 has an invalid length. [ 168.575816][T10180] CPU: 1 UID: 0 PID: 10180 Comm: syz.2.1256 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 168.575842][T10180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.575853][T10180] Call Trace: [ 168.575861][T10180] [ 168.575870][T10180] dump_stack_lvl+0x189/0x250 [ 168.575910][T10180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.575942][T10180] ? __pfx__printk+0x10/0x10 [ 168.575973][T10180] ? ref_tracker_alloc+0x318/0x460 [ 168.576002][T10180] should_fail_ex+0x414/0x560 [ 168.576031][T10180] should_failslab+0xa8/0x100 [ 168.576063][T10180] kmem_cache_alloc_noprof+0x73/0x3c0 [ 168.576090][T10180] ? skb_clone+0x212/0x3a0 [ 168.576116][T10180] skb_clone+0x212/0x3a0 [ 168.576141][T10180] __netlink_deliver_tap+0x404/0x850 [ 168.576186][T10180] ? netlink_deliver_tap+0x2e/0x1b0 [ 168.576218][T10180] netlink_deliver_tap+0x19c/0x1b0 [ 168.576248][T10180] netlink_unicast+0x72f/0x8d0 [ 168.576287][T10180] netlink_sendmsg+0x805/0xb30 [ 168.576329][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.576362][T10180] ? aa_sock_msg_perm+0x94/0x160 [ 168.576399][T10180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 168.576424][T10180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.576455][T10180] __sock_sendmsg+0x21c/0x270 [ 168.576484][T10180] __sys_sendto+0x3bd/0x520 [ 168.576515][T10180] ? __pfx___sys_sendto+0x10/0x10 [ 168.576541][T10180] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 168.576580][T10180] ? __fget_files+0x3a0/0x420 [ 168.576621][T10180] ? ksys_write+0x1f0/0x250 [ 168.576655][T10180] ? rcu_is_watching+0x15/0xb0 [ 168.576683][T10180] __x64_sys_sendto+0xde/0x100 [ 168.576714][T10180] do_syscall_64+0xf6/0x210 [ 168.576738][T10180] ? clear_bhb_loop+0x60/0xb0 [ 168.576773][T10180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.576791][T10180] RIP: 0033:0x7f504d5907fc [ 168.576807][T10180] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 168.576821][T10180] RSP: 002b:00007f504e4e0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 168.576840][T10180] RAX: ffffffffffffffda RBX: 00007f504e4e0fc0 RCX: 00007f504d5907fc [ 168.576854][T10180] RDX: 0000000000000020 RSI: 00007f504e4e1010 RDI: 0000000000000003 [ 168.576883][T10180] RBP: 0000000000000000 R08: 00007f504e4e0f14 R09: 000000000000000c [ 168.576896][T10180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 168.576907][T10180] R13: 00007f504e4e0f68 R14: 00007f504e4e1010 R15: 0000000000000000 [ 168.576952][T10180] [ 168.934058][T10184] __nla_validate_parse: 9 callbacks suppressed [ 168.934075][T10184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1260'. [ 169.068210][T10189] lo speed is unknown, defaulting to 1000 [ 169.550138][T10211] FAULT_INJECTION: forcing a failure. [ 169.550138][T10211] name failslab, interval 1, probability 0, space 0, times 0 [ 169.588572][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1261'. [ 169.624653][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.3.1269 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 169.624678][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.624688][T10211] Call Trace: [ 169.624695][T10211] [ 169.624703][T10211] dump_stack_lvl+0x189/0x250 [ 169.624736][T10211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.624762][T10211] ? __pfx__printk+0x10/0x10 [ 169.624782][T10211] ? __pfx___might_resched+0x10/0x10 [ 169.624800][T10211] ? fs_reclaim_acquire+0x7d/0x100 [ 169.624831][T10211] should_fail_ex+0x414/0x560 [ 169.624856][T10211] should_failslab+0xa8/0x100 [ 169.624881][T10211] __kmalloc_noprof+0xcb/0x4f0 [ 169.624903][T10211] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 169.624930][T10211] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 169.624957][T10211] genl_family_rcv_msg_doit+0xb8/0x300 [ 169.624983][T10211] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 169.625036][T10211] ? __pfx_genl_get_cmd+0x10/0x10 [ 169.625070][T10211] genl_rcv_msg+0x60e/0x790 [ 169.625095][T10211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.625111][T10211] ? ref_tracker_free+0x63a/0x7d0 [ 169.625131][T10211] ? __pfx_ctrl_getfamily+0x10/0x10 [ 169.625149][T10211] ? __pfx_ref_tracker_free+0x10/0x10 [ 169.625181][T10211] netlink_rcv_skb+0x208/0x470 [ 169.625202][T10211] ? __lock_acquire+0xaac/0xd20 [ 169.625228][T10211] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.625247][T10211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.625287][T10211] ? down_read+0x1ad/0x2e0 [ 169.625311][T10211] genl_rcv+0x28/0x40 [ 169.625327][T10211] netlink_unicast+0x75b/0x8d0 [ 169.625360][T10211] netlink_sendmsg+0x805/0xb30 [ 169.625394][T10211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.625422][T10211] ? aa_sock_msg_perm+0x94/0x160 [ 169.625445][T10211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.625465][T10211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.625490][T10211] __sock_sendmsg+0x21c/0x270 [ 169.625513][T10211] __sys_sendto+0x3bd/0x520 [ 169.625546][T10211] ? __pfx___sys_sendto+0x10/0x10 [ 169.625566][T10211] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 169.625598][T10211] ? __fget_files+0x3a0/0x420 [ 169.625634][T10211] ? ksys_write+0x1f0/0x250 [ 169.625664][T10211] __x64_sys_sendto+0xde/0x100 [ 169.625695][T10211] do_syscall_64+0xf6/0x210 [ 169.625715][T10211] ? clear_bhb_loop+0x60/0xb0 [ 169.625737][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.625754][T10211] RIP: 0033:0x7fe6d15907fc [ 169.625769][T10211] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 169.625783][T10211] RSP: 002b:00007fe6cf3f4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 169.625801][T10211] RAX: ffffffffffffffda RBX: 00007fe6cf3f4fc0 RCX: 00007fe6d15907fc [ 169.625813][T10211] RDX: 0000000000000020 RSI: 00007fe6cf3f5010 RDI: 0000000000000003 [ 169.625823][T10211] RBP: 0000000000000000 R08: 00007fe6cf3f4f14 R09: 000000000000000c [ 169.625833][T10211] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 169.625842][T10211] R13: 00007fe6cf3f4f68 R14: 00007fe6cf3f5010 R15: 0000000000000000 [ 169.625870][T10211] [ 170.380002][T10219] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1271'. [ 170.671539][T10243] IPVS: set_ctl: invalid protocol: 108 224.0.0.2:20004 [ 170.741935][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1278'. [ 170.874002][T10250] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 170.901510][T10250] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 170.931596][T10250] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 170.947479][T10250] netlink: 'syz.4.1280': attribute type 3 has an invalid length. [ 170.958772][T10250] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1280'. [ 171.281049][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 171.315871][T10274] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 171.323644][T10274] netlink: 'syz.1.1284': attribute type 2 has an invalid length. [ 171.493703][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1292'. [ 172.342525][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 172.527708][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'. [ 172.557921][T10324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1302'. [ 172.586704][T10324] batadv0: entered promiscuous mode [ 172.681867][T10324] batadv0: left promiscuous mode [ 172.738556][T10330] team0: Port device team_slave_0 removed [ 172.759887][T10335] syz_tun: default FDB implementation only supports local addresses [ 172.943756][T10342] netlink: 'syz.0.1306': attribute type 4 has an invalid length. [ 173.154075][T10347] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36271 - 0 [ 173.177561][T10347] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36271 - 0 [ 173.194116][T10347] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36271 - 0 [ 173.207072][T10347] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36271 - 0 [ 173.217541][T10347] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 45718 - 0 [ 173.240235][T10347] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 45718 - 0 [ 173.264257][T10347] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 45718 - 0 [ 173.273371][T10347] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 45718 - 0 [ 173.282411][T10347] geneve3: entered promiscuous mode [ 173.312426][T10347] geneve3: entered allmulticast mode [ 173.474131][T10356] netlink: 'syz.3.1310': attribute type 4 has an invalid length. [ 173.696456][T10367] openvswitch: netlink: Message has 4 unknown bytes. [ 173.704112][T10367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.888267][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.901690][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.910343][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.928954][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.936942][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 174.164237][T10378] team0 (unregistering): Port device team_slave_0 removed [ 174.189728][T10378] team0 (unregistering): Port device geneve0 removed [ 174.248213][T10385] syzkaller1: entered promiscuous mode [ 174.265716][T10385] syzkaller1: entered allmulticast mode [ 174.381757][T10375] lo speed is unknown, defaulting to 1000 [ 174.535458][T10401] __nla_validate_parse: 3 callbacks suppressed [ 174.535477][T10401] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1320'. [ 174.720912][T10410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.789845][T10410] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1324'. [ 174.804952][T10410] IPVS: length: 135 != 24 [ 174.813227][T10375] chnl_net:caif_netlink_parms(): no params data found [ 175.158219][T10375] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.173582][T10375] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.199155][T10375] bridge_slave_0: entered allmulticast mode [ 175.214990][T10375] bridge_slave_0: entered promiscuous mode [ 