last executing test programs: 7.767716346s ago: executing program 3 (id=4087): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.460937159s ago: executing program 3 (id=4092): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback, 0x23}, 0x1c) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x44810, 0x0, 0x0) 6.333551s ago: executing program 3 (id=4094): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0xd, 0x7) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/20, 0x14}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.109059135s ago: executing program 3 (id=4098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(0x0, r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) recvmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 5.879211592s ago: executing program 3 (id=4102): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$tipc(r1, 0x0, 0x0) 4.824665335s ago: executing program 2 (id=4116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={r2, 0x401}, 0x8) 4.267311045s ago: executing program 3 (id=4121): socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4840) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES16, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e34000014000700ff02000000000000000000000000000108000800e0000002050004000100000008000b00", @ANYRES32=0x0, @ANYBLOB="e7abba4dabfcb486dc21be4cf3251fc8f178da3d1eb5c31dcd409618e995a69f72418c9a6c8a656a093d33a14e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x110) r5 = socket(0x10, 0x3, 0xc) write(r5, &(0x7f0000000040), 0x0) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 4.142569421s ago: executing program 4 (id=4123): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008050}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000003, 0xfffffffffffffffc}, 0x0, 0x0) 3.87886057s ago: executing program 2 (id=4124): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) 3.556218023s ago: executing program 2 (id=4125): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bic\x00', 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 3.554838176s ago: executing program 1 (id=4126): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604fd318001c0600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001efc1f26849aed9696e0a1b8d3550437eb84501a141654374591036bffcc44d", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000090780000fe06f989fc2e0802"], 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000004020303000000000000000000000000020800010002000030"], 0x1c}}, 0x8080) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x1, 0xff, 0x2}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r2, 0x8b32, &(0x7f0000000040)) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001b80)={0x2, 0x0, @start={0x0, 0x1, "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", "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"}, [0x4, 0x9, 0x40000007, 0xfffffffffffffffd, 0x3, 0x0, 0x2, 0x7, 0x5, 0x200, 0x9, 0x2a5a, 0x1, 0x2, 0x0, 0x9, 0x9, 0x9, 0x7, 0x100000000, 0x10001, 0x1, 0x0, 0x7, 0x10000, 0x9, 0x20a, 0x9, 0x4, 0x8, 0xf5, 0x9, 0x8, 0xfffffffffffffff8, 0x5, 0xb, 0xc, 0x2, 0x0, 0x25, 0x80000001, 0xd, 0x81, 0xca, 0x8258, 0x9, 0x1, 0x2, 0x4, 0x1, 0x70d2, 0x2, 0x1, 0x4b7, 0x6, 0x2, 0x8, 0x8, 0x2, 0x7, 0x9, 0x5, 0x0, 0xffff]}) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000080)="09956bf02d") sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000072009fb300000000fedbdf2507000000", @ANYRES32=r6], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x36, 0xaf, 0xf, 0x40, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x10, 0x40, 0x80, 0xfffff000}}) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x6, 0xd, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @remote, {[@ssrr={0x89, 0xf, 0xbf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local]}, @generic={0x86, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800040}, 0xc, &(0x7f00000004c0)={&(0x7f00000017c0)={0x208, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000}, 0xc800) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000280)="c8a3d5dbba08361b0ecbe9a4351583c23b83528e81990ec1b0b22fd9a9330cac807ce3cc463bc1c871512ccc0132687cf8a91e0bf9b22a8ad61b6061d0080c75a20a4740bca0e8e9ca565253ea1fd2080ff49ae7cd5b80d117bffce72e20a59f4b0fa59b95a5370beec839e7eaeb9dff1470fc32698d045a4433ebe2c2c8dd04e3b0254fd38c5b786e02ca8df8ee2cdd53d7d8b7e59e32da0a9ce5909b0e93498ef11a74f542", 0xa6}, {&(0x7f0000000340)="ea0b35c07baded54bbc90abb9a053db7d05cbf88bd17f62add28cc7bf6ec661f1acd", 0x22}, {&(0x7f00000025c0)="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", 0x1000}, {&(0x7f0000000380)="50713e2a2f576236c88c3ed43c9eef424e07e7ce7b5ab1c0ca46979187a919ce71fe9f69ea2b910d42b4c7498dda54f89a17bd5c75e55f04675f74fedc0cd90bdbccddda1c9f2a5a63642a3ec7d48657cc6a20bbffbf131bfb881d342b4e9b9c12f3a13fd5cb9613fd12bb774595afddad3507f23cb584370675bb96215d5fa38777ebf0f4f0a84f41d70e322ec939c5388193f269be64af28943913fdd7735f930ab517fd5d48d432c0747d966ab70e1b5fbda1e4a12e11fd019f185b60b9ba30dfbedbfd89c7d0999b9a", 0xcb}, {&(0x7f0000000480)="952e5c5244a25a7b7a9c37f3d5ae36bea91a29551a5a4e1b823105fb", 0x1c}, {0x0}, {&(0x7f00000004c0)="302f867d2eca537b774d9e9f400c25371a26fb71c8381e9081", 0x19}], 0x7, &(0x7f0000001740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc4}}], 0x68}, 0x4004050) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r11) shutdown(r0, 0x1) 3.496882412s ago: executing program 2 (id=4127): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0xf8, 0x7, 0x1, 0x72e}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.430898963s ago: executing program 1 (id=4128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) 3.321156175s ago: executing program 1 (id=4129): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000640)="980b", 0x2}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 3.187852015s ago: executing program 4 (id=4130): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x34, 0x701, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$inet6(0xa, 0x3, 0x3ff) unshare(0x6a040000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x20000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20048010) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x2}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) socketpair(0x1a, 0x1, 0x11, &(0x7f0000000040)) 2.520223012s ago: executing program 2 (id=4136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) unshare(0x70000000) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14}]}]}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r4, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x80}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4010}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.372887606s ago: executing program 0 (id=4137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.370703396s ago: executing program 1 (id=4138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) 2.272365809s ago: executing program 0 (id=4139): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.248099753s ago: executing program 1 (id=4140): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xc1, 0x600}]}}, {"b81e06d5394ecb2b54165c2e99bcf9bd87"}}}}}, 0x57) 2.000868939s ago: executing program 0 (id=4141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) 1.841510237s ago: executing program 0 (id=4142): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 1.822521499s ago: executing program 4 (id=4143): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0xffff, 0x0, 0x6, 0x55, 0xb66e, 0x7c}, 0x9c) 1.608761146s ago: executing program 0 (id=4144): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) sendfile(r6, r7, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 1.521367458s ago: executing program 2 (id=4145): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$rds(0x15, 0x5, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x94) sendmmsg$inet6(r1, &(0x7f0000000440), 0x0, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl(r3, 0x8b22, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r1], 0x1000f) 1.366313048s ago: executing program 1 (id=4146): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 775.573271ms ago: executing program 4 (id=4147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 271.205512ms ago: executing program 0 (id=4148): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 117.83054ms ago: executing program 4 (id=4149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 0s ago: executing program 4 (id=4150): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x29, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4844}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x540, 0x180, 0x180, 0x288, 0x98, 0x0, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x61}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{}, {0xc}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0xffffff00, 0xffffff00, 'veth1_vlan\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x8, 0x0, 0x5c}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x6]}}}, @common=@addrtype={{}, {0x100, 0x900}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0x9}}}, {{@ip={@multicast1, @private, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00'}, 0x0, 0xe8, 0x110}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'lo\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298b2d52f8acf654) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140), 0x4) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x8, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) kernel console output (not intermixed with test programs): is unknown, defaulting to 1000 [ 483.857590][T14403] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 484.716539][T14443] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 484.824096][T14441] syzkaller1: entered promiscuous mode [ 484.829625][T14441] syzkaller1: entered allmulticast mode [ 485.116006][T14448] netlink: 'syz.0.1921': attribute type 10 has an invalid length. [ 485.180334][T14448] __nla_validate_parse: 4 callbacks suppressed [ 485.180354][T14448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1921'. [ 485.227845][T14453] lo speed is unknown, defaulting to 1000 [ 485.283439][T14453] lo speed is unknown, defaulting to 1000 [ 485.506808][T14462] syzkaller1: entered promiscuous mode [ 485.534806][T14462] syzkaller1: entered allmulticast mode [ 485.942010][T14472] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 486.005571][T14474] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300 [ 486.604107][T14494] netlink: 'syz.4.1939': attribute type 10 has an invalid length. [ 486.653493][T14494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1939'. [ 486.670320][T14496] lo speed is unknown, defaulting to 1000 [ 486.739845][T14494] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.903403][T14496] lo speed is unknown, defaulting to 1000 [ 487.794312][T14516] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1945'. [ 488.304654][T14532] tipc: Resetting bearer [ 488.659749][T14547] lo speed is unknown, defaulting to 1000 [ 488.691555][T14544] netlink: 'syz.1.1955': attribute type 10 has an invalid length. [ 488.699432][T14544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1955'. [ 488.742522][T14547] lo speed is unknown, defaulting to 1000 [ 488.925969][T14558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'. [ 488.962102][T14560] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1958'. [ 488.978597][T14563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1959'. [ 490.113171][T14593] lo speed is unknown, defaulting to 1000 [ 490.128120][T14600] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.131309][T14593] lo speed is unknown, defaulting to 1000 [ 490.760134][ C0] bridge0: port 1(syz_tun) entered learning state [ 491.291176][T14635] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 491.343976][T14635] team0: Device geneve1 failed to register rx_handler [ 491.713837][T14641] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 491.734708][T14641] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 491.755072][T14641] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1984'. [ 495.171422][T14734] syzkaller1: entered promiscuous mode [ 495.190530][T14734] syzkaller1: entered allmulticast mode [ 495.378989][T14738] syzkaller1: entered promiscuous mode [ 495.420226][T14738] syzkaller1: entered allmulticast mode [ 497.112088][T14778] netlink: 'syz.1.2030': attribute type 4 has an invalid length. [ 497.682983][T14792] openvswitch: netlink: Key type 94 is out of range max 32 [ 500.632849][T14877] tipc: Bearer : already 2 bearers with priority 10 [ 500.663159][T14877] tipc: Bearer : trying with adjusted priority [ 500.710612][T14877] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 501.106045][T14891] netlink: 'syz.4.2064': attribute type 10 has an invalid length. [ 501.160164][T14891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2064'. [ 501.432903][T14898] lo speed is unknown, defaulting to 1000 [ 501.472254][T14898] lo speed is unknown, defaulting to 1000 [ 501.525851][T14903] netlink: 'syz.3.2067': attribute type 4 has an invalid length. [ 503.406161][T14938] netlink: 'syz.4.2080': attribute type 4 has an invalid length. [ 503.574248][T14943] netlink: 'syz.3.2081': attribute type 4 has an invalid length. [ 503.734787][T14948] netlink: 'syz.3.2084': attribute type 10 has an invalid length. [ 503.770791][T14948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2084'. [ 503.790652][T14948] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 504.035038][T14956] lo speed is unknown, defaulting to 1000 [ 504.052393][T14956] lo speed is unknown, defaulting to 1000 [ 504.777723][T14976] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2092'. [ 505.342213][T14992] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2097'. [ 505.385567][T14989] lo speed is unknown, defaulting to 1000 [ 505.408120][T14989] lo speed is unknown, defaulting to 1000 [ 505.821611][T15006] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2101'. [ 505.848873][T15008] netlink: 'syz.4.2102': attribute type 10 has an invalid length. [ 505.870126][T15008] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2102'. [ 506.120110][ C0] bridge0: port 1(syz_tun) entered forwarding state [ 506.126801][ C0] bridge0: topology change detected, propagating [ 506.163987][T15016] lo speed is unknown, defaulting to 1000 [ 506.209560][T15016] lo speed is unknown, defaulting to 1000 [ 507.055717][T15027] lo speed is unknown, defaulting to 1000 [ 507.096485][T15027] lo speed is unknown, defaulting to 1000 [ 507.197508][T15031] netlink: 'syz.3.2105': attribute type 4 has an invalid length. [ 507.587629][T15035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2107'. [ 507.925519][T15049] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2113'. [ 508.365612][T15062] netlink: 'syz.4.2116': attribute type 4 has an invalid length. [ 508.446506][T15066] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2118'. [ 508.497329][T15071] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 508.566012][T15071] bond4: (slave gretap2): making interface the new active one [ 508.575267][T15071] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 508.731536][T15077] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2124'. [ 508.939023][T15084] netlink: 'syz.3.2126': attribute type 10 has an invalid length. [ 508.962462][T15084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2126'. [ 508.990465][T15084] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 509.127789][T15093] gtp0: entered promiscuous mode [ 509.237100][T15095] lo speed is unknown, defaulting to 1000 [ 509.288754][T15095] lo speed is unknown, defaulting to 1000 [ 509.300448][T15098] netlink: 'syz.0.2131': attribute type 4 has an invalid length. [ 509.570347][T15108] lo speed is unknown, defaulting to 1000 [ 509.578273][T15108] lo speed is unknown, defaulting to 1000 [ 510.363732][T15121] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2138'. [ 512.380068][T15166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2149'. [ 