last executing test programs: 2.048222305s ago: executing program 0 (id=2076): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0xc) accept(r3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0801, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="7a0af8ff7525736cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000180)}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000180)}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000140), 0x4) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000140), 0x4) r8 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000014c0)="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", 0xf2a}, {&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000006c0)="2e71b29da2a17060e7c8926a875210ed950876ecf0d221f66b6e71f2edff2a8a7d224401a62a84cf04f0fefbf670f11a2534c91e4c7767f13a5093b241db45c16d5594a75923b4c1e4baf1ae07efae39a2ba97871b13d3dbe2f73f004429d411f152bc268f1f78b9adf6b8659e934599f1a7a7908c9cac815b112231e205d83ab0e28797402585a513b543eb5c4d35adf39c085ab65f3e5ec224c52b75f0025cce6f0f91ec7c658db443d0629e44c9fb1161f9595d7add092ccb9bae79875de0b01d56d18318648716019d1d8136d8810f7514567d947185ee2f588e"}, {&(0x7f0000000300)="91b801a79c6b"}, {&(0x7f0000000bc0)="23aedbb35270ce7562e575c05a64a004899fc67032cd1b7f63df7571e70b33b752baab3d0fde00fdedc8a4d1ff5f37ea646cf123a5efd4c96c3b21481907cdc0d2a1664f31449549a5b7aa7fc0cc86337276acd377115c6bc58f1840371128fe14df298fab0fc5b180e13d0211ba335c1bc303731fc45a4d19787eecff8381dcd575f77f985ddb0810255d161f3b62384c755777beebe1656567f8d94270ab31b998942390512bf4de6b8dd7d308e9932f1ce5c91fee7ad90bd041fe33db19bd7d6c7380b309282d0f1cfcda69c14182ec8cea"}, {&(0x7f0000000400)="bfcf63c60710c15f037a07d30b795592a5852ea5298d8937de42e711e365bf309ca6da6d2e9ed9661fc6b03f3e2b7f0981eddbe16078781cf7251205a9c7f6684b481c47"}], 0x2, 0x0, 0x0, 0x20008004}], 0x0, 0x4) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000000a80)={{r2}, 0x1, 0x8000000000001, 0x9}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x20000253) 1.814149952s ago: executing program 1 (id=2081): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000002c000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0000800700000068608164a623b5c5"], 0x28}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1000) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000040)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 1.794755679s ago: executing program 3 (id=2084): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f00000002c0)=0x100000000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_1\x00', 0x0}) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r5, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r7, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcfe000008000a00", @ANYRES32=r3, @ANYBLOB="140012800c0001006d616376746170000400028008000500", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x24004844}, 0x8000002) r8 = socket(0x28, 0x80000, 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$bt_sco(r8, &(0x7f00000000c0), 0x8) 1.659517181s ago: executing program 1 (id=2085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000010000000100000000", @ANYRES32=r1, @ANYRES32=r0], 0x18}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x133, &(0x7f0000000000)=[{}]}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}}, 0x4000000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa000000000000000586dd600004ba00140600000000000000000b0000ffff7f000001fe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) recvmmsg(r1, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x7, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20044061) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c0000000000000000d90000000000000100000008000a40000000000900010073797a31000000000900010073797a30000000000800054000000021300011800b00010074617267657400002000028008000300c425026008000240000000000a000100415544010000000000000000000000000af45b2dfdc09f5fc450ad8a4b9a3ac887cd3faf0c680821b180e2310e1bf0814c1da8616d1e1185ec1118dcbac6f5d743e24b890b4b7164f887e0236728a3260e294f0d92015be71e130e895fa35c57450cacad7646e9bbb24246389cf4ece797e15ec93400437a0ffd4b3d636133fb00"/291], 0xb4}}, 0x0) 1.526761748s ago: executing program 3 (id=2088): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x80002, 0x88) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) (async) sendfile(r2, r3, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x28, 0x0, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000000)=0x2, 0x4) (async) listen(r4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x82, 0x0, 0x1}, 0x28) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_0\x00', 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x2, 0x1c, 0x400, 0x70bd29, 0x0, {0x7, 0x0, 0x0, 0x0, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x40800) (async) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000440)={r10}, &(0x7f00000001c0)=0x8) r12 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000070c0)={&(0x7f0000006f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x8, 0x3}, {0x6, 0x1}, {0x0, 0x1}, {0x2, 0x200002}]}, @enum64={0x4, 0x0, 0x0, 0x13, 0x0, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xc, 0x1}, {0xb}, {0x5}, {0xf, 0x2}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x2}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xf}, {0x5}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f0000000480)=""/155, 0xb0, 0x9b, 0x0, 0x80000001}, 0x28) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r12) sendmsg$ETHTOOL_MSG_DEBUG_SET(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0003000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.321861495s ago: executing program 3 (id=2090): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e23, 0xef24, @empty, 0xfffffbff}}, 0x1ff, 0x201}, &(0x7f0000000400)=0x90) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@setneightbl={0x0, 0x43, 0x10, 0x70bd2c, 0x25dfdbff, {0x2}, [@NDTA_THRESH2={0x0, 0x3, 0x40}, @NDTA_NAME={0x0, 0x1, '*:\x00'}, @NDTA_GC_INTERVAL={0x0, 0x8, 0x4}, @NDTA_NAME={0x0, 0x1, '/\'\x0f)@(:%\x00'}, @NDTA_THRESH1={0x0, 0x2, 0xfffffffb}, @NDTA_THRESH1={0x0, 0x2, 0x1}, @NDTA_THRESH2={0x0, 0x3, 0x9}, @NDTA_NAME={0x0, 0x1, '\x00'}]}, 0x18}}, 0x0) 1.276042961s ago: executing program 3 (id=2092): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x108, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}]}, 0x108}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) 1.200333955s ago: executing program 4 (id=2094): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4000000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x4000000) (async) 1.165533513s ago: executing program 2 (id=2095): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000000040), 0x4) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) ppoll(&(0x7f00000001c0)=[{r6, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000000c0003400000008000000001140000001100010000000000000000000300000a"], 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x60}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e20, 0x3, @mcast2, 0x4f83}}, [0xfffffffffffffffa, 0x3, 0x8, 0x5, 0x5, 0x4d43, 0x7, 0x5, 0xc, 0xfff, 0x6, 0x16, 0x9, 0x400, 0xa]}, &(0x7f0000000280)=0x100) 1.110060975s ago: executing program 4 (id=2096): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x128, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xf8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xe8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc}, @IFLA_VLAN_INGRESS_QOS={0x0, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xfffffffffffffdb7}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x128}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f0000000440)="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", 0x23c}], 0x2) 1.053968037s ago: executing program 0 (id=2097): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, &(0x7f0000000040)=0x19) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket(0x15, 0x5, 0x0) connect$rose(r7, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) (async) recvmsg$unix(r7, &(0x7f0000000480)={&(0x7f0000000140), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000240)=""/115, 0x73}], 0x2, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}, 0x40000000) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x1}, 0x4) write$bt_hci(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r6], 