175.237676][T10375] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.265064][T10375] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.274945][T10375] bridge_slave_1: entered allmulticast mode [ 175.288823][T10375] bridge_slave_1: entered promiscuous mode [ 175.488720][T10375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.509371][T10375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.617868][T10375] team0: Port device team_slave_0 added [ 175.629641][T10375] team0: Port device team_slave_1 added [ 175.694078][T10375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.711746][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.751361][T10375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.767220][T10375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.774405][T10375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.806313][T10375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.977083][ T55] Bluetooth: hci3: command tx timeout [ 176.017681][T10471] x_tables: unsorted underflow at hook 1 [ 176.042309][T10375] hsr_slave_0: entered promiscuous mode [ 176.050550][T10375] hsr_slave_1: entered promiscuous mode [ 176.057205][T10375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.065310][T10375] Cannot create hsr debugfs directory [ 176.259905][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 176.272756][T10479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1342'. [ 176.478368][T10487] netlink: 'syz.2.1348': attribute type 11 has an invalid length. [ 176.496864][T10487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1348'. [ 176.515271][T10485] lo speed is unknown, defaulting to 1000 [ 176.588083][T10489] netlink: 'syz.2.1348': attribute type 4 has an invalid length. [ 176.674128][T10493] netlink: 'syz.2.1350': attribute type 11 has an invalid length. [ 176.801458][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 176.803680][T10375] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.828348][T10375] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.853093][T10375] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.892597][T10375] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.341324][T10516] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1359'. [ 177.370841][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1359'. [ 177.381670][T10375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.464256][T10375] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.501853][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.509041][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.539150][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.546371][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.632732][T10375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.962792][T10375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.055117][ T55] Bluetooth: hci3: command tx timeout [ 178.106717][T10375] veth0_vlan: entered promiscuous mode [ 178.140509][T10375] veth1_vlan: entered promiscuous mode [ 178.232109][T10375] veth0_macvtap: entered promiscuous mode [ 178.261146][T10375] veth1_macvtap: entered promiscuous mode [ 178.289367][T10540] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1365'. [ 178.318424][T10375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.342357][T10375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.403821][T10375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.421284][ T3506] wlan0: failed to finalize CSA on link 0, disconnecting [ 178.437189][T10375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.446256][T10375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.455894][T10375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.497502][T10561] Bluetooth: MGMT ver 1.23 [ 178.716373][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.724360][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.745106][T10561] IPVS: length: 89 != 8 [ 178.819557][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.833406][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.643778][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1382'. [ 179.680757][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1382'. [ 179.689868][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1382'. [ 179.811652][ T3555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.471178][ T3555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.526194][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.536593][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.545371][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.553566][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.561868][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.653315][T10655] lo speed is unknown, defaulting to 1000 [ 180.914315][T10655] chnl_net:caif_netlink_parms(): no params data found [ 181.075296][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.082497][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.089984][T10655] bridge_slave_0: entered allmulticast mode [ 181.097697][T10655] bridge_slave_0: entered promiscuous mode [ 181.109874][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.117131][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.124274][T10655] bridge_slave_1: entered allmulticast mode [ 181.132742][T10655] bridge_slave_1: entered promiscuous mode [ 181.162714][ T3555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.358217][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 181.374028][ T3555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.398597][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.417285][T10686] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1404'. [ 181.420057][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.500615][T10655] team0: Port device team_slave_0 added [ 181.517046][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 181.530180][T10655] team0: Port device team_slave_1 added [ 181.632815][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.656051][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.708663][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.762108][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.783035][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.822535][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.958266][T10655] hsr_slave_0: entered promiscuous mode [ 181.982301][T10655] hsr_slave_1: entered promiscuous mode [ 181.998863][T10655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.019947][T10655] Cannot create hsr debugfs directory [ 182.073573][ T3555] bridge_slave_1: left allmulticast mode [ 182.089912][ T3555] bridge_slave_1: left promiscuous mode [ 182.104159][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.134462][ T3555] bridge_slave_0: left allmulticast mode [ 182.150442][ T3555] bridge_slave_0: left promiscuous mode [ 182.165413][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.617390][ T5143] Bluetooth: hci3: command tx timeout [ 182.705333][T10734] netlink: 'syz.3.1418': attribute type 21 has an invalid length. [ 182.757014][T10736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1418'. [ 182.850817][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.867009][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.877574][ T3555] bond0 (unregistering): Released all slaves [ 183.211520][T10743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'. [ 183.262325][T10745] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1421'. [ 183.387799][T10741] lo speed is unknown, defaulting to 1000 [ 183.423368][ T3555] hsr_slave_0: left promiscuous mode [ 183.431875][ T3555] hsr_slave_1: left promiscuous mode [ 183.442284][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.452581][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.463707][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.474279][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.502031][ T3555] veth1_macvtap: left promiscuous mode [ 183.507790][ T3555] veth0_macvtap: left promiscuous mode [ 183.513388][ T3555] veth1_vlan: left promiscuous mode [ 183.519098][ T3555] veth0_vlan: left promiscuous mode [ 183.654200][T10753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 183.916874][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 183.950435][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 184.684356][T10768] netlink: 'syz.3.1428': attribute type 10 has an invalid length. [ 184.705461][ T5143] Bluetooth: hci3: command tx timeout [ 184.732154][T10768] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 184.759515][T10768] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 185.245507][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.253275][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.284097][T10775] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 185.298664][T10768] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.328485][T10770] lo speed is unknown, defaulting to 1000 [ 185.672449][T10655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 185.699211][T10655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 185.851112][T10655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 185.915619][T10655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.107509][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.115213][T10819] __nla_validate_parse: 1 callbacks suppressed [ 186.115226][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 186.149435][T10822] netlink: 'syz.4.1440': attribute type 10 has an invalid length. [ 186.159984][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.170024][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1440'. [ 186.193137][T10822] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 186.230604][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.237798][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.308933][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.316149][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.457403][T10830] lo