513.250856][T15187] netlink: 'syz.3.2155': attribute type 1 has an invalid length. [ 513.379219][T15187] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.485040][T15190] bond5: (slave ip6gretap2): making interface the new active one [ 513.531259][T15190] bond5: (slave ip6gretap2): Enslaving as an active interface with an up link [ 514.445912][T15221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'. [ 515.952742][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 516.159145][T15266] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.274830][T15268] netdevsim0: entered promiscuous mode [ 517.469837][T15301] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2195'. [ 518.668696][T15327] netlink: 'syz.2.2205': attribute type 4 has an invalid length. [ 518.741843][T15327] netlink: 'syz.2.2205': attribute type 4 has an invalid length. [ 519.992309][T15365] netlink: 'syz.1.2220': attribute type 4 has an invalid length. [ 520.055158][T15368] SET target dimension over the limit! [ 520.301801][T15372] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 520.501674][T15377] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 520.527840][T15377] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2227'. [ 520.573529][T15376] lo speed is unknown, defaulting to 1000 [ 520.626376][T15376] lo speed is unknown, defaulting to 1000 [ 520.809116][T15389] lo speed is unknown, defaulting to 1000 [ 520.845135][T15389] lo speed is unknown, defaulting to 1000 [ 521.000989][T15399] netlink: 'syz.3.2232': attribute type 4 has an invalid length. [ 521.093998][T15401] netlink: 'syz.0.2233': attribute type 4 has an invalid length. [ 521.196371][T15406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'. [ 523.224011][T15440] netlink: 'syz.1.2245': attribute type 4 has an invalid length. [ 523.556369][T15454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2249'. [ 523.716532][T15459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2251'. [ 524.764373][T15482] lo speed is unknown, defaulting to 1000 [ 524.895415][T15482] lo speed is unknown, defaulting to 1000 [ 524.978142][T15485] lo speed is unknown, defaulting to 1000 [ 525.054668][T15485] lo speed is unknown, defaulting to 1000 [ 525.131217][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2262'. [ 525.508867][T15503] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 525.554142][T15505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2267'. [ 526.619593][T15523] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2274'. [ 527.327358][T15536] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 527.360097][T15540] lo speed is unknown, defaulting to 1000 [ 527.373212][T15540] lo speed is unknown, defaulting to 1000 [ 527.648560][T15553] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2282'. [ 528.691571][T15576] lo speed is unknown, defaulting to 1000 [ 528.775032][T15576] lo speed is unknown, defaulting to 1000 [ 528.800698][T15573] lo speed is unknown, defaulting to 1000 [ 528.854902][T15573] lo speed is unknown, defaulting to 1000 [ 528.965298][T15591] SET target dimension over the limit! [ 529.377409][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2298'. [ 529.393192][T15600] bond4: (slave gretap2): Releasing active interface [ 529.479229][T15601] netlink: 'syz.1.2298': attribute type 1 has an invalid length. [ 529.489177][T15601] netlink: 'syz.1.2298': attribute type 2 has an invalid length. [ 529.510297][T15601] netlink: 'syz.1.2298': attribute type 3 has an invalid length. [ 529.825986][T15607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 530.152869][T15615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2303'. [ 530.496864][T15620] bridge0: port 1(syz_tun) entered blocking state [ 530.519032][T15620] bridge0: port 1(syz_tun) entered disabled state [ 530.547548][T15620] syz_tun: entered allmulticast mode [ 530.568613][T15620] syz_tun: entered promiscuous mode [ 531.012527][T15624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 531.053969][T15624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2306'. [ 531.267120][T15626] lo speed is unknown, defaulting to 1000 [ 531.293685][T15626] lo speed is unknown, defaulting to 1000 [ 531.393849][T15632] lo speed is unknown, defaulting to 1000 [ 531.424383][T15632] lo speed is unknown, defaulting to 1000 [ 531.588808][T15635] lo speed is unknown, defaulting to 1000 [ 531.622851][T15635] lo speed is unknown, defaulting to 1000 [ 532.568056][T15650] netlink: 'syz.2.2312': attribute type 4 has an invalid length. [ 533.969224][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2316'. [ 534.412807][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 534.931077][T15689] lo speed is unknown, defaulting to 1000 [ 534.948191][T15689] lo speed is unknown, defaulting to 1000 [ 535.074642][T15690] lo speed is unknown, defaulting to 1000 [ 535.097436][T15690] lo speed is unknown, defaulting to 1000 [ 535.846048][T15715] lo speed is unknown, defaulting to 1000 [ 535.857659][T15715] lo speed is unknown, defaulting to 1000 [ 536.509673][T15725] lo speed is unknown, defaulting to 1000 [ 536.553715][T15725] lo speed is unknown, defaulting to 1000 [ 539.162209][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 539.451134][T15757] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2348'. [ 539.590398][T15765] lo speed is unknown, defaulting to 1000 [ 539.609205][T15765] lo speed is unknown, defaulting to 1000 [ 539.755395][T15769] lo speed is unknown, defaulting to 1000 [ 539.785773][T15769] lo speed is unknown, defaulting to 1000 [ 539.926265][T15776] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 541.323643][T15795] bridge0: port 1(syz_tun) entered blocking state [ 541.332982][T15795] bridge0: port 1(syz_tun) entered disabled state [ 541.339689][T15795] syz_tun: entered allmulticast mode [ 541.349218][T15795] syz_tun: entered promiscuous mode [ 542.132798][T15803] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2362'. [ 542.382997][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2364'. [ 542.487849][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 542.559670][T15819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.845506][T15819] bond0 (unregistering): Released all slaves [ 543.283661][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2374'. [ 543.621370][T15851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2378'. [ 543.780537][T15858] tipc: Enabled bearer , priority 0 [ 543.915757][T15858] syzkaller0: entered promiscuous mode [ 543.921445][T15858] syzkaller0: entered allmulticast mode [ 543.932763][T15858] tipc: Resetting bearer [ 544.001598][T15868] netlink: 'syz.2.2381': attribute type 10 has an invalid length. [ 544.132216][T15857] tipc: Resetting bearer [ 544.352853][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 546.294249][T15857] tipc: Disabling bearer [ 546.392355][T15896] lo speed is unknown, defaulting to 1000 [ 546.402959][T15896] lo speed is unknown, defaulting to 1000 [ 546.652712][T15901] syzkaller0: entered promiscuous mode [ 546.668594][T15901] syzkaller0: entered allmulticast mode [ 546.731364][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 550.111696][T15912] lo speed is unknown, defaulting to 1000 [ 550.132145][T15912] lo speed is unknown, defaulting to 1000 [ 550.139110][T15920] lo speed is unknown, defaulting to 1000 [ 550.159361][T15920] lo speed is unknown, defaulting to 1000 [ 550.787750][T15938] lo speed is unknown, defaulting to 1000 [ 550.867609][T15938] lo speed is unknown, defaulting to 1000 [ 551.404860][T15953] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2408'. [ 552.804396][T15987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2417'. [ 553.136647][T15995] syzkaller0: entered promiscuous mode [ 553.154645][T15995] syzkaller0: entered allmulticast mode [ 553.373476][T16005] netlink: 'syz.1.2424': attribute type 11 has an invalid length. [ 553.736911][T16016] lo speed is unknown, defaulting to 1000 [ 553.782644][T16016] lo speed is unknown, defaulting to 1000 [ 554.411332][T16029] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2431'. [ 555.165907][T16055] lo: entered allmulticast mode [ 555.372046][T16052] lo: left allmulticast mode [ 556.275585][T16088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2443'. [ 557.795529][T16096] veth0: entered promiscuous mode [ 557.815585][T16098] pim6reg1: entered promiscuous mode [ 557.815602][T16096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'. [ 557.844661][T16098] pim6reg1: entered allmulticast mode [ 557.894750][T16096] veth0 (unregistering): left promiscuous mode [ 558.162758][T16110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2449'. [ 558.603688][T16134] syz_tun: left allmulticast mode [ 558.608908][T16134] syz_tun: left promiscuous mode [ 558.616839][T16134] bridge0: port 1(syz_tun) entered disabled state [ 558.645333][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2454'. [ 559.111538][T16151] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2464'. [ 559.192802][T16153] lo speed is unknown, defaulting to 1000 [ 559.202793][T16153] lo speed is unknown, defaulting to 1000 [ 559.947873][T16177] bond5: (slave ip6gretap2): Releasing active interface [ 560.515354][T16185] lo speed is unknown, defaulting to 1000 [ 560.546021][T16185] lo speed is unknown, defaulting to 1000 [ 561.033967][T16195] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2475'. [ 561.280946][T16203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2476'. [ 561.513460][T16210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 561.757368][T16216] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2482'. [ 562.670793][T16238] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2489'. [ 563.107754][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2491'. [ 563.263495][T16264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2495'. [ 563.494844][T16269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 564.018951][T16285] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2504'. [ 564.365902][T16291] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2506'. [ 564.458564][T16296] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 564.775880][T16305] SET target dimension over the limit! [ 564.798151][T16300] syzkaller0: entered promiscuous mode [ 564.855418][T16300] syzkaller0: entered allmulticast mode [ 565.653736][T16331] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2519'. [ 567.461523][T16345] SET target dimension over the limit! [ 567.612334][T16354] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2526'. [ 567.829157][T16356] lo speed is unknown, defaulting to 1000 [ 567.855120][T16356] lo speed is unknown, defaulting to 1000 [ 568.084930][T16361] netlink: 'syz.2.2527': attribute type 10 has an invalid length. [ 568.105154][T16362] lo speed is unknown, defaulting to 1000 [ 568.153499][T16361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2527'. [ 568.213729][T16361] bridge0: port 1(0!) entered blocking state [ 568.238962][T16361] bridge0: port 1(0!) entered disabled state [ 568.256638][T16361] !: entered allmulticast mode [ 568.264899][T16361] !: left allmulticast mode [ 568.269768][T16361] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 568.306626][T16362] lo speed is unknown, defaulting to 1000 [ 568.311818][T16365] tipc: Enabling of bearer rejected, failed to enable media [ 570.433910][T16377] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2531'. [ 570.519713][T16387] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2534'. [ 570.695363][T16393] netlink: 'syz.0.2536': attribute type 1 has an invalid length. [ 570.795552][T16399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2536'. [ 570.881932][T16396] bond0: (slave geneve4): making interface the new active one [ 570.899290][T16396] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 570.921493][T16403] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 570.955326][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.971149][ T1317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.979479][ T1317] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 570.994282][T16401] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 571.054064][T16403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.080180][T16404] syzkaller0: entered promiscuous mode [ 571.085699][T16404] syzkaller0: entered allmulticast mode [ 571.108517][T16405] vlan0: entered promiscuous mode [ 571.116965][T16405] bond6: entered promiscuous mode [ 571.126680][T16405] vlan0: entered allmulticast mode [ 571.132487][T16405] bond6: entered allmulticast mode [ 571.150168][ T1317] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.168734][ T1317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 571.460879][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2542'. [ 571.471268][T16420] team0: Mode changed to "broadcast" [ 571.510741][T16420] vlan0: left allmulticast mode [ 571.526169][T16420] bond6: left allmulticast mode [ 571.559713][T16420] team0: Port device vlan0 added [ 571.614658][T16418] vlan2: entered promiscuous mode [ 572.390287][T16441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2548'. [ 572.564184][T16455] gtp1: entered promiscuous mode [ 572.618834][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2553'. [ 572.714280][T16457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 572.721604][T16457] IPv6: NLM_F_CREATE should be set when creating new route [ 572.758219][T16457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 572.765598][T16457] IPv6: NLM_F_CREATE should be set when creating new route [ 573.053646][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 573.192543][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2559'. [ 574.032204][T16486] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2564'. [ 574.195539][T16491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.202909][T16491] IPv6: NLM_F_CREATE should be set when creating new route [ 574.250877][T16491] lo: entered allmulticast mode [ 574.278790][T16491] tunl0: entered allmulticast mode [ 574.325935][T16491] gre0: entered allmulticast mode [ 574.737546][T16491] gretap0: entered allmulticast mode [ 574.785588][T16491] erspan0: entered allmulticast mode [ 574.811819][T16491] ip_vti0: entered allmulticast mode [ 574.834867][T16491] ip6_vti0: entered allmulticast mode [ 574.851458][T16491] sit0: entered allmulticast mode [ 574.890203][T16491] ip6tnl0: entered allmulticast mode [ 574.972278][T16491] ip6gre0: entered allmulticast mode [ 575.050137][T16491] ip6gretap0: entered allmulticast mode [ 575.062634][T16491] bridge0: entered allmulticast mode [ 575.110691][T16491] vcan0: entered allmulticast mode [ 575.139165][T16491] bond0: entered allmulticast mode [ 575.157668][T16491] team0: entered allmulticast mode [ 575.170929][T16491] !: entered allmulticast mode [ 575.197916][T16491] nlmon0: entered allmulticast mode [ 575.205800][T16491] caif0: entered allmulticast mode [ 575.220197][T16491] vxcan0: entered allmulticast mode [ 575.225686][T16491] vxcan1: entered allmulticast mode [ 575.245933][T16491] veth0: entered allmulticast mode [ 575.255068][T16491] wg0: entered allmulticast mode [ 575.270270][T16491] wg1: entered allmulticast mode [ 575.275450][T16491] wg2: entered allmulticast mode [ 575.283120][T16491] veth0_to_bridge: entered allmulticast mode [ 575.299010][T16491] bridge_slave_0: left promiscuous mode [ 575.304949][T16491] bridge_slave_0: entered allmulticast mode [ 575.320181][T16491] veth1_to_bridge: entered allmulticast mode [ 575.326407][T16491] bridge_slave_1: entered allmulticast mode [ 575.350488][T16491] bond_slave_0: entered allmulticast mode [ 575.356458][T16491] veth1_to_bond: entered allmulticast mode [ 575.364999][T16491] bond_slave_1: entered allmulticast mode [ 575.371103][T16491] veth0_to_team: entered allmulticast mode [ 575.377127][T16491] team_slave_0: entered allmulticast mode [ 575.400176][T16491] veth1_to_team: entered allmulticast mode [ 575.406110][T16491] team_slave_1: entered allmulticast mode [ 575.413774][T16491] veth0_to_batadv: entered allmulticast mode [ 575.419896][T16491] batadv_slave_0: entered allmulticast mode [ 575.436293][T16491] veth1_to_batadv: entered allmulticast mode [ 575.446778][T16491] batadv_slave_1: entered allmulticast mode [ 575.453112][T16491] xfrm0: entered allmulticast mode [ 575.458443][T16491] veth0_to_hsr: entered allmulticast mode [ 575.464619][T16491] hsr_slave_0: entered allmulticast mode [ 575.470521][T16491] veth1_to_hsr: entered allmulticast mode [ 575.476447][T16491] hsr_slave_1: entered allmulticast mode [ 575.482521][T16491] hsr0: entered allmulticast mode [ 575.487772][T16491] veth1_virt_wifi: entered allmulticast mode [ 575.494157][T16491] veth0_virt_wifi: entered allmulticast mode [ 575.501388][T16491] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 575.523292][T16491] veth1_macvtap: entered allmulticast mode [ 575.529629][T16491] veth0_macvtap: entered allmulticast mode [ 575.536082][T16491] macvtap0: entered allmulticast mode [ 575.541940][T16491] macsec0: entered allmulticast mode [ 575.547430][T16491] geneve0: entered allmulticast mode [ 575.553934][T16491] geneve1: entered allmulticast mode [ 575.559836][T16491] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 575.574214][T16491] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 575.605552][T16491] geneve2: entered allmulticast mode [ 575.613288][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2571'. [ 575.616857][T16491] geneve3: entered allmulticast mode [ 575.628703][T16491] bridge1: entered allmulticast mode [ 575.634248][T16491] bridge2: entered allmulticast mode [ 575.639673][T16491] syztnl1: entered allmulticast mode [ 575.645206][T16491] bond1: entered allmulticast mode [ 575.650613][T16491] gretap1: entered allmulticast mode [ 575.656003][T16491] ip6gretap1: entered allmulticast mode [ 575.661753][T16491] netdevsim netdevsim2 eth0: entered allmulticast mode [ 575.669040][T16491] netdevsim netdevsim2 eth1: entered allmulticast mode [ 575.676165][T16491] netdevsim netdevsim2 eth2: entered allmulticast mode [ 575.683466][T16491] netdevsim netdevsim2 eth3: entered allmulticast mode [ 575.690676][T16491] bridge3: entered allmulticast mode [ 575.696047][T16491] bond2: entered allmulticast mode [ 575.701393][T16491] hsr1: entered allmulticast mode [ 575.706501][T16491] macvlan0: entered allmulticast mode [ 575.712111][T16491] macvtap1: entered allmulticast mode [ 575.717595][T16491] veth2: entered allmulticast mode [ 575.723009][T16491] veth3: entered allmulticast mode [ 575.728959][T16491] ip6gretap2: entered allmulticast mode [ 575.740341][T16491] bridge4: entered allmulticast mode [ 575.745793][T16491] veth4: entered allmulticast mode [ 575.755114][T16491] veth5: entered allmulticast mode [ 575.760968][T16491] sit1: entered allmulticast mode [ 575.771536][T16491] bridge5: entered allmulticast mode [ 575.786326][T16491] : entered allmulticast mode [ 575.791440][T16491] veth6: entered allmulticast mode [ 575.796649][T16491] veth7: entered allmulticast mode [ 575.802582][T16491] macsec1: left promiscuous mode [ 575.807650][T16491] veth8: entered allmulticast mode [ 575.813380][T16491] veth9: entered allmulticast mode [ 575.819042][T16491] sit2: entered allmulticast mode [ 575.830507][T16491] gre1: entered allmulticast mode [ 575.835775][T16491] bridge6: left promiscuous mode [ 575.843973][T16491] batadv0: entered allmulticast mode [ 575.859878][T16491] macsec2: entered allmulticast mode [ 575.865973][T16491] ipvlan0: entered allmulticast mode [ 575.875972][T16491] vlan0: entered allmulticast mode [ 575.881424][T16491] macsec3: entered allmulticast mode [ 575.887278][T16491] gtp0: entered allmulticast mode [ 575.898121][T16491] ip6gre1: entered allmulticast mode [ 575.912313][T16491] ip6gre2: entered allmulticast mode [ 575.927705][T16491] sit3: entered allmulticast mode [ 575.974542][T16516] bridge6: entered promiscuous mode [ 576.031339][T16519] macvtap1: entered promiscuous mode [ 576.060204][T16519] macvtap1: entered allmulticast mode [ 576.121484][T16501] lo speed is unknown, defaulting to 1000 [ 576.129056][T16501] lo speed is unknown, defaulting to 1000 [ 576.949870][T16541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2578'. [ 577.168676][T16546] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2579'. [ 578.473894][T16577] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2590'. [ 578.836940][T16586] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2593'. [ 579.364344][T16595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.514197][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2595'. [ 579.804628][T16604] lo speed is unknown, defaulting to 1000 [ 579.812870][T16604] lo speed is unknown, defaulting to 1000 [ 580.157858][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2602'. [ 580.168874][T16612] netlink: 'syz.1.2602': attribute type 7 has an invalid length. [ 580.183079][T16612] netlink: 'syz.1.2602': attribute type 8 has an invalid length. [ 580.220421][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2602'. [ 580.901999][T16632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2608'. [ 580.911433][T16631] lo speed is unknown, defaulting to 1000 [ 580.959763][T16631] lo speed is unknown, defaulting to 1000 [ 581.330728][T16639] netlink: 'syz.2.2611': attribute type 4 has an invalid length. [ 581.477786][T16643] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 581.718216][T16655] netlink: 'syz.4.2616': attribute type 10 has an invalid length. [ 584.036872][T16664] sch_fq: defrate 0 ignored. [ 586.263871][T16683] syz_tun (unregistering): left allmulticast mode [ 586.274027][T16683] syz_tun (unregistering): left promiscuous mode [ 586.283963][T16683] bridge0: port 1(syz_tun) entered disabled state [ 586.436729][T16690] netlink: 'syz.1.2625': attribute type 2 has an invalid length. [ 586.460574][T16690] netlink: 'syz.1.2625': attribute type 2 has an invalid length. [ 586.491241][T16691] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2626'. [ 586.541240][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 586.779419][T16705] lo speed is unknown, defaulting to 1000 [ 586.861417][T16705] lo speed is unknown, defaulting to 1000 [ 587.845249][T16720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.285875][T16730] team0: Port device vlan0 removed [ 588.385735][T16736] team0: Unable to change to the same mode the team is in [ 588.434574][T16736] team0: Port device vlan0 added [ 588.473772][T16736] netlink: 'syz.3.2636': attribute type 3 has an invalid length. [ 588.507683][T16736] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2636'. [ 588.646003][T16741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2638'. [ 588.842371][T16745] netlink: 'syz.3.2640': attribute type 4 has an invalid length. [ 589.021681][T16750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2642'. [ 589.048843][T16750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.059616][T16747] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2641'. [ 590.142351][T16774] bond0: (slave geneve4): Releasing active interface [ 590.187804][ T59] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 590.217294][ T59] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 590.244795][ T59] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 590.265041][ T59] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 591.878529][T16800] lo speed is unknown, defaulting to 1000 [ 591.907329][T16800] lo speed is unknown, defaulting to 1000 [ 593.305199][ T3487] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.325776][ T3487] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.350038][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.358282][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 593.622181][T16818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2663'. [ 593.852284][T16741] Set syz1 is full, maxelem 65536 reached [ 593.893053][T16831] macvtap2: entered promiscuous mode [ 593.908651][T16831] hsr0: entered promiscuous mode [ 593.916938][T16831] macvtap2: entered allmulticast mode [ 593.930137][T16831] hsr0: entered allmulticast mode [ 593.942274][T16831] hsr_slave_0: entered allmulticast mode [ 593.948064][T16831] hsr_slave_1: entered allmulticast mode [ 593.965479][T16831] hsr0: left allmulticast mode [ 593.973349][T16831] hsr_slave_0: left allmulticast mode [ 593.981930][T16831] hsr_slave_1: left allmulticast mode [ 593.991634][T16831] hsr0: left promiscuous mode [ 594.057589][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.078115][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.099371][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.141714][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.204874][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.249551][T16847] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2668'. [ 594.331957][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.377473][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.416726][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'. [ 594.491861][T16836] tipc: Resetting bearer [ 594.568123][T16853] syzkaller0: entered allmulticast mode [ 594.784455][T16852] lo speed is unknown, defaulting to 1000 [ 594.852119][T16852] lo speed is unknown, defaulting to 1000 [ 597.352060][T16919] lo speed is unknown, defaulting to 1000 [ 597.364378][T16919] lo speed is unknown, defaulting to 1000 [ 597.667884][T16922] lo speed is unknown, defaulting to 1000 [ 597.696687][T16922] lo speed is unknown, defaulting to 1000 [ 598.702968][T16939] lo speed is unknown, defaulting to 1000 [ 598.804727][T16937] lo speed is unknown, defaulting to 1000 [ 598.816933][T16939] lo speed is unknown, defaulting to 1000 [ 598.864844][T16937] lo speed is unknown, defaulting to 1000 [ 599.879131][T16947] lo speed is unknown, defaulting to 1000 [ 599.911211][T16947] lo speed is unknown, defaulting to 1000 [ 600.968119][T16966] __nla_validate_parse: 108 callbacks suppressed [ 600.968142][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 601.214752][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2698'. [ 601.690528][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2703'. [ 601.723177][T16985] lo speed is unknown, defaulting to 1000 [ 601.750296][T16985] lo speed is unknown, defaulting to 1000 [ 602.168808][T16991] syzkaller0: entered promiscuous mode [ 602.174801][T16991] syzkaller0: entered allmulticast mode [ 602.372359][T16996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2706'. [ 602.498196][T17001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2706'. [ 604.396653][T17000] pim6reg: entered allmulticast mode [ 604.599399][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2708'. [ 604.712388][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2711'. [ 604.890019][T17018] lo speed is unknown, defaulting to 1000 [ 604.898120][T17018] lo speed is unknown, defaulting to 1000 [ 604.913427][T17027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2713'. [ 604.950121][T17021] lo speed is unknown, defaulting to 1000 [ 604.960760][T17021] lo speed is unknown, defaulting to 1000 [ 604.966672][T17027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 604.998249][T17017] lo speed is unknown, defaulting to 1000 [ 605.018792][T17017] lo speed is unknown, defaulting to 1000 [ 605.026930][T17027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.043990][T17027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.533469][T17039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2715'. [ 605.891488][T17028] lo speed is unknown, defaulting to 1000 [ 605.907489][T17031] lo speed is unknown, defaulting to 1000 [ 605.976573][T17031] lo speed is unknown, defaulting to 1000 [ 605.996380][T17028] lo speed is unknown, defaulting to 1000 [ 606.258640][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 606.293959][T17043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2716'. [ 606.303148][T17043] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2716'. [ 606.348449][T17043] vlan0: entered promiscuous mode [ 606.431321][T17043] syzkaller1: entered promiscuous mode [ 606.436846][T17043] syzkaller1: entered allmulticast mode [ 606.846774][T17056] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2721'. [ 607.449621][T17061] lo speed is unknown, defaulting to 1000 [ 607.514156][T17061] lo speed is unknown, defaulting to 1000 [ 607.564424][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2724'. [ 607.944987][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2726'. [ 608.413699][T17081] x_tables: duplicate underflow at hook 3 [ 609.558660][T17104] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 610.156585][T17123] lo speed is unknown, defaulting to 1000 [ 610.202181][T17123] lo speed is unknown, defaulting to 1000 [ 610.569657][T17130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2738'. [ 610.678672][T17137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2737'. [ 610.714983][T17133] lo speed is unknown, defaulting to 1000 [ 610.723415][T17133] lo speed is unknown, defaulting to 1000 [ 610.858656][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2740'. [ 610.932478][T17139] lo speed is unknown, defaulting to 1000 [ 610.987000][T17144] bridge4: port 1(veth7) entered blocking state [ 610.993623][T17144] bridge4: port 1(veth7) entered disabled state [ 611.001357][T17144] veth7: entered allmulticast mode [ 611.008981][T17144] veth7: entered promiscuous mode [ 611.037636][T17139] lo speed is unknown, defaulting to 1000 [ 611.050548][T17142] bridge4: port 2(veth0_to_bond) entered blocking state [ 611.067305][T17142] bridge4: port 2(veth0_to_bond) entered disabled state [ 611.086556][T17142] veth0_to_bond: entered allmulticast mode [ 611.112505][T17142] veth0_to_bond: entered promiscuous mode [ 611.154732][T17145] vlan2: entered allmulticast mode [ 611.172890][T17145] veth1: entered allmulticast mode [ 611.200358][T17145] bridge4: port 3(vlan2) entered blocking state [ 611.207052][T17145] bridge4: port 3(vlan2) entered disabled state [ 611.220684][T17145] vlan2: entered promiscuous mode [ 611.225911][T17145] veth1: entered promiscuous mode [ 611.779284][T17154] lo speed is unknown, defaulting to 1000 [ 611.791197][T17160] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 611.957395][T17160] wg1: entered promiscuous mode [ 611.974654][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 611.976446][T17154] lo speed is unknown, defaulting to 1000 [ 612.083603][T17151] lo speed is unknown, defaulting to 1000 [ 612.387874][T17151] lo speed is unknown, defaulting to 1000 [ 613.785540][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 614.148496][T17195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2751'. [ 614.373494][T17200] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 614.396027][T17200] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 614.404334][T17200] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2753'. [ 614.753088][T17203] vlan0: left promiscuous mode [ 614.784109][T17203] bond6: left promiscuous mode [ 614.806097][T17203] bridge6: left promiscuous mode [ 614.822903][T17206] netlink: 'syz.2.2755': attribute type 16 has an invalid length. [ 614.846011][T17206] netlink: 'syz.2.2755': attribute type 17 has an invalid length. [ 614.919160][T17210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 614.975418][T17206] IPv6: NLM_F_REPLACE set, but no existing node found! [ 615.110449][T17211] lo speed is unknown, defaulting to 1000 [ 615.166043][T17211] lo speed is unknown, defaulting to 1000 [ 615.226058][T17214] lo speed is unknown, defaulting to 1000 [ 615.269783][T17214] lo speed is unknown, defaulting to 1000 [ 615.617178][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2760'. [ 616.725447][T17237] lo speed is unknown, defaulting to 1000 [ 616.748077][T17237] lo speed is unknown, defaulting to 1000 [ 616.796018][T17243] lo speed is unknown, defaulting to 1000 [ 616.805798][T17243] lo speed is unknown, defaulting to 1000 [ 617.020119][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2764'. [ 618.025266][T17256] x_tables: duplicate underflow at hook 1 [ 618.711265][T17257] lo speed is unknown, defaulting to 1000 [ 618.938551][T17257] lo speed is unknown, defaulting to 1000 [ 619.616816][T17272] lo speed is unknown, defaulting to 1000 [ 619.642461][T17272] lo speed is unknown, defaulting to 1000 [ 619.807872][T17277] lo speed is unknown, defaulting to 1000 [ 619.816693][T17277] lo speed is unknown, defaulting to 1000 [ 620.203724][T17293] netlink: 'syz.3.2773': attribute type 6 has an invalid length. [ 620.575693][T17298] tipc: Enabling of bearer rejected, already enabled [ 620.738136][T17299] vxcan3: entered allmulticast mode [ 621.696485][T17311] lo speed is unknown, defaulting to 1000 [ 621.755333][T17304] lo speed is unknown, defaulting to 1000 [ 621.993674][T17311] lo speed is unknown, defaulting to 1000 [ 622.036694][T17320] lo speed is unknown, defaulting to 1000 [ 622.342450][T17304] lo speed is unknown, defaulting to 1000 [ 622.387673][T17320] lo speed is unknown, defaulting to 1000 [ 622.394406][T17318] lo speed is unknown, defaulting to 1000 [ 622.682700][T17326] batadv_slave_1: left promiscuous mode [ 622.699120][T17326] vlan0: left promiscuous mode [ 622.715425][T17326] gtp0: left promiscuous mode [ 622.750336][ T6134] lo speed is unknown, defaulting to 1000 [ 622.756148][ T6134] syz2: Port: 1 Link DOWN [ 623.079015][T17318] lo speed is unknown, defaulting to 1000 [ 623.180696][T17333] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2783'. [ 624.035759][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2786'. [ 624.148413][T17341] siw: device registration error -23 [ 624.521397][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 624.851479][T17347] lo speed is unknown, defaulting to 1000 [ 624.862556][T17347] lo speed is unknown, defaulting to 1000 [ 626.179356][T17366] lo speed is unknown, defaulting to 1000 [ 626.204280][T17366] lo speed is unknown, defaulting to 1000 [ 626.272723][T17373] netlink: 'syz.1.2793': attribute type 13 has an invalid length. [ 626.479727][T17377] netlink: 'syz.0.2794': attribute type 3 has an invalid length. [ 626.486511][T17373] tipc: Resetting bearer [ 626.648106][T17373] bridge0: port 1(syz_tun) entered disabled state [ 626.777791][T17373] tipc: Resetting bearer [ 626.853006][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2794'. [ 627.746958][T17398] xt_hashlimit: size too large, truncated to 1048576 [ 627.776323][T17384] syz.2.2791: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 627.866611][T17384] CPU: 0 UID: 0 PID: 17384 Comm: syz.2.2791 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 627.866643][T17384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.866654][T17384] Call Trace: [ 627.866663][T17384] [ 627.866672][T17384] dump_stack_lvl+0x189/0x250 [ 627.866714][T17384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.866743][T17384] ? __pfx__printk+0x10/0x10 [ 627.866775][T17384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 627.866797][T17384] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 627.866821][T17384] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 627.866846][T17384] warn_alloc+0x214/0x310 [ 627.866876][T17384] ? __pfx_warn_alloc+0x10/0x10 [ 627.866909][T17384] ? __get_vm_area_node+0x28f/0x300 [ 627.866929][T17384] ? __do_replace+0xb4/0xaa0 [ 627.866953][T17384] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 627.866973][T17384] ? stack_depot_save_flags+0x40/0x900 [ 627.867024][T17384] ? translate_table+0x1b4d/0x1f90 [ 627.867057][T17384] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 627.867087][T17384] ? __do_replace+0xb4/0xaa0 [ 627.867104][T17384] vzalloc_noprof+0xb2/0xf0 [ 627.867127][T17384] ? __do_replace+0xb4/0xaa0 [ 627.867147][T17384] __do_replace+0xb4/0xaa0 [ 627.867168][T17384] ? __pfx_translate_table+0x10/0x10 [ 627.867204][T17384] ? __pfx___do_replace+0x10/0x10 [ 627.867234][T17384] ? _copy_from_user+0x94/0xb0 [ 627.867260][T17384] do_arpt_set_ctl+0xa2a/0xf10 [ 627.867293][T17384] ? __mutex_trylock_common+0x153/0x260 [ 627.867317][T17384] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 627.867351][T17384] ? rcu_is_watching+0x15/0xb0 [ 627.867399][T17384] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 627.867426][T17384] ? __pfx___mutex_lock+0x10/0x10 [ 627.867446][T17384] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 627.867465][T17384] ? aa_sk_perm+0x81e/0x950 [ 627.867495][T17384] ? __pfx_aa_sk_perm+0x10/0x10 [ 627.867524][T17384] nf_setsockopt+0x26f/0x290 [ 627.867554][T17384] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 627.867580][T17384] do_sock_setsockopt+0x25a/0x3e0 [ 627.867611][T17384] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 627.867644][T17384] ? __fget_files+0x2a/0x420 [ 627.867675][T17384] __x64_sys_setsockopt+0x18b/0x220 [ 627.867709][T17384] do_syscall_64+0xfa/0x3b0 [ 627.867728][T17384] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.867747][T17384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.867773][T17384] ? clear_bhb_loop+0x60/0xb0 [ 627.867799][T17384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.867816][T17384] RIP: 0033:0x7f9508d8e929 [ 627.867834][T17384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.867853][T17384] RSP: 002b:00007f9509b89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 627.867874][T17384] RAX: ffffffffffffffda RBX: 00007f9508fb6240 RCX: 00007f9508d8e929 [ 627.867888][T17384] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 627.867899][T17384] RBP: 00007f9508e10b39 R08: 0000000000000068 R09: 0000000000000000 [ 627.867911][T17384] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 627.867923][T17384] R13: 0000000000000000 R14: 00007f9508fb6240 R15: 00007ffffb7a17d8 [ 627.867955][T17384] [ 627.867963][T17384] Mem-Info: [ 628.310146][T17384] active_anon:10049 inactive_anon:0 isolated_anon:0 [ 628.310146][T17384] active_file:1368 inactive_file:40064 isolated_file:0 [ 628.310146][T17384] unevictable:768 dirty:271 writeback:0 [ 628.310146][T17384] slab_reclaimable:12631 slab_unreclaimable:277965 [ 628.310146][T17384] mapped:38349 shmem:4269 pagetables:1070 [ 628.310146][T17384] sec_pagetables:0 bounce:0 [ 628.310146][T17384] kernel_misc_reclaimable:0 [ 628.310146][T17384] free:1128460 free_pcp:13207 free_cma:0 [ 628.470174][T17384] Node 0 active_anon:36696kB inactive_anon:0kB active_file:5472kB inactive_file:160052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152196kB dirty:1084kB writeback:0kB shmem:15540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12512kB pagetables:4204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.574356][T17384] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 628.685563][T17384] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 628.782307][T17384] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 628.782418][T17422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2801'. [ 628.825497][T17384] Node 0 DMA32 free:587772kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37048kB inactive_anon:0kB active_file:5472kB inactive_file:158224kB unevictable:1536kB writepending:1084kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:40484kB local_pcp:24288kB free_cma:0kB [ 628.960865][T17384] lowmem_reserve[]: 0 0 1 1 1 [ 628.965687][T17384] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 629.132213][T17384] lowmem_reserve[]: 0 0 0 0 0 [ 629.156457][T17384] Node 1 Normal free:3910036kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7744kB local_pcp:3904kB free_cma:0kB [ 629.190784][T17384] lowmem_reserve[]: 0 0 0 0 0 [ 629.195600][T17384] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 629.210975][T17384] Node 0 DMA32: 2*4kB (UM) 17*8kB (UME) 160*16kB (M) 359*32kB (UME) 825*64kB (UME) 294*128kB (UM) 93*256kB (UME) 21*512kB (UM) 12*1024kB (UME) 5*2048kB (UM) 103*4096kB (M) = 583600kB [ 629.291807][T17384] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 629.381712][T17384] Node 1 Normal: 201*4kB (UME) 50*8kB (UME) 50*16kB (UME) 274*32kB (UME) 96*64kB (UME) 27*128kB (UME) 8*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3910036kB [ 629.395241][T17437] lo speed is unknown, defaulting to 1000 [ 629.408441][T17437] lo speed is unknown, defaulting to 1000 [ 629.444091][T17384] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.472548][T17384] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 629.488364][T17384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 629.500753][T17384] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 629.516371][T17384] 45698 total pagecache pages [ 629.523062][T17384] 0 pages in swap cache [ 629.527430][T17384] Free swap = 124996kB [ 629.534659][T17444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2805'. [ 629.551786][T17384] Total swap = 124996kB [ 629.556184][T17384] 2097051 pages RAM [ 629.562975][T17384] 0 pages HighMem/MovableOnly [ 629.567909][T17384] 424693 pages reserved [ 629.572704][T17384] 0 pages cma reserved [ 629.966315][T17434] lo speed is unknown, defaulting to 1000 [ 630.006241][T17453] netlink: 404 bytes leftover after parsing attributes in process `syz.1.2808'. [ 630.026917][T17434] lo speed is unknown, defaulting to 1000 [ 630.439876][T17463] Cannot find del_set index 0 as target [ 630.513501][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2812'. [ 630.574230][T17443] rdma_rxe: rxe_newlink: failed to add lo [ 630.804120][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.877614][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.916502][T17472] lo speed is unknown, defaulting to 1000 [ 630.969195][T17473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.976899][T17472] lo speed is unknown, defaulting to 1000 [ 631.561197][T16243] Bluetooth: hci4: command 0x0405 tx timeout [ 631.633400][T17483] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2814'. [ 631.670501][T17475] lo speed is unknown, defaulting to 1000 [ 631.795715][T17475] lo speed is unknown, defaulting to 1000 [ 632.332190][T17495] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 632.354972][T17495] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.2818'. [ 632.375577][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2818'. [ 632.996458][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2827'. [ 633.008759][T17520] SET target dimension over the limit! [ 633.154422][T17517] macvtap2: entered promiscuous mode [ 633.167412][T17517] hsr0: entered promiscuous mode [ 633.172930][T17517] macvtap2: entered allmulticast mode [ 633.178455][T17517] hsr0: entered allmulticast mode [ 633.183708][T17517] hsr_slave_0: entered allmulticast mode [ 633.189483][T17517] hsr_slave_1: entered allmulticast mode [ 633.224874][T17517] hsr0: left allmulticast mode [ 633.229768][T17517] hsr_slave_0: left allmulticast mode [ 633.235365][T17517] hsr_slave_1: left allmulticast mode [ 633.240948][T17517] hsr0: left promiscuous mode [ 633.327117][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 633.344454][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2826'. [ 633.649170][T17534] netlink: 'syz.0.2830': attribute type 10 has an invalid length. [ 633.666103][T17537] lo speed is unknown, defaulting to 1000 [ 633.742611][T17537] lo speed is unknown, defaulting to 1000 [ 633.915514][T17533] lo speed is unknown, defaulting to 1000 [ 633.932354][T17533] lo speed is unknown, defaulting to 1000 [ 634.458846][T17551] netlink: 'syz.3.2834': attribute type 4 has an invalid length. [ 634.495215][T17546] lo speed is unknown, defaulting to 1000 [ 634.699700][T17546] lo speed is unknown, defaulting to 1000 [ 635.283221][T17569] macvtap2: entered promiscuous mode [ 635.330945][T17569] hsr0: entered promiscuous mode [ 635.351566][T17569] macvtap2: entered allmulticast mode [ 635.376375][T17569] hsr0: left promiscuous mode [ 635.451339][T17571] __nla_validate_parse: 111 callbacks suppressed [ 635.451362][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.500213][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.509134][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.582324][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.610457][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.646907][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.708743][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.782708][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.832689][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.854426][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2840'. [ 635.930843][T17557] lo speed is unknown, defaulting to 1000 [ 635.937899][T17557] lo speed is unknown, defaulting to 1000 [ 636.716979][T17596] team0: Port device vlan0 removed [ 638.829568][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.853769][T17631] lo speed is unknown, defaulting to 1000 [ 638.864365][T17631] lo speed is unknown, defaulting to 1000 [ 638.891782][T17622] lo speed is unknown, defaulting to 1000 [ 638.914180][T17622] lo speed is unknown, defaulting to 1000 [ 638.965293][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.037484][T17625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.175571][T17636] lo speed is unknown, defaulting to 1000 [ 639.195697][T17636] lo speed is unknown, defaulting to 1000 [ 639.402302][T17644] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.547334][T17664] bridge0: failed insert local address into bridge forwarding table [ 640.557525][T17664] __nla_validate_parse: 89 callbacks suppressed [ 640.557545][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2865'. [ 640.735349][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2867'. [ 640.770750][T17654] lo speed is unknown, defaulting to 1000 [ 640.863931][T17654] lo speed is unknown, defaulting to 1000 [ 642.179167][T17695] veth0_to_bond: left allmulticast mode [ 642.188063][T17695] veth0_to_bond: left promiscuous mode [ 642.202234][T17695] bridge4: port 2(veth0_to_bond) entered disabled state [ 642.235845][T17695] veth7: left allmulticast mode [ 642.250345][T17695] veth7: left promiscuous mode [ 642.255418][T17695] bridge4: port 1(veth7) entered disabled state [ 642.271176][T17695] vlan2: left promiscuous mode [ 642.275998][T17695] veth1: left promiscuous mode [ 642.281477][T17695] bridge4: port 3(vlan2) entered disabled state [ 642.414345][T17696] lo speed is unknown, defaulting to 1000 [ 642.422655][T17696] lo speed is unknown, defaulting to 1000 [ 643.076098][T17713] lo speed is unknown, defaulting to 1000 [ 643.169827][T17719] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2881'. [ 643.309142][T17713] lo speed is unknown, defaulting to 1000 [ 643.386451][T17727] lo speed is unknown, defaulting to 1000 [ 643.413725][T17730] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2886'. [ 643.598445][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2888'. [ 643.872196][T17727] lo speed is unknown, defaulting to 1000 [ 643.943197][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2881'. [ 644.120758][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 644.308575][T17751] netlink: 'syz.2.2894': attribute type 4 has an invalid length. [ 644.795242][T17763] netlink: 'syz.2.2900': attribute type 2 has an invalid length. [ 645.427740][T17785] netlink: 'syz.0.2910': attribute type 4 has an invalid length. [ 645.728832][T17794] lo speed is unknown, defaulting to 1000 [ 645.749287][T17794] lo speed is unknown, defaulting to 1000 [ 645.934633][T17808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2919'. [ 646.128369][T17818] netlink: 'syz.3.2924': attribute type 4 has an invalid length. [ 646.297543][T17806] lo speed is unknown, defaulting to 1000 [ 646.367497][T17806] lo speed is unknown, defaulting to 1000 [ 646.760072][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 647.113821][T17846] lo speed is unknown, defaulting to 1000 [ 647.201787][T17846] lo speed is unknown, defaulting to 1000 [ 647.218157][T17843] lo speed is unknown, defaulting to 1000 [ 647.254745][T17843] lo speed is unknown, defaulting to 1000 [ 647.306431][T17854] netlink: 'syz.4.2937': attribute type 4 has an invalid length. [ 647.966948][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2942'. [ 