last executing test programs: 3.259763266s ago: executing program 1 (id=2656): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.013976991s ago: executing program 1 (id=2679): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) r8 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r10, @ANYBLOB="01"], 0x20}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000020002001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x4000) 1.623755031s ago: executing program 4 (id=2687): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xfff}, {0x3, 0x1, 0x332e, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) 1.582116747s ago: executing program 1 (id=2688): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) 1.371907042s ago: executing program 4 (id=2691): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 1.305780879s ago: executing program 3 (id=2692): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000007280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x80) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/191, 0xbf}], 0x1}, 0x0) 1.193242544s ago: executing program 4 (id=2694): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000004) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.143605818s ago: executing program 3 (id=2695): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf8, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffe0}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x0, 0x1, 0x5, 0x9}, {0x8, 0x3, 0x2, 0x8}, {0x2, 0x0, 0x9, 0xffffff7f}, {0x1, 0x8d, 0x2, 0x579}, {0xff, 0x2, 0x2, 0x100}, {0x9, 0x4, 0x7, 0x9e}, {0x80, 0x0, 0x1, 0x9}]}}, @TCA_BPF_ACT={0x6c, 0x1, [@m_xt={0x68, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.07623298s ago: executing program 2 (id=2697): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x6, 0x7, 0x6}, 0x10) 962.917498ms ago: executing program 2 (id=2698): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 941.496741ms ago: executing program 3 (id=2699): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000c0d1bdc5021820982996a6d12399ac000000000000000017fe00000000400000df42df01eb9cc4af82d10fb67cde16a8e87cbf626c19cb31cadc659b1f514ad45856346b4a970009d10a5dfdfb5650ad893ecb31dca229d8462cbe6b1645605f402b2dbe73181f5e8b5a0a5926f02d0a89375ffc48f66ce70a6a9b2bc7a1d6271697f93b", @ANYRES32=r1], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, r1}, 0xc) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="27031c00160014000000002f1eafacf706e105000000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 907.78389ms ago: executing program 0 (id=2700): setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r1}, 0x8) 815.095901ms ago: executing program 4 (id=2701): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x48, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 685.664219ms ago: executing program 0 (id=2702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xfffffffd, 0x7}]}}}}}}}, 0x0) 684.597098ms ago: executing program 4 (id=2703): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000180)='9', 0x1, 0x0, &(0x7f0000000200)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @local}, 0x14) 614.751781ms ago: executing program 1 (id=2704): r0 = socket$kcm(0x2d, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r4}) 614.003953ms ago: executing program 3 (id=2705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) 532.587587ms ago: executing program 2 (id=2706): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 524.972262ms ago: executing program 0 (id=2707): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 435.889653ms ago: executing program 3 (id=2708): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x6, 0x7, 0x6}, 0x10) 413.501898ms ago: executing program 1 (id=2709): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r3, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, 0x0, &(0x7f00000004c0)=@udp=r5}, 0x20) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @mcast2, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0x200}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 356.421745ms ago: executing program 2 (id=2710): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xf8, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffe0}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x0, 0x1, 0x5, 0x9}, {0x8, 0x3, 0x2, 0x8}, {0x2, 0x0, 0x9, 0xffffff7f}, {0x1, 0x8d, 0x2, 0x579}, {0xff, 0x2, 0x2, 0x100}, {0x9, 0x4, 0x7, 0x9e}, {0x80, 0x0, 0x1, 0x9}]}}, @TCA_BPF_ACT={0x6c, 0x1, [@m_xt={0x68, 0xa, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0xe}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 291.642091ms ago: executing program 0 (id=2711): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, 0x0, 0x4000004) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x4000040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 231.478725ms ago: executing program 1 (id=2712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 188.654293ms ago: executing program 3 (id=2713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32, @ANYBLOB="0a000600080211000001000006006600c78800001a003300983d0500505050505050ffffffffffff5050505050080000008f0000432fc556dd"], 0x50}}, 0x0) 182.246771ms ago: executing program 2 (id=2714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @random="618e38850ee1", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2f}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 162.610267ms ago: executing program 4 (id=2715): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 77.938756ms ago: executing program 0 (id=2716): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x48, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x48}}, 0x0) 19.911246ms ago: executing program 2 (id=2717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c19efd7e0054a863f3d5cfe6cb55b5bb9fa693584de6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f", 0xa8}], 0x2, 0x0, 0x0, 0x44003}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 0s ago: executing program 0 (id=2718): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): 32194][ T5843] bridge_slave_1: entered allmulticast mode [ 89.639383][ T5843] bridge_slave_1: entered promiscuous mode [ 89.656537][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.714192][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.740944][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.748167][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.755642][ T5848] bridge_slave_0: entered allmulticast mode [ 89.763894][ T5848] bridge_slave_0: entered promiscuous mode [ 89.841028][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.848344][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.856549][ T5848] bridge_slave_1: entered allmulticast mode [ 89.864858][ T5848] bridge_slave_1: entered promiscuous mode [ 89.875030][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.888873][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.908988][ T5839] team0: Port device team_slave_0 added [ 89.918901][ T5839] team0: Port device team_slave_1 added [ 89.946767][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954267][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.962470][ T5852] bridge_slave_0: entered allmulticast mode [ 89.969704][ T5852] bridge_slave_0: entered promiscuous mode [ 90.034088][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.042507][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.050906][ T5852] bridge_slave_1: entered allmulticast mode [ 90.058466][ T5852] bridge_slave_1: entered promiscuous mode [ 90.115693][ T5843] team0: Port device team_slave_0 added [ 90.122837][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.130993][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.157589][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.185733][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.199484][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.209756][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 90.225332][ T5843] team0: Port device team_slave_1 added [ 90.248948][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.257508][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.284981][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.299754][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.313433][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.351510][ T5842] Bluetooth: hci1: command tx timeout [ 90.360160][ T5842] Bluetooth: hci0: command tx timeout [ 90.417194][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.424701][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.451483][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.465856][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.473148][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.502496][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.514415][ T5842] Bluetooth: hci3: command tx timeout [ 90.524508][ T5842] Bluetooth: hci2: command tx timeout [ 90.541318][ T5848] team0: Port device team_slave_0 added [ 90.578715][ T5852] team0: Port device team_slave_0 added [ 90.587471][ T5848] team0: Port device team_slave_1 added [ 90.614414][ T5852] team0: Port device team_slave_1 added [ 90.661258][ T5839] hsr_slave_0: entered promiscuous mode [ 90.668037][ T5839] hsr_slave_1: entered promiscuous mode [ 90.670286][ T5842] Bluetooth: hci4: command tx timeout [ 90.749327][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.756886][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.784040][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.796026][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.803465][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.830980][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.856997][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.864390][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.872446][ T5854] bridge_slave_0: entered allmulticast mode [ 90.879705][ T5854] bridge_slave_0: entered promiscuous mode [ 90.893866][ T5843] hsr_slave_0: entered promiscuous mode [ 90.901323][ T5843] hsr_slave_1: entered promiscuous mode [ 90.907848][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.916333][ T5843] Cannot create hsr debugfs directory [ 90.925704][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.933266][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.962659][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.982137][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.989226][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.016287][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.041216][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.049149][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.057946][ T5854] bridge_slave_1: entered allmulticast mode [ 91.065394][ T5854] bridge_slave_1: entered promiscuous mode [ 91.211689][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.226094][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.316740][ T5852] hsr_slave_0: entered promiscuous mode [ 91.323759][ T5852] hsr_slave_1: entered promiscuous mode [ 91.330973][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.338923][ T5852] Cannot create hsr debugfs directory [ 91.420436][ T5848] hsr_slave_0: entered promiscuous mode [ 91.427008][ T5848] hsr_slave_1: entered promiscuous mode [ 91.434183][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.442494][ T5848] Cannot create hsr debugfs directory [ 91.452137][ T5854] team0: Port device team_slave_0 added [ 91.495652][ T5854] team0: Port device team_slave_1 added [ 91.602871][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.610285][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.637501][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.657065][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.664644][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.693179][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.892439][ T5854] hsr_slave_0: entered promiscuous mode [ 91.901001][ T5854] hsr_slave_1: entered promiscuous mode [ 91.907517][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.915968][ T5854] Cannot create hsr debugfs directory [ 92.097479][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.110006][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.137874][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.168301][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.193847][ T1210] cfg80211: failed to load regulatory.db [ 92.287977][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.299407][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.333040][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.344426][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.431049][ T5842] Bluetooth: hci0: command tx timeout [ 92.436818][ T5842] Bluetooth: hci1: command tx timeout [ 92.463973][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.476346][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.488329][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.504254][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.590887][ T5846] Bluetooth: hci3: command tx timeout [ 92.596896][ T5842] Bluetooth: hci2: command tx timeout [ 92.651091][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.666569][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.678673][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.692677][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.732037][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.750126][ T5842] Bluetooth: hci4: command tx timeout [ 