speed is unknown, defaulting to 1000 [ 186.551200][T10835] lo speed is unknown, defaulting to 1000 [ 186.775213][ T5143] Bluetooth: hci3: command tx timeout [ 187.085844][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.205262][T10655] veth0_vlan: entered promiscuous mode [ 187.221574][T10655] veth1_vlan: entered promiscuous mode [ 187.361347][T10655] veth0_macvtap: entered promiscuous mode [ 187.371419][T10655] veth1_macvtap: entered promiscuous mode [ 187.441639][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 187.443919][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.478448][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.500721][T10866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1449'. [ 187.516303][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1450'. [ 187.546908][T10866] 8021q: adding VLAN 0 to HW filter on device team1 [ 187.661571][T10655] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.664737][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.678082][T10655] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.695398][T10655] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.704335][T10655] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.885882][T10881] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 188.076569][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.084423][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.211394][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.233146][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.403538][T10894] macvtap1: entered promiscuous mode [ 188.410264][T10894] hsr0: entered promiscuous mode [ 188.417663][T10894] hsr0: left promiscuous mode [ 188.518345][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1459'. [ 188.536017][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1459'. [ 188.627293][T10903] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 188.646739][T10906] netlink: 'syz.3.1462': attribute type 8 has an invalid length. [ 188.660075][T10903] netlink: 'syz.0.1461': attribute type 2 has an invalid length. [ 188.675383][T10903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 188.783679][T10915] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1465'. [ 188.820054][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1465'. [ 188.895969][T10915] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.929395][T10925] bridge0: port 3(syz_tun) entered blocking state [ 188.944948][T10925] bridge0: port 3(syz_tun) entered disabled state [ 188.952008][T10925] syz_tun: entered allmulticast mode [ 188.961460][T10925] syz_tun: entered promiscuous mode [ 189.151730][T10932] tap0: tun_chr_ioctl cmd 1074025677 [ 189.177132][T10932] tap0: linktype set to 1 [ 189.194126][T10932] netlink: 'syz.3.1469': attribute type 18 has an invalid length. [ 189.296876][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.938713][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.990529][T10969] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 190.112978][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.249919][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.251419][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.272876][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.280729][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.291744][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.300077][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.401496][T10989] netlink: 'syz.4.1485': attribute type 1 has an invalid length. [ 190.592397][T10982] lo speed is unknown, defaulting to 1000 [ 190.959032][ T53] bridge_slave_1: left allmulticast mode [ 190.969589][ T53] bridge_slave_1: left promiscuous mode [ 190.986853][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.018274][ T53] bridge_slave_0: left allmulticast mode [ 191.026867][ T53] bridge_slave_0: left promiscuous mode [ 191.050542][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.800899][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.814352][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.832332][ T53] bond0 (unregistering): Released all slaves [ 191.858763][T11013] netlink: 'syz.4.1491': attribute type 2 has an invalid length. [ 191.884531][T11013] __nla_validate_parse: 5 callbacks suppressed [ 191.884546][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1491'. [ 191.913884][T11013] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 192.334238][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1498'. [ 192.383384][ T5143] Bluetooth: hci3: command tx timeout [ 192.460450][ T53] hsr_slave_0: left promiscuous mode [ 192.495195][ T53] hsr_slave_1: left promiscuous mode [ 192.516718][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.545105][T11039] nbd: must specify a device to reconfigure [ 192.551816][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.577167][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.613650][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.686983][ T53] veth1_macvtap: left promiscuous mode [ 192.700451][ T53] veth0_macvtap: left promiscuous mode [ 192.723220][ T53] veth1_vlan: left promiscuous mode [ 192.739081][ T53] veth0_vlan: left promiscuous mode [ 193.838738][ T53] team0 (unregistering): Port device team_slave_1 removed [ 193.875500][ T53] team0 (unregistering): Port device team_slave_0 removed [ 194.061658][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.265322][T10974] Set syz1 is full, maxelem 65536 reached [ 194.369265][T10982] chnl_net:caif_netlink_parms(): no params data found [ 194.384428][T11053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.417594][T11055] netlink: 'syz.0.1505': attribute type 11 has an invalid length. [ 194.455406][ T5853] Bluetooth: hci3: command tx timeout [ 194.463538][T11053] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1503'. [ 194.500370][T11060] xt_TCPMSS: Only works on TCP SYN packets [ 194.690708][T11073] Unknown status report in ack skb [ 194.701339][T11076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1508'. [ 194.756172][T10982] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.781068][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.801944][T10982] bridge_slave_0: entered allmulticast mode [ 194.810174][T10982] bridge_slave_0: entered promiscuous mode [ 194.819522][T10982] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.827526][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.834820][T10982] bridge_slave_1: entered allmulticast mode [ 194.842484][T10982] bridge_slave_1: entered promiscuous mode [ 194.920073][T10982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.943517][T10982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.009947][T10982] team0: Port device team_slave_0 added [ 195.031856][T10982] team0: Port device team_slave_1 added [ 195.100250][T10982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.113051][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.165215][T10982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.202487][T10982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.218969][T10982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.268122][T10982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.435110][T10982] hsr_slave_0: entered promiscuous mode [ 195.456597][T10982] hsr_slave_1: entered promiscuous mode [ 195.462829][T10982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.503650][T10982] Cannot create hsr debugfs directory [ 195.907332][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1520'. [ 196.018328][T11101] lo speed is unknown, defaulting to 1000 [ 196.134966][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 196.141079][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 196.147150][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 196.534949][ T5854] Bluetooth: hci3: command tx timeout [ 196.550475][T11143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 196.582106][T10982] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.593905][T10982] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.616307][T10982] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.640238][T10982] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.726323][T11149] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1531'. [ 196.762471][T11150] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1531'. [ 196.782774][T10982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.814829][T10982] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.838335][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.845641][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.879249][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.886456][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.998986][T11164] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1535'. [ 197.233109][T11176] tipc: Enabling of bearer rejected, failed to enable media [ 197.416477][T10982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.542858][T10982] veth0_vlan: entered promiscuous mode [ 197.564484][T10982] veth1_vlan: entered promiscuous mode [ 197.674003][T10982] veth0_macvtap: entered promiscuous mode [ 197.714210][T10982] veth1_macvtap: entered promiscuous mode [ 197.762608][T10982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.806656][T10982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.862019][T10982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.901433][T10982] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.934926][T10982] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.970601][T10982] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.120873][T11199] lo speed is unknown, defaulting to 1000 [ 198.213529][T11220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1551'. [ 198.389228][T11216] netlink: 'syz.4.1550': attribute type 303 has an invalid