648.332357][T17881] veth0_macvtap: left promiscuous mode [ 648.350297][T17881] veth0_macvtap: entered promiscuous mode [ 648.359769][T17881] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 648.676091][T17894] SET target dimension over the limit! [ 649.368424][T17907] lo speed is unknown, defaulting to 1000 [ 649.376383][T17907] lo speed is unknown, defaulting to 1000 [ 649.476508][T17912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2957'. [ 649.989047][T17925] lo speed is unknown, defaulting to 1000 [ 649.997464][T17925] lo speed is unknown, defaulting to 1000 [ 650.049217][T17930] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2963'. [ 650.070128][T17931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.630456][T17952] SET target dimension over the limit! [ 650.788173][T17956] lo speed is unknown, defaulting to 1000 [ 650.827240][T17956] lo speed is unknown, defaulting to 1000 [ 650.952201][T17950] lo speed is unknown, defaulting to 1000 [ 650.985171][T17950] lo speed is unknown, defaulting to 1000 [ 651.480241][T17975] lo speed is unknown, defaulting to 1000 [ 651.542394][T17975] lo speed is unknown, defaulting to 1000 [ 651.925911][T17992] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2980'. [ 652.552853][T17990] lo speed is unknown, defaulting to 1000 [ 652.713450][T17990] lo speed is unknown, defaulting to 1000 [ 653.126000][T18018] SET target dimension over the limit! [ 653.423804][T18021] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 655.123004][T18055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3003'. [ 655.170256][T18055] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3003'. [ 655.204895][T18055] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3003'. [ 655.220674][T18060] SET target dimension over the limit! [ 655.241060][T18054] lo speed is unknown, defaulting to 1000 [ 655.282125][T18054] lo speed is unknown, defaulting to 1000 [ 655.343564][T18051] lo speed is unknown, defaulting to 1000 [ 655.352136][T18051] lo speed is unknown, defaulting to 1000 [ 655.542521][T18066] tipc: Enabling of bearer rejected, already enabled [ 655.674061][T18069] vxcan3: entered allmulticast mode [ 656.036805][T18079] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3011'. [ 656.245161][T18076] lo speed is unknown, defaulting to 1000 [ 656.303950][T18090] No such timeout policy "syz0" [ 656.429370][T18076] lo speed is unknown, defaulting to 1000 [ 656.548118][T18100] netlink: del zone limit has 4 unknown bytes [ 657.231393][T18113] Cannot find del_set index 0 as target [ 658.659436][T18151] lo speed is unknown, defaulting to 1000 [ 658.691925][T18151] lo speed is unknown, defaulting to 1000 [ 659.294610][T18158] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 659.320595][T18158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3036'. [ 659.341767][T18158] bridge0: port 1(0!) entered blocking state [ 659.348387][T18158] bridge0: port 1(0!) entered disabled state [ 659.365256][T18158] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 659.542588][T18158] lo speed is unknown, defaulting to 1000 [ 659.571204][T18158] lo speed is unknown, defaulting to 1000 [ 660.485887][T18174] lo speed is unknown, defaulting to 1000 [ 660.514156][T18174] lo speed is unknown, defaulting to 1000 [ 660.529591][T18178] lo speed is unknown, defaulting to 1000 [ 660.584686][T18178] lo speed is unknown, defaulting to 1000 [ 660.817074][T18188] lo speed is unknown, defaulting to 1000 [ 660.862398][T18188] lo speed is unknown, defaulting to 1000 [ 660.890410][T18194] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3045'. [ 663.038563][T18225] netlink: 'syz.0.3056': attribute type 10 has an invalid length. [ 663.081061][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3056'. [ 663.131951][T18225] bridge6: port 1(0!) entered blocking state [ 663.139821][T18225] bridge6: port 1(0!) entered disabled state [ 663.146950][T18225] !: entered allmulticast mode [ 663.195215][T18225] !: entered promiscuous mode [ 663.219921][T18225] bridge6: port 1(0!) entered blocking state [ 663.227212][T18225] bridge6: port 1(0!) entered forwarding state [ 663.495487][T18233] lo speed is unknown, defaulting to 1000 [ 663.558885][T18233] lo speed is unknown, defaulting to 1000 [ 664.133084][T18253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3068'. [ 664.246410][T18249] lo speed is unknown, defaulting to 1000 [ 664.457749][T18249] lo speed is unknown, defaulting to 1000 [ 665.185238][T18276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.625839][T18285] lo speed is unknown, defaulting to 1000 [ 665.703838][T18285] lo speed is unknown, defaulting to 1000 [ 665.851140][T18282] lo speed is unknown, defaulting to 1000 [ 665.911010][T18282] lo speed is unknown, defaulting to 1000 [ 667.212384][T18330] netlink: 'syz.0.3096': attribute type 10 has an invalid length. [ 667.223027][T18330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3096'. [ 667.445793][T18330] lo speed is unknown, defaulting to 1000 [ 667.530438][T18330] lo speed is unknown, defaulting to 1000 [ 667.575555][T18341] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3099'. [ 667.865460][T18338] lo speed is unknown, defaulting to 1000 [ 667.931183][T18338] lo speed is unknown, defaulting to 1000 [ 668.118692][T18346] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3102'. [ 668.791233][T18366] netlink: 'syz.3.3109': attribute type 10 has an invalid length. [ 668.806795][T18366] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3109'. [ 668.831743][T18366] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 668.918693][T18362] lo speed is unknown, defaulting to 1000 [ 669.007043][T18362] lo speed is unknown, defaulting to 1000 [ 669.262389][T18379] tipc: Bearer : already 2 bearers with priority 10 [ 669.271800][T18379] tipc: Bearer : trying with adjusted priority [ 669.278839][T18379] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 670.003522][T18397] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3123'. [ 670.991987][T18440] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3135'. [ 671.237914][T18447] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3139'. [ 671.295203][T18441] lo speed is unknown, defaulting to 1000 [ 671.312133][T18441] lo speed is unknown, defaulting to 1000 [ 672.870515][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.647323][T18502] lo speed is unknown, defaulting to 1000 [ 673.662155][T18502] lo speed is unknown, defaulting to 1000 [ 673.690352][T18503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3161'. [ 673.846282][T18512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3164'. [ 673.924488][T18514] netlink: 'syz.0.3166': attribute type 4 has an invalid length. [ 675.341026][T18550] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3177'. [ 676.031068][T18563] lo speed is unknown, defaulting to 1000 [ 676.051809][T18564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3182'. [ 676.092561][T18563] lo speed is unknown, defaulting to 1000 [ 676.825500][T18579] team_slave_1: entered promiscuous mode [ 677.418361][T18601] lo speed is unknown, defaulting to 1000 [ 677.433263][T18601] lo speed is unknown, defaulting to 1000 [ 677.472878][T18606] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3198'. [ 677.763946][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'. [ 677.964701][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 677.990298][T18620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3206'. [ 678.258441][T18630] batadv_slave_0: entered promiscuous mode [ 678.274136][T18630] netlink: 'syz.4.3211': attribute type 3 has an invalid length. [ 678.934601][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3222'. [ 678.943900][T18664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3222'. [ 679.516150][T18690] ipvlan0: entered promiscuous mode [ 679.619718][T18700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3242'. [ 679.693728][T18701] lo speed is unknown, defaulting to 1000 [ 679.717633][T18701] lo speed is unknown, defaulting to 1000 [ 679.879174][T18709] lo speed is unknown, defaulting to 1000 [ 679.918684][T18709] lo speed is unknown, defaulting to 1000 [ 679.957280][T18715] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3246'. [ 680.820204][T18738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3255'. [ 680.854979][T18737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3254'. [ 681.328793][T18752] netlink: 'syz.2.3260': attribute type 1 has an invalid length. [ 681.340061][T18752] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3260'. [ 681.353740][T18752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3260'. [ 681.784615][T18764] lo speed is unknown, defaulting to 1000 [ 681.802056][T18764] lo speed is unknown, defaulting to 1000 [ 682.045819][T18778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3265'. [ 682.220112][T18770] lo speed is unknown, defaulting to 1000 [ 682.276047][T18770] lo speed is unknown, defaulting to 1000 [ 683.690688][T18825] IPVS: Scheduler module ip_vs_sip not found [ 684.212774][T18852] netlink: 'syz.3.3293': attribute type 11 has an invalid length. [ 684.221108][T18852] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3293'. [ 684.257344][T18851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.198295][T18888] netlink: 'syz.0.3307': attribute type 10 has an invalid length. [ 685.236210][T18890] lo speed is unknown, defaulting to 1000 [ 685.311400][T18888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3307'. [ 685.343006][T18890] lo speed is unknown, defaulting to 1000 [ 685.414764][T18888] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 686.497315][T18931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3321'. [ 686.579473][T18933] syzkaller1: entered promiscuous mode [ 686.586390][T18933] syzkaller1: entered allmulticast mode [ 687.404699][T18951] xt_CT: No such helper "pptp" [ 688.492181][T18990] lo speed is unknown, defaulting to 1000 [ 688.504977][T18990] lo speed is unknown, defaulting to 1000 [ 688.756747][T19001] TCP: TCP_TX_DELAY enabled [ 688.985667][T19007] veth0: entered promiscuous mode [ 689.047337][T19007] veth0: left promiscuous mode [ 689.580943][T19036] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 689.701330][T19045] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3356'. [ 692.179561][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3378'. [ 692.310616][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3383'. [ 692.578556][T19117] vlan0: entered allmulticast mode [ 692.824803][T19125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 693.637131][T19144] lo speed is unknown, defaulting to 1000 [ 693.662350][T19144] lo speed is unknown, defaulting to 1000 [ 693.754748][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 693.781444][T19150] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 694.204823][T19168] lo speed is unknown, defaulting to 1000 [ 694.221682][T19172] netlink: 'syz.2.3402': attribute type 10 has an invalid length. [ 694.223136][T19168] lo speed is unknown, defaulting to 1000 [ 694.230895][T19173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3401'. [ 694.265834][T19172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3402'. [ 694.284180][T19172] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 694.297319][T19172] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 695.404564][T19197] bridge0: entered allmulticast mode [ 695.742471][T19221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3416'. [ 695.988483][T19229] syzkaller1: entered promiscuous mode [ 695.994815][T19229] syzkaller1: entered allmulticast mode [ 696.159145][T19233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3426'. [ 696.554715][T19243] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3429'. [ 696.607519][T19244] syzkaller1: entered promiscuous mode [ 696.624529][T19244] syzkaller1: entered allmulticast mode [ 696.935082][T19259] tipc: Enabled bearer , priority 0 [ 696.972715][T19257] tipc: Disabling bearer [ 697.152585][T19270] lo speed is unknown, defaulting to 1000 [ 697.174050][T19270] lo speed is unknown, defaulting to 1000 [ 697.750154][T19285] netlink: 'syz.4.3443': attribute type 4 has an invalid length. [ 698.181006][T19276] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 698.434757][T19298] lo speed is unknown, defaulting to 1000 [ 698.453757][T19298] lo speed is unknown, defaulting to 1000 [ 700.244806][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3469'. [ 700.737942][T19367] lo speed is unknown, defaulting to 1000 [ 700.845820][T19367] lo speed is unknown, defaulting to 1000 [ 701.753682][T19402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3485'. [ 703.716773][T19448] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3501'. [ 704.002959][T19457] bridge0: port 1(syz_tun) entered blocking state [ 704.009904][T19457] bridge0: port 1(syz_tun) entered listening state [ 704.026912][T19457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.042327][T19457] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.049839][T19457] tipc: Resetting bearer [ 704.060259][T19457] tipc: Resetting bearer [ 704.072123][T19457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 704.088315][T19458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3506'. [ 705.029670][T19488] lo speed is unknown, defaulting to 1000 [ 705.039762][T19488] lo speed is unknown, defaulting to 1000 [ 706.259663][T19524] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 708.707372][T19527] syz_tun: left allmulticast mode [ 708.713056][T19527] bridge0: port 1(syz_tun) entered disabled state [ 708.723392][T19527] tipc: Resetting bearer [ 708.969537][T19552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3538'. [ 709.182010][T19556] raw_sendmsg: syz.1.3540 forgot to set AF_INET. Fix it! [ 710.261927][T19578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 710.416710][T19589] tipc: Resetting bearer [ 710.612181][T19598] netlink: 'syz.1.3554': attribute type 10 has an invalid length. [ 710.640304][T19598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3554'. [ 710.660021][T19598] bridge0: port 1(0!) entered blocking state [ 710.669005][T19598] bridge0: port 1(0!) entered disabled state [ 710.688378][T19598] !: entered allmulticast mode [ 710.709406][T19598] !: entered promiscuous mode [ 710.726060][T19598] bridge0: port 1(0!) entered blocking state [ 710.732440][T19598] bridge0: port 1(0!) entered listening state [ 710.927954][T19611] lo speed is unknown, defaulting to 1000 [ 710.992338][T19611] lo speed is unknown, defaulting to 1000 [ 711.331647][T19613] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 711.394390][T19613] syzkaller0: entered promiscuous mode [ 711.415946][T19613] syzkaller0: entered allmulticast mode [ 713.746055][T19628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3563'. [ 713.817495][T19639] lo speed is unknown, defaulting to 1000 [ 713.886371][T19639] lo speed is unknown, defaulting to 1000 [ 714.033375][T19649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3569'. [ 714.229465][T19657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3573'. [ 715.188560][T19684] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3581'. [ 715.302497][T19688] lo speed is unknown, defaulting to 1000 [ 715.321567][T19688] lo speed is unknown, defaulting to 1000 [ 715.338713][T19693] syz_tun: entered allmulticast mode [ 715.372486][T19693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3585'. [ 715.409799][T19690] syz_tun: left allmulticast mode [ 717.124391][T19728] netlink: 'syz.3.3597': attribute type 10 has an invalid length. [ 717.147257][T19728] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3597'. [ 717.171007][T19728] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 717.373822][T19731] lo speed is unknown, defaulting to 1000 [ 717.403585][T19731] lo speed is unknown, defaulting to 1000 [ 718.092552][T19755] netlink: 488 bytes leftover after parsing attributes in process `syz.2.3607'. [ 718.473128][T19767] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3609'. [ 