0x6) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) (async) r11 = accept(r7, &(0x7f0000000580)=@x25={0x9, @remote}, &(0x7f0000000600)=0x80) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000000640)=0x8, 0x4) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xca, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) (async) r12 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r12) (async) sendmsg$alg(r12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newchain={0x118, 0x64, 0xf09d2fbf8b68c555, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0xfff1, 0xd}, {0xfff6, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ACT={0xa0, 0x9, 0x0, 0x1, [@m_csum={0x9c, 0xd, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x5, 0x6, 0x6}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x93, 0x3, 0x5, 0x2}, 0x65}}]}, {0x35, 0x6, "9ee2f6fa57b943aeb059859bad6c427d35086bf4fc5810c1199390d2a9d4a584179cdb0d0eb7b801c68baeaedd8af7d7d5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0x0, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00]}]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 1.053272891s ago: executing program 3 (id=2098): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x34, 0x4}}], 0x18}}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r1, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x300, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000100003041b00"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 915.466017ms ago: executing program 0 (id=2099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/221}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 877.863036ms ago: executing program 2 (id=2100): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x5ae6) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100)) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x2}}, 0x10) 752.645433ms ago: executing program 2 (id=2101): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4068, 0xfe4}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000000)=""/34, 0x22}], 0x3}, 0x12100) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2, 0xe4}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) 752.124369ms ago: executing program 4 (id=2102): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000003c0007010000000000000000010900001c1b355d7f6f4621cb7876f2dc554beeb1a9215bdb357bde305fa6f7f717edddff028289b1e1022a1916ae727245adaecb14e9e75b"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x0, 0x3dfa708e056562c6}, 0x50) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, &(0x7f0000000740)={0x77359400}) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) (async) r2 = socket(0x200000100000011, 0x803, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8798}], 0x1, 0x40001041, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) 751.07385ms ago: executing program 0 (id=2103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000ccc25abb1c2589b11668a34a2bd3d2f9e154fe5955a25ef8557800000000543b8af322ab02cc0034"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000105000029bd7000fcdbdf25030000040800c194000000000800b900", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010105000000000000000000000000000614124000000000"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000204080002400000000d08000140000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000001780)) r5 = socket$isdn(0x22, 0x3, 0x23) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000000)={0x4005, 0x10, 0x7}) 681.681504ms ago: executing program 3 (id=2104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="0a00340002020202020200000400cc0004001501a6593edeb79b0279f9826e364e9160d4c951a53f5f594240ae745b45209ce55cc0d7dd"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000002000000ffffac1414aa060001000a00800008"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'veth0_virt_wifi\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x3, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x1, 0x1, 0xa1, 0xfffffff8, {{0xb, 0x4, 0x3, 0x1e, 0x2c, 0x66, 0x0, 0x48, 0x29, 0x0, @private=0xa010100, @remote, {[@cipso={0x86, 0x15, 0x3, [{0x6, 0xc, "488284d0a37c24ee28f1"}, {0x6, 0x3, "de"}]}, @end]}}}}}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {0x0, 0x3}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r15 = socket(0x0, 0xa, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r6, @ANYBLOB="020027bd7000fddbdf250a0000002c00068008000700", @ANYRES32=0x0, @ANYBLOB="0800030000000000050002000800000008000700", @ANYRES32=r7, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="380006800800030000000000060001000a000000140004000000000000000000000000000000000008000700", @ANYRES32=r10, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r13, @ANYBLOB="140001800800030064010100060001000000000008000300020000000800030000000000050005000700000048000180060005004e2100ff07000700", @ANYRES32=r14, @ANYBLOB="080006000800000008000700", @ANYRES32=r17, @ANYBLOB="060001000a00000014000400fc02000000000000000000000000000105000200070000000500050009000000"], 0xf4}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) listen(r1, 0xc) accept(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 680.846814ms ago: executing program 1 (id=2105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000060000008000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000b00000000000e2b1860e2aa"], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x10, 0x1, 0x5}], 0x10}}], 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619, r0}, 0x38) 596.612772ms ago: executing program 2 (id=2106): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1db420, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1db420, 0x0) write$ppp(r0, &(0x7f0000000080)="39cf4862fdaa2d57a9deb4df82876a5f7c26f3b2349fc505d4f5a578e1a01f36e2e8ba", 0x23) (async) write$ppp(r0, &(0x7f0000000080)="39cf4862fdaa2d57a9deb4df82876a5f7c26f3b2349fc505d4f5a578e1a01f36e2e8ba", 0x23) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8010743f, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000040)={@initdev, 0x0}, &(0x7f00000001c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@mcast1, r3}, 0x14) 594.496276ms ago: executing program 4 (id=2107): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@delchain={0x6c, 0x65, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9}, {0x2, 0xfff2}, {0xc, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0xd}, @filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x40, 0xe0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) 481.82624ms ago: executing program 1 (id=2108): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x6020400) (async) setsockopt(r0, 0x200000, 0xffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async, rerun: 32) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @private=0xa010102}}}], 0x20}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r3, 0x1}, 0x1c}}, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4], 0x0, [0x8, 0x4, 0x2, 0x2, 0x8, 0xfffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0xe]}}]}}]}, 0x8c}}, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3c8, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x120}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffdb5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7939}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "1046055982fac18420f56b9e30b9a04cb6154e919603"}}]}, @TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xb6, 0x3, "3ff997c22b9d3ad960185f9c4999b6369cb1d1de6aa08f195e3a3b04bd1c06588040a220cd46e732c8d27899259d7e83c2c8b8f1196d0ce3f972e7c05e7166ca46ac61ebf23e3c99dd08ab08cb4b313b9923cf8637eb540bf442ec5771a864e1b804378501d3c2ec0d4c608588178e505a5b4c23b8a061e4d991b36fc623a900d34caae884855798421af10f00d335c30a7c76a3d74a756e297136622b231667549b377b6c0adbe32ba6d6d2b89d275059e6"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe70}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "b6a79149f11a2274abdc861fe421f439b58630a6076f3921146a15f48d04df6cb81f388b5dc523"}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xc}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4050000}, 0x45) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 32) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x10, 0x3f2, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}}, 0x4) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 390.102485ms ago: executing program 0 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r4 