length. [ 198.478934][T11226] batman_adv: batadv0: Adding interface: ip6gretap1 [ 198.489388][T11226] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.552871][T11226] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 198.611662][T11232] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.614874][ T5854] Bluetooth: hci3: command tx timeout [ 198.635407][T11232] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.645050][T11232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.665100][T11232] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.687657][T11232] batman_adv: batadv0: Removing interface: ip6gretap1 [ 198.881675][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.892315][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.908889][T11231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.925225][T11231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36271 - 0 [ 198.940537][T11231] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 45718 - 0 [ 198.951204][T11249] netlink: 'syz.3.1558': attribute type 3 has an invalid length. [ 199.077908][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 199.110548][T11231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.128781][T11231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36271 - 0 [ 199.140625][T11231] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 45718 - 0 [ 199.164102][T11247] hsr_slave_0: left promiscuous mode [ 199.173102][T11247] hsr_slave_1: left promiscuous mode [ 199.241252][T11231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.256531][T11231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36271 - 0 [ 199.271994][T11231] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 45718 - 0 [ 199.295451][T11257] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1560'. [ 199.317355][ T3462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.334592][ T3462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.347854][T11256] netlink: 'syz.3.1561': attribute type 21 has an invalid length. [ 199.356461][T11256] netlink: 'syz.3.1561': attribute type 22 has an invalid length. [ 199.364288][T11256] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1561'. [ 199.377674][T11231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.399115][T11231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36271 - 0 [ 199.428560][T11231] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 45718 - 0 [ 199.778270][T11231] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 45718 - 0 [ 199.829429][T11231] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 36271 - 0 [ 199.854012][T11231] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 199.911020][T11231] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 45718 - 0 [ 199.930215][T11231] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 36271 - 0 [ 199.940139][T11231] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 200.065340][T11231] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 45718 - 0 [ 200.092806][T11231] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 36271 - 0 [ 200.104923][T11231] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 200.122558][T11283] sock: sock_timestamping_bind_phc: sock not bind to device [ 200.150129][T11231] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 45718 - 0 [ 200.183723][T11231] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 36271 - 0 [ 200.202696][T11231] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 200.244264][T11286] lo speed is unknown, defaulting to 1000 [ 200.339873][T11294] sctp: [Deprecated]: syz.0.1573 (pid 11294) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.339873][T11294] Use struct sctp_sack_info instead [ 200.561648][T11303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'. [ 200.603068][T11300] nbd: socks must be embedded in a SOCK_ITEM attr [ 201.315854][T11334] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 201.571759][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.783174][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.908777][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.982154][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.089572][ T3462] bridge_slave_1: left allmulticast mode [ 202.095552][ T3462] bridge_slave_1: left promiscuous mode [ 202.101782][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.112181][ T3462] bridge_slave_0: left allmulticast mode [ 202.118391][ T3462] bridge_slave_0: left promiscuous mode [ 202.124263][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.739686][T11384] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1586'. [ 202.769586][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.788209][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.801442][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.809788][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.809796][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.826309][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 202.845498][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.857541][ T3462] bond0 (unregistering): Released all slaves [ 203.049539][T11357] lo speed is unknown, defaulting to 1000 [ 203.163230][T11385] lo speed is unknown, defaulting to 1000 [ 203.324323][T11397] veth0_to_bridge: entered promiscuous mode [ 203.369132][T11397] bpq0: left allmulticast mode [ 203.376686][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 203.404709][ T3462] hsr_slave_0: left promiscuous mode [ 203.411652][ T3462] hsr_slave_1: left promiscuous mode [ 203.424751][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.432166][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.440396][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.450787][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.476567][ T3462] veth1_macvtap: left promiscuous mode [ 203.482086][ T3462] veth0_macvtap: left promiscuous mode [ 203.487795][ T3462] veth1_vlan: left promiscuous mode [ 203.493102][ T3462] veth0_vlan: left promiscuous mode [ 203.710108][T11408] x_tables: ip_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 29 [ 203.936791][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 203.971278][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 204.277037][T11395] veth0_to_bridge: left promiscuous mode [ 204.537736][T11424] tipc: Started in network mode [ 204.542743][T11424] tipc: Node identity e631f86143ad, cluster identity 4711 [ 204.575010][T11424] tipc: Enabled bearer , priority 0 [ 204.611566][T11385] chnl_net:caif_netlink_parms(): no params data found [ 204.670088][T11425] syzkaller0: entered promiscuous mode [ 204.694758][T11425] syzkaller0: entered allmulticast mode [ 204.700814][T11425] tipc: Resetting bearer [ 204.807858][T11424] tipc: Resetting bearer [ 204.854761][ T5143] Bluetooth: hci3: command tx timeout [ 205.647269][ T5909] tipc: Node number set to 2778527841 [ 205.872984][T11465] xt_ecn: cannot match TCP bits for non-tcp packets [ 206.211929][T11424] tipc: Disabling bearer [ 206.248800][T11460] geneve0: entered allmulticast mode [ 206.402472][T11385] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.415531][T11385] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.422915][T11385] bridge_slave_0: entered allmulticast mode [ 206.430677][T11385] bridge_slave_0: entered promiscuous mode [ 206.460166][T11385] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.473761][T11385] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.487172][T11385] bridge_slave_1: entered allmulticast mode [ 206.500797][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1616'. [ 206.511242][T11385] bridge_slave_1: entered promiscuous mode [ 206.518382][T11476] syzkaller1: entered promiscuous mode [ 206.523983][T11476] syzkaller1: entered allmulticast mode [ 206.539139][T11480] bond0: entered promiscuous mode [ 206.551439][T11480] bond_slave_0: entered promiscuous mode [ 206.558312][T11480] bond_slave_1: entered promiscuous mode [ 206.564318][T11480] team0: entered promiscuous mode [ 206.572949][T11480] team_slave_1: entered promiscuous mode [ 206.591522][T11480] bond0: left promiscuous mode [ 206.596473][T11480] bond_slave_0: left promiscuous mode [ 206.604364][T11480] bond_slave_1: left promiscuous mode [ 206.613744][T11480] team0: left promiscuous mode [ 206.619548][T11480] team_slave_1: left promiscuous mode [ 206.789957][T11475] bridge_slave_1 (unregistering): left allmulticast mode [ 206.807963][T11475] bridge_slave_1 (unregistering): left promiscuous mode [ 206.824039][T11475] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.871267][T11385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.885028][T11491] tipc: Enabled bearer , priority 10 [ 206.906780][T11385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.935021][ T5143] Bluetooth: hci3: command tx timeout [ 207.136872][T11385] team0: Port device team_slave_0 added [ 207.143434][T11512] netlink: 'syz.3.1625': attribute type 7 has an invalid length. [ 207.163756][T11385] team0: Port device team_slave_1 added [ 207.264108][T11385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.287642][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.325992][T11385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.351055][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 207.390993][T11385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.391909][T11517] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1625'. [ 207.407882][T11385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.462029][T11385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.561380][T11385] hsr_slave_0: entered promiscuous mode [ 207.568810][T11385] hsr_slave_1: entered promiscuous mode [ 207.575815][T11385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.583750][T11385] Cannot create hsr debugfs directory [ 207.593278][T11525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 