718.897760][T19775] netlink: 'syz.2.3612': attribute type 10 has an invalid length. [ 718.930025][T19775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3612'. [ 718.974638][T19775] bridge0: port 1(0!) entered blocking state [ 718.990540][T19775] bridge0: port 1(0!) entered disabled state [ 719.010269][T19775] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 719.184299][T19779] lo speed is unknown, defaulting to 1000 [ 719.209371][T19779] lo speed is unknown, defaulting to 1000 [ 719.338831][T19784] netlink: 'syz.3.3614': attribute type 1 has an invalid length. [ 719.714114][T19788] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3614'. [ 719.872712][T19787] bond7: (slave veth1): Enslaving as an active interface with a down link [ 719.950037][T19786] bond7: (slave veth9): Enslaving as an active interface with a down link [ 719.979174][T19788] 8021q: adding VLAN 0 to HW filter on device bond7 [ 720.697794][T19805] syzkaller0: entered promiscuous mode [ 720.725886][T19805] syzkaller0: entered allmulticast mode [ 723.323109][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'. [ 723.408747][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 723.744672][T19838] x_tables: duplicate underflow at hook 4 [ 724.014448][T19855] Bluetooth: MGMT ver 1.23 [ 724.153060][T19859] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 724.643071][T19874] smc: net device bond0 applied user defined pnetid SYZ2 [ 724.661147][T19874] smc: net device bond0 erased user defined pnetid SYZ2 [ 724.668795][T19874] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 724.877386][T19879] veth0_to_bond: entered allmulticast mode [ 724.889130][T19883] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3648'. [ 724.937000][T19889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3647'. [ 725.220125][T19894] nbd2: detected capacity change from 0 to 63 [ 725.231143][T19899] block nbd2: NBD_DISCONNECT [ 725.238330][T19899] block nbd2: Disconnected due to user request. [ 725.284994][T19899] block nbd2: shutting down sockets [ 725.330496][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.339711][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 725.348460][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.357571][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 725.365509][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.374627][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 725.382527][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.391629][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 725.399682][T19832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.414516][T19832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 725.423820][T19832] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.449963][T19832] Buffer I/O error on dev nbd2, logical block 1, async page read [ 725.483479][T19832] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.496204][T19832] Buffer I/O error on dev nbd2, logical block 2, async page read [ 725.513946][T19832] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.536911][T19832] Buffer I/O error on dev nbd2, logical block 3, async page read [ 725.572900][T19832] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.593239][T19832] Buffer I/O error on dev nbd2, logical block 0, async page read [ 725.601657][T19832] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 725.611360][T19832] Buffer I/O error on dev nbd2, logical block 1, async page read [ 725.642003][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 725.646943][T19832] ldm_validate_partition_table(): Disk read failed. [ 725.654033][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 725.702932][T19832] Dev nbd2: unable to read RDB block 0 [ 725.735153][T19832] nbd2: unable to read partition table [ 725.778892][T19832] ldm_validate_partition_table(): Disk read failed. [ 725.811959][T19832] Dev nbd2: unable to read RDB block 0 [ 725.827955][T19832] nbd2: unable to read partition table [ 725.869468][T19927] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3663'. [ 725.981239][T19931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3663'. [ 726.271568][T19943] netlink: 'syz.2.3666': attribute type 10 has an invalid length. [ 726.279967][ C0] bridge0: port 1(0!) entered learning state [ 726.299518][T19943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3666'. [ 726.612446][T19943] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 726.652507][T19940] lo speed is unknown, defaulting to 1000 [ 726.660907][T19940] lo speed is unknown, defaulting to 1000 [ 726.883631][T19953] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3672'. [ 727.403590][T19976] netlink: 'syz.4.3681': attribute type 1 has an invalid length. [ 727.486142][T19976] 8021q: adding VLAN 0 to HW filter on device bond5 [ 728.778411][T19994] syzkaller0: entered promiscuous mode [ 728.784136][T19994] syzkaller0: entered allmulticast mode [ 732.621644][T20065] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3702'. [ 732.686295][T20069] netlink: 'syz.4.3703': attribute type 1 has an invalid length. [ 732.730167][T20069] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3703'. [ 732.760553][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3703'. [ 732.821735][T20069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3703'. [ 733.161245][T20091] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3707'. [ 733.727328][T20105] syz.4.3712: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 733.762895][T20105] CPU: 1 UID: 0 PID: 20105 Comm: syz.4.3712 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 733.762928][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 733.762948][T20105] Call Trace: [ 733.762957][T20105] [ 733.762964][T20105] dump_stack_lvl+0x189/0x250 [ 733.763010][T20105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 733.763038][T20105] ? __pfx__printk+0x10/0x10 [ 733.763059][T20105] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 733.763080][T20105] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 733.763103][T20105] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 733.763127][T20105] warn_alloc+0x214/0x310 [ 733.763149][T20105] ? stack_depot_save_flags+0x40/0x900 [ 733.763179][T20105] ? __pfx_warn_alloc+0x10/0x10 [ 733.763205][T20105] ? kasan_save_track+0x4f/0x80 [ 733.763235][T20105] ? xskq_create+0x56/0x170 [ 733.763262][T20105] ? xsk_init_queue+0xb0/0x110 [ 733.763288][T20105] ? xsk_setsockopt+0x43f/0x710 [ 733.763314][T20105] ? do_sock_setsockopt+0x25a/0x3e0 [ 733.763337][T20105] ? __x64_sys_setsockopt+0x18b/0x220 [ 733.763367][T20105] ? do_syscall_64+0xfa/0x3b0 [ 733.763386][T20105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.763416][T20105] __vmalloc_node_range_noprof+0x125/0x12f0 [ 733.763475][T20105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 733.763505][T20105] ? __kasan_kmalloc+0x93/0xb0 [ 733.763528][T20105] vmalloc_user_noprof+0xad/0xf0 [ 733.763550][T20105] ? xskq_create+0xbf/0x170 [ 733.763570][T20105] xskq_create+0xbf/0x170 [ 733.763618][T20105] xsk_init_queue+0xb0/0x110 [ 733.763651][T20105] xsk_setsockopt+0x43f/0x710 [ 733.763683][T20105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.763709][T20105] ? __lock_acquire+0xab9/0xd20 [ 733.763750][T20105] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 733.763774][T20105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 733.763805][T20105] do_sock_setsockopt+0x25a/0x3e0 [ 733.763837][T20105] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 733.763870][T20105] ? __fget_files+0x2a/0x420 [ 733.763903][T20105] __x64_sys_setsockopt+0x18b/0x220 [ 733.763938][T20105] do_syscall_64+0xfa/0x3b0 [ 733.763966][T20105] ? lockdep_hardirqs_on+0x9c/0x150 [ 733.763985][T20105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.764004][T20105] ? clear_bhb_loop+0x60/0xb0 [ 733.764030][T20105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.764048][T20105] RIP: 0033:0x7fcdd678e929 [ 733.764067][T20105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.764083][T20105] RSP: 002b:00007fcdd755f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 733.764106][T20105] RAX: ffffffffffffffda RBX: 00007fcdd69b6080 RCX: 00007fcdd678e929 [ 733.764121][T20105] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 733.764133][T20105] RBP: 00007fcdd6810b39 R08: 0000000000000004 R09: 0000000000000000 [ 733.764144][T20105] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.764155][T20105] R13: 0000000000000000 R14: 00007fcdd69b6080 R15: 00007ffc62650988 [ 733.764189][T20105] [ 733.764197][T20105] Mem-Info: [ 734.075524][T20105] active_anon:9507 inactive_anon:0 isolated_anon:0 [ 734.075524][T20105] active_file:1368 inactive_file:40106 isolated_file:0 [ 734.075524][T20105] unevictable:768 dirty:245 writeback:0 [ 734.075524][T20105] slab_reclaimable:12788 slab_unreclaimable:287940 [ 734.075524][T20105] mapped:33393 shmem:1407 pagetables:1042 [ 734.075524][T20105] sec_pagetables:0 bounce:0 [ 734.075524][T20105] kernel_misc_reclaimable:0 [ 734.075524][T20105] free:1090514 free_pcp:26006 free_cma:0 [ 734.089485][T20115] rdma_rxe: rxe_newlink: failed to add team0 [ 734.122162][T20105] Node 0 active_anon:38128kB inactive_anon:0kB active_file:5472kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133572kB dirty:980kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12428kB pagetables:3992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 734.161013][T20105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 734.192728][T20105] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 734.260004][T20105] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 734.267182][T20105] Node 0 DMA32 free:435892kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38480kB inactive_anon:0kB active_file:5472kB inactive_file:158392kB unevictable:1536kB writepending:980kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:129640kB local_pcp:29204kB free_cma:0kB [ 734.385626][T20105] lowmem_reserve[]: 0 0 1 1 1 [ 734.401910][T20105] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 734.475156][T20105] lowmem_reserve[]: 0 0 0 0 0 [ 734.495557][T20105] Node 1 Normal free:3910948kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6832kB local_pcp:3624kB free_cma:0kB [ 734.546644][T20120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3716'. [ 734.590104][T20105] lowmem_reserve[]: 0 0 0 0 0 [ 734.594897][T20105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 734.611495][T20105] Node 0 DMA32: 2304*4kB (U) 442*8kB (UM) 386*16kB (U) 536*32kB (UE) 18*64kB (UME) 37*128kB (UM) 33*256kB (ME) 6*512kB (UM) 9*1024kB (UME) 8*2048kB (UE) 90*4096kB (UM) = 447728kB [ 734.636159][T20105] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 734.642837][T20123] siw: device registration error -23 [ 734.649418][T20105] Node 1 Normal: 197*4kB (UME) 50*8kB (UME) 50*16kB (UME) 265*32kB (UME) 99*64kB (UME) 31*128kB (UME) 10*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3910948kB [ 734.705793][T20105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.733351][T20105] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 734.743491][T20105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 734.756732][T20105] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 734.758229][T20121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.767227][T20105] 42878 total pagecache pages [ 734.787598][T20105] 0 pages in swap cache [ 734.792883][T20105] Free swap = 124996kB [ 734.797395][T20105] Total swap = 124996kB [ 734.805489][T20105] 2097051 pages RAM [ 734.809769][T20105] 0 pages HighMem/MovableOnly [ 734.816194][T20105] 424693 pages reserved [ 734.824889][T20105] 0 pages cma reserved [ 734.862061][T20124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.944009][T20118] lo speed is unknown, defaulting to 1000 [ 734.966400][T20118] lo speed is unknown, defaulting to 1000 [ 734.982282][T20121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 735.068836][T20135] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 735.083748][T20135] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3719'. [ 735.152744][T20135] team0: entered allmulticast mode [ 735.178575][T20135] tipc: Resetting bearer [ 735.190355][T20135] bridge0: port 2(team0) entered blocking state [ 735.198081][T20135] bridge0: port 2(team0) entered disabled state [ 735.213644][T20135] tipc: Resetting bearer [ 735.239832][T20135] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 735.875934][T20156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.148091][T20166] x_tables: duplicate underflow at hook 4 [ 736.401022][T20171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3728'. [ 737.032562][T20184] lo: left allmulticast mode [ 737.037426][T20184] tunl0: left allmulticast mode [ 737.042862][T20184] gre0: left allmulticast mode [ 737.048394][T20184] gretap0: left allmulticast mode [ 737.053805][T20184] erspan0: left allmulticast mode [ 737.059057][T20184] ip_vti0: left allmulticast mode [ 737.070276][T20184] ip6_vti0: left allmulticast mode [ 737.075616][T20184] sit0: left allmulticast mode [ 737.100302][T20184] ip6tnl0: left allmulticast mode [ 737.105644][T20184] ip6gre0: left allmulticast mode [ 737.120282][T20184] ip6gretap0: left allmulticast mode [ 737.125920][T20184] bridge0: left allmulticast mode [ 737.131400][T20184] vcan0: left allmulticast mode [ 737.150129][T20184] bond0: left allmulticast mode [ 737.163102][T20184] nlmon0: left allmulticast mode [ 737.180232][T20184] caif0: left allmulticast mode [ 737.185442][T20184] veth0: left allmulticast mode [ 737.193829][T20184] wg0: left allmulticast mode [ 737.210144][T20184] wg1: left promiscuous mode [ 737.214890][T20184] wg1: left allmulticast mode [ 737.219951][T20184] wg2: left allmulticast mode [ 737.224923][T20184] veth0_to_bridge: left allmulticast mode [ 737.246912][T20184] veth1_to_bridge: left allmulticast mode [ 737.253129][T20184] bridge_slave_1: left allmulticast mode [ 737.267886][T20184] veth0_to_bond: left allmulticast mode [ 737.274421][T20184] bond_slave_0: left allmulticast mode [ 737.315691][T20184] veth1_to_bond: left allmulticast mode [ 737.324262][T20184] bond_slave_1: left allmulticast mode [ 737.360151][T20184] veth0_to_team: left allmulticast mode [ 737.365869][T20184] team_slave_0: left allmulticast mode [ 737.400839][T20184] veth1_to_team: left allmulticast mode [ 737.411994][T20184] team_slave_1: left promiscuous mode [ 737.417898][T20184] team_slave_1: left allmulticast mode [ 737.435554][T20184] veth0_to_batadv: left allmulticast mode [ 737.446144][T20184] batadv_slave_0: left allmulticast mode [ 737.452932][T20184] veth1_to_batadv: left allmulticast mode [ 737.459548][T20184] batadv_slave_1: left allmulticast mode [ 737.494038][T20184] xfrm0: left allmulticast mode [ 737.499805][T20184] veth0_to_hsr: left allmulticast mode [ 737.510760][T20184] veth1_to_hsr: left allmulticast mode [ 737.516583][T20184] hsr0: left allmulticast mode [ 737.543389][T20184] hsr_slave_0: left allmulticast mode [ 737.558336][T20184] hsr_slave_1: left allmulticast mode [ 737.574043][T20184] veth1_virt_wifi: left allmulticast mode [ 737.583271][T20184] veth0_virt_wifi: left allmulticast mode [ 737.600850][T20184] veth0_macvtap: left allmulticast mode [ 737.611789][T20184] macvtap0: left allmulticast mode [ 737.619081][T20184] macsec0: left allmulticast mode [ 737.630401][T20184] geneve0: left allmulticast mode [ 737.635937][T20184] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 737.646661][T20184] geneve2: left allmulticast mode [ 737.652981][T20184] geneve3: left allmulticast mode [ 737.658720][T20184] bridge1: left allmulticast mode [ 737.667527][T20184] bridge2: left allmulticast mode [ 737.673971][T20184] syztnl1: left allmulticast mode [ 737.679566][T20184] bond1: left allmulticast mode [ 737.688862][T20184] gretap1: left allmulticast mode [ 737.695744][T20184] ip6gretap1: left allmulticast mode [ 737.720430][T20184] netdevsim netdevsim2 eth0: left allmulticast mode [ 737.737087][T20184] netdevsim netdevsim2 eth1: left allmulticast mode [ 