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) readv(r4, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c74}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 347.679237ms ago: executing program 2 (id=2110): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'vlan1\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r5, 0x107, 0x18, &(0x7f0000000800)={r4, 0x1, 0x6}, 0x10) sendto$packet(r5, &(0x7f0000000040)="02030007ffff0000000045", 0xff4b, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r6, 0x9}, &(0x7f00000002c0)=0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffd6e, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0xfc80, &(0x7f0000005c00)={&(0x7f0000000000)=@getqdisc={0x0, 0x26, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xa, 0x8}, {0xb, 0x5}, {0x2, 0x1}}, [{}, {}]}, 0x14}}, 0x80800) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 345.84413ms ago: executing program 4 (id=2111): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000400)) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000c00)) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'dummy0\x00', 0x3}) 242.347673ms ago: executing program 1 (id=2112): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4, 0x8, 0x3, 0x20, 0x0, 0x0, 0x0, [@sadb_key={0x1e, 0x8, 0x730, 0x0, "636472ddfef22bede770be34024ae2d95d499eefd4b5975d12387696107b1b9c3a90d89d7a3ad624c9ff58bc310e25d1709bf5e8131cbd1e86b38b3d01f1f1768a7b3063a25a213e7ae880d9cb27e5388c3486e8bbcac9d5e8eeb89900d72b96b4380c5f334dd73399870debd9a8cadf8b366f9417216f5fe623eb9b95baf17e8d2fde41152ae5b0e50343c294a0962b4e73c154c198e180f1a49a1ead3818fa1e7bae87e5450623432dfdd6886438bb3be7b6e0c02133a6b4a24bedfedf141c1e153b5aa9ca8eeb4c59c36042123fb182c2c6f78a3a3cbfce7ed81e8229ed4336ba63369fff"}]}, 0x100}, 0x1, 0x7}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r3, @ANYBLOB="0a0001"], 0x48}}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @empty, @void, {@x25={0x805, {0x1, 0x5, 0xff, "723c8cae33"}}}}, &(0x7f00000001c0)={0x0, 0x1, [0x68, 0xf81, 0xf1d, 0xfb6]}) 179.810409ms ago: executing program 0 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000800), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [], {0x14}}, 0x28}}, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r6 = socket$inet6(0xa, 0x1, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x9833bf88d1b218f5, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d6, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x40000}}, 0xe8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x0, 0xfffffffc, {0xa, 0x0, 0x0, 0xfe}}, 0x18}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r9, &(0x7f0000006080)={0x0, 0x0, &(0x7f0000006040)={&(0x7f0000005f80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf256800000008000300", @ANYRES32=r10, @ANYBLOB="1400c7000205060301060804930858f24748a9db"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x60, r7, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xc, 0x70}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@peer_mgmt={0x75, 0x6, {0x0, 0x8000, @void, @val=0x1c, @void}}]}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="5f54d49a0643d0e9362951f57d54d5abf7797c484d1d002c8c4341"}, @NL80211_ATTR_IE={0x9, 0x2a, [@supported_rates={0x1, 0x3, [{0x47, 0x1}, {0x60}, {0x2}]}]}]}, 0x60}}, 0x4000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042abd7000ffdbdf25030000000900010073797a3000000000050004000200000014000200697036677265746170300000000000000900030073797a31000000000500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x4085}, 0x8904) sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r12, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x804) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfaf6}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x890) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x2, 0x7ff}, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'wlan1\x00', {0x2}, 0x101}) 81.990651ms ago: executing program 4 (id=2114): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400, 0x400000}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "c0b6c5b29c38d41ac2fc7ddf972d00", "c1799d70", "bb0001000100"}, 0x28) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) 71.67386ms ago: executing program 2 (id=2115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, 0x0, 0x0, 0x40000000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 0s ago: executing program 1 (id=2116): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000aca10000280000002800000003000000000000000000000300000000030000000200000006000000010000000000000e0500000001000000006100"], 0x0, 0x43, 0x0, 0x1, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="2c0000001d005f80004000000000000005000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x39, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x154}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000480)='illinois\x00', 0x9) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000007c0)}, {0x0}], 0x2}}, {{&(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xd0}}], 0x2, 0x20008045) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c2"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004001500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 0s ago: executing program 4 (id=2117): socket(0x25, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x24040014) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x4e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd602abe0006181100000000000000000000000000000000000000000033ea0000000000000000000000004e21001890780400000ae0ff00000000000001000000"], 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) r11 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r11, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) r12 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r12, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001d40)=[{&(0x7f0000000c40)="174f0309acc581c27c0835a541d5ace14751a6fb5991e1eabe613766930c5209d76188595688370a8db8878df98ad326d683f46b7b423a4583c043d396d52fafd67bbd19f7e86b03f0890da3e3e1ac30139e27351572c4c42e96f4dec4c0c9d710f16af63cc306aa379bad5c6e7ef0f71776f0abdddb9ba606e921bcb3ac6bbea2ab3a0823b23088bc5e39310f040dacfd595b4675421c0046d89f2840d233d1034173a0fe91900d926e8d3a481c32b4f6079741d13e2ebb782090c8f38a9daebb1dea84e7", 0xc5}], 0x1, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c000000000000100010000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140f7f000001000000003800000000000000000000000700000001821066581ddb34253c0556c78617293444146773ac14143000002cb5640101020000005e000000"], 0x58}, 0x4) recvmmsg(r12, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): s `syz.2.207'. [ 114.263856][ T6739] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.208'. [ 114.427810][ T6749] netlink: 'syz.0.209': attribute type 10 has an invalid length. [ 114.446474][ T6749] veth0_vlan: entered allmulticast mode [ 114.606604][ T6751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.209'. [ 114.746572][ T6761] sctp: [Deprecated]: syz.4.213 (pid 6761) Use of int in maxseg socket option. [ 114.746572][ T6761] Use struct sctp_assoc_value instead [ 114.748232][ T6749] veth0_vlan: left promiscuous mode [ 114.826895][ T6749] veth0_vlan: entered promiscuous mode [ 114.935619][ T6749] team0: Device veth0_vlan failed to register rx_handler [ 115.038904][ T6752] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 115.284205][ T6775] syzkaller1: entered promiscuous mode [ 115.300835][ T6775] syzkaller1: entered allmulticast mode [ 115.523857][ T6790] netlink: 'syz.1.217': attribute type 21 has an invalid length. [ 116.084508][ T6819] __nla_validate_parse: 1 callbacks suppressed [ 116.084531][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 116.175252][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 116.360543][ T6828] netlink: 'syz.0.224': attribute type 11 has an invalid length. [ 116.368670][ T6828] netlink: 224 bytes leftover after parsing attributes in process `syz.0.224'. [ 116.476394][ T6828] syzkaller1: entered promiscuous mode [ 116.493859][ T6828] syzkaller1: entered allmulticast mode [ 116.624520][ T6841] netlink: 'syz.1.228': attribute type 2 has an invalid length. [ 116.691506][ T6839] netlink: 36 bytes leftover after parsing attributes in process `syz.4.227'. [ 116.963468][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.0.232'. [ 117.123655][ T6874] netlink: 'syz.2.234': attribute type 10 has an invalid length. [ 117.165657][ T6874] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 117.517699][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 117.541569][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 117.577247][ T6797] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.588867][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 117.621700][ T6797] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.637739][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.238'. [ 117.648104][ T6797] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.675450][ T6797] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.710156][ T6899] sctp: [Deprecated]: syz.2.242 (pid 6899) Use of int in maxseg socket option. [ 117.710156][ T6899] Use struct sctp_assoc_value instead [ 118.105352][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.249'. [ 118.199127][ T6919] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 118.215017][ T6919] netlink: 'syz.3.249': attribute type 2 has an invalid length. [ 118.844575][ T6941] team0: Port device team_slave_1 removed [ 119.285276][ T6951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.915639][ T7003] erspan0: entered promiscuous mode [ 119.967232][ T7003] batadv_slave_1: entered promiscuous mode [ 120.012845][ T7009] netlink: 'syz.4.273': attribute type 17 has an invalid length. [ 120.246147][ T7017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.223812][ T7070] netlink: 'syz.0.292': attribute type 1 has an invalid length. [ 121.314585][ T7077] __nla_validate_parse: 12 callbacks suppressed [ 121.314605][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 121.334504][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 121.568529][ T7082] netlink: 'syz.0.295': attribute type 11 has an invalid length. [ 121.583653][ T7078] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 121.615427][ T7083] netlink: 'syz.0.295': attribute type 33 has an invalid length. [ 121.635300][ T7078] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 122.646151][ T7124] netlink: 10 bytes leftover after parsing attributes in process `syz.2.308'. [ 123.035068][ T30] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.043065][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 123.178022][ T7138] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 123.315513][ T7138] bond1: entered promiscuous mode [ 123.335885][ T7138] bond1: entered allmulticast mode [ 123.346552][ T7138] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.586177][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.595412][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.073180][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.108946][ T7142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.573004][ T6804] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.614687][ T6804] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.693300][ T6804] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.716031][ T6804] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.748288][ T7179] vxcan1 speed is unknown, defaulting to 1000 [ 124.882744][ T7205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 124.897164][ T7198] syzkaller0: entered promiscuous mode [ 124.909575][ T7198] syzkaller0: entered allmulticast mode [ 124.972386][ T7205] IPv6: sit1: Disabled Multicast RS [ 124.980063][ T7205] sit1: entered allmulticast mode [ 126.688500][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.0.332'. [ 127.007509][ T7254] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 127.157136][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 127.285551][ T7258] bond1: (slave geneve2): making interface the new active one [ 127.311990][ T7258] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 127.327162][ T7263] netlink: 81 bytes leftover after parsing attributes in process `syz.4.336'. [ 127.384188][ T6797] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.405037][ T6797] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.429849][ T6797] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 127.598851][ T7279] sctp: [Deprecated]: syz.4.341 (pid 7279) Use of int in maxseg socket option. [ 127.598851][ T7279] Use struct sctp_assoc_value instead [ 127.637992][ T7280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 128.365714][ T7306] smc: net device erspan0 applied user defined pnetid SYZ0 [ 128.801688][ T7330] batadv1: entered allmulticast mode [ 129.081806][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 129.304596][ T7362] netlink: 'syz.4.365': attribute type 1 has an invalid length. [ 129.337211][ T7362] netlink: 224 bytes leftover after parsing attributes in process `syz.4.365'. [ 129.678918][ T7380] netlink: zone id is out of range [ 129.718169][ T7380] netlink: zone id is out of range [ 129.731686][ T7380] netlink: zone id is out of range [ 129.748590][ T7380] netlink: zone id is out of range [ 129.766739][ T7380] netlink: zone id is out of range [ 129.793047][ T7380] netlink: zone id is out of range [ 129.842374][ T7380] netlink: zone id is out of range [ 129.859221][ T7380] netlink: zone id is out of range [ 129.883795][ T7380] netlink: zone id is out of range [ 129.906035][ T7380] netlink: zone id is out of range [ 130.660381][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 130.667488][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 130.691041][ T7435] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 130.885677][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 130.910397][ T7443] tipc: Started in network mode [ 130.915378][ T7443] tipc: Node identity 1add097982cc, cluster identity 4711 [ 130.957109][ T7443] tipc: Enabled bearer , priority 0 [ 131.004492][ T7448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 131.023892][ T7437] tipc: Resetting bearer [ 131.040108][ T7436] tipc: Disabling bearer [ 131.063349][ T7448] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 131.083588][ T7448] netlink: 148 bytes leftover after parsing attributes in process `syz.0.391'. [ 131.180296][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'. [ 131.193280][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 131.532657][ T7433] infiniband syz0: set active [ 131.538449][ T1213] wlan1 speed is unknown, defaulting to 1000 [ 131.549132][ T7433] infiniband syz0: added wlan1 [ 131.560045][ T5878] Bluetooth: hci4: command tx timeout [ 131.566844][ T7433] syz0: rxe_create_cq: returned err = -12 [ 131.588736][ T7433] infiniband syz0: Couldn't create ib_mad CQ [ 131.641118][ T7433] infiniband syz0: Couldn't open port 1 [ 131.734228][ T7475] __nla_validate_parse: 2 callbacks suppressed [ 131.734256][ T7475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.402'. [ 131.744367][ T7433] RDS/IB: syz0: added [ 131.759273][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.400'. [ 131.770677][ T7433] smc: adding ib device syz0 with port count 1 [ 131.777176][ T7433] smc: ib device syz0 port 1 has pnetid [ 131.784466][ T1213] wlan1 speed is unknown, defaulting to 1000 [ 131.808195][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 132.421483][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 132.459907][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.1.408'. [ 132.524333][ T7504] netlink: 'syz.2.409': attribute type 3 has an invalid length. [ 132.655038][ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.412'. [ 132.673275][ T7504] sctp: [Deprecated]: syz.2.409 (pid 7504) Use of int in max_burst socket option deprecated. [ 132.673275][ T7504] Use struct sctp_assoc_value instead [ 132.800468][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 132.920048][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.415'. [ 133.243487][ T7536] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 133.358259][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 133.392233][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 133.574958][ T7553] veth1_to_bond: entered allmulticast mode [ 133.585030][ T7552] veth1_to_bond: left allmulticast mode [ 133.736267][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.427'. [ 133.782374][ T7561] geneve3: entered promiscuous mode [ 133.805554][ T7561] geneve3: entered allmulticast mode [ 133.839781][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 133.848799][ T1141] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0 [ 