207.900435][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 208.237211][T11385] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.317861][T11385] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.352899][T11385] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.373086][T11385] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.482614][T11560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1638'. [ 208.649475][T11568] syz_tun: entered allmulticast mode [ 208.674282][T11563] xt_CT: No such helper "snmp" [ 208.709337][T11567] syz_tun: left allmulticast mode [ 208.791528][T11385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.852816][T11385] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.880914][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.888093][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.907849][T11576] xt_CT: You must specify a L4 protocol and not use inversions on it [ 208.934696][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.941872][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.962279][T11579] tun0: tun_chr_ioctl cmd 2147767520 [ 209.025210][ T5143] Bluetooth: hci3: command tx timeout [ 209.477894][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.559797][T11594] netlink: 'syz.3.1648': attribute type 62 has an invalid length. [ 209.560069][T11385] veth0_vlan: entered promiscuous mode [ 209.589117][T11385] veth1_vlan: entered promiscuous mode [ 209.644390][T11385] veth0_macvtap: entered promiscuous mode [ 209.660798][T11385] veth1_macvtap: entered promiscuous mode [ 209.698161][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.718516][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.752849][T11385] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.762584][T11385] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.773726][T11385] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.784713][T11385] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.036634][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.056562][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.058830][T11604] netlink: 'syz.0.1652': attribute type 1 has an invalid length. [ 210.115733][T11603] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1653'. [ 210.163732][T11604] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.238816][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.261994][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.275136][T11604] veth7: entered promiscuous mode [ 210.303256][T11604] bond3: (slave veth7): Enslaving as an active interface with a down link [ 210.314024][T11612] veth1: entered promiscuous mode [ 210.327084][T11609] erspan0: entered allmulticast mode [ 210.347492][T11609] bond3: (slave erspan0): making interface the new active one [ 210.371694][T11609] erspan0: entered promiscuous mode [ 210.389859][T11609] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 210.444621][T11614] batadv_slave_1: entered promiscuous mode [ 210.496343][T11612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'. [ 210.519153][T11611] batadv_slave_1: left promiscuous mode [ 210.540234][T11611] veth1: left promiscuous mode [ 210.598513][T11619] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1657'. [ 210.779017][T11627] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1661'. [ 210.802370][T11627] sit0: entered promiscuous mode [ 210.809987][T11627] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 210.818463][T11627] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1661'. [ 211.111187][T11650] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1667'. [ 211.119556][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.582372][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.902219][T11658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1669'. [ 211.992624][T11663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1668'. [ 212.009185][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.022456][T11662] netlink: 'syz.3.1672': attribute type 1 has an invalid length. [ 212.298295][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.345264][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.355046][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.369000][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.395080][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.429315][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.587025][T11683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.598069][T11683] bond1: entered allmulticast mode [ 212.603677][T11683] bond0: (slave bond1): Enslaving as an active interface with an up link [ 212.659463][T11675] lo speed is unknown, defaulting to 1000 [ 212.867047][ T3462] bridge_slave_1: left allmulticast mode [ 212.872735][ T3462] bridge_slave_1: left promiscuous mode [ 212.882595][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.907341][ T3462] bridge_slave_0: left allmulticast mode [ 212.913037][ T3462] bridge_slave_0: left promiscuous mode [ 212.933669][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.522923][T11726] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1683'. [ 213.712917][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.763099][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.778635][ T3462] bond0 (unregistering): Released all slaves [ 213.803196][T11700] lo speed is unknown, defaulting to 1000 [ 213.837053][T11712] bond0: entered promiscuous mode [ 213.842670][T11712] bond_slave_0: entered promiscuous mode [ 213.850862][T11712] bond_slave_1: entered promiscuous mode [ 213.863953][T11712] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 213.974839][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.259746][T11675] chnl_net:caif_netlink_parms(): no params data found [ 214.294124][ T3462] hsr_slave_0: left promiscuous mode [ 214.301207][ T3462] hsr_slave_1: left promiscuous mode [ 214.315301][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.322732][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.345992][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.358135][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.393658][ T3462] veth1_macvtap: left promiscuous mode [ 214.399627][ T3462] veth0_macvtap: left promiscuous mode [ 214.411722][ T3462] veth1_vlan: left promiscuous mode [ 214.417435][ T3462] veth0_vlan: left promiscuous mode [ 214.455212][ T5143] Bluetooth: hci3: command tx timeout [ 214.882465][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 214.913038][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 214.950469][T11765] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1691'. [ 215.341303][T11764] lo speed is unknown, defaulting to 1000 [ 215.664350][T11675] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.672630][T11675] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.680292][T11675] bridge_slave_0: entered allmulticast mode [ 215.687979][T11675] bridge_slave_0: entered promiscuous mode [ 215.696954][T11675] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.704320][T11675] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.712081][T11675] bridge_slave_1: entered allmulticast mode [ 215.720129][T11675] bridge_slave_1: entered promiscuous mode [ 215.785696][T11675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.809884][T11675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.915366][T11675] team0: Port device team_slave_0 added [ 215.925848][T11675] team0: Port device team_slave_1 added [ 215.993885][T11675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.007431][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.036704][T11675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.050456][T11675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.058890][T11675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.085470][T11675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.165140][T11675] hsr_slave_0: entered promiscuous mode [ 216.173887][T11797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 216.174013][T11675] hsr_slave_1: entered promiscuous mode [ 216.190226][T11675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.198426][T11675] Cannot create hsr debugfs directory [ 216.328673][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1701'. [ 216.413030][T11801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1701'. [ 216.490406][T11804] tipc: Enabled bearer , priority 0 [ 216.534801][ T5143] Bluetooth: hci3: command tx timeout [ 216.610288][T11804] syzkaller0: entered promiscuous mode [ 216.621165][T11804] syzkaller0: entered allmulticast mode [ 216.629561][T11804] tipc: Resetting bearer [ 216.752388][T11804] tipc: Resetting bearer [ 216.763688][T11823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1707'. [ 217.439963][T11829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1709'. [ 217.948439][T11804] tipc: Disabling bearer [ 217.991777][T11829] pim6reg: entered allmulticast mode [ 218.018715][T11831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1709'. [ 218.036233][T11825] lo speed is unknown, defaulting to 1000 [ 218.121792][T11838] Cannot find set identified by id 65535 to match [ 218.343142][T11846] lo speed is unknown, defaulting to 1000 [ 218.349602][T11675] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.381183][T11675] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.424900][T11675] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.466720][T11675] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.615997][ T5143] Bluetooth: hci3: command tx timeout [ 218.852308][ T30] audit: type=1107 audit(1748047670.970:3): pid=11864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='1' [ 218.954332][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.049233][T11876] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 219.086187][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.151007][ T3462] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.158231][ T3462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.233615][ T3462] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.240870][ T3462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.306362][T11888] syz.3.1727 (11888) used obsolete PPPIOCDETACH ioctl [ 219.570124][T11905] block nbd4: NBD_DISCONNECT [ 219.592175][T11905] block nbd4: Disconnected due to user request. [ 219.610859][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.621524][T11905] block nbd4: shutting down sockets [ 219.623976][T11910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'. [ 219.642959][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.653957][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.660062][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1732'. [ 219.687336][T11902] tipc: Enabling of bearer rejected, failed to enable media [ 219.696695][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.749387][T11675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.756858][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.782076][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.807101][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.848977][T11675] veth0_vlan: entered promiscuous mode [ 219.857384][T11909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1734'. [ 219.871663][T11675] veth1_vlan: entered promiscuous mode [ 219.927757][T11675] veth0_macvtap: entered promiscuous mode [ 219.950866][T11675] veth1_macvtap: entered promiscuous mode [ 219.994876][T11675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.010803][T11675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.037087][T11675] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.065194][T11675] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.073910][T11675] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.089904][T11675] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.263833][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.288231][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.378866][T11931] lo speed is unknown, defaulting to 1000 [ 220.385138][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.392972][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.502422][T11936] veth0_to_bridge: entered promiscuous mode [ 220.570289][T11941] netlink: 'syz.2.1744': attribute type 303 has an invalid length. [ 220.667028][T11935] veth0_to_bridge: left promiscuous mode [ 220.805960][T11946] netlink: zone id is out of range [ 220.811116][T11946] netlink: zone id is out of range [ 220.816592][T11946] netlink: zone id is out of range [ 220.821839][T11946] netlink: zone id is out of range [ 220.852530][T11946] netlink: zone id is out of range [ 220.960837][T11952] IPVS: set_ctl: invalid protocol: 94 10.1.5.1:65535 [ 221.147762][ T1077] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.510905][ T1077] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.605493][ T3555] erspan0: left promiscuous mode [ 222.041586][T11964] lo speed is unknown, defaulting to 1000 [ 222.084804][T11965] lo speed is unknown, defaulting to 1000 [ 222.133476][T11974] netlink: 'syz.4.1753': attribute type 2 has an invalid length. [ 222.242117][ T1077] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.421809][ T1077] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.597027][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 222.608393][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 222.616790][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 222.645339][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 222.653875][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 222.670351][T11991] lo speed is unknown, defaulting to 1000 [ 222.782212][T11994] lo speed is unknown, defaulting to 1000 [ 222.851907][T12003] vlan2: entered promiscuous mode [ 222.860419][T12003] syz_tun: entered promiscuous mode [ 223.092359][ T3074] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 223.111296][ T3074] hid-generic 0005:10CF:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 223.139905][ T1077] bridge_slave_1: left allmulticast mode [ 223.156360][ T1077] bridge_slave_1: left promiscuous mode [ 223.169897][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.216149][ T1077] bridge_slave_0: left allmulticast mode [ 223.222470][ T1077] bridge_slave_0: left promiscuous mode [ 223.228574][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.718057][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.737958][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.757122][ T1077] bond0 (unregistering): Released all slaves [ 224.053036][T12023] lo speed is unknown, defaulting to 1000 [ 224.189005][T11994] chnl_net:caif_netlink_parms(): no params data found [ 224.333207][ T1077] hsr_slave_0: left promiscuous mode [ 224.348168][ T1077] hsr_slave_1: left promiscuous mode [ 224.354097][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.376658][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.395958][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.403455][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.453112][ T1077] veth1_macvtap: left promiscuous mode [ 224.461737][ T1077] veth0_macvtap: left promiscuous mode [ 224.468937][ T1077] veth1_vlan: left promiscuous mode [ 224.476073][ T1077] veth0_vlan: left promiscuous mode [ 224.482840][T12047] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 224.649795][T12049] af_packet: tpacket_rcv: packet too big, clamped from 56412 to 4294967272. macoff=96 [ 224.698279][ T5854] Bluetooth: hci3: command tx timeout [ 224.965140][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 225.001373][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 225.582042][T11994] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.609466][T11994] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.631686][T11994] bridge_slave_0: entered allmulticast mode [ 225.656447][T11994] bridge_slave_0: entered promiscuous mode [ 225.717096][T11994] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.724331][T11994] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.755843][T12074] __nla_validate_parse: 65 callbacks suppressed [ 225.755856][T12074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1777'. [ 225.774776][T11994] bridge_slave_1: entered allmulticast mode [ 225.789041][T11994] bridge_slave_1: entered promiscuous mode [ 225.803378][T12068] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 225.823734][T12068] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 225.922161][T12081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1781'. [ 226.082488][T11994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.106418][T11994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.131086][T12089] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1782'. [ 226.208935][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1785'. [ 226.262046][T11994] team0: Port device team_slave_0 added [ 226.297867][T11994] team0: Port device team_slave_1 added [ 226.362779][T12095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1782'. [ 226.439549][T12095] bond5: entered allmulticast mode [ 226.448428][T12095] 8021q: adding VLAN 0 to HW filter on device bond5 [ 226.477227][T11994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.492268][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.518725][T11994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.532255][T12089] batadv_slave_0: entered allmulticast mode [ 226.544290][T12089] bond5: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 226.597818][T11994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.616111][T11994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.698524][T11994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.764171][T12115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1792'. [ 226.774784][ T5854] Bluetooth: hci3: command tx timeout [ 226.790877][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1792'. [ 226.882593][T11994] hsr_slave_0: entered promiscuous mode [ 226.902283][T11994] hsr_slave_1: entered promiscuous mode [ 226.922839][T11994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.954716][T11994] Cannot create hsr debugfs directory [ 227.160513][T12135] lo speed is unknown, defaulting to 1000 [ 227.218776][T12141] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1801'. [ 227.284608][T12146] netlink: 410 bytes leftover after parsing attributes in process `syz.0.1801'. [ 227.361199][T12149] No such timeout policy "syz0" [ 227.524869][T12149] siw: device registration error -23 [ 227.834830][T12161] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 227.979790][T12163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1808'. [ 228.020576][T12161] lo speed is unknown, defaulting to 1000 [ 228.031411][T11994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.057707][T11994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.096354][T11994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.117853][T11994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.356549][T12172] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 228.617532][T11994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.659004][T12192] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 228.661882][T11994] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.675826][T12193] Cannot find set identified by id 3 to match [ 228.719346][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.726573][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.759389][T12195] x_tables: ip_tables: ah match: only valid for protocol 51 [ 228.847472][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.854666][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.862325][ T5143] Bluetooth: hci3: command tx timeout [ 228.950985][T11994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.276050][T12220] netlink: 