92.836526][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.844270][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.858670][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.871581][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.885746][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.913239][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.920542][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.973843][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.981159][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.014098][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.107999][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.144549][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.151876][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.185007][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.192439][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.238619][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.316675][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.338791][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.410078][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.417352][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.462477][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.469842][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.491096][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.543713][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.567606][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.574846][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.635480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.642884][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.698846][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.759916][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.767158][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.781154][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.788306][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.809408][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.935265][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.265695][ T5843] veth0_vlan: entered promiscuous mode [ 94.326134][ T5843] veth1_vlan: entered promiscuous mode [ 94.413141][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.512342][ T5842] Bluetooth: hci1: command tx timeout [ 94.518248][ T5846] Bluetooth: hci0: command tx timeout [ 94.538450][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.608664][ T5852] veth0_vlan: entered promiscuous mode [ 94.627799][ T5843] veth0_macvtap: entered promiscuous mode [ 94.643612][ T5852] veth1_vlan: entered promiscuous mode [ 94.658440][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.670702][ T5846] Bluetooth: hci2: command tx timeout [ 94.676434][ T5846] Bluetooth: hci3: command tx timeout [ 94.683149][ T5843] veth1_macvtap: entered promiscuous mode [ 94.729122][ T5839] veth0_vlan: entered promiscuous mode [ 94.785670][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.797059][ T5839] veth1_vlan: entered promiscuous mode [ 94.827275][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.841298][ T5846] Bluetooth: hci4: command tx timeout [ 94.865262][ T5848] veth0_vlan: entered promiscuous mode [ 94.877690][ T5852] veth0_macvtap: entered promiscuous mode [ 94.889135][ T5852] veth1_macvtap: entered promiscuous mode [ 94.902084][ T5854] veth0_vlan: entered promiscuous mode [ 94.918546][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.929650][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.941746][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.951649][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.967721][ T5848] veth1_vlan: entered promiscuous mode [ 95.012174][ T5854] veth1_vlan: entered promiscuous mode [ 95.046462][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.059470][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.071979][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.104782][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.117408][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.129119][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.186678][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.195944][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.205226][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.214291][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.256570][ T5839] veth0_macvtap: entered promiscuous mode [ 95.266140][ T5848] veth0_macvtap: entered promiscuous mode [ 95.282507][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.294444][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.308973][ T5848] veth1_macvtap: entered promiscuous mode [ 95.327875][ T5839] veth1_macvtap: entered promiscuous mode [ 95.348715][ T5854] veth0_macvtap: entered promiscuous mode [ 95.404940][ T5854] veth1_macvtap: entered promiscuous mode [ 95.432711][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.445618][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.456790][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.467803][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.486567][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.497625][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.508557][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.518699][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.529686][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.541923][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.557346][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.565986][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.604676][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.616088][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.628851][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.639821][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.650366][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.660924][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.673706][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.685552][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.694876][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.704239][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.715239][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.737843][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.758369][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.763464][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.776481][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.780838][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.794910][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.805616][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.816266][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.829514][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.869194][ T5848] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.878595][ T5848] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.888694][ T5848] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.897479][ T5848] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.911513][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.932716][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.934523][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.943495][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.970363][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.980510][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.991611][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.001595][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.012495][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.024047][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.113805][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.133975][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.157197][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.168146][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.178924][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.198570][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.209252][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.247790][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.259738][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.296377][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.319034][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.325220][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.338181][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.347055][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.356247][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.379717][ T5926] tipc: Started in network mode [ 96.386507][ T5926] tipc: Node identity 7f000001, cluster identity 4711 [ 96.397184][ T5926] tipc: Enabled bearer , priority 10 [ 96.424764][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.442449][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.590208][ T5842] Bluetooth: hci1: command tx timeout [ 96.595830][ T5846] Bluetooth: hci0: command tx timeout [ 96.674538][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.704077][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.750571][ T5846] Bluetooth: hci3: command tx timeout [ 96.756191][ T5846] Bluetooth: hci2: command tx timeout [ 96.854410][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.896362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.910155][ T5846] Bluetooth: hci4: command tx timeout [ 97.165501][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.193216][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.247071][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.283216][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.413982][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.453103][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.510881][ T5855] tipc: Node number set to 2130706433 [ 98.438745][ T5971] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.648165][ T5978] pim6reg1: entered promiscuous mode [ 98.691917][ T5978] pim6reg1: entered allmulticast mode [ 99.069593][ T5990] netlink: 268 bytes leftover after parsing attributes in process `syz.4.25'. [ 99.122469][ T5990] unsupported nla_type 65024 [ 99.325983][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.4.27'. [ 100.891122][ T6001] smc: net device bond0 applied user defined pnetid SYZ0 [ 102.342042][ T6013] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 102.352126][ T6013] tipc: Enabled bearer , priority 10 [ 102.474961][ T6024] Zero length message leads to an empty skb [ 102.710357][ T6036] syz.1.42 uses obsolete (PF_INET,SOCK_PACKET) [ 102.934833][ T6044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.45'. [ 103.136841][ T6039] tipc: Started in network mode [ 103.142040][ T6039] tipc: Node identity ac14140f, cluster identity 4711 [ 103.149324][ T6039] tipc: New replicast peer: 255.255.255.255 [ 103.161479][ T6039] tipc: Enabled bearer , priority 10 [ 104.294482][ T5921] tipc: Node number set to 2886997007 [ 104.924303][ T6091] netlink: 12 bytes leftover after parsing attributes in process `syz.4.66'. [ 105.328494][ T6103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 106.488796][ T6103] hsr_slave_0: left promiscuous mode [ 106.504961][ T6103] hsr_slave_1: left promiscuous mode [ 106.779444][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 106.796878][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.80'. [ 106.823108][ T6119] openvswitch: netlink: Flow key attr not present in new flow. [ 107.822964][ T6154] bond0: entered promiscuous mode [ 107.828103][ T6154] bond_slave_0: entered promiscuous mode [ 107.857913][ T6154] bond_slave_1: entered promiscuous mode [ 107.893565][ T6154] batadv0: entered promiscuous mode [ 107.913689][ T6154] bond0: left promiscuous mode [ 107.918657][ T6154] bond_slave_0: left promiscuous mode [ 107.929295][ T6154] bond_slave_1: left promiscuous mode [ 107.936472][ T6154] batadv0: left promiscuous mode [ 108.366571][ T6178] x_tables: unsorted underflow at hook 4 [ 108.377032][ T6181] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.549749][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 108.575693][ T6187] IPv6: NLM_F_CREATE should be specified when creating new route [ 108.896248][ T6198] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 108.908494][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.114'. [ 109.057748][ T6198] team0: Port device geneve0 added [ 110.391558][ T6252] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 110.606607][ T5899] IPVS: starting estimator thread 0... [ 110.724260][ T6261] IPVS: using max 32 ests per chain, 76800 per kthread [ 112.565716][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 113.277648][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.318475][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.360217][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.493589][ T6352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.185'. [ 113.581765][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.608534][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.619360][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.183'. [ 113.891898][ T6369] netlink: 56 bytes leftover after parsing attributes in process `syz.0.191'. [ 113.943437][ T6369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.191'. [ 114.103189][ T6374] openvswitch: netlink: Flow key attr not present in new flow. [ 114.405005][ T6386] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 114.792738][ T6395] xt_TPROXY: Can be used only with -p tcp or -p udp [ 116.747372][ T6446] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.800049][ T6446] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.826877][ T6446] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.861319][ T6446] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 116.897377][ T6446] geneve2: entered promiscuous mode [ 116.915623][ T6446] geneve2: entered allmulticast mode [ 116.941903][ T6449] tipc: Started in network mode [ 116.947013][ T6449] tipc: Node identity 7f000001, cluster identity 4711 [ 116.965557][ T6449] tipc: Enabled bearer , priority 10 [ 117.002635][ T6449] tipc: Enabled bearer , priority 10 [ 117.062091][ T6456] xt_hashlimit: size too large, truncated to 1048576 [ 118.015948][ T6479] __nla_validate_parse: 15 callbacks suppressed [ 118.015973][ T6479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 118.073947][ T6483] lo: entered promiscuous mode [ 118.079302][ T6483] lo: entered allmulticast mode [ 118.090245][ T5921] tipc: Node number set to 2130706433 [ 118.243682][ T6485] netlink: 'syz.4.245': attribute type 13 has an invalid length. [ 118.284138][ T6485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.245'. [ 118.312278][ T6489] netlink: 84 bytes leftover after parsing attributes in process `syz.0.246'. [ 118.346633][ T6485] erspan0: refused to change device tx_queue_len [ 118.382125][ T6485] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 118.606583][ T6497] IPv6: Can't replace route, no match found [ 118.907661][ T6429] syz.3.220: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 118.959982][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.3.220 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 118.960015][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.960027][ T6429] Call Trace: [ 118.960034][ T6429] [ 118.960043][ T6429] dump_stack_lvl+0x241/0x360 [ 118.960078][ T6429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.960105][ T6429] ? __pfx__printk+0x10/0x10 [ 118.960128][ T6429] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 118.960159][ T6429] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 118.960185][ T6429] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 118.960215][ T6429] warn_alloc+0x27c/0x410 [ 118.960248][ T6429] ? __pfx_warn_alloc+0x10/0x10 [ 118.960274][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960293][ T6429] ? __get_vm_area_node+0x1c8/0x2d0 [ 118.960320][ T6429] ? __get_vm_area_node+0x25c/0x2d0 [ 118.960355][ T6429] __vmalloc_node_range_noprof+0x634/0x1390 [ 118.960404][ T6429] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 118.960432][ T6429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.960454][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960472][ T6429] ? __get_vm_area_node+0x1c8/0x2d0 [ 118.960498][ T6429] ? __get_vm_area_node+0x25c/0x2d0 [ 118.960529][ T6429] __vmalloc_node_range_noprof+0x53f/0x1390 [ 118.960547][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960595][ T6429] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 118.960615][ T6429] ? __kasan_kmalloc_large+0x1a/0xa0 [ 118.960646][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960666][ T6429] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 118.960692][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960709][ T6429] ? hash_netiface_create+0x356/0x1040 [ 118.960727][ T6429] ? hash_netiface_create+0x2fa/0x1040 [ 118.960750][ T6429] hash_netiface_create+0x356/0x1040 [ 118.960783][ T6429] ? __pfx_hash_netiface_create+0x10/0x10 [ 118.960805][ T6429] ip_set_create+0xa7d/0x1960 [ 118.960829][ T6429] ? ip_set_create+0x48c/0x1960 [ 118.960856][ T6429] ? __pfx_ip_set_create+0x10/0x10 [ 118.960914][ T6429] ? nfnetlink_rcv_msg+0x227/0x1190 [ 118.960935][ T6429] nfnetlink_rcv_msg+0xbf7/0x1190 [ 118.960989][ T6429] ? nfnetlink_rcv_msg+0x227/0x1190 [ 118.961033][ T6429] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.961051][ T6429] ? stack_trace_save+0x11a/0x1d0 [ 118.961106][ T6429] ? dev_hard_start_xmit+0x2d4/0x840 [ 118.961125][ T6429] ? __dev_queue_xmit+0x1b80/0x3f60 [ 118.961144][ T6429] ? __netlink_deliver_tap+0x561/0x7f0 [ 118.961168][ T6429] ? netlink_deliver_tap+0x19d/0x1b0 [ 118.961191][ T6429] ? netlink_unicast+0x7c6/0x9a0 [ 118.961211][ T6429] ? netlink_sendmsg+0x8c3/0xcd0 [ 118.961244][ T6429] ? __sock_sendmsg+0x221/0x270 [ 118.961265][ T6429] ? ____sys_sendmsg+0x523/0x860 [ 118.961282][ T6429] ? __sys_sendmsg+0x271/0x360 [ 118.961317][ T6429] netlink_rcv_skb+0x208/0x480 [ 118.961342][ T6429] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 118.961364][ T6429] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.961405][ T6429] ? apparmor_capable+0x13b/0x1b0 [ 118.961429][ T6429] ? bpf_lsm_capable+0x9/0x10 [ 118.961452][ T6429] ? security_capable+0x7e/0x2d0 [ 118.961486][ T6429] nfnetlink_rcv+0x296/0x28f0 [ 118.961511][ T6429] ? __dev_queue_xmit+0x2f9/0x3f60 [ 118.961533][ T6429] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 118.961559][ T6429] ? __dev_queue_xmit+0x2f9/0x3f60 [ 118.961580][ T6429] ? __dev_queue_xmit+0x2f9/0x3f60 [ 118.961603][ T6429] ? __dev_queue_xmit+0x1780/0x3f60 [ 118.961623][ T6429] ? kasan_save_track+0x3f/0x80 [ 118.961643][ T6429] ? __kasan_slab_alloc+0x66/0x80 [ 118.961673][ T6429] ? do_syscall_64+0xf3/0x230 [ 118.961701][ T6429] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 118.961720][ T6429] ? __dev_queue_xmit+0x2f9/0x3f60 [ 118.961747][ T6429] ? __pfx___dev_queue_xmit+0x10/0x10 [ 118.961789][ T6429] ? ref_tracker_free+0x63e/0x7e0 [ 118.961812][ T6429] ? __asan_memcpy+0x40/0x70 [ 118.961831][ T6429] ? __pfx_ref_tracker_free+0x10/0x10 [ 118.961850][ T6429] ? __skb_clone+0x5c/0x6d0 [ 118.961890][ T6429] ? skb_clone+0x240/0x390 [ 118.961926][ T6429] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.961956][ T6429] ? netlink_deliver_tap+0x2e/0x1b0 [ 118.961994][ T6429] netlink_unicast+0x7f8/0x9a0 [ 118.962029][ T6429] ? __pfx_netlink_unicast+0x10/0x10 [ 118.962056][ T6429] ? skb_put+0x114/0x1f0 [ 118.962080][ T6429] netlink_sendmsg+0x8c3/0xcd0 [ 118.962123][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.962155][ T6429] ? aa_sock_msg_perm+0x91/0x160 [ 118.962190][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.962214][ T6429] __sock_sendmsg+0x221/0x270 [ 118.962243][ T6429] ____sys_sendmsg+0x523/0x860 [ 118.962275][ T6429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 118.962293][ T6429] ? __fget_files+0x2a/0x420 [ 118.962316][ T6429] ? __fget_files+0x2a/0x420 [ 118.962345][ T6429] __sys_sendmsg+0x271/0x360 [ 118.962372][ T6429] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.962456][ T6429] ? do_syscall_64+0xb6/0x230 [ 118.962482][ T6429] do_syscall_64+0xf3/0x230 [ 118.962504][ T6429] ? clear_bhb_loop+0x45/0xa0 [ 118.962526][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.962545][ T6429] RIP: 0033:0x7fc8f6d8d169 [ 118.962565][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.962581][ T6429] RSP: 002b:00007fc8f7b38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.962605][ T6429] RAX: ffffffffffffffda RBX: 00007fc8f6fa5fa0 RCX: 00007fc8f6d8d169 [ 118.962619][ T6429] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 118.962632][ T6429] RBP: 00007fc8f6e0e730 R08: 0000000000000000 R09: 0000000000000000 [ 118.962644][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.962656][ T6429] R13: 0000000000000000 R14: 00007fc8f6fa5fa0 R15: 00007ffc852f6368 [ 118.962689][ T6429] [ 118.962698][ T6429] Mem-Info: [ 119.647395][ T6514] netlink: 112 bytes leftover after parsing attributes in process `syz.1.260'. [ 119.650302][ T6429] active_anon:4908 inactive_anon:0 isolated_anon:0 [ 119.650302][ T6429] active_file:1198 inactive_file:38314 isolated_file:0 [ 119.650302][ T6429] unevictable:768 dirty:169 writeback:0 [ 119.650302][ T6429] slab_reclaimable:9570 slab_unreclaimable:98239 [ 119.650302][ T6429] mapped:28600 shmem:1428 pagetables:922 [ 119.650302][ T6429] sec_pagetables:0 bounce:0 [ 119.650302][ T6429] kernel_misc_reclaimable:0 [ 119.650302][ T6429] free:1312801 free_pcp:383 free_cma:0 [ 119.743352][ T6429] Node 0 active_anon:19532kB inactive_anon:0kB active_file:4792kB inactive_file:153180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114400kB dirty:676kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10628kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.882947][ T6429] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 119.986561][ T6429] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.116262][ T6429] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 120.140387][ T6429] Node 0 DMA32 free:1328512kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:19524kB inactive_anon:0kB active_file:4792kB inactive_file:153080kB unevictable:1536kB writepending:676kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1472kB local_pcp:788kB free_cma:0kB [ 120.270069][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 120.290562][ T6429] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.413098][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 120.417934][ T6429] Node 1 Normal free:3907508kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.460891][ T6541] netem: change failed [ 120.529637][ T6429] lowmem_reserve[]: 0 0 0 0 0 [ 120.536107][ T6543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.579664][ T6429] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.625003][ T6429] Node 0 DMA32: 35*4kB (UE) 32*8kB (UME) 12*16kB (UM) 75*32kB (UME) 40*64kB (UME) 21*128kB (ME) 19*256kB (UM) 7*512kB (UM) 1*1024kB (M) 4*2048kB (M) 318*4096kB (M) = 1328428kB [ 120.661231][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.272'. [ 120.713180][ T6429] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 120.758881][ T6429] Node 1 Normal: 221*4kB (UE) 64*8kB (UME) 36*16kB (UME) 206*32kB (UME) 97*64kB (UME) 32*128kB (UME) 18*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3907508kB [ 120.813907][ T6429] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.855332][ T6429] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.950809][ T6429] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.989135][ T6429] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.008472][ T6429] 40941 total pagecache pages [ 121.017955][ T6429] 0 pages in swap cache [ 121.028392][ T6429] Free swap = 124996kB [ 121.034367][ T6543] hsr_slave_1 (unregistering): left promiscuous mode [ 121.072012][ T6429] Total swap = 124996kB [ 121.076614][ T6429] 2097051 pages RAM [ 121.092441][ T6429] 0 pages HighMem/MovableOnly [ 121.097376][ T6429] 428581 pages reserved [ 121.125687][ T6429] 0 pages cma reserved [ 121.151683][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.281'. [ 121.736554][ T6578] vlan2: entered allmulticast mode [ 121.775855][ T6578] bond0: entered allmulticast mode [ 121.790228][ T6578] bond_slave_0: entered allmulticast mode [ 121.824236][ T6578] bond_slave_1: entered allmulticast mode [ 123.334485][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 124.573600][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 126.431776][ T6710] netlink: 96 bytes leftover after parsing attributes in process `syz.2.349'. [ 126.484263][ T6710] netlink: 'syz.2.349': attribute type 5 has an invalid length. [ 126.517137][ T6710] netlink: 44 bytes leftover after parsing attributes in process `syz.2.349'. [ 127.180792][ T6734] netlink: 20 bytes leftover after parsing attributes in process `syz.3.358'. [ 127.237384][ T6734] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.246748][ T6734] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.255833][ T6734] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.265511][ T6734] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.315049][ T6734] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.324646][ T6734] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.334510][ T6734] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.345094][ T6734] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.421083][ T6804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 129.457425][ T6804] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 129.553457][ T6811] 8021q: VLANs not supported on ip6tnl0 [ 129.624156][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 130.465384][ T6843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.411'. [ 130.507064][ T6843] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 130.507955][ T6845] 8021q: VLANs not supported on ip6tnl0 [ 131.509468][ T6886] netlink: 9 bytes leftover after parsing attributes in process `syz.2.430'. [ 131.572875][ T6886] gretap0: entered promiscuous mode [ 131.741811][ T6896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.435'. [ 132.074309][ T6911] tipc: Enabling of bearer rejected, already enabled [ 132.829084][ T6937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.453'. [ 133.052621][ T6942] tipc: Started in network mode [ 133.057597][ T6942] tipc: Node identity 7f000001, cluster identity 4711 [ 133.160868][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.169144][ T6942] tipc: Enabled bearer , priority 10 [ 133.176150][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.844155][ T6966] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 133.862752][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.2.467'. [ 133.890260][ T6966] macvlan2: entered promiscuous mode [ 133.921707][ T6966] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 134.280398][ T9] tipc: Node number set to 2130706433 [ 134.371124][ T6989] tipc: Started in network mode [ 134.400186][ T6989] tipc: Node identity 7f000001, cluster identity 4711 [ 134.409143][ T6989] tipc: Enabled bearer , priority 10 [ 134.518649][ T6989] tipc: Enabled bearer , priority 10 [ 134.748536][ T7004] netlink: 84 bytes leftover after parsing attributes in process `syz.2.481'. [ 135.307824][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 135.344824][ T7030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.491'. [ 135.520080][ T1210] tipc: Node number set to 2130706433 [ 135.606909][ T7042] tipc: Enabling of bearer rejected, already enabled [ 135.631716][ T7042] tipc: Enabled bearer , priority 10 [ 137.438164][ T7096] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 137.636521][ T7098] netlink: 'syz.2.522': attribute type 12 has an invalid length. [ 137.915443][ T7107] tipc: Enabling of bearer rejected, already enabled [ 137.925674][ T7107] tipc: Enabling of bearer rejected, already enabled [ 138.975834][ T7139] tipc: Enabling of bearer rejected, already enabled [ 138.998638][ T7139] tipc: Bearer : already 2 bearers with priority 10 [ 139.025055][ T7139] tipc: Bearer : trying with adjusted priority [ 139.039519][ T7139] tipc: Enabled bearer , priority 9 [ 139.884920][ T7172] tipc: Enabling of bearer rejected, already enabled [ 139.902240][ T7172] tipc: Enabling of bearer rejected, already enabled [ 140.121948][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 140.153384][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 140.952522][ T7212] netlink: 680 bytes leftover after parsing attributes in process `syz.1.575'. [ 141.202334][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 141.245417][ T7221] openvswitch: netlink: Flow key attr not present in new flow. [ 141.396863][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 142.537640][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 143.230253][ T7290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.615'. [ 143.340620][ T7297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.617'. [ 144.812642][ T7340] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.055775][ T7350] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 145.923773][ T30] audit: type=1107 audit(1744207256.084:2): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 147.302393][ T7438] Cannot find add_set index 0 as target [ 147.469232][ T7445] netlink: 84 bytes leftover after parsing attributes in process `syz.4.685'. [ 147.552553][ T7448] tipc: Enabling of bearer rejected, already enabled [ 147.592620][ T7448] tipc: Enabling of bearer rejected, already enabled [ 148.111619][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 148.122186][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.697'. [ 148.363316][ T7479] tipc: Enabling of bearer rejected, already enabled [ 148.417569][ T7479] tipc: Enabled bearer , priority 10 [ 148.451145][ T7485] netlink: 84 bytes leftover after parsing attributes in process `syz.3.704'. [ 149.014521][ T7504] netlink: 