737.747246][T20184] netdevsim netdevsim2 eth2: left allmulticast mode [ 737.755165][T20184] netdevsim netdevsim2 eth3: left allmulticast mode [ 737.763028][T20184] bridge3: left allmulticast mode [ 737.768781][T20184] bond2: left allmulticast mode [ 737.775344][T20184] hsr1: left allmulticast mode [ 737.781566][T20184] !: left allmulticast mode [ 737.786582][T20184] team0: left allmulticast mode [ 737.795220][T20184] macvlan0: left allmulticast mode [ 737.814205][T20184] macvtap1: left allmulticast mode [ 737.824803][T20184] veth2: left allmulticast mode [ 737.840549][T20184] veth3: left allmulticast mode [ 737.863949][T20184] ip6gretap2: left allmulticast mode [ 737.907050][T20184] bridge4: left allmulticast mode [ 737.914739][T20184] veth4: left allmulticast mode [ 737.926937][T20184] veth5: left allmulticast mode [ 737.940093][T20184] sit1: left allmulticast mode [ 737.956094][T20184] bridge5: left allmulticast mode [ 737.971472][T20184] : left allmulticast mode [ 737.984726][T20184] veth6: left allmulticast mode [ 737.994073][T20184] veth7: left allmulticast mode [ 737.999697][T20184] macsec1: left allmulticast mode [ 738.008187][T20184] veth8: left allmulticast mode [ 738.017161][T20184] veth9: left allmulticast mode [ 738.024207][T20184] sit2: left allmulticast mode [ 738.029298][T20184] gre1: left allmulticast mode [ 738.038061][T20184] bridge6: left allmulticast mode [ 738.045829][T20184] ipvlan0: left allmulticast mode [ 738.052006][T20184] geneve1: left allmulticast mode [ 738.057415][T20184] macsec3: left allmulticast mode [ 738.077729][T20184] gtp0: left allmulticast mode [ 738.082941][T20184] ip6gre1: left allmulticast mode [ 738.096450][T20184] ip6gre2: left allmulticast mode [ 738.102653][T20184] sit3: left allmulticast mode [ 738.181013][T20188] lo speed is unknown, defaulting to 1000 [ 738.209336][T20188] lo speed is unknown, defaulting to 1000 [ 738.251431][T20198] lo speed is unknown, defaulting to 1000 [ 738.297005][T20198] lo speed is unknown, defaulting to 1000 [ 738.457239][T20199] lo speed is unknown, defaulting to 1000 [ 738.495758][T20199] lo speed is unknown, defaulting to 1000 [ 738.512649][T20205] x_tables: duplicate underflow at hook 4 [ 738.559431][T20207] lo speed is unknown, defaulting to 1000 [ 738.596538][T20211] netlink: 'syz.3.3741': attribute type 10 has an invalid length. [ 738.614169][T20207] lo speed is unknown, defaulting to 1000 [ 738.638099][T20211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3741'. [ 738.663176][T20211] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 739.947071][T20232] syzkaller0: left promiscuous mode [ 739.952515][T20232] syzkaller0: left allmulticast mode [ 739.966214][T20232] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 740.248590][T20240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3752'. [ 740.767935][T20245] lo speed is unknown, defaulting to 1000 [ 740.865131][T20245] lo speed is unknown, defaulting to 1000 [ 741.640322][ C0] bridge0: port 1(0!) entered forwarding state [ 741.646897][ C0] bridge0: topology change detected, propagating [ 741.921016][T20256] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 741.974330][T20258] netlink: 'syz.2.3755': attribute type 2 has an invalid length. [ 741.995428][T20258] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3755'. [ 742.011867][T20254] x_tables: duplicate underflow at hook 4 [ 742.104356][T20256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.131530][T20262] netlink: 'syz.0.3757': attribute type 13 has an invalid length. [ 742.240466][T20262] bridge6: port 1(0!) entered disabled state [ 742.688178][T20253] lo speed is unknown, defaulting to 1000 [ 742.787457][ T1168] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.799920][ T1168] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.810342][T20253] lo speed is unknown, defaulting to 1000 [ 742.871533][ T1168] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.890297][ T1168] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 742.945691][T20276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 743.300315][T20281] netlink: 'syz.3.3761': attribute type 10 has an invalid length. [ 743.357975][T20281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3761'. [ 743.384683][T20281] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 743.440952][T20280] lo speed is unknown, defaulting to 1000 [ 743.472799][T20280] lo speed is unknown, defaulting to 1000 [ 743.905730][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 744.247104][T20299] siw: device registration error -23 [ 744.539692][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'. [ 745.153278][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3778'. [ 746.857718][T20370] lo speed is unknown, defaulting to 1000 [ 746.877191][T20368] netlink: 'syz.3.3792': attribute type 10 has an invalid length. [ 746.912688][T20370] lo speed is unknown, defaulting to 1000 [ 746.920097][T20368] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3792'. [ 746.965379][T20368] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 747.963545][T20399] veth0_macvtap: left promiscuous mode [ 747.969079][T20399] veth0_macvtap: entered promiscuous mode [ 747.992071][T20399] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 748.025379][T20391] geneve3: entered promiscuous mode [ 748.040626][T20391] geneve3: entered allmulticast mode [ 748.060164][T20402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3799'. [ 748.070055][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 52696 - 0 [ 748.078355][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 50707 - 0 [ 748.150555][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 52696 - 0 [ 748.158870][ T13] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 50707 - 0 [ 748.207299][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 52696 - 0 [ 748.222903][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 50707 - 0 [ 748.251363][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 52696 - 0 [ 748.280081][ T13] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 50707 - 0 [ 749.367738][T20436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3813'. [ 749.392250][T20438] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 749.409022][T20438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3814'. [ 749.441528][T20438] bridge0: port 1(0!) entered blocking state [ 749.452573][T20438] bridge0: port 1(0!) entered disabled state [ 749.489460][T20438] !: entered allmulticast mode [ 749.527337][T20438] !: left allmulticast mode [ 749.538487][T20438] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 749.606230][T20445] lo speed is unknown, defaulting to 1000 [ 749.614643][T20445] lo speed is unknown, defaulting to 1000 [ 749.909524][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3817'. [ 750.143123][T20460] lo speed is unknown, defaulting to 1000 [ 750.153694][T20460] lo speed is unknown, defaulting to 1000 [ 750.832844][T20482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3829'. [ 750.870283][T20482] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3829'. [ 751.122856][T20486] syz.2.3830: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 751.162845][T20486] CPU: 0 UID: 0 PID: 20486 Comm: syz.2.3830 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 751.162878][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 751.162890][T20486] Call Trace: [ 751.162900][T20486] [ 751.162909][T20486] dump_stack_lvl+0x189/0x250 [ 751.162950][T20486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.162982][T20486] ? __pfx__printk+0x10/0x10 [ 751.163005][T20486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 751.163028][T20486] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 751.163053][T20486] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 751.163079][T20486] warn_alloc+0x214/0x310 [ 751.163102][T20486] ? stack_depot_save_flags+0x40/0x900 [ 751.163134][T20486] ? __pfx_warn_alloc+0x10/0x10 [ 751.163161][T20486] ? kasan_save_track+0x4f/0x80 [ 751.163191][T20486] ? xskq_create+0x56/0x170 [ 751.163208][T20486] ? xsk_init_queue+0xb0/0x110 [ 751.163235][T20486] ? xsk_setsockopt+0x43f/0x710 [ 751.163262][T20486] ? do_sock_setsockopt+0x25a/0x3e0 [ 751.163288][T20486] ? __x64_sys_setsockopt+0x18b/0x220 [ 751.163314][T20486] ? do_syscall_64+0xfa/0x3b0 [ 751.163333][T20486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.163364][T20486] __vmalloc_node_range_noprof+0x125/0x12f0 [ 751.163425][T20486] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 751.163456][T20486] ? __kasan_kmalloc+0x93/0xb0 [ 751.163503][T20486] vmalloc_user_noprof+0xad/0xf0 [ 751.163526][T20486] ? xskq_create+0xbf/0x170 [ 751.163547][T20486] xskq_create+0xbf/0x170 [ 751.163565][T20486] xsk_init_queue+0xb0/0x110 [ 751.163592][T20486] xsk_setsockopt+0x43f/0x710 [ 751.163625][T20486] ? __pfx_xsk_setsockopt+0x10/0x10 [ 751.163651][T20486] ? __lock_acquire+0xab9/0xd20 [ 751.163690][T20486] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 751.163716][T20486] ? __pfx_xsk_setsockopt+0x10/0x10 [ 751.163747][T20486] do_sock_setsockopt+0x25a/0x3e0 [ 751.163779][T20486] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 751.163824][T20486] ? __fget_files+0x2a/0x420 [ 751.163859][T20486] __x64_sys_setsockopt+0x18b/0x220 [ 751.163896][T20486] do_syscall_64+0xfa/0x3b0 [ 751.163916][T20486] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.163935][T20486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.163955][T20486] ? clear_bhb_loop+0x60/0xb0 [ 751.163981][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.164000][T20486] RIP: 0033:0x7f9508d8e929 [ 751.164019][T20486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.164037][T20486] RSP: 002b:00007f9509bec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 751.164061][T20486] RAX: ffffffffffffffda RBX: 00007f9508fb5fa0 RCX: 00007f9508d8e929 [ 751.164076][T20486] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 751.164088][T20486] RBP: 00007f9508e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 751.164101][T20486] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.164114][T20486] R13: 0000000000000000 R14: 00007f9508fb5fa0 R15: 00007ffffb7a17d8 [ 751.164149][T20486] [ 751.164158][T20486] Mem-Info: [ 751.185143][T20483] lo speed is unknown, defaulting to 1000 [ 751.222780][T20486] active_anon:10259 inactive_anon:0 isolated_anon:0 [ 751.222780][T20486] active_file:1368 inactive_file:40112 isolated_file:0 [ 751.222780][T20486] unevictable:768 dirty:381 writeback:0 [ 751.222780][T20486] slab_reclaimable:12692 slab_unreclaimable:350371 [ 751.222780][T20486] mapped:30260 shmem:1407 pagetables:1015 [ 751.222780][T20486] sec_pagetables:0 bounce:0 [ 751.222780][T20486] kernel_misc_reclaimable:0 [ 751.222780][T20486] free:1054893 free_pcp:21671 free_cma:0 [ 751.358887][T20483] lo speed is unknown, defaulting to 1000 [ 751.393181][T20486] Node 0 active_anon:41136kB inactive_anon:0kB active_file:5472kB inactive_file:160244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121040kB dirty:1524kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12140kB pagetables:3884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 751.657375][T20486] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 751.720519][T20486] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 751.875764][T20486] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 751.906488][T20486] Node 0 DMA32 free:291684kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41788kB inactive_anon:0kB active_file:5472kB inactive_file:158416kB unevictable:1536kB writepending:1524kB present:3129332kB managed:2561008kB mlocked:0kB bounce:0kB free_pcp:81328kB local_pcp:31368kB free_cma:0kB [ 751.970770][T20486] lowmem_reserve[]: 0 0 1 1 1 [ 751.975569][T20486] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 752.054970][T20486] lowmem_reserve[]: 0 0 0 0 0 [ 752.080178][T20486] Node 1 Normal free:3910948kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6828kB local_pcp:3624kB free_cma:0kB [ 752.123052][T20486] lowmem_reserve[]: 0 0 0 0 0 [ 752.128086][T20486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 752.144942][T20486] Node 0 DMA32: 99*4kB (UME) 1118*8kB (UME) 727*16kB (UME) 1384*32kB (UME) 239*64kB (UME) 331*128kB (UME) 64*256kB (UME) 16*512kB (UM) 16*1024kB (UME) 11*2048kB (UME) 28*4096kB (UM) = 301100kB [ 752.166509][T20486] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 752.180092][T20486] Node 1 Normal: 197*4kB (UME) 50*8kB (UME) 50*16kB (UME) 265*32kB (UME) 99*64kB (UME) 31*128kB (UME) 10*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3910948kB [ 752.199613][T20486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.210492][T20486] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 752.220293][T20486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 752.233458][T20486] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 752.243105][T20486] 42884 total pagecache pages [ 752.248146][T20486] 0 pages in swap cache [ 752.255402][T20486] Free swap = 124996kB [ 752.260182][T20486] Total swap = 124996kB [ 752.264357][T20486] 2097051 pages RAM [ 752.268182][T20486] 0 pages HighMem/MovableOnly [ 752.276667][T20486] 424693 pages reserved [ 752.282122][T20486] 0 pages cma reserved [ 753.686817][T20527] netlink: 'syz.2.3847': attribute type 10 has an invalid length. [ 753.695918][T20527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3847'. [ 753.709377][T20527] bridge0: port 1(0!) entered blocking state [ 753.716387][T20527] bridge0: port 1(0!) entered disabled state [ 753.723562][T20527] !: entered allmulticast mode [ 753.732050][T20527] !: left allmulticast mode [ 753.737061][T20527] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 753.998658][T20532] lo speed is unknown, defaulting to 1000 [ 754.006966][T20532] lo speed is unknown, defaulting to 1000 [ 754.013153][T20539] macsec0: entered promiscuous mode [ 754.013178][T20539] macsec0: entered allmulticast mode [ 754.013799][T20539] veth1_macvtap: entered allmulticast mode [ 754.070392][T20539] macsec0: left promiscuous mode [ 754.078144][T20539] macsec0: left allmulticast mode [ 754.087301][T20539] veth1_macvtap: left allmulticast mode [ 754.633381][T20555] netlink: 'syz.1.3856': attribute type 4 has an invalid length. [ 754.952892][T20564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3861'. [ 755.086166][T20569] netlink: 'syz.2.3863': attribute type 10 has an invalid length. [ 755.096703][T20569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3863'. [ 755.141936][T20569] bridge0: port 1(0!) entered blocking state [ 755.160533][T20569] bridge0: port 1(0!) entered disabled state [ 755.167314][T20569] !: entered allmulticast mode [ 755.182907][T20569] !: left allmulticast mode [ 755.189068][T20569] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 755.564609][T20573] lo speed is unknown, defaulting to 1000 [ 755.573417][T20573] lo speed is unknown, defaulting to 1000 [ 755.995987][T20589] netlink: 'syz.0.3870': attribute type 10 has an invalid length. [ 756.021711][T20589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3870'. [ 756.116446][T20594] netlink: 'syz.4.3871': attribute type 4 has an invalid length. [ 756.586208][T20597] lo speed is unknown, defaulting to 1000 [ 756.608158][T20597] lo speed is unknown, defaulting to 1000 [ 756.672519][T20603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3874'. [ 757.530988][T20622] netlink: 'syz.2.3882': attribute type 4 has an invalid length. [ 757.721777][T20626] geneve4: entered promiscuous mode [ 757.731849][ T36] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 757.751800][ T1343] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 757.753875][T20619] lo speed is unknown, defaulting to 1000 [ 757.779465][ T1343] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 757.809920][ T1343] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 757.859184][T20619] lo speed is unknown, defaulting to 1000 [ 758.462777][T20647] netlink: 'syz.0.3893': attribute type 10 has an invalid length. [ 758.500042][T20647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3893'. [ 