'syz.2.1825': attribute type 33 has an invalid length. [ 229.393563][T11994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.611365][T12235] netlink: 'syz.4.1829': attribute type 3 has an invalid length. [ 229.665717][T11994] veth0_vlan: entered promiscuous mode [ 229.703280][T11994] veth1_vlan: entered promiscuous mode [ 229.818971][T11994] veth0_macvtap: entered promiscuous mode [ 229.852602][T11994] veth1_macvtap: entered promiscuous mode [ 229.993548][T11994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.023247][T11994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.052875][T11994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.082553][T11994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.107732][T11994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.139158][T11994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.370387][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.399521][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.479903][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.506864][T12268] lo speed is unknown, defaulting to 1000 [ 230.525714][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.813887][T12289] __nla_validate_parse: 8 callbacks suppressed [ 230.813904][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 230.839100][T12289] sctp: [Deprecated]: syz.4.1846 (pid 12289) Use of int in max_burst socket option. [ 230.839100][T12289] Use struct sctp_assoc_value instead [ 230.925086][T12289] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1846'. [ 230.935901][ T5143] Bluetooth: hci3: command 0x0419 tx timeout [ 230.966833][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1847'. [ 231.026300][T12296] bond6: entered allmulticast mode [ 231.031898][T12296] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.364708][T12315] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 231.372566][T12315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1853'. [ 231.427428][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1854'. [ 231.600373][T12325] siw: device registration error -23 [ 231.715833][ T3523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.793983][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1859'. [ 232.059268][ T3523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.208331][ T3523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.278267][ T3523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.355374][ T3523] bridge_slave_1: left allmulticast mode [ 232.361047][ T3523] bridge_slave_1: left promiscuous mode [ 232.367171][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.376512][ T3523] bridge_slave_0: left allmulticast mode [ 232.382677][ T3523] bridge_slave_0: left promiscuous mode [ 232.388766][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.791840][T12336] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 232.956149][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.053446][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.064823][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.066329][ T3523] bond0 (unregistering): Released all slaves [ 233.088181][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.097035][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.105987][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.115388][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 233.222107][T12358] tun0: tun_chr_ioctl cmd 1074025675 [ 233.234559][T12358] tun0: persist enabled [ 233.244731][T12361] tun0: tun_chr_ioctl cmd 1074025675 [ 233.266503][T12361] tun0: persist enabled [ 233.281381][T12359] lo speed is unknown, defaulting to 1000 [ 233.326212][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 233.693334][T12384] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1873'. [ 234.537991][T12378] veth0_to_bridge: entered promiscuous mode [ 234.546604][T12379] veth0_to_bridge: left promiscuous mode [ 234.831150][T12399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 234.863936][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 234.879374][T12399] netlink: 'syz.2.1877': attribute type 1 has an invalid length. [ 234.980657][ T3523] hsr_slave_0: left promiscuous mode [ 234.991288][ T3523] hsr_slave_1: left promiscuous mode [ 235.003325][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.024919][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.033414][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.042253][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.085224][ T3523] veth1_macvtap: left promiscuous mode [ 235.090780][ T3523] veth0_macvtap: left promiscuous mode [ 235.099931][ T3523] veth1_vlan: left promiscuous mode [ 235.105400][ T3523] veth0_vlan: left promiscuous mode [ 235.175634][ T5854] Bluetooth: hci3: command tx timeout [ 235.607803][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 235.645895][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 236.064307][T12432] __nla_validate_parse: 2 callbacks suppressed [ 236.064321][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1885'. [ 236.249514][T12359] chnl_net:caif_netlink_parms(): no params data found [ 236.285503][T12423] pim6reg: entered allmulticast mode [ 236.302722][T12421] pim6reg: left allmulticast mode [ 236.382517][T12432] vlan3: entered promiscuous mode [ 236.400338][T12432] hsr0: entered promiscuous mode [ 236.655613][T12451] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1890'. [ 236.744660][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.751821][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.759185][T12458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1892'. [ 236.789354][T12359] bridge_slave_0: entered allmulticast mode [ 236.814302][T12359] bridge_slave_0: entered promiscuous mode [ 236.841391][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 236.902003][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.925719][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.932953][T12359] bridge_slave_1: entered allmulticast mode [ 236.994803][T12359] bridge_slave_1: entered promiscuous mode [ 237.093712][T12474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1894'. [ 237.118263][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.157523][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.255265][ T5854] Bluetooth: hci3: command tx timeout [ 237.266362][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1896'. [ 237.308000][T12359] team0: Port device team_slave_0 added [ 237.412282][T12359] team0: Port device team_slave_1 added [ 237.448550][T12484] x_tables: duplicate underflow at hook 1 [ 237.481194][T12486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1899'. [ 237.520321][T12482] IPv6: syztnl2: Disabled Multicast RS [ 237.620047][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.647044][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.699480][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.755987][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.762974][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.826651][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.876692][T12499] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1903'. [ 237.942371][T12359] hsr_slave_0: entered promiscuous mode [ 237.957022][T12359] hsr_slave_1: entered promiscuous mode [ 237.967838][T12359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.977269][T12503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1904'. [ 237.986302][T12359] Cannot create hsr debugfs directory [ 238.532909][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'. [ 238.575602][T12524] ksmbd: Unknown IPC event: 0, ignore. [ 238.716713][T12529] xt_CT: No such helper "snmp" [ 238.830531][T12359] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.844459][T12359] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.881605][T12359] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.908316][T12359] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.152483][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.192686][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.231907][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.239130][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.293175][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.300387][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.334638][ T5854] Bluetooth: hci3: command tx timeout [ 239.568658][T12558] netlink: 'syz.4.1921': attribute type 5 has an invalid length. [ 239.587384][T12558] netlink: 'syz.4.1921': attribute type 1 has an invalid length. [ 239.910165][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.057606][T12359] veth0_vlan: entered promiscuous mode [ 240.106950][T12359] veth1_vlan: entered promiscuous mode [ 240.186654][T12359] veth0_macvtap: entered promiscuous mode [ 240.207028][T12359] veth1_macvtap: entered promiscuous mode [ 240.272284][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.321881][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.416945][T12359] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.434585][T12359] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.443387][T12359] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.484734][T12359] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.702711][ T3462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.729428][ T3462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.804647][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.813541][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.281766][T12615] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (3) [ 241.334264][T12617] netlink: 'syz.3.1940': attribute type 15 has an invalid length. [ 241.501340][T12626] __nla_validate_parse: 5 callbacks suppressed [ 241.501375][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 241.856605][T12636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.070782][ T3523] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.770434][ T3523] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.961301][ T3523] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.090487][T12653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 243.115839][ T3523] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.553076][T12667] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 243.573336][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 243.612084][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.621262][ T5143] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.629994][ T5143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.640952][ T5143] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.652645][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.745552][T12686] netlink: 'syz.3.1960': attribute type 1 has an invalid length. [ 243.785295][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 243.794794][ T3523] bridge_slave_1: left allmulticast mode [ 243.801362][ T3523] bridge_slave_1: left promiscuous mode [ 243.807591][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.836430][ T3523] bridge_slave_0: left allmulticast mode [ 243.842519][ T3523] bridge_slave_0: left promiscuous mode [ 243.857980][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.900901][T12697] Unsupported ieee802154 address type: 0 [ 244.148470][T12712] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1968'. [ 244.297583][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.312682][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.322621][ T3523] bond0 (unregistering): Released all slaves [ 244.337877][T12678] lo speed is unknown, defaulting to 1000 [ 244.343989][T12695] netlink: 'syz.2.1963': attribute type 1 has an invalid length. [ 244.532637][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1970'. [ 244.689573][T12726] vlan0: entered promiscuous mode [ 244.887482][T12742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.938603][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1978'. [ 244.979544][T12742] block nbd2: not configured, cannot reconfigure [ 245.047536][T12745] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 245.226859][ T3523] hsr_slave_0: left promiscuous mode [ 245.248014][ T3523] hsr_slave_1: left promiscuous mode [ 245.261762][T12757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1983'. [ 245.265563][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.298512][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1984'. [ 245.310700][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.328677][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.336422][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.366260][ T3523] veth1_macvtap: left promiscuous mode [ 245.371876][ T3523] veth0_macvtap: left promiscuous mode [ 245.378028][ T3523] veth1_vlan: left promiscuous mode [ 245.384230][ T3523] veth0_vlan: left promiscuous mode [ 245.735358][ T5143] Bluetooth: hci3: command tx timeout [ 245.774041][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 245.807547][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 246.544049][T12773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1988'. [ 246.666497][T12678] chnl_net:caif_netlink_parms(): no params data found [ 246.689953][T12789] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1991'. [ 246.787490][T12796] netlink: 'syz.0.1993': attribute type 1 has an invalid length. [ 246.803604][T12796] netlink: 'syz.0.1993': attribute type 4 has an invalid length. [ 246.905130][T12803] Oops: general protection fault, probably for non-canonical address 0xdffffc00000a2403: 0000 [#1] SMP KASAN PTI [ 246.917055][T12803] KASAN: probably user-memory-access in range [0x0000000000512018-0x000000000051201f] [ 246.926605][T12803] CPU: 0 UID: 0 PID: 12803 Comm: syz.2.1996 Not tainted 6.15.0-rc7-syzkaller-01658-gea15e046263b #0 PREEMPT(full) [ 246.938672][T12803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.948727][T12803] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 246.954721][T12803] Code: 80 3c 2f 00 74 08 48 89 df e8 bc 0b 1a f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 91 0b 1a f7 4d 8b 2c 24 49 83 c5 [ 246.974337][T12803] RSP: 0018:ffffc90003bdefe0 EFLAGS: 00010206 [ 246.980414][T12803] RAX: 00000000000a2403 RBX: ffff88805bfb4160 RCX: ffff88802d6f1e00 [ 246.988380][T12803] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 246.996363][T12803] RBP: ffffc90003bdf350 R08: ffff88805bfb3c5f R09: 1ffff1100b7f678b [ 247.004329][T12803] R10: dffffc0000000000 R11: ffffed100b7f678c R12: 0000000000512018 [ 247.012293][T12803] R13: dffffc0000000000 R14: ffff88805bfb3c00 R15: 1ffff1100b7f682c [ 247.020265][T12803] FS: 00007f504e4c16c0(0000) GS:ffff8881260b2000(0000) knlGS:0000000000000000 [ 247.029196][T12803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.035776][T12803] CR2: 000020000000e000 CR3: 0000000031032000 CR4: 00000000003526f0 [ 247.043740][T12803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.051710][T12803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.059682][T12803] Call Trace: [ 247.062975][T12803] [ 247.065918][T12803] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 247.071560][T12803] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 247.077103][T12803] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 247.082641][T12803] ? __phys_addr+0xba/0x170 [ 247.087141][T12803] ? __kasan_kmalloc_large+0x85/0xa0 [ 247.092423][T12803] ? rcu_is_watching+0x15/0xb0 [ 247.097184][T12803] ? rcu_is_watching+0x15/0xb0 [ 247.101960][T12803] ? trace_kmalloc+0x1f/0xd0 [ 247.106550][T12803] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 247.113138][T12803] ? __build_skb_around+0x257/0x3e0 [ 247.118335][T12803] smc_diag_dump+0x59/0xa0 [ 247.122754][T12803] netlink_dump+0x62d/0xe20 [ 247.127267][T12803] ? __pfx_netlink_dump+0x10/0x10 [ 247.132293][T12803] ? netlink_lookup+0x30/0x200 [ 247.137055][T12803] ? netlink_lookup+0x30/0x200 [ 247.141816][T12803] ? netlink_lookup+0x30/0x200 [ 247.146588][T12803] __netlink_dump_start+0x5cb/0x7e0 [ 247.151785][T12803] smc_diag_handler_dump+0x178/0x210 [ 247.157072][T12803] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 247.162875][T12803] ? __pfx_smc_diag_dump+0x10/0x10 [ 247.167992][T12803] ? sock_diag_lock_handler+0x19/0x290 [ 247.173447][T12803] ? sock_diag_lock_handler+0x19/0x290 [ 247.178924][T12803] sock_diag_rcv_msg+0x4cc/0x600 [ 247.183873][T12803] netlink_rcv_skb+0x208/0x470 [ 247.188640][T12803] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 247.194100][T12803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.199394][T12803] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.204619][T12803] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.209825][T12803] netlink_unicast+0x75b/0x8d0 [ 247.214594][T12803] netlink_sendmsg+0x805/0xb30 [ 247.219376][T12803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.224670][T12803] ? aa_sock_msg_perm+0x94/0x160 [ 247.229607][T12803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.234904][T12803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.240187][T12803] __sock_sendmsg+0x21c/0x270 [ 247.244865][T12803] ____sys_sendmsg+0x505/0x830 [ 247.249638][T12803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.254947][T12803] ? import_iovec+0x74/0xa0 [ 247.259466][T12803] ___sys_sendmsg+0x21f/0x2a0 [ 247.264157][T12803] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.269378][T12803] ? __fget_files+0x2a/0x420 [ 247.273979][T12803] ? __fget_files+0x3a0/0x420 [ 247.278663][T12803] __x64_sys_sendmsg+0x19b/0x260 [ 247.283609][T12803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.289089][T12803] ? do_syscall_64+0xba/0x210 [ 247.293772][T12803] do_syscall_64+0xf6/0x210 [ 247.298267][T12803] ? clear_bhb_loop+0x60/0xb0 [ 247.302938][T12803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.308828][T12803] RIP: 0033:0x7f504d58e969 [ 247.313240][T12803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.332838][T12803] RSP: 002b:00007f504e4c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.341248][T12803] RAX: ffffffffffffffda RBX: 00007f504d7b6080 RCX: 00007f504d58e969 [ 247.349220][T12803] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000012 [ 247.357190][T12803] RBP: 00007f504d610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 247.365152][T12803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.373114][T12803] R13: 0000000000000000 R14: 00007f504d7b6080 R15: 00007ffe312e4228 [ 247.381085][T12803] [ 247.384092][T12803] Modules linked in: [ 247.388444][T12803] ---[ end trace 0000000000000000 ]--- [ 247.393928][T12803] RIP: 0010:smc_diag_dump_proto+0x4d0/0x1f80 [ 247.400546][T12803] Code: 80 3c 2f 00 74 08 48 89 df e8 bc 0b 1a f7 4c 8b 23 4d 85 e4 0f 84 22 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 91 0b 1a f7 4d 8b 2c 24 49 83 c5 [ 247.420214][T12803] RSP: 0018:ffffc90003bdefe0 EFLAGS: 00010206 [ 247.426307][T12803] RAX: 00000000000a2403 RBX: ffff88805bfb4160 RCX: ffff88802d6f1e00 [ 247.434356][T12803] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 247.442344][T12803] RBP: ffffc90003bdf350 R08: ffff88805bfb3c5f R09: 1ffff1100b7f678b [ 247.450335][T12803] R10: dffffc0000000000 R11: ffffed100b7f678c R12: 0000000000512018 [ 247.458320][T12803] R13: dffffc0000000000 R14: ffff88805bfb3c00 R15: 1ffff1100b7f682c [ 247.466313][T12803] FS: 00007f504e4c16c0(0000) GS:ffff8881260b2000(0000) knlGS:0000000000000000 [ 247.475281][T12803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.481880][T12803] CR2: 000020000000e000 CR3: 0000000031032000 CR4: 00000000003526f0 [ 247.489867][T12803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.497867][T12803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 247.505872][T12803] Kernel panic - not syncing: Fatal exception [ 247.512227][T12803] Kernel Offset: disabled [ 247.516544][T12803] Rebooting in 86400 seconds..