'syz.4.714': attribute type 6 has an invalid length. [ 149.122413][ T7508] netlink: 32 bytes leftover after parsing attributes in process `syz.1.716'. [ 149.293783][ T7514] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.718'. [ 149.357648][ T7512] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.718'. [ 149.398464][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 149.456023][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 149.686579][ T7529] netlink: 84 bytes leftover after parsing attributes in process `syz.2.723'. [ 150.179649][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.188207][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.503472][ T7638] __nla_validate_parse: 5 callbacks suppressed [ 152.503496][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.774'. [ 152.671609][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.778'. [ 153.251064][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 153.277388][ T7672] netlink: 36 bytes leftover after parsing attributes in process `syz.2.790'. [ 153.297540][ T7673] netlink: 'syz.0.791': attribute type 6 has an invalid length. [ 153.626495][ T7681] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.819319][ T7681] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.917144][ T7692] ip6gre1: entered allmulticast mode [ 154.052213][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.804'. [ 154.093836][ T7681] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.347344][ T30] audit: type=1107 audit(1744207264.494:3): pid=7708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 154.430921][ T7681] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.557429][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.811'. [ 154.747136][ T7681] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.854328][ T7681] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.942617][ T7681] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.054477][ T7733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.817'. [ 155.069186][ T7681] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.026326][ T7756] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.059001][ T7756] macvlan2: entered promiscuous mode [ 156.129209][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.829'. [ 156.411796][ T7765] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 156.818218][ T7779] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.838'. [ 156.869190][ T7778] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.838'. [ 157.525737][ T7801] tipc: Enabled bearer , priority 10 [ 157.894603][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.853'. [ 158.729799][ T7772] Cannot find add_set index 0 as target [ 158.733689][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 158.980052][ T30] audit: type=1107 audit(1744207269.124:4): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 159.574166][ T7842] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 159.997042][ T7851] netlink: 'syz.4.872': attribute type 6 has an invalid length. [ 160.194029][ T30] audit: type=1107 audit(1744207270.354:5): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 160.447656][ T7863] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.456096][ T7863] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.464571][ T7863] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.473467][ T7863] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.483180][ T7863] vxlan0: entered promiscuous mode [ 160.488566][ T7863] vxlan0: entered allmulticast mode [ 160.499286][ T7863] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.507860][ T7863] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.517187][ T7863] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.526048][ T7863] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.817821][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 160.920441][ T7831] warn_alloc: 3 callbacks suppressed [ 160.920463][ T7831] syz.1.863: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 160.991852][ T7831] CPU: 1 UID: 0 PID: 7831 Comm: syz.1.863 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 160.991883][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.991894][ T7831] Call Trace: [ 160.991902][ T7831] [ 160.991911][ T7831] dump_stack_lvl+0x241/0x360 [ 160.991948][ T7831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.991974][ T7831] ? __pfx__printk+0x10/0x10 [ 160.991999][ T7831] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 160.992029][ T7831] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 160.992054][ T7831] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 160.992082][ T7831] warn_alloc+0x27c/0x410 [ 160.992110][ T7831] ? __pfx_warn_alloc+0x10/0x10 [ 160.992136][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992155][ T7831] ? __get_vm_area_node+0x1c8/0x2d0 [ 160.992179][ T7831] ? __get_vm_area_node+0x25c/0x2d0 [ 160.992211][ T7831] __vmalloc_node_range_noprof+0x634/0x1390 [ 160.992261][ T7831] ? __kmalloc_cache_node_noprof+0x26a/0x3c0 [ 160.992290][ T7831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.992320][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992338][ T7831] ? __get_vm_area_node+0x1c8/0x2d0 [ 160.992363][ T7831] ? __get_vm_area_node+0x25c/0x2d0 [ 160.992396][ T7831] __vmalloc_node_range_noprof+0x53f/0x1390 [ 160.992415][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992466][ T7831] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 160.992486][ T7831] ? __kasan_kmalloc_large+0x1a/0xa0 [ 160.992516][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992537][ T7831] __kvmalloc_node_noprof+0x3b2/0x5a0 [ 160.992565][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992582][ T7831] ? hash_netiface_create+0x356/0x1040 [ 160.992599][ T7831] ? hash_netiface_create+0x2fa/0x1040 [ 160.992623][ T7831] hash_netiface_create+0x356/0x1040 [ 160.992657][ T7831] ? __pfx_hash_netiface_create+0x10/0x10 [ 160.992677][ T7831] ip_set_create+0xa7d/0x1960 [ 160.992702][ T7831] ? ip_set_create+0x48c/0x1960 [ 160.992728][ T7831] ? __pfx_ip_set_create+0x10/0x10 [ 160.992785][ T7831] ? nfnetlink_rcv_msg+0x227/0x1190 [ 160.992808][ T7831] nfnetlink_rcv_msg+0xbf7/0x1190 [ 160.992829][ T7831] ? nfnetlink_rcv_msg+0x227/0x1190 [ 160.992876][ T7831] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.992894][ T7831] ? stack_trace_save+0x11a/0x1d0 [ 160.992949][ T7831] ? dev_hard_start_xmit+0x2d4/0x840 [ 160.992969][ T7831] ? __dev_queue_xmit+0x1b80/0x3f60 [ 160.992987][ T7831] ? __netlink_deliver_tap+0x561/0x7f0 [ 160.993008][ T7831] ? netlink_deliver_tap+0x19d/0x1b0 [ 160.993032][ T7831] ? netlink_unicast+0x7c6/0x9a0 [ 160.993052][ T7831] ? netlink_sendmsg+0x8c3/0xcd0 [ 160.993076][ T7831] ? __sock_sendmsg+0x221/0x270 [ 160.993098][ T7831] ? ____sys_sendmsg+0x523/0x860 [ 160.993116][ T7831] ? __sys_sendmsg+0x271/0x360 [ 160.993153][ T7831] netlink_rcv_skb+0x208/0x480 [ 160.993180][ T7831] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.993203][ T7831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.993245][ T7831] ? apparmor_capable+0x13b/0x1b0 [ 160.993269][ T7831] ? bpf_lsm_capable+0x9/0x10 [ 160.993289][ T7831] ? security_capable+0x7e/0x2d0 [ 160.993328][ T7831] nfnetlink_rcv+0x296/0x28f0 [ 160.993349][ T7831] ? __dev_queue_xmit+0x2f9/0x3f60 [ 160.993370][ T7831] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.993392][ T7831] ? __dev_queue_xmit+0x2f9/0x3f60 [ 160.993410][ T7831] ? __dev_queue_xmit+0x2f9/0x3f60 [ 160.993432][ T7831] ? __dev_queue_xmit+0x1780/0x3f60 [ 160.993449][ T7831] ? kasan_save_track+0x3f/0x80 [ 160.993467][ T7831] ? __kasan_slab_alloc+0x66/0x80 [ 160.993494][ T7831] ? do_syscall_64+0xf3/0x230 [ 160.993519][ T7831] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.993537][ T7831] ? __dev_queue_xmit+0x2f9/0x3f60 [ 160.993562][ T7831] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.993601][ T7831] ? ref_tracker_free+0x63e/0x7e0 [ 160.993622][ T7831] ? __asan_memcpy+0x40/0x70 [ 160.993640][ T7831] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.993659][ T7831] ? __skb_clone+0x5c/0x6d0 [ 160.993698][ T7831] ? skb_clone+0x240/0x390 [ 160.993731][ T7831] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.993759][ T7831] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.993786][ T7831] netlink_unicast+0x7f8/0x9a0 [ 160.993819][ T7831] ? __pfx_netlink_unicast+0x10/0x10 [ 160.993844][ T7831] ? skb_put+0x114/0x1f0 [ 160.993866][ T7831] netlink_sendmsg+0x8c3/0xcd0 [ 160.993907][ T7831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.993937][ T7831] ? aa_sock_msg_perm+0x91/0x160 [ 160.993969][ T7831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.993991][ T7831] __sock_sendmsg+0x221/0x270 [ 160.994019][ T7831] ____sys_sendmsg+0x523/0x860 [ 160.994050][ T7831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.994066][ T7831] ? __fget_files+0x2a/0x420 [ 160.994087][ T7831] ? __fget_files+0x2a/0x420 [ 160.994115][ T7831] __sys_sendmsg+0x271/0x360 [ 160.994141][ T7831] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.994221][ T7831] ? do_syscall_64+0xb6/0x230 [ 160.994247][ T7831] do_syscall_64+0xf3/0x230 [ 160.994270][ T7831] ? clear_bhb_loop+0x45/0xa0 [ 160.994293][ T7831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.994319][ T7831] RIP: 0033:0x7f5f7d58d169 [ 160.994338][ T7831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.994354][ T7831] RSP: 002b:00007f5f7e4a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.994377][ T7831] RAX: ffffffffffffffda RBX: 00007f5f7d7a5fa0 RCX: 00007f5f7d58d169 [ 160.994392][ T7831] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 160.994403][ T7831] RBP: 00007f5f7d60e730 R08: 0000000000000000 R09: 0000000000000000 [ 160.994414][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.994426][ T7831] R13: 0000000000000000 R14: 00007f5f7d7a5fa0 R15: 00007fff19994b98 [ 160.994456][ T7831] [ 160.994464][ T7831] Mem-Info: [ 161.588530][ T7831] active_anon:5043 inactive_anon:0 isolated_anon:0 [ 161.588530][ T7831] active_file:1232 inactive_file:38334 isolated_file:0 [ 161.588530][ T7831] unevictable:768 dirty:188 writeback:0 [ 161.588530][ T7831] slab_reclaimable:9635 slab_unreclaimable:99104 [ 161.588530][ T7831] mapped:28686 shmem:1437 pagetables:926 [ 161.588530][ T7831] sec_pagetables:0 bounce:0 [ 161.588530][ T7831] kernel_misc_reclaimable:0 [ 161.588530][ T7831] free:1309595 free_pcp:926 free_cma:0 [ 161.651947][ T7831] Node 0 active_anon:20156kB inactive_anon:0kB active_file:4928kB inactive_file:153260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114692kB dirty:752kB writeback:0kB shmem:4212kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10708kB pagetables:3612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.691188][ T7831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.743913][ T30] audit: type=1107 audit(1744207271.894:6): pid=7882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 161.765579][ T7831] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.816706][ T7831] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 161.826964][ T7831] Node 0 DMA32 free:1319468kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20048kB inactive_anon:0kB active_file:4928kB inactive_file:153160kB unevictable:1536kB writepending:752kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1380kB local_pcp:564kB free_cma:0kB [ 161.858982][ T7831] lowmem_reserve[]: 0 0 0 0 0 [ 161.864190][ T7885] netlink: 44 bytes leftover after parsing attributes in process `syz.0.887'. [ 161.881382][ T7831] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.908657][ T7831] lowmem_reserve[]: 0 0 0 0 0 [ 161.916179][ T7831] Node 1 Normal free:3907580kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.975055][ T7831] lowmem_reserve[]: 0 0 0 0 0 [ 161.983576][ T7831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 161.997095][ T7831] Node 0 DMA32: 83*4kB (UME) 23*8kB (UME) 22*16kB (UME) 57*32kB (UME) 40*64kB (UME) 24*128kB (UME) 19*256kB (UM) 6*512kB (UM) 1*1024kB (M) 6*2048kB (UM) 315*4096kB (UM) = 1319812kB [ 162.015676][ T7831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.027773][ T7831] Node 1 Normal: 223*4kB (UE) 64*8kB (UME) 36*16kB (UME) 206*32kB (UME) 96*64kB (UME) 33*128kB (UME) 18*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3907580kB [ 162.047286][ T7831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.057494][ T7831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.067980][ T7831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.085774][ T7831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.096564][ T7831] 41003 total pagecache pages [ 162.105293][ T7831] 0 pages in swap cache [ 162.109656][ T7831] Free swap = 124996kB [ 162.149766][ T7831] Total swap = 124996kB [ 162.156819][ T7831] 2097051 pages RAM [ 162.175002][ T7831] 0 pages HighMem/MovableOnly [ 162.182857][ T7831] 428581 pages reserved [ 162.187211][ T7831] 0 pages cma reserved [ 162.266234][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.891'. [ 162.532809][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.894'. [ 163.501241][ T7921] netlink: 20 bytes leftover after parsing attributes in process `syz.4.903'. [ 163.549513][ T7921] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.557870][ T7921] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.566490][ T7921] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.574888][ T7921] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.651187][ T7921] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.659757][ T7921] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.668779][ T7921] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.677688][ T7921] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.932398][ T7923] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 165.230687][ T7951] IPVS: stopping master sync thread 7954 ... [ 165.248329][ T7954] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 165.373727][ T30] audit: type=1107 audit(1744207275.534:7): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 165.818009][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 166.230684][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 166.250763][ T30] audit: type=1107 audit(1744207276.404:8): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 166.408578][ T7982] bond1: entered promiscuous mode [ 166.422162][ T7986] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.457186][ T7982] bond1: entered allmulticast mode [ 166.471425][ T7982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.960646][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 