758.730687][T20656] lo speed is unknown, defaulting to 1000 [ 758.738664][T20656] lo speed is unknown, defaulting to 1000 [ 759.136474][T20674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.234200][T20674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.357725][T20674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.661537][T20666] lo speed is unknown, defaulting to 1000 [ 759.679113][T20666] lo speed is unknown, defaulting to 1000 [ 760.304289][T20688] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3906'. [ 760.426027][T20689] lo speed is unknown, defaulting to 1000 [ 760.567436][T20689] lo speed is unknown, defaulting to 1000 [ 760.870152][T20688] lo speed is unknown, defaulting to 1000 [ 760.898485][T20688] lo speed is unknown, defaulting to 1000 [ 761.227371][T20687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.480586][T20732] netlink: 'syz.1.3918': attribute type 10 has an invalid length. [ 763.488464][T20732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3918'. [ 763.799171][T20741] lo speed is unknown, defaulting to 1000 [ 763.825147][T20741] lo speed is unknown, defaulting to 1000 [ 764.295029][T20761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3929'. [ 764.328606][T20761] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 765.197105][T20774] batadv_slave_0: left promiscuous mode [ 765.214704][T20774] veth0_macvtap: left promiscuous mode [ 765.242216][T20774] bridge0: left allmulticast mode [ 765.274841][T20776] netlink: 'syz.0.3936': attribute type 3 has an invalid length. [ 766.633594][T20817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3949'. [ 766.849038][T20823] netlink: 'syz.2.3952': attribute type 5 has an invalid length. [ 766.974988][T20832] netlink: 'syz.0.3957': attribute type 1 has an invalid length. [ 767.648877][T20851] netlink: 'syz.0.3963': attribute type 10 has an invalid length. [ 767.679983][T20851] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3963'. [ 767.928798][T20859] lo speed is unknown, defaulting to 1000 [ 767.952055][T20859] lo speed is unknown, defaulting to 1000 [ 767.976582][T20861] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3967'. [ 768.026577][T20860] lo speed is unknown, defaulting to 1000 [ 768.048741][T20860] lo speed is unknown, defaulting to 1000 [ 769.718740][T20907] xt_hashlimit: size too large, truncated to 1048576 [ 769.984646][T20915] xfrm1: entered allmulticast mode [ 770.517603][T20938] netlink: 'syz.4.3999': attribute type 10 has an invalid length. [ 770.553955][T20943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4001'. [ 770.568760][T20938] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3999'. [ 770.802721][T20938] lo speed is unknown, defaulting to 1000 [ 770.829224][T20938] lo speed is unknown, defaulting to 1000 [ 770.885306][T20956] lo speed is unknown, defaulting to 1000 [ 770.920116][T20961] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4007'. [ 770.951589][T20956] lo speed is unknown, defaulting to 1000 [ 772.735391][T21023] syzkaller1: entered promiscuous mode [ 772.741176][T21023] syzkaller1: entered allmulticast mode [ 773.329021][T21044] netlink: 'syz.2.4041': attribute type 10 has an invalid length. [ 773.342237][T21044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4041'. [ 773.357691][T21044] bridge0: port 1(0!) entered blocking state [ 773.377745][T21046] sctp: [Deprecated]: syz.4.4042 (pid 21046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 773.377745][T21046] Use struct sctp_sack_info instead [ 773.450728][T21044] bridge0: port 1(0!) entered disabled state [ 773.457403][T21044] !: entered allmulticast mode [ 773.468960][T21044] !: left allmulticast mode [ 773.477657][T21044] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 773.616858][T21044] lo speed is unknown, defaulting to 1000 [ 773.648665][T21044] lo speed is unknown, defaulting to 1000 [ 773.660070][T21055] netlink: 'syz.1.4043': attribute type 4 has an invalid length. [ 773.665255][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4046'. [ 773.990871][T21072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4052'. [ 774.222501][T21079] netlink: 'syz.0.4054': attribute type 1 has an invalid length. [ 774.245752][T21079] netlink: 'syz.0.4054': attribute type 4 has an invalid length. [ 774.290191][T21079] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4054'. [ 774.452682][T21086] netlink: 'syz.0.4057': attribute type 4 has an invalid length. [ 774.523179][T21088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4058'. [ 774.551127][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4058'. [ 775.218790][T21109] netlink: 'syz.1.4064': attribute type 10 has an invalid length. [ 775.248794][T21108] lo speed is unknown, defaulting to 1000 [ 775.260965][T21109] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4064'. [ 775.265061][T21108] lo speed is unknown, defaulting to 1000 [ 775.498223][ T30] audit: type=1800 audit(1750833838.319:17): pid=21116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4066" name="blkio.bfq.time_recursive" dev="tmpfs" ino=4523 res=0 errno=0 [ 775.548458][T21119] netlink: 'syz.2.4069': attribute type 10 has an invalid length. [ 775.586763][T21119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4069'. [ 775.625812][T21118] lo speed is unknown, defaulting to 1000 [ 775.634358][T21118] lo speed is unknown, defaulting to 1000 [ 775.652318][T21119] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 776.372004][T21147] netlink: 'syz.0.4079': attribute type 10 has an invalid length. [ 776.410186][T21147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4079'. [ 776.687987][T21164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.807215][T21159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.883502][T21152] lo speed is unknown, defaulting to 1000 [ 776.897643][T21164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.926078][T21147] lo speed is unknown, defaulting to 1000 [ 776.932754][T21152] lo speed is unknown, defaulting to 1000 [ 776.953097][T21147] lo speed is unknown, defaulting to 1000 [ 777.000242][ T6135] page_pool_release_retry() stalled pool shutdown: id 60, 1 inflight 60 sec [ 777.090943][T21171] macsec0: entered allmulticast mode [ 777.097780][T21171] veth1_macvtap: entered allmulticast mode [ 777.119973][T21171] macsec0: left allmulticast mode [ 777.125044][T21171] veth1_macvtap: left allmulticast mode [ 777.267648][T21173] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4086'. [ 777.489096][T21176] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 778.410361][T21194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4091'. [ 779.391976][T21223] netlink: 'syz.0.4100': attribute type 10 has an invalid length. [ 779.695480][T21224] lo speed is unknown, defaulting to 1000 [ 779.726145][T21224] lo speed is unknown, defaulting to 1000 [ 780.576131][T21258] lo speed is unknown, defaulting to 1000 [ 780.598638][T21258] lo speed is unknown, defaulting to 1000 [ 780.721547][T21264] lo speed is unknown, defaulting to 1000 [ 780.750092][T21264] lo speed is unknown, defaulting to 1000 [ 780.976290][T21278] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 781.162863][T21278] lo speed is unknown, defaulting to 1000 [ 781.171293][T21278] lo speed is unknown, defaulting to 1000 [ 781.675617][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4126'. [ 782.025712][T21302] netlink: 'syz.4.4130': attribute type 10 has an invalid length. [ 782.048975][T21302] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4130'. [ 782.205169][T21310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4133'. [ 782.265143][T21311] lo speed is unknown, defaulting to 1000 [ 782.334451][T21311] lo speed is unknown, defaulting to 1000 [ 782.366972][T21280] lo speed is unknown, defaulting to 1000 [ 782.419607][T21280] lo speed is unknown, defaulting to 1000 [ 783.804123][T21344] netlink: 'syz.2.4145': attribute type 10 has an invalid length. [ 783.826128][T21344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4145'. [ 784.266495][T21344] A link change request failed with some changes committed already. Interface nr29 may have been left with an inconsistent configuration, please check. [ 784.532802][T21347] lo speed is unknown, defaulting to 1000 [ 784.750015][T21350] lo speed is unknown, defaulting to 1000 [ 784.755980][T21347] lo speed is unknown, defaulting to 1000 [ 784.824011][T21350] lo speed is unknown, defaulting to 1000 [ 784.865869][T21358] syzkaller1: entered promiscuous mode [ 784.871704][T21358] syzkaller1: entered allmulticast mode [ 785.079376][T21366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4149'. [ 785.188007][T21368] netlink: 'syz.4.4150': attribute type 13 has an invalid length. [ 785.253493][T21369] [ 785.255876][T21369] ====================================================== [ 785.263235][T21369] WARNING: possible circular locking dependency detected [ 785.270355][T21369] 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 Not tainted [ 785.277485][T21369] ------------------------------------------------------ [ 785.284543][T21369] syz.4.4150/21369 is trying to acquire lock: [ 785.290634][T21369] ffffffff8f66a618 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 785.299985][T21369] [ 785.299985][T21369] but task is already holding lock: [ 785.307361][T21369] ffff8880553b6270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 785.316689][T21369] [ 785.316689][T21369] which lock already depends on the new lock. [ 785.316689][T21369] [ 785.327100][T21369] [ 785.327100][T21369] the existing dependency chain (in reverse order) is: [ 785.336115][T21369] [ 785.336115][T21369] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 785.344199][T21369] lock_acquire+0x120/0x360 [ 785.349231][T21369] _raw_spin_lock_bh+0x36/0x50 [ 785.354523][T21369] nr_rt_device_down+0x12a/0x720 [ 785.359987][T21369] nr_device_event+0x137/0x150 [ 785.365275][T21369] notifier_call_chain+0x1b3/0x3e0 [ 785.370915][T21369] __dev_notify_flags+0x18d/0x2e0 [ 785.376469][T21369] netif_change_flags+0xe8/0x1a0 [ 785.381934][T21369] dev_change_flags+0x130/0x260 [ 785.387307][T21369] dev_ioctl+0x7b4/0x1150 [ 785.392176][T21369] sock_do_ioctl+0x22c/0x300 [ 785.397547][T21369] sock_ioctl+0x576/0x790 [ 785.402395][T21369] __se_sys_ioctl+0xfc/0x170 [ 785.407510][T21369] do_syscall_64+0xfa/0x3b0 [ 785.412534][T21369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.418950][T21369] [ 785.418950][T21369] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 785.426771][T21369] lock_acquire+0x120/0x360 [ 785.431801][T21369] _raw_spin_lock_bh+0x36/0x50 [ 785.437179][T21369] nr_rt_device_down+0xa9/0x720 [ 785.442550][T21369] nr_device_event+0x137/0x150 [ 785.447845][T21369] notifier_call_chain+0x1b3/0x3e0 [ 785.453496][T21369] __dev_notify_flags+0x18d/0x2e0 [ 785.459043][T21369] netif_change_flags+0xe8/0x1a0 [ 785.464504][T21369] dev_change_flags+0x130/0x260 [ 785.469880][T21369] dev_ioctl+0x7b4/0x1150 [ 785.474818][T21369] sock_do_ioctl+0x22c/0x300 [ 785.479928][T21369] sock_ioctl+0x576/0x790 [ 785.484777][T21369] __se_sys_ioctl+0xfc/0x170 [ 785.489891][T21369] do_syscall_64+0xfa/0x3b0 [ 785.494913][T21369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.501329][T21369] [ 785.501329][T21369] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 785.509245][T21369] validate_chain+0xb9b/0x2140 [ 785.514525][T21369] __lock_acquire+0xab9/0xd20 [ 785.519725][T21369] lock_acquire+0x120/0x360 [ 785.524750][T21369] _raw_spin_lock_bh+0x36/0x50 [ 785.530384][T21369] nr_remove_neigh+0x25/0xe0 [ 785.535492][T21369] nr_add_node+0x1d9f/0x2570 [ 785.540604][T21369] nr_rt_ioctl+0xc12/0xd50 [ 785.545542][T21369] sock_do_ioctl+0xd9/0x300 [ 785.550567][T21369] sock_ioctl+0x576/0x790 [ 785.555415][T21369] __se_sys_ioctl+0xfc/0x170 [ 785.560613][T21369] do_syscall_64+0xfa/0x3b0 [ 785.565701][T21369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.572108][T21369] [ 785.572108][T21369] other info that might help us debug this: [ 785.572108][T21369] [ 785.582337][T21369] Chain exists of: [ 785.582337][T21369] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 785.582337][T21369] [ 785.596253][T21369] Possible unsafe locking scenario: [ 785.596253][T21369] [ 785.603724][T21369] CPU0 CPU1 [ 785.609096][T21369] ---- ---- [ 785.614545][T21369] lock(&nr_node->node_lock); [ 785.619313][T21369] lock(nr_node_list_lock); [ 785.626511][T21369] lock(&nr_node->node_lock); [ 785.633798][T21369] lock(nr_neigh_list_lock); [ 785.638475][T21369] [ 785.638475][T21369] *** DEADLOCK *** [ 785.638475][T21369] [ 785.646616][T21369] 1 lock held by syz.4.4150/21369: [ 785.651806][T21369] #0: ffff8880553b6270 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 785.661559][T21369] [ 785.661559][T21369] stack backtrace: [ 785.667450][T21369] CPU: 0 UID: 0 PID: 21369 Comm: syz.4.4150 Not tainted 6.16.0-rc2-syzkaller-00675-g8dacfd92dbef #0 PREEMPT(full) [ 785.667468][T21369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.667477][T21369] Call Trace: [ 785.667485][T21369] [ 785.667492][T21369] dump_stack_lvl+0x189/0x250 [ 785.667518][T21369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.667540][T21369] ? __pfx__printk+0x10/0x10 [ 785.667555][T21369] ? stack_trace_save+0x9c/0xe0 [ 785.667577][T21369] print_circular_bug+0x2ee/0x310 [ 785.667595][T21369] check_noncircular+0x134/0x160 [ 785.667612][T21369] validate_chain+0xb9b/0x2140 [ 785.667634][T21369] __lock_acquire+0xab9/0xd20 [ 785.667656][T21369] ? nr_remove_neigh+0x25/0xe0 [ 785.667672][T21369] lock_acquire+0x120/0x360 [ 785.667690][T21369] ? nr_remove_neigh+0x25/0xe0 [ 785.667709][T21369] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 785.667725][T21369] ? nr_remove_neigh+0x25/0xe0 [ 785.667741][T21369] _raw_spin_lock_bh+0x36/0x50 [ 785.667761][T21369] ? nr_remove_neigh+0x25/0xe0 [ 785.667777][T21369] nr_remove_neigh+0x25/0xe0 [ 785.667794][T21369] nr_add_node+0x1d9f/0x2570 [ 785.667810][T21369] ? __asan_memcpy+0x40/0x70 [ 785.667830][T21369] ? nr_call_to_digi+0x126/0x1b0 [ 785.667846][T21369] nr_rt_ioctl+0xc12/0xd50 [ 785.667861][T21369] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 785.667884][T21369] ? kasan_quarantine_put+0xdd/0x220 [ 785.667904][T21369] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 785.667923][T21369] ? apparmor_capable+0x137/0x1b0 [ 785.667940][T21369] ? capable+0x89/0xe0 [ 785.667960][T21369] ? nr_ioctl+0x1b1/0x3b0 [ 785.667982][T21369] sock_do_ioctl+0xd9/0x300 [ 785.667998][T21369] ? __pfx_sock_do_ioctl+0x10/0x10 [ 785.668013][T21369] ? __lock_acquire+0xab9/0xd20 [ 785.668040][T21369] sock_ioctl+0x576/0x790 [ 785.668055][T21369] ? __pfx_sock_ioctl+0x10/0x10 [ 785.668070][T21369] ? __fget_files+0x2a/0x420 [ 785.668084][T21369] ? __fget_files+0x3a0/0x420 [ 785.668098][T21369] ? __fget_files+0x2a/0x420 [ 785.668114][T21369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 785.668134][T21369] ? __pfx_sock_ioctl+0x10/0x10 [ 785.668148][T21369] __se_sys_ioctl+0xfc/0x170 [ 785.668168][T21369] do_syscall_64+0xfa/0x3b0 [ 785.668184][T21369] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.668199][T21369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.668215][T21369] ? clear_bhb_loop+0x60/0xb0 [ 785.668231][T21369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.668245][T21369] RIP: 0033:0x7fcdd678e929 [ 785.668259][T21369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.668273][T21369] RSP: 002b:00007fcdd755f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.668295][T21369] RAX: ffffffffffffffda RBX: 00007fcdd69b6080 RCX: 00007fcdd678e929 [ 785.668307][T21369] RDX: 0000200000000280 RSI: 000000000000890b RDI: 0000000000000005 [ 785.668316][T21369] RBP: 00007fcdd6810b39 R08: 0000000000000000 R09: 0000000000000000 [ 785.668326][T21369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.668335][T21369] R13: 0000000000000000 R14: 00007fcdd69b6080 R15: 00007ffc62650988 [ 785.668352][T21369] [ 785.980190][T21372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4150'. [ 785.989514][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'.