167.006822][ T8000] bridge_slave_0: left allmulticast mode [ 167.030620][ T8000] bridge_slave_0: left promiscuous mode [ 167.037453][ T8000] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.158505][ T8000] bridge_slave_1: left allmulticast mode [ 167.185692][ T8000] bridge_slave_1: left promiscuous mode [ 167.230472][ T8000] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.329445][ T8000] bond0: (slave bond_slave_0): Releasing backup interface [ 167.357051][ T8000] bond_slave_0: left allmulticast mode [ 167.376099][ T8000] bond0: (slave bond_slave_1): Releasing backup interface [ 167.395086][ T8000] bond_slave_1: left allmulticast mode [ 167.437442][ T8000] team0: Port device team_slave_0 removed [ 167.508306][ T8000] team0: Port device team_slave_1 removed [ 167.545195][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.557531][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.569638][ T8000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.584354][ T8000] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.759212][ T7719] Set syz1 is full, maxelem 65536 reached [ 169.675880][ T8043] infiniband syz!: set active [ 169.703902][ T8043] infiniband syz!: added team_slave_0 [ 169.735859][ T8043] syz!: rxe_create_cq: returned err = -12 [ 169.770339][ T8043] infiniband syz!: Couldn't create ib_mad CQ [ 169.819472][ T8043] infiniband syz!: Couldn't open port 1 [ 169.878714][ T8086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.976'. [ 169.953307][ T8086] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.965885][ T8086] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.976766][ T8086] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.986187][ T8086] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.986919][ T8043] RDS/IB: syz!: added [ 170.002033][ T8090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 170.027568][ T8043] smc: adding ib device syz! with port count 1 [ 170.038225][ T8043] smc: ib device syz! port 1 has pnetid [ 170.056250][ T8086] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.068248][ T8086] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.078977][ T8086] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.087962][ T8086] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.607443][ T8111] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.988'. [ 170.644290][ T8110] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.988'. [ 171.502361][ T8145] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1004'. [ 171.524361][ T8143] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1004'. [ 171.580860][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1006'. [ 172.522559][ T8177] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1018'. [ 172.552942][ T8170] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1018'. [ 172.727495][ T8185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1023'. [ 173.025593][ T8190] netlink: 'syz.2.1024': attribute type 32 has an invalid length. [ 173.721316][ T30] audit: type=1107 audit(1744207283.884:9): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 174.248713][ T8236] tipc: Enabling of bearer rejected, already enabled [ 174.267417][ T8236] tipc: Enabling of bearer rejected, already enabled [ 174.942896][ T8261] tipc: Enabling of bearer rejected, already enabled [ 174.979752][ T8261] tipc: Enabling of bearer rejected, already enabled [ 175.116347][ T8268] __nla_validate_parse: 6 callbacks suppressed [ 175.116369][ T8268] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1062'. [ 175.191976][ T8267] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1062'. [ 176.143448][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1079'. [ 176.217885][ T8306] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.227188][ T8306] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.236520][ T8306] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.245384][ T8306] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.325232][ T8306] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.334985][ T8306] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.344108][ T8306] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.353872][ T8306] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.366085][ T8316] netlink: 588 bytes leftover after parsing attributes in process `syz.0.1083'. [ 176.802058][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 176.825507][ T8334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 176.847763][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 177.826837][ T30] audit: type=1107 audit(1744207287.984:10): pid=8375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 178.662826][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1122'. [ 178.739246][ T30] audit: type=1107 audit(1744207288.894:11): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 178.950147][ T8415] IPVS: stopping master sync thread 8416 ... [ 178.956297][ T8416] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 178.968992][ T8413] netlink: 'syz.0.1127': attribute type 13 has an invalid length. [ 179.206832][ T8428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 179.305730][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1136'. [ 179.457016][ T8428] team0 (unregistering): Port device team_slave_0 removed [ 179.498527][ T8428] team0 (unregistering): Port device team_slave_1 removed [ 179.526581][ T8428] team0 (unregistering): Port device geneve0 removed [ 179.588650][ T8441] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 179.816952][ T8450] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 179.831222][ T8449] IPVS: stopping master sync thread 8450 ... [ 180.056959][ T8456] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.255989][ T8462] pim6reg: entered allmulticast mode [ 180.293184][ T8465] pim6reg: left allmulticast mode [ 180.859198][ T8488] __nla_validate_parse: 1 callbacks suppressed [ 180.859220][ T8488] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1160'. [ 180.933991][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1161'. [ 180.934129][ T8488] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.953430][ T8488] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.963737][ T8488] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.973407][ T8488] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.010376][ T8488] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.019644][ T8488] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.028977][ T8488] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.037664][ T8488] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.305790][ T8502] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1167'. [ 181.363638][ T8506] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1169'. [ 181.905874][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 181.946063][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1181'. [ 181.965539][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 182.153466][ T8538] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1184'. [ 182.375500][ T8551] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1187'. [ 182.395049][ T8545] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1187'. [ 183.298811][ T8583] tipc: Enabling of bearer rejected, already enabled [ 183.336631][ T8583] tipc: Enabling of bearer rejected, already enabled [ 184.059209][ T8617] tipc: Bearer : already 2 bearers with priority 10 [ 184.072497][ T8617] tipc: Bearer : trying with adjusted priority [ 184.081427][ T8617] tipc: Enabling of bearer rejected, already enabled [ 184.120269][ T8617] tipc: Enabling of bearer rejected, already enabled [ 184.431226][ T8635] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 184.786435][ T8650] tipc: Enabling of bearer rejected, already enabled [ 184.842392][ T8650] tipc: Enabling of bearer rejected, already enabled [ 185.904793][ T8694] __nla_validate_parse: 21 callbacks suppressed [ 185.904816][ T8694] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1256'. [ 185.957615][ T8696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1257'. [ 185.983527][ T8699] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1259'. [ 186.039415][ T8700] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 186.112428][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 186.150417][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1261'. [ 186.435628][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1266'. [ 186.788940][ T8735] xt_hashlimit: max too large, truncated to 1048576 [ 186.801257][ T8738] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 187.260703][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 187.518590][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 187.602257][ T30] audit: type=1107 audit(1744207297.764:12): pid=8770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 187.860725][ T8783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1295'. [ 187.927202][ T8786] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1298'. [ 188.022120][ T8787] batadv1: entered promiscuous mode [ 188.082537][ T8794] ip6tnl1: entered promiscuous mode [ 188.089572][ T8794] ip6tnl1: entered allmulticast mode [ 188.365147][ T8803] netlink: 'syz.0.1302': attribute type 10 has an invalid length. [ 188.387920][ T30] audit: type=1107 audit(1744207298.534:13): pid=8800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 188.461012][ T8799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.505992][ T8799] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.748498][ T8803] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 188.791000][ T8803] team0: Failed to send options change via netlink (err -105) [ 188.798701][ T8803] team0: Port device geneve0 added [ 188.947680][ T8799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.969369][ T8799] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.024961][ T8823] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.124730][ T8799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.153208][ T8799] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.274098][ T30] audit: type=1107 audit(1744207299.434:14): pid=8831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 189.363420][ T8799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.397086][ T8799] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 189.628036][ T8799] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.638767][ T8799] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.660515][ T8847] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.669593][ T8847] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.678742][ T8847] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.688026][ T8847] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.706614][ T8847] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.716061][ T8847] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.726511][ T8847] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.736428][ T8847] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 189.795316][ T8799] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.804427][ T8799] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.812226][ T8854] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.848780][ T8799] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.857395][ T8799] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.881884][ T8799] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.929948][ T8799] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 189.970500][ T8856] smc: net device bond0 erased user defined pnetid SYZ0 [ 190.924266][ T8893] syz_tun: refused to change device tx_queue_len [ 191.137698][ T8903] __nla_validate_parse: 9 callbacks suppressed [ 191.137723][ T8903] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1348'. [ 191.229454][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 192.032209][ T8943] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1366'. [ 192.254295][ T30] audit: type=1107 audit(1744207302.404:15): pid=8948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 192.507638][ T8963] tipc: Enabling of bearer rejected, already enabled [ 192.546056][ T8963] tipc: Enabling of bearer rejected, already enabled [ 193.040430][ T8984] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1385'. [ 193.054054][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1384'. [ 193.199382][ T8987] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 193.446223][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 193.647280][ T9007] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1396'. [ 193.840953][ T9015] smc: net device bond0 applied user defined pnetid SYZ0 [ 194.463491][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 194.595185][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.383323][ T9086] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1432'. [ 195.638426][ T9100] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1436'. [ 195.888992][ T9110] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 196.111796][ T9122] openvswitch: netlink: Flow key attr not present in new flow. [ 196.307939][ T9127] __nla_validate_parse: 4 callbacks suppressed [ 196.307962][ T9127] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1448'. [ 196.343744][ T9132] xt_hashlimit: max too large, truncated to 1048576 [ 196.525821][ T9137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1455'. [ 196.548673][ T9139] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1453'. [ 196.611179][ T9134] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1453'. [ 196.875262][ T9154] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1461'. [ 197.010593][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 197.188311][ T9168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1467'. [ 197.401304][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 197.530526][ T9182] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1471'. [ 197.566258][ T9178] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1471'. [ 198.422916][ T9223] netlink: 'syz.2.1490': attribute type 6 has an invalid length. [ 198.558807][ T9229] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 198.584095][ T9229] batman_adv: batadv0: Adding interface: team0 [ 198.604448][ T9229] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.643292][ T9229] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 198.655414][ T9235] netlink: 'syz.1.1492': attribute type 10 has an invalid length. [ 198.721423][ T9235] team0: entered promiscuous mode [ 198.732547][ T9235] team_slave_0: entered promiscuous mode [ 198.752193][ T9235] team_slave_1: entered promiscuous mode [ 198.771166][ T9235] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.782567][ T9235] batman_adv: batadv0: Interface activated: team0 [ 198.789242][ T9235] batman_adv: batadv0: Interface deactivated: team0 [ 198.797354][ T9235] batman_adv: batadv0: Removing interface: team0 [ 198.808742][ T9235] bridge0: port 3(team0) entered blocking state [ 198.817892][ T9235] bridge0: port 3(team0) entered disabled state [ 198.857113][ T9235] team0: entered allmulticast mode [ 198.879992][ T9235] team_slave_0: entered allmulticast mode [ 198.920106][ T9235] team_slave_1: entered allmulticast mode [ 199.234209][ T9255] netlink: 'syz.3.1504': attribute type 6 has an invalid length. [ 199.642230][ T9272] bridge_slave_0: left allmulticast mode [ 199.674020][ T9272] bridge_slave_0: left promiscuous mode [ 199.690450][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.727166][ T9272] bridge_slave_1: left allmulticast mode [ 199.753066][ T9272] bridge_slave_1: left promiscuous mode [ 199.775368][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.804302][ T9272] bond0: (slave bond_slave_0): Releasing backup interface [ 199.830158][ T9272] bond0: (slave bond_slave_1): Releasing backup interface [ 199.847039][ T9272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.885529][ T9272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.916234][ T9272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.958477][ T9272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.242462][ T9292] netlink: 'syz.3.1518': attribute type 6 has an invalid length. [ 200.568299][ T9306] warn_alloc: 3 callbacks suppressed [ 200.568321][ T9306] syz.0.1525: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.627891][ T9306] CPU: 1 UID: 0 PID: 9306 Comm: syz.0.1525 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 200.627922][ T9306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.627934][ T9306] Call Trace: [ 200.627942][ T9306] [ 200.627950][ T9306] dump_stack_lvl+0x241/0x360 [ 200.627988][ T9306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.628017][ T9306] ? __pfx__printk+0x10/0x10 [ 200.628044][ T9306] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 200.628074][ T9306] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 200.628100][ T9306] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 200.628141][ T9306] warn_alloc+0x27c/0x410 [ 200.628164][ T9306] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 200.628185][ T9306] ? __pfx_warn_alloc+0x10/0x10 [ 200.628206][ T9306] ? kasan_save_track+0x3f/0x80 [ 200.628225][ T9306] ? __kasan_kmalloc+0x9d/0xb0 [ 200.628250][ T9306] ? xsk_setsockopt+0x449/0x840 [ 200.628267][ T9306] ? do_sock_setsockopt+0x3b1/0x710 [ 200.628284][ T9306] ? __x64_sys_setsockopt+0x1ee/0x280 [ 200.628301][ T9306] ? do_syscall_64+0xf3/0x230 [ 200.628321][ T9306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.628352][ T9306] __vmalloc_node_range_noprof+0x128/0x1390 [ 200.628404][ T9306] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.628429][ T9306] ? __kasan_kmalloc+0x9d/0xb0 [ 200.628459][ T9306] vmalloc_user_noprof+0x74/0x80 [ 200.628478][ T9306] ? xskq_create+0xb6/0x170 [ 200.628497][ T9306] xskq_create+0xb6/0x170 [ 200.628521][ T9306] xsk_init_queue+0xa1/0x100 [ 200.628545][ T9306] xsk_setsockopt+0x449/0x840 [ 200.628568][ T9306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.628585][ T9306] ? __lock_acquire+0xad5/0xd80 [ 200.628605][ T9306] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.628635][ T9306] ? aa_sock_opt_perm+0x79/0x120 [ 200.628668][ T9306] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.628685][ T9306] do_sock_setsockopt+0x3b1/0x710 [ 200.628711][ T9306] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 200.628729][ T9306] ? __fget_files+0x2a/0x420 [ 200.628752][ T9306] ? __fget_files+0x39d/0x420 [ 200.628768][ T9306] ? __fget_files+0x2a/0x420 [ 200.628797][ T9306] __x64_sys_setsockopt+0x1ee/0x280 [ 200.628825][ T9306] do_syscall_64+0xf3/0x230 [ 200.628847][ T9306] ? clear_bhb_loop+0x45/0xa0 [ 200.628870][ T9306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.628890][ T9306] RIP: 0033:0x7f9fbdb8d169 [ 200.628914][ T9306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.628930][ T9306] RSP: 002b:00007f9fbe9b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.628952][ T9306] RAX: ffffffffffffffda RBX: 00007f9fbdda5fa0 RCX: 00007f9fbdb8d169 [ 200.628967][ T9306] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 200.628979][ T9306] RBP: 00007f9fbdc0e730 R08: 0000000000000004 R09: 0000000000000000 [ 200.628990][ T9306] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.629002][ T9306] R13: 0000000000000000 R14: 00007f9fbdda5fa0 R15: 00007ffe3c461ed8 [ 200.629033][ T9306] [ 200.629112][ T9306] Mem-Info: [ 200.953553][ T9306] active_anon:5049 inactive_anon:0 isolated_anon:0 [ 200.953553][ T9306] active_file:1232 inactive_file:38351 isolated_file:0 [ 200.953553][ T9306] unevictable:768 dirty:231 writeback:0 [ 200.953553][ T9306] slab_reclaimable:9724 slab_unreclaimable:101872 [ 200.953553][ T9306] mapped:28727 shmem:1397 pagetables:1016 [ 200.953553][ T9306] sec_pagetables:0 bounce:0 [ 200.953553][ T9306] kernel_misc_reclaimable:0 [ 200.953553][ T9306] free:1341112 free_pcp:470 free_cma:0 [ 201.006255][ T9306] Node 0 active_anon:20196kB inactive_anon:0kB active_file:4928kB inactive_file:153328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115008kB dirty:924kB writeback:0kB shmem:4052kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11116kB pagetables:4064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.076499][ T9306] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 201.111772][ T9306] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.140924][ T9306] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 201.146915][ T9306] Node 0 DMA32 free:1442184kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:20188kB inactive_anon:0kB active_file:4928kB inactive_file:153228kB unevictable:1536kB writepending:924kB present:3129332kB managed:2547248kB mlocked:0kB bounce:0kB free_pcp:1748kB local_pcp:572kB free_cma:0kB [ 201.212797][ T9306] lowmem_reserve[]: 0 0 0 0 0 [ 201.240143][ T9306] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.310070][ T9306] lowmem_reserve[]: 0 0 0 0 0 [ 201.355265][ T9306] Node 1 Normal free:3907584kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 201.395545][ T9306] lowmem_reserve[]: 0 0 0 0 0 [ 201.404993][ T9306] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.419267][ T9333] __nla_validate_parse: 23 callbacks suppressed [ 201.419289][ T9333] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1534'. [ 201.422538][ T9306] Node 0 DMA32: 160*4kB (UM) 290*8kB (UME) 786*16kB (UME) 357*32kB (UME) 633*64kB (UME) 298*128kB (UME) 97*256kB (UM) 39*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 313*4096kB (UM) = 1443728kB [ 201.473102][ T9306] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 201.490743][ T9306] Node 1 Normal: 224*4kB (UE) 64*8kB (UME) 36*16kB (UME) 206*32kB (UME) 96*64kB (UME) 33*128kB (UME) 18*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3907584kB [ 201.523647][ T9306] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.535854][ T9306] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.549544][ T9306] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.565956][ T9306] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.584950][ T9306] 40982 total pagecache pages [ 201.590230][ T9306] 0 pages in swap cache [ 201.594523][ T9306] Free swap = 124996kB [ 201.599041][ T9306] Total swap = 124996kB [ 201.618738][ T9341] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1536'. [ 201.624874][ T9306] 2097051 pages RAM [ 201.628639][ T9338] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1536'. [ 201.634807][ T9306] 0 pages HighMem/MovableOnly [ 201.651834][ T9306] 428581 pages reserved [ 201.658518][ T9306] 0 pages cma reserved [ 201.854735][ T9350] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1540'. [ 201.866028][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 202.044645][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1544'. [ 202.276663][ T9366] bridge_slave_0: left allmulticast mode [ 202.290092][ T9366] bridge_slave_0: left promiscuous mode [ 202.302247][ T9366] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.359278][ T9369] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1547'. [ 202.386689][ T9366] bridge_slave_1: left allmulticast mode [ 202.396496][ T9366] bridge_slave_1: left promiscuous mode [ 202.405867][ T9366] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.436859][ T9366] bond0: (slave bond_slave_0): Releasing backup interface [ 202.459637][ T9366] bond0: (slave bond_slave_1): Releasing backup interface [ 202.496031][ T9366] team0: Port device team_slave_0 removed [ 202.549155][ T9366] team0: Port device team_slave_1 removed [ 202.571183][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.592003][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.608157][ T9366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.615983][ T9366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.654543][ T9369] team0: Mode changed to "roundrobin" [ 202.676923][ T9376] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1550'. [ 202.698710][ T9372] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1550'. [ 202.755131][ T10] syz!: Port: 1 Link DOWN [ 202.857877][ T9387] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1555'. [ 204.630293][ T9453] netlink: 'syz.0.1586': attribute type 6 has an invalid length. [ 206.582923][ T9537] netlink: 'syz.3.1623': attribute type 6 has an invalid length. [ 207.300161][ T9559] __nla_validate_parse: 14 callbacks suppressed [ 207.300183][ T9559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1632'. [ 207.462236][ T9567] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1633'. [ 207.795816][ T9576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1638'. [ 208.011326][ T9585] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1642'. [ 208.500358][ T9604] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1649'. [ 208.514494][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1636'. [ 208.541173][ T9570] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 208.606274][ T9570] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 208.654845][ T9609] netlink: 'syz.3.1652': attribute type 1 has an invalid length. [ 208.681173][ T9609] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1652'. [ 208.809409][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 209.314237][ T9635] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1664'. [ 209.345050][ T9635] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1664'. [ 209.718635][ T9655] netlink: 'syz.2.1671': attribute type 6 has an invalid length. [ 210.608012][ T9684] bridge_slave_0: left allmulticast mode [ 210.642638][ T9684] bridge_slave_0: left promiscuous mode [ 210.666011][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.723846][ T9684] bridge_slave_1: left allmulticast mode [ 210.754500][ T9684] bridge_slave_1: left promiscuous mode [ 210.775083][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.869707][ T9684] bond0: (slave bond_slave_0): Releasing backup interface [ 210.941229][ T9684] bond0: (slave bond_slave_1): Releasing backup interface [ 211.035244][ T9684] team0: Port device team_slave_0 removed [ 211.109260][ T9684] team0: Port device team_slave_1 removed [ 211.141674][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.166894][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.198087][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.217550][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.653650][ T9708] tipc: Enabling of bearer rejected, already enabled [ 211.665998][ T9708] tipc: Enabling of bearer rejected, already enabled [ 212.032349][ T9669] Bluetooth: hci0: command 0x0406 tx timeout [ 212.039068][ T9669] Bluetooth: hci1: command 0x0406 tx timeout [ 212.047124][ T9669] Bluetooth: hci3: command 0x0406 tx timeout [ 212.053773][ T9669] Bluetooth: hci2: command 0x0406 tx timeout [ 212.059949][ T9669] Bluetooth: hci4: command 0x0406 tx timeout [ 213.108308][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.130182][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.148527][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.178606][ T9750] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 213.265913][ T9750] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 213.375424][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.408166][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.417926][ T9757] __nla_validate_parse: 5 callbacks suppressed [ 213.417947][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 213.485142][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.674905][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 213.746541][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 213.763344][ T9750] virt_wifi0 speed is unknown, defaulting to 1000 [ 214.411623][ T9777] dccp_close: ABORT with 32 bytes unread [ 215.827184][ T9821] netlink: 'syz.4.1732': attribute type 6 has an invalid length. [ 216.051272][ T9831] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1737'. [ 216.247254][ T9836] netem: incorrect gi model size [ 216.253122][ T9836] netem: change failed [ 216.457544][ T9842] bridge0: entered promiscuous mode [ 216.475035][ T9842] bridge0: port 1(macsec1) entered blocking state [ 216.491380][ T9842] bridge0: port 1(macsec1) entered disabled state [ 216.505966][ T9842] macsec1: entered allmulticast mode [ 216.519363][ T9842] bridge0: entered allmulticast mode [ 216.576148][ T9842] macsec1: left allmulticast mode [ 216.582656][ T9842] bridge0: left allmulticast mode [ 216.602216][ T9842] bridge0: left promiscuous mode [ 216.720048][ T9851] netlink: 'syz.2.1747': attribute type 6 has an invalid length. [ 217.257190][ T9869] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1756'. [ 217.532227][ T9881] netlink: 'syz.1.1761': attribute type 6 has an invalid length. [ 217.562061][ T9879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1763'. [ 217.772456][ T9890] ip6_vti0: entered allmulticast mode [ 217.822134][ T9890] ip6_vti0: left allmulticast mode [ 218.358944][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1776'. [ 218.417872][ T9912] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.427928][ T9912] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.437927][ T9912] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.447478][ T9912] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.489361][ T9912] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.500203][ T9912] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.509230][ T9912] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.520654][ T9912] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.588920][ T9918] sch_tbf: burst 2197 is lower than device lo mtu (65550) ! [ 218.766793][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 219.232318][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 219.246613][ T9945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1787'. [ 219.573997][ T9959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 219.921185][ T9971] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1800'. [ 219.978284][ T9972] tipc: Bearer : already 2 bearers with priority 10 [ 219.998861][ T9972] tipc: Bearer : trying with adjusted priority [ 220.007054][ T9972] tipc: Enabling of bearer rejected, already enabled [ 220.021112][ T9974] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1802'. [ 220.024319][ T9976] veth1_macvtap: left promiscuous mode [ 220.038066][ T9976] macsec0: entered promiscuous mode [ 220.046759][ T9974] team0: Mode changed to "roundrobin" [ 220.061666][ T9972] tipc: Enabling of bearer rejected, already enabled [ 220.187029][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1804'. [ 220.359758][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 220.508000][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1810'. [ 220.774422][T10000] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1814'. [ 220.820491][T10000] team0: No ports can be present during mode change [ 224.004411][T10132] __nla_validate_parse: 8 callbacks suppressed [ 224.004433][T10132] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1874'. [ 224.052395][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1875'. [ 224.289387][T10147] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1879'. [ 224.536086][T10157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1884'. [ 224.556905][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1883'. [ 224.910192][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 224.943704][T10149] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.013671][T10149] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 225.787350][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1896'. [ 225.983072][T10202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1898'. [ 226.780868][T10240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1911'. [ 226.849349][T10240] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.858336][T10240] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.867502][T10240] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.876945][T10240] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.932457][T10240] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.941715][T10240] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.951230][T10240] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.960222][T10240] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 226.980606][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1914'. [ 227.662911][T10276] netlink: 'syz.0.1926': attribute type 29 has an invalid length. [ 227.693689][T10276] netlink: 'syz.0.1926': attribute type 29 has an invalid length. [ 227.863248][T10282] team0: No ports can be present during mode change [ 228.047723][T10290] bridge0: port 1(macsec1) entered blocking state [ 228.067618][T10290] bridge0: port 1(macsec1) entered disabled state [ 228.087010][T10290] macsec1: entered allmulticast mode [ 228.103920][T10290] bridge0: entered allmulticast mode [ 228.131499][T10290] macsec1: left allmulticast mode [ 228.136793][T10290] bridge0: left allmulticast mode [ 228.858322][T10326] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 229.450483][T10351] __nla_validate_parse: 5 callbacks suppressed [ 229.450505][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 229.838855][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 229.882927][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 230.045693][T10369] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1972'. [ 231.567551][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1978'. [ 231.804893][T10393] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1984'. [ 232.031472][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1988'. [ 232.049989][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 232.483119][T10424] wg2: entered promiscuous mode [ 232.488086][T10424] wg2: entered allmulticast mode [ 232.785089][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 232.830399][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2004'. [ 233.216585][T10457] wg2: entered promiscuous mode [ 233.238566][T10457] wg2: entered allmulticast mode [ 234.481628][T10504] __nla_validate_parse: 3 callbacks suppressed [ 234.481652][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2036'. [ 235.271997][T10532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2047'. [ 235.274853][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2050'. [ 236.054732][T10558] tipc: Enabling of bearer rejected, already enabled [ 236.067779][T10558] tipc: Enabling of bearer rejected, already enabled [ 236.508568][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2062'. [ 237.319122][T10586] tipc: Bearer : already 2 bearers with priority 10 [ 237.326971][T10586] tipc: Bearer : trying with adjusted priority [ 237.337577][T10586] tipc: Enabling of bearer rejected, already enabled [ 237.362817][T10594] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.371772][T10594] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.380813][T10594] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.389570][T10594] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.399671][T10594] vxlan0: entered promiscuous mode [ 237.405814][T10594] vxlan0: entered allmulticast mode [ 238.019520][T10628] tipc: Enabling of bearer rejected, already enabled [ 238.036333][T10628] tipc: Enabling of bearer rejected, already enabled [ 238.375116][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'. [ 238.416792][T10637] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 238.453316][T10637] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 239.003805][T10656] tipc: Enabling of bearer rejected, already enabled [ 239.028005][T10656] tipc: Enabling of bearer rejected, already enabled [ 239.087464][T10658] wg2: left promiscuous mode [ 239.094758][T10658] wg2: left allmulticast mode [ 239.141831][T10658] wg2: entered promiscuous mode [ 239.167713][T10658] wg2: entered allmulticast mode [ 239.206903][T10665] netlink: 892 bytes leftover after parsing attributes in process `syz.4.2104'. [ 239.973018][T10704] pim6reg1: entered promiscuous mode [ 239.978591][T10704] pim6reg1: entered allmulticast mode [ 240.224049][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 240.237171][T10715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2130'. [ 240.261253][T10715] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.270786][T10715] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.279555][T10715] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.288698][T10715] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.304473][T10718] pim6reg1: entered promiscuous mode [ 240.312530][T10718] pim6reg1: entered allmulticast mode [ 240.493098][T10727] ip6gretap0: entered promiscuous mode [ 240.503513][T10727] ip6gretap0: entered allmulticast mode [ 241.129475][T10760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2151'. [ 241.260152][T10767] tipc: Enabling of bearer rejected, already enabled [ 241.300710][T10767] tipc: Enabling of bearer rejected, already enabled [ 241.630274][ C0] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 241.934054][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2157'. [ 241.951818][T10772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 241.987974][T10772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 241.993154][T10793] batman_adv: batadv0: Adding interface: dummy0 [ 242.003845][T10793] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.035639][T10793] batman_adv: batadv0: Interface activated: dummy0 [ 242.055724][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 242.079946][T10793] batadv0: mtu less than device minimum [ 242.095457][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.108013][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.120419][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.132651][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.144936][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.157096][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.169342][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.181759][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.193863][T10793] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 242.326474][T10797] macvlan2: entered promiscuous mode [ 242.337756][T10797] macvlan2: entered allmulticast mode [ 242.353336][T10797] batadv0: entered promiscuous mode [ 242.378029][T10797] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.421334][T10797] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 242.485152][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2170'. [ 242.677899][T10816] x_tables: ip_tables: socket.1 match: invalid size 8 (kernel) != (user) 16 [ 243.779801][T10874] warning: `syz.2.2194' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 244.165213][T10877] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.502234][T10900] netlink: 868 bytes leftover after parsing attributes in process `syz.2.2205'. [ 245.000689][T10917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2212'. [ 245.070658][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 245.330579][T10931] netlink: 860 bytes leftover after parsing attributes in process `syz.3.2218'. [ 245.646158][T10951] veth0: entered promiscuous mode [ 245.685304][T10951] Cannot find add_set index 0 as target [ 245.727392][T10950] veth0: left promiscuous mode [ 245.768176][T10954] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2228'. [ 246.217433][T10968] veth1_macvtap: left promiscuous mode [ 246.226025][T10968] macsec0: entered promiscuous mode [ 246.427880][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2240'. [ 246.448078][T10927] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.546485][T10984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2241'. [ 246.577853][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2242'. [ 246.633255][T10986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2242'. [ 246.910225][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 246.922242][T10974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 246.935570][T10974] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 247.849243][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 247.866838][T11034] netlink: 'syz.1.2262': attribute type 5 has an invalid length. [ 247.879190][T11034] netlink: 'syz.1.2262': attribute type 5 has an invalid length. [ 248.017859][T11042] ipip0: entered promiscuous mode [ 248.361007][T11058] netlink: 'syz.1.2271': attribute type 6 has an invalid length. [ 249.016965][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2283'. [ 249.097869][T11088] Bluetooth: MGMT ver 1.23 [ 249.477671][T11102] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2290'. [ 250.373738][T11140] tipc: Enabling of bearer rejected, already enabled [ 250.468206][T11140] tipc: Enabling of bearer rejected, already enabled [ 251.554145][T11182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2326'. [ 252.398971][T11207] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2338'. [ 252.571463][T11215] net_ratelimit: 12 callbacks suppressed [ 252.571483][T11215] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 252.613034][T11217] netlink: 'syz.4.2343': attribute type 11 has an invalid length. [ 252.639968][T11217] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2343'. [ 253.136949][T11239] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2354'. [ 254.630250][T11273] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2366'. [ 256.039309][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.091498][T11063] Set syz1 is full, maxelem 65536 reached [ 256.304350][T11290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 256.312820][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 256.716169][T11289] hsr0: entered promiscuous mode [ 256.724413][T11290] hsr_slave_0: left promiscuous mode [ 256.781812][T11290] hsr0 (unregistering): left promiscuous mode [ 257.099306][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2378'. [ 257.427881][T11328] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2390'. [ 257.554587][T11337] hsr0: entered promiscuous mode [ 257.569628][T11337] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.576241][T11337] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 257.587904][T11332] hsr0: left promiscuous mode [ 258.429690][T11384] team0: left allmulticast mode [ 258.450395][ T5921] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:17 [ 258.468273][T11384] team_slave_0: left allmulticast mode [ 258.492218][T11384] team_slave_1: left allmulticast mode [ 258.514465][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 258.520972][T11384] bridge0: port 3(team0) entered disabled state [ 258.571299][T11384] batman_adv: batadv0: Interface deactivated: dummy0 [ 258.590880][T11384] batman_adv: batadv0: Removing interface: dummy0 [ 258.636196][T11384] bridge_slave_0: left allmulticast mode [ 258.654995][T11384] bridge_slave_0: left promiscuous mode [ 258.684431][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.708381][T11396] netlink: 'syz.0.2420': attribute type 1 has an invalid length. [ 258.734192][T11384] bridge_slave_1: left allmulticast mode [ 258.755663][T11384] bridge_slave_1: left promiscuous mode [ 258.775660][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.794551][T11384] bond0: (slave bond_slave_0): Releasing backup interface [ 258.818045][T11384] bond0: (slave bond_slave_1): Releasing backup interface [ 258.838672][T11384] team_slave_0: left promiscuous mode [ 258.872222][T11384] team0: Port device team_slave_0 removed [ 258.883301][T11384] team_slave_1: left promiscuous mode [ 258.903407][T11384] team0: Port device team_slave_1 removed [ 258.916850][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.924900][T11384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.935838][T11384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.944317][T11384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.969669][T11384] bond0: (slave macvlan2): Releasing backup interface [ 258.979568][T11384] batadv0: left promiscuous mode [ 259.115912][T11401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 259.176396][T11404] bond0: entered promiscuous mode [ 259.196170][T11404] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 259.237460][T11404] bond1: (slave macvlan0): Enslaving as a backup interface with a down link [ 259.300039][T11421] hsr0: entered promiscuous mode [ 259.309301][T11421] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 259.315860][T11421] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 259.385332][T11420] hsr0: left promiscuous mode [ 259.480909][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'. [ 259.883561][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2443'. [ 259.909584][T11452] netlink: 'syz.3.2444': attribute type 21 has an invalid length. [ 259.928957][T11452] netlink: 'syz.3.2444': attribute type 15 has an invalid length. [ 259.957568][T11452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2444'. [ 259.984666][T11452] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.009476][T11452] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.016846][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 260.024213][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 260.031581][T11452] IPv6: NLM_F_CREATE should be set when creating new route [ 260.475226][T11481] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2457'. [ 260.769036][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2462'. [ 261.490766][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 261.606523][T11522] team0: Port device geneve0 removed [ 261.632613][T11522] bond1: (slave macvlan0): Releasing backup interface [ 261.679539][T11522] bond0: left promiscuous mode [ 261.707964][T11532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2478'. [ 262.185149][T11554] __nla_validate_parse: 1 callbacks suppressed [ 262.185180][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 262.474858][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 262.493578][T11567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2494'. [ 262.521045][T11567] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2494'. [ 262.556917][T11571] tipc: Enabling of bearer rejected, already enabled [ 262.569549][T11573] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2496'. [ 262.929099][T11592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2504'. [ 262.957381][T11592] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 262.973452][T11592] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 263.781845][T11618] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 264.155329][T11639] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 264.163979][T11639] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2526'. [ 264.342921][T11648] tipc: Enabling of bearer rejected, already enabled [ 264.597782][T11660] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 264.840985][T11673] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2543'. [ 265.172159][T11692] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 265.178761][T11692] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 265.209788][T11692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'. [ 265.258165][T11692] hsr_slave_0: left promiscuous mode [ 265.268950][T11692] hsr_slave_1: left promiscuous mode [ 265.776133][T11729] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 266.236347][T11752] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2580'. [ 266.372106][T11762] netlink: 'syz.4.2583': attribute type 2 has an invalid length. [ 266.947772][T11792] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 266.955150][T11792] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.007599][T11799] hsr_slave_0: left promiscuous mode [ 267.031054][T11799] hsr_slave_1: left promiscuous mode [ 267.247521][T11807] ipip0: entered promiscuous mode [ 267.568551][T11825] __nla_validate_parse: 3 callbacks suppressed [ 267.568575][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2609'. [ 267.773723][T11833] netlink: 'syz.3.2613': attribute type 5 has an invalid length. [ 267.798720][T11833] netlink: 'syz.3.2613': attribute type 5 has an invalid length. [ 267.964958][T11841] C: renamed from lo (while UP) [ 267.983622][T11841] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 268.074826][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2615'. [ 268.807437][T11887] netlink: 'syz.4.2639': attribute type 12 has an invalid length. [ 268.930414][T11895] netlink: 'syz.0.2642': attribute type 1 has an invalid length. [ 269.563666][T11923] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2654'. [ 269.683415][T11932] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2658'. [ 269.815178][T11935] netlink: 'syz.3.2659': attribute type 1 has an invalid length. [ 270.056768][T11943] bond0: entered promiscuous mode [ 270.084440][T11943] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 270.117067][T11943] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 270.248852][T11953] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2666'. [ 270.288332][T11956] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 270.292503][T11953] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2666'. [ 270.341880][T11953] netlink: 'syz.4.2666': attribute type 6 has an invalid length. [ 270.352398][T11953] netlink: 'syz.4.2666': attribute type 5 has an invalid length. [ 270.361637][T11953] netlink: 'syz.4.2666': attribute type 4 has an invalid length. [ 270.372121][T11953] netlink: 'syz.4.2666': attribute type 6 has an invalid length. [ 270.382772][T11953] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2666'. [ 270.919046][T11983] netlink: 'syz.1.2679': attribute type 1 has an invalid length. [ 270.947460][T11990] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 270.977560][T11986] tipc: Enabling of bearer rejected, already enabled [ 270.995617][T11986] tipc: Enabling of bearer rejected, already enabled [ 271.019692][T11983] bond0: entered promiscuous mode [ 271.035910][T11983] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 271.074910][T11983] bond1: (slave macvlan3): Enslaving as a backup interface with a down link [ 271.095322][T11996] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 271.206953][T12001] netlink: 'syz.3.2685': attribute type 21 has an invalid length. [ 271.267745][T12001] netlink: 'syz.3.2685': attribute type 15 has an invalid length. [ 271.288735][T12001] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2685'. [ 271.304060][T12001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.816010][T12025] tipc: Enabling of bearer rejected, already enabled [ 271.857149][T12025] tipc: Enabling of bearer rejected, already enabled [ 271.944233][T12030] netlink: 'syz.3.2699': attribute type 21 has an invalid length. [ 271.959122][T12030] netlink: 'syz.3.2699': attribute type 15 has an invalid length. [ 271.972539][T12030] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2699'. [ 271.998689][T12030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.283373][T12040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 272.421633][T12049] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 272.618665][T12057] tipc: Enabling of bearer rejected, already enabled [ 272.643543][T12057] tipc: Enabling of bearer rejected, already enabled [ 272.679384][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 272.724543][T12065] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 272.828138][T12060] ------------[ cut here ]------------ [ 272.834807][T12060] WARNING: CPU: 0 PID: 12060 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 272.845602][T12060] Modules linked in: [ 272.849963][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.4.2715 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 272.862348][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.874477][T12060] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 272.883752][T12060] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 272.903929][T12060] RSP: 0018:ffffc90003b37c48 EFLAGS: 00010293 [ 272.910310][T12060] RAX: ffffffff8a93fdfc RBX: 0000000000000002 RCX: ffff888050f65a00 [ 272.918328][T12060] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 272.926535][T12060] RBP: 0000000000000001 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 272.934781][T12060] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86da9250 [ 272.942837][T12060] R13: dffffc0000000000 R14: ffff8880297fca78 R15: 0000000000000000 [ 272.950907][T12060] FS: 0000555556cb8500(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 272.960549][T12060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 272.967531][T12060] CR2: 00007f9fbe8d56c0 CR3: 0000000051d2e000 CR4: 00000000003526f0 [ 272.977085][T12060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 272.986308][T12060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 272.994466][T12060] Call Trace: [ 272.997952][T12060] [ 273.001001][T12060] udpv6_destroy_sock+0x212/0x270 [ 273.006176][T12060] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 273.011851][T12060] sk_common_release+0x71/0x2e0 [ 273.016758][T12060] inet_release+0x17d/0x200 [ 273.021548][T12060] sock_close+0xbc/0x240 [ 273.025923][T12060] ? __pfx_sock_close+0x10/0x10 [ 273.030996][T12060] __fput+0x3e9/0x9f0 [ 273.035210][T12060] task_work_run+0x251/0x310 [ 273.039961][T12060] ? _raw_spin_unlock+0x28/0x50 [ 273.044865][T12060] ? __pfx_task_work_run+0x10/0x10 [ 273.050142][T12060] ? syscall_exit_to_user_mode+0xa3/0x340 [ 273.055921][T12060] syscall_exit_to_user_mode+0x13f/0x340 [ 273.061732][T12060] do_syscall_64+0x100/0x230 [ 273.066381][T12060] ? clear_bhb_loop+0x45/0xa0 [ 273.071293][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.078661][T12060] RIP: 0033:0x7f6b20f8d169 [ 273.084725][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.104520][T12060] RSP: 002b:00007ffdd87dd078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.113154][T12060] RAX: 0000000000000000 RBX: 0000000000042910 RCX: 00007f6b20f8d169 [ 273.121360][T12060] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 273.129557][T12060] RBP: 00007f6b211a7ba0 R08: 0000000000000001 R09: 0000000ad87dd36f [ 273.137659][T12060] R10: 00007f6b20e00000 R11: 0000000000000246 R12: 00007f6b211a5fac [ 273.145994][T12060] R13: 00007f6b211a5fa0 R14: ffffffffffffffff R15: 00007ffdd87dd190 [ 273.154414][T12060] [ 273.157493][T12060] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 273.164831][T12060] CPU: 0 UID: 0 PID: 12060 Comm: syz.4.2715 Not tainted 6.14.0-syzkaller-13320-g420aabef3ab5 #0 PREEMPT(full) [ 273.176686][T12060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.186876][T12060] Call Trace: [ 273.190197][T12060] [ 273.193164][T12060] dump_stack_lvl+0x241/0x360 [ 273.198026][T12060] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.203293][T12060] ? __pfx__printk+0x10/0x10 [ 273.207935][T12060] ? vscnprintf+0x5d/0x90 [ 273.212308][T12060] panic+0x349/0x880 [ 273.216266][T12060] ? __warn+0x174/0x4d0 [ 273.220563][T12060] ? __pfx_panic+0x10/0x10 [ 273.225057][T12060] __warn+0x344/0x4d0 [ 273.229091][T12060] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 273.235096][T12060] report_bug+0x2b3/0x500 [ 273.239470][T12060] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 273.245296][T12060] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 273.251126][T12060] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 273.256948][T12060] handle_bug+0x89/0x170 [ 273.261269][T12060] exc_invalid_op+0x1a/0x50 [ 273.266011][T12060] asm_exc_invalid_op+0x1a/0x20 [ 273.270912][T12060] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 273.277461][T12060] Code: 00 00 e8 c6 5a 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 ce 87 99 f7 e9 ce 00 00 00 e8 a4 5a 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 cf 5e 2f f7 85 ed [ 273.297193][T12060] RSP: 0018:ffffc90003b37c48 EFLAGS: 00010293 [ 273.303304][T12060] RAX: ffffffff8a93fdfc RBX: 0000000000000002 RCX: ffff888050f65a00 [ 273.311649][T12060] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 273.319888][T12060] RBP: 0000000000000001 R08: ffffffff8a93fade R09: 1ffffffff20bfb2e [ 273.327868][T12060] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff86da9250 [ 273.335933][T12060] R13: dffffc0000000000 R14: ffff8880297fca78 R15: 0000000000000000 [ 273.343948][T12060] ? __pfx_vxlan_gro_receive+0x10/0x10 [ 273.349443][T12060] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 273.355198][T12060] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 273.361147][T12060] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 273.367011][T12060] udpv6_destroy_sock+0x212/0x270 [ 273.372173][T12060] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 273.377773][T12060] sk_common_release+0x71/0x2e0 [ 273.382684][T12060] inet_release+0x17d/0x200 [ 273.387339][T12060] sock_close+0xbc/0x240 [ 273.391719][T12060] ? __pfx_sock_close+0x10/0x10 [ 273.396687][T12060] __fput+0x3e9/0x9f0 [ 273.400789][T12060] task_work_run+0x251/0x310 [ 273.405417][T12060] ? _raw_spin_unlock+0x28/0x50 [ 273.410280][T12060] ? __pfx_task_work_run+0x10/0x10 [ 273.415464][T12060] ? syscall_exit_to_user_mode+0xa3/0x340 [ 273.421202][T12060] syscall_exit_to_user_mode+0x13f/0x340 [ 273.426863][T12060] do_syscall_64+0x100/0x230 [ 273.431461][T12060] ? clear_bhb_loop+0x45/0xa0 [ 273.436148][T12060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.442047][T12060] RIP: 0033:0x7f6b20f8d169 [ 273.446484][T12060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.466184][T12060] RSP: 002b:00007ffdd87dd078 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 273.474697][T12060] RAX: 0000000000000000 RBX: 0000000000042910 RCX: 00007f6b20f8d169 [ 273.482679][T12060] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 273.491095][T12060] RBP: 00007f6b211a7ba0 R08: 0000000000000001 R09: 0000000ad87dd36f [ 273.499073][T12060] R10: 00007f6b20e00000 R11: 0000000000000246 R12: 00007f6b211a5fac [ 273.507405][T12060] R13: 00007f6b211a5fa0 R14: ffffffffffffffff R15: 00007ffdd87dd190 [ 273.515400][T12060] [ 273.518755][T12060] Kernel Offset: disabled [ 273.523088][T12060] Rebooting in 86400 seconds..