133.887934][ T1141] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0 [ 133.920518][ T1141] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0 [ 134.127903][ T7578] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 134.333095][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.435'. [ 134.370193][ T7592] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 134.416426][ T7592] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 134.447648][ T7592] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 134.534540][ T7589] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 134.537130][ T7593] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 134.569823][ T7593] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 134.636068][ T7611] bond0: entered promiscuous mode [ 134.641393][ T7611] bond_slave_0: entered promiscuous mode [ 134.658100][ T7611] bond_slave_1: entered promiscuous mode [ 134.706927][ T7611] bond0: left promiscuous mode [ 134.713999][ T7611] bond_slave_0: left promiscuous mode [ 134.721003][ T7611] bond_slave_1: left promiscuous mode [ 134.757645][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 135.713074][ T7667] netlink: 'syz.3.450': attribute type 1 has an invalid length. [ 135.891013][ T7673] net_ratelimit: 15 callbacks suppressed [ 135.891033][ T7673] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.975573][ T7433] wlan1 speed is unknown, defaulting to 1000 [ 136.036913][ T7678] tipc: Enabled bearer , priority 0 [ 136.112305][ T7675] syzkaller0: entered promiscuous mode [ 136.144043][ T7675] syzkaller0: entered allmulticast mode [ 136.205198][ T7675] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 136.311032][ T7670] tipc: Resetting bearer [ 136.541976][ T7663] tipc: Resetting bearer [ 136.653155][ T7663] tipc: Disabling bearer [ 136.843322][ T7702] __nla_validate_parse: 4 callbacks suppressed [ 136.843341][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 137.098673][ T7718] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 137.285100][ T7702] team0 (unregistering): Port device team_slave_0 removed [ 137.297272][ T7702] team0 (unregistering): Port device team_slave_1 removed [ 137.573196][ T7731] syzkaller1: entered promiscuous mode [ 137.594770][ T7731] syzkaller1: entered allmulticast mode [ 137.647034][ T7744] netlink: 'syz.1.467': attribute type 25 has an invalid length. [ 137.772839][ T7737] netlink: 232 bytes leftover after parsing attributes in process `syz.1.467'. [ 137.838406][ T7745] tipc: Started in network mode [ 137.855536][ T7745] tipc: Node identity , cluster identity 4711 [ 137.879607][ T7745] tipc: Failed to obtain node identity [ 137.899643][ T7745] tipc: Enabling of bearer rejected, failed to enable media [ 137.962291][ T7733] tipc: Started in network mode [ 137.981088][ T7733] tipc: Node identity , cluster identity 4711 [ 137.987229][ T7733] tipc: Failed to obtain node identity [ 138.034166][ T7733] tipc: Enabling of bearer rejected, failed to enable media [ 138.118515][ T1304] aoe: packet could not be sent on veth0. consider increasing tx_queue_len [ 138.488912][ T7775] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 138.859043][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 139.006577][ T7800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 139.038639][ T7800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.291546][ T7810] netlink: 'syz.4.482': attribute type 4 has an invalid length. [ 139.312945][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 139.348859][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 139.854584][ T5878] Bluetooth: hci4: link tx timeout [ 139.861210][ T7836] netlink: 20 bytes leftover after parsing attributes in process `syz.3.487'. [ 139.873903][ T5878] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.328892][ T7849] syz_tun: entered allmulticast mode [ 140.418914][ T7855] netlink: 'syz.0.493': attribute type 29 has an invalid length. [ 140.476380][ T7873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.496'. [ 140.574544][ T7855] netlink: 'syz.0.493': attribute type 29 has an invalid length. [ 140.612203][ T7865] netlink: 500 bytes leftover after parsing attributes in process `syz.0.493'. [ 140.647568][ T7865] unsupported nla_type 58 [ 140.675055][ T7847] syz_tun: left allmulticast mode [ 141.078592][ T7899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.501'. [ 141.793864][ T7950] netlink: 'syz.3.516': attribute type 6 has an invalid length. [ 141.801915][ T7950] netlink: 'syz.3.516': attribute type 5 has an invalid length. [ 141.830993][ T7956] tipc: Enabling of bearer rejected, failed to enable media [ 141.854874][ T7954] __nla_validate_parse: 5 callbacks suppressed [ 141.854896][ T7954] netlink: 592 bytes leftover after parsing attributes in process `syz.1.517'. [ 141.929685][ T7954] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 141.953019][ T5884] Bluetooth: hci4: command 0x0406 tx timeout [ 141.964038][ T5951] IPVS: starting estimator thread 0... [ 141.982581][ T7954] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 142.037272][ T7955] bond3 (unregistering): Released all slaves [ 142.060736][ T7963] IPVS: using max 24 ests per chain, 57600 per kthread [ 142.082912][ T7954] netlink: 'syz.1.517': attribute type 1 has an invalid length. [ 142.300290][ T7974] syzkaller0: refused to change device tx_queue_len [ 142.341633][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 142.510993][ T7960] netlink: 48 bytes leftover after parsing attributes in process `syz.3.516'. [ 142.747619][ T7996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.528'. [ 143.343534][ T8030] geneve2: left allmulticast mode [ 143.421895][ T43] wlan1 speed is unknown, defaulting to 1000 [ 143.521521][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.537'. [ 143.579861][ T8033] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 143.630990][ T8033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.650355][ T8051] netlink: 44 bytes leftover after parsing attributes in process `syz.1.539'. [ 143.686787][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.542'. [ 143.734833][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.0.542'. [ 144.292382][ T8079] validate_nla: 1 callbacks suppressed [ 144.292404][ T8079] netlink: 'syz.3.551': attribute type 1 has an invalid length. [ 144.520823][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.551'. [ 144.618245][ T8094] netlink: 100 bytes leftover after parsing attributes in process `syz.3.551'. [ 144.702994][ T8081] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.735896][ T8081] bond1: (slave bond2): making interface the new active one [ 144.756086][ T8081] bond1: (slave bond2): Enslaving as an active interface with an up link [ 144.985386][ T8087] bond1: entered promiscuous mode [ 144.997648][ T8087] bond2: entered promiscuous mode [ 145.016444][ T8087] bond1: entered allmulticast mode [ 145.023986][ T8087] bond2: entered allmulticast mode [ 145.031985][ T8087] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.403253][ T8127] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 145.670523][ T8138] 8021q: VLANs not supported on vcan0 [ 147.603426][ T8166] tipc: Enabling of bearer rejected, failed to enable media [ 147.622918][ T8174] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 147.680152][ T8175] netem: change failed [ 149.116432][ T8177] __nla_validate_parse: 4 callbacks suppressed [ 149.116452][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 149.138465][ T8187] netlink: 40 bytes leftover after parsing attributes in process `syz.1.580'. [ 149.169914][ T8172] vxcan1 speed is unknown, defaulting to 1000 [ 149.370036][ T8196] tipc: Enabling of bearer rejected, failed to enable media [ 149.382115][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 149.404632][ T8197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 149.602839][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 149.799615][ T8172] wlan1 speed is unknown, defaulting to 1000 [ 150.081245][ T8222] netlink: 128 bytes leftover after parsing attributes in process `syz.2.591'. [ 150.126818][ T8222] netlink: 20 bytes leftover after parsing attributes in process `syz.2.591'. [ 150.386915][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 150.618992][ T8253] Bluetooth: MGMT ver 1.23 [ 150.634682][ T8253] tipc: Enabling of bearer rejected, media not registered [ 150.716574][ T8259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 151.294625][ T8282] netlink: 256 bytes leftover after parsing attributes in process `syz.1.605'. [ 151.502388][ T1213] IPVS: starting estimator thread 0... [ 151.608493][ T8293] IPVS: using max 24 ests per chain, 57600 per kthread [ 151.616968][ T8291] syzkaller1: entered promiscuous mode [ 151.643872][ T8291] syzkaller1: entered allmulticast mode [ 151.933363][ T8308] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 152.292825][ T8327] netlink: 'syz.2.617': attribute type 1 has an invalid length. [ 152.514972][ T8327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.566783][ T8348] netlink: 'syz.4.620': attribute type 58 has an invalid length. [ 154.110968][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 154.264147][ T8412] syz.0.638 (8412) used greatest stack depth: 17864 bytes left [ 154.340171][ T8432] netlink: 'syz.0.642': attribute type 7 has an invalid length. [ 154.367009][ T8432] __nla_validate_parse: 17 callbacks suppressed [ 154.367027][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'. [ 154.545560][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.558062][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.581641][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.602039][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.611952][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.622227][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.631827][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.749242][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 154.781300][ T8448] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 155.122052][ T8471] veth5: entered allmulticast mode [ 155.181720][ T8473] openvswitch: netlink: IPv4 tun info is not correct [ 156.547698][ T8531] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 156.623590][ T8537] tipc: MTU too low for tipc bearer [ 157.290896][ T8575] C: renamed from team_slave_0 (while UP) [ 157.331515][ T8575] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 157.348940][ T8579] netlink: 'syz.0.681': attribute type 10 has an invalid length. [ 157.372969][ T8575] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.468651][ T8576] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 157.509739][ T8576] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 157.564713][ T8579] bridge_slave_1: left allmulticast mode [ 157.578606][ T8579] bridge_slave_1: left promiscuous mode [ 157.595112][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.619092][ T8579] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 157.727801][ T8595] netlink: 'syz.1.684': attribute type 5 has an invalid length. [ 157.756555][ T8595] geneve4: entered promiscuous mode [ 157.793089][ T8595] geneve4: entered allmulticast mode [ 157.805252][ T7582] netdevsim netdevsim1 netdevsim1: set [1, 3] type 2 family 0 port 256 - 0 [ 157.822979][ T7582] netdevsim netdevsim1 netdevsim2: set [1, 3] type 2 family 0 port 256 - 0 [ 157.988326][ T7582] netdevsim netdevsim1 netdevsim3: set [1, 3] type 2 family 0 port 256 - 0 [ 159.335801][ T8612] netlink: 'syz.2.690': attribute type 1 has an invalid length. [ 159.352358][ T8629] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 159.640090][ T8646] __nla_validate_parse: 34 callbacks suppressed [ 159.640110][ T8646] netlink: 104 bytes leftover after parsing attributes in process `syz.0.697'. [ 159.731830][ T8649] netlink: 'syz.1.699': attribute type 29 has an invalid length. [ 159.755715][ T8649] netlink: 'syz.1.699': attribute type 29 has an invalid length. [ 159.807250][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 159.826282][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.0.702'. [ 160.768316][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057f0d800: rx timeout, send abort [ 160.777991][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888057f0d800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.855971][ T8701] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 161.009120][ T8705] netlink: 44 bytes leftover after parsing attributes in process `syz.4.712'. [ 161.039681][ T8705] netlink: 43 bytes leftover after parsing attributes in process `syz.4.712'. [ 161.089199][ T8705] netlink: 'syz.4.712': attribute type 5 has an invalid length. [ 161.121946][ T8708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 161.135892][ T8705] netlink: 43 bytes leftover after parsing attributes in process `syz.4.712'. [ 161.225678][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 161.623323][ T8739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.822795][ T8752] macsec0: entered promiscuous mode [ 161.854634][ T8752] macsec0: entered allmulticast mode [ 161.874250][ T8752] veth1_macvtap: entered allmulticast mode [ 162.043024][ T8763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.734'. [ 162.251500][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.739'. [ 162.583832][ T8788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.652629][ T8787] batadv_slave_1: Device is already in use. [ 162.921801][ T8813] netlink: 'syz.0.749': attribute type 33 has an invalid length. [ 163.088362][ T8778] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 163.125556][ T8820] netlink: 'syz.2.751': attribute type 1 has an invalid length. [ 163.342777][ T8833] netlink: 'syz.2.754': attribute type 6 has an invalid length. [ 163.617596][ T7608] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.661418][ T7586] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.690828][ T7586] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.721721][ T7586] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.142280][ T8871] netlink: 'syz.1.764': attribute type 1 has an invalid length. [ 164.313697][ T8877] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 164.313752][ T8876] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 164.442245][ T5878] Bluetooth: hci0: command 0x0401 tx timeout [ 164.704034][ T8888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.719974][ T8890] IPVS: set_ctl: invalid protocol: 97 0.0.0.0:20068 [ 164.954385][ T8901] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 165.034683][ T8903] veth1_macvtap: left promiscuous mode [ 165.146349][ T8907] __nla_validate_parse: 8 callbacks suppressed [ 165.146373][ T8907] netlink: 224 bytes leftover after parsing attributes in process `syz.0.777'. [ 165.469511][ T5878] Bluetooth: hci4: command 0x0406 tx timeout [ 165.543813][ T8913] syzkaller0: entered promiscuous mode [ 165.549835][ T8913] syzkaller0: entered allmulticast mode [ 165.627571][ T8907] netlink: 116 bytes leftover after parsing attributes in process `syz.0.777'. [ 165.659977][ T8933] pim6reg527: entered allmulticast mode [ 165.746725][ T8941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.785'. [ 165.954787][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 166.018155][ T8952] netlink: 72 bytes leftover after parsing attributes in process `syz.3.787'. [ 166.067136][ T8957] Unsupported ieee802154 address type: 0 [ 166.154076][ T8961] netlink: 'syz.1.789': attribute type 7 has an invalid length. [ 166.594857][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 167.256906][ T8961] : entered promiscuous mode [ 167.274519][ T8964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 167.309526][ T8964] netlink: 50 bytes leftover after parsing attributes in process `syz.2.791'. [ 167.330207][ T8964] netlink: 50 bytes leftover after parsing attributes in process `syz.2.791'. [ 167.339818][ T8966] netlink: 'syz.3.792': attribute type 3 has an invalid length. [ 167.360922][ T8966] tipc: Started in network mode [ 167.371155][ T8966] tipc: Node identity 5, cluster identity 4711 [ 167.377389][ T8966] tipc: Node number set to 5 [ 167.527754][ T8972] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 167.647942][ T8986] sock: sock_timestamping_bind_phc: sock not bind to device [ 167.756133][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 169.363596][ T9065] netlink: 'syz.3.815': attribute type 4 has an invalid length. [ 170.198504][ T9095] __nla_validate_parse: 13 callbacks suppressed [ 170.198525][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 170.298285][ T9095] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 170.432238][ T9103] netlink: 'syz.4.826': attribute type 22 has an invalid length. [ 170.443010][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.826'. [ 170.496828][ T7582] netdevsim netdevsim4 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.515777][ T7582] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.527550][ T7582] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.544263][ T7582] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.614552][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 170.638608][ T9111] netlink: 76 bytes leftover after parsing attributes in process `syz.0.829'. [ 170.755732][ T9123] netlink: 56 bytes leftover after parsing attributes in process `syz.4.831'. [ 170.763765][ T9121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.830'. [ 170.799250][ T9123] netlink: 48 bytes leftover after parsing attributes in process `syz.4.831'. [ 170.809548][ T9119] netlink: 36 bytes leftover after parsing attributes in process `syz.3.830'. [ 170.847020][ T9119] netlink: 170432 bytes leftover after parsing attributes in process `syz.3.830'. [ 171.073324][ T9136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.193394][ T9145] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 171.441823][ T9153] netlink: 'syz.3.842': attribute type 10 has an invalid length. [ 171.700751][ T9155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.723683][ T9155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.754788][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.846'. [ 171.878450][ T9155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.906663][ T9155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.063485][ T9155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.078341][ T9155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.103493][ T9179] lo: entered promiscuous mode [ 172.112651][ T9178] 8021q: VLANs not supported on ip_vti0 [ 172.165250][ T9155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.185764][ T9155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.209924][ T9176] lo: left promiscuous mode [ 172.352866][ T7603] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.363719][ T7603] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.387746][ T7603] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.426718][ T7603] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.489809][ T7603] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.504869][ T7603] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.529033][ T7603] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.542340][ T7603] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.903280][ T9217] netlink: 'syz.4.860': attribute type 4 has an invalid length. [ 173.163738][ T9227] vxcan1 speed is unknown, defaulting to 1000 [ 173.205943][ T9230] xt_policy: too many policy elements [ 173.548527][ T9252] netlink: 'syz.1.871': attribute type 4 has an invalid length. [ 174.005464][ T9280] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 174.014172][ T9280] netlink: 'syz.2.878': attribute type 1 has an invalid length. [ 174.022091][ T9280] netlink: 'syz.2.878': attribute type 2 has an invalid length. [ 174.320513][ T9296] netlink: 'syz.2.880': attribute type 32 has an invalid length. [ 174.334004][ T9296] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 174.549279][ T9302] netlink: 'syz.1.882': attribute type 21 has an invalid length. [ 174.557622][ T9302] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 175.869171][ T9340] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 175.894189][ T9340] __nla_validate_parse: 12 callbacks suppressed [ 175.894208][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 175.921587][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 175.933351][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 175.943973][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.891'. [ 175.958225][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.893'. [ 176.219226][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 176.253586][ T9361] C: renamed from lo [ 176.283570][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 176.295322][ T9364] netlink: 104 bytes leftover after parsing attributes in process `syz.4.900'. [ 176.298515][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.898'. [ 176.476038][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 176.533896][ T9376] vxcan1 speed is unknown, defaulting to 1000 [ 176.552833][ T9382] netlink: 'syz.4.904': attribute type 30 has an invalid length. [ 177.041331][ T9402] tipc: Started in network mode [ 177.058327][ T9402] tipc: Node identity b212af690a7c, cluster identity 4711 [ 177.078715][ T9402] tipc: Enabled bearer , priority 0 [ 177.093333][ T9376] wlan1 speed is unknown, defaulting to 1000 [ 177.128636][ T9402] syzkaller0: entered promiscuous mode [ 177.174050][ T9402] syzkaller0: entered allmulticast mode [ 177.278526][ T9413] tipc: Resetting bearer [ 177.334210][ T9401] tipc: Resetting bearer [ 177.372501][ T9401] tipc: Disabling bearer [ 179.793479][ T9529] netlink: 'syz.0.946': attribute type 5 has an invalid length. [ 180.420027][ T9556] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 180.612926][ T9568] netlink: 'syz.1.960': attribute type 11 has an invalid length. [ 180.829584][ T9580] macsec0: entered promiscuous mode [ 180.834858][ T9580] macsec0: entered allmulticast mode [ 180.876897][ T9580] veth1_macvtap: entered promiscuous mode [ 180.889432][ T9580] veth1_macvtap: entered allmulticast mode [ 180.895594][ T9580] macsec0: left promiscuous mode [ 180.941458][ T9580] macsec0: left allmulticast mode [ 180.946573][ T9580] veth1_macvtap: left allmulticast mode [ 181.012337][ T9591] __nla_validate_parse: 10 callbacks suppressed [ 181.012357][ T9591] netlink: 92 bytes leftover after parsing attributes in process `syz.2.961'. [ 181.063180][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.961'. [ 181.085415][ T9589] netlink: 165 bytes leftover after parsing attributes in process `syz.3.965'. [ 181.129528][ T9600] netlink: 165 bytes leftover after parsing attributes in process `syz.3.965'. [ 181.277373][ T9613] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 181.415675][ T9610] ip6tnl2: entered promiscuous mode [ 181.424967][ T9610] ip6tnl2: entered allmulticast mode [ 182.476628][ T9652] netlink: 'syz.0.976': attribute type 12 has an invalid length. [ 182.778438][ T9679] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 182.854702][ T9686] netlink: 64 bytes leftover after parsing attributes in process `syz.1.987'. [ 182.903243][ T9688] netlink: 348 bytes leftover after parsing attributes in process `syz.2.989'. [ 182.926383][ T9680] 8021q: VLANs not supported on ip6tnl0 [ 182.933049][ T9680] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 182.959447][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.986'. [ 183.127386][ T9700] netlink: 'syz.3.994': attribute type 2 has an invalid length. [ 183.158445][ T9700] netlink: 244 bytes leftover after parsing attributes in process `syz.3.994'. [ 183.219536][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.993'. [ 183.273791][ T9702] dummy0: entered promiscuous mode [ 183.306070][ T9702] batadv_slave_1: entered promiscuous mode [ 183.334515][ T9702] debugfs: 'hsr1' already exists in 'hsr' [ 183.347441][ T9702] Cannot create hsr debugfs directory [ 183.361820][ T9713] netlink: 'syz.3.997': attribute type 4 has an invalid length. [ 183.963685][ T9748] TCP: TCP_TX_DELAY enabled [ 184.312152][ T9762] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 184.378519][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.386492][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.449906][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.457502][ T9762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.465930][ T9762] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.473194][ T9762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.504091][ T6966] udevd[6966]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 184.523911][ T9762] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 184.561025][ T9763] netlink: 'syz.4.1009': attribute type 5 has an invalid length. [ 184.636240][ T9762] netlink: 'syz.2.1011': attribute type 15 has an invalid length. [ 184.644585][ T9774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.649016][ T7586] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 184.790495][ T9788] batman_adv: batadv0: Adding interface: dummy0 [ 184.796808][ T9788] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.831864][ T9788] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 184.975405][ T9790] syzkaller0: entered promiscuous mode [ 184.981599][ T9790] syzkaller0: entered allmulticast mode [ 185.052154][ T31] audit: type=1107 audit(1757267835.367:2): pid=9796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œœ%èÍUýAÊl…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 185.366276][ T9814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.432058][ T9816] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.452105][ T9816] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 185.468758][ T9816] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 185.479879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.086389][ T9834] __nla_validate_parse: 9 callbacks suppressed [ 186.086407][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1027'. [ 186.241657][ T9843] bridge: RTM_NEWNEIGH with invalid ether address [ 186.534563][ T9851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 186.561766][ T9820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.850268][ T9871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1041'. [ 186.886463][ T9871] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 186.978961][ T9877] tipc: Started in network mode [ 187.001693][ T9877] tipc: Node identity ac14140f, cluster identity 4711 [ 187.019688][ T9877] tipc: New replicast peer: 255.255.255.255 [ 187.026459][ T9877] tipc: Enabled bearer , priority 10 [ 187.036108][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 187.068444][ T9886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1047'. [ 187.124374][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 187.161142][ T9881] tipc: Enabling of bearer rejected, already enabled [ 187.241401][ T9895] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 187.258624][ T9894] rdma_rxe: rxe_newlink: failed to add wlan1 [ 187.317374][ T9894] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1049'. [ 187.361677][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 187.416268][ T9895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.491454][ T9906] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 187.529592][ T9906] bridge0: port 3(team0) entered blocking state [ 187.537235][ T9906] bridge0: port 3(team0) entered disabled state [ 187.551354][ T9906] team0: entered allmulticast mode [ 187.556529][ T9906] C: entered allmulticast mode [ 187.586305][ T9906] team0: entered promiscuous mode [ 187.605051][ T9906] C: entered promiscuous mode [ 187.626271][ T9906] bridge0: port 3(team0) entered blocking state [ 187.632780][ T9906] bridge0: port 3(team0) entered forwarding state [ 187.665914][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 187.680346][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 187.868040][ T9924] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 187.978001][ T9937] syz.3.1061: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 187.995272][ T9937] CPU: 1 UID: 0 PID: 9937 Comm: syz.3.1061 Not tainted syzkaller #0 PREEMPT(full) [ 187.995300][ T9937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.995322][ T9937] Call Trace: [ 187.995330][ T9937] [ 187.995340][ T9937] dump_stack_lvl+0x189/0x250 [ 187.995377][ T9937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.995403][ T9937] ? __pfx__printk+0x10/0x10 [ 187.995431][ T9937] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.995457][ T9937] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 187.995483][ T9937] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 187.995511][ T9937] warn_alloc+0x214/0x310 [ 187.995544][ T9937] ? stack_depot_save_flags+0x40/0x860 [ 187.995576][ T9937] ? __pfx_warn_alloc+0x10/0x10 [ 187.995609][ T9937] ? kasan_save_track+0x4f/0x80 [ 187.995636][ T9937] ? xskq_create+0x56/0x170 [ 187.995663][ T9937] ? xsk_init_queue+0xb0/0x110 [ 187.995688][ T9937] ? xsk_setsockopt+0x4dc/0x8d0 [ 187.995714][ T9937] ? do_sock_setsockopt+0x17c/0x1b0 [ 187.995733][ T9937] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 187.995752][ T9937] ? do_syscall_64+0xfa/0x3b0 [ 187.995769][ T9937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.995798][ T9937] __vmalloc_node_range_noprof+0x125/0x12f0 [ 187.995859][ T9937] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 187.995890][ T9937] ? xskq_create+0x56/0x170 [ 187.995922][ T9937] ? __kasan_kmalloc+0x93/0xb0 [ 187.995954][ T9937] vmalloc_user_noprof+0xad/0xf0 [ 187.995984][ T9937] ? xskq_create+0xbf/0x170 [ 187.996012][ T9937] xskq_create+0xbf/0x170 [ 187.996044][ T9937] xsk_init_queue+0xb0/0x110 [ 187.996076][ T9937] xsk_setsockopt+0x4dc/0x8d0 [ 187.996116][ T9937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.996144][ T9937] ? __pfx_aa_sk_perm+0x10/0x10 [ 187.996179][ T9937] ? aa_sock_opt_perm+0xff/0x1b0 [ 187.996203][ T9937] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 187.996231][ T9937] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.996260][ T9937] do_sock_setsockopt+0x17c/0x1b0 [ 187.996287][ T9937] __x64_sys_setsockopt+0x13f/0x1b0 [ 187.996316][ T9937] do_syscall_64+0xfa/0x3b0 [ 187.996334][ T9937] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.996364][ T9937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996384][ T9937] ? clear_bhb_loop+0x60/0xb0 [ 187.996408][ T9937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.996428][ T9937] RIP: 0033:0x7f4e4398ebe9 [ 187.996457][ T9937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.996475][ T9937] RSP: 002b:00007f4e448d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.996497][ T9937] RAX: ffffffffffffffda RBX: 00007f4e43bc5fa0 RCX: 00007f4e4398ebe9 [ 187.996511][ T9937] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 187.996523][ T9937] RBP: 00007f4e43a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 187.996536][ T9937] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.996548][ T9937] R13: 00007f4e43bc6038 R14: 00007f4e43bc5fa0 R15: 00007ffed44a2518 [ 187.996582][ T9937] [ 187.996675][ T9937] Mem-Info: [ 188.105293][ T5234] udevd[5234]: worker [6966] terminated by signal 33 (Unknown signal 33) [ 188.147324][ T24] tipc: Node number set to 2886997007 [ 188.157215][ T5234] udevd[5234]: worker [6966] failed while handling '/devices/virtual/block/loop0' [ 188.328157][ T9937] active_anon:5908 inactive_anon:0 isolated_anon:0 [ 188.328157][ T9937] active_file:2564 inactive_file:39882 isolated_file:0 [ 188.328157][ T9937] unevictable:768 dirty:30 writeback:0 [ 188.328157][ T9937] slab_reclaimable:11177 slab_unreclaimable:102649 [ 188.328157][ T9937] mapped:29176 shmem:1426 pagetables:1323 [ 188.328157][ T9937] sec_pagetables:0 bounce:0 [ 188.328157][ T9937] kernel_misc_reclaimable:0 [ 188.328157][ T9937] free:1322425 free_pcp:15428 free_cma:0 [ 188.393383][ T9937] Node 0 active_anon:23732kB inactive_anon:0kB active_file:10256kB inactive_file:159320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116704kB dirty:120kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:5144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.466103][ T9937] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 188.516567][ T9937] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 188.548838][ T9937] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 188.557247][ T9937] Node 0 DMA32 free:1382268kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23288kB inactive_anon:0kB active_file:10256kB inactive_file:157748kB unevictable:1536kB writepending:120kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:40188kB local_pcp:18920kB free_cma:0kB [ 188.594684][ T9937] lowmem_reserve[]: 0 0 1 1 1 [ 188.599614][ T9937] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 188.629488][ T9937] lowmem_reserve[]: 0 0 0 0 0 [ 188.634292][ T9937] Node 1 Normal free:3893216kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21472kB local_pcp:11392kB free_cma:0kB [ 188.682425][ T9937] lowmem_reserve[]: 0 0 0 0 0 [ 188.687497][ T9937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 188.725065][ T9937] Node 0 DMA32: 511*4kB (UM) 916*8kB (UME) 563*16kB (UME) 770*32kB (UME) 204*64kB (UM) 111*128kB (UM) 59*256kB (UM) 25*512kB (UM) 8*1024kB (UME) 9*2048kB (UME) 307*4096kB (UM) = 1382284kB [ 188.754013][ T9937] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 188.775156][ T9937] Node 1 Normal: 194*4kB (UME) 45*8kB (UME) 27*16kB (UME) 76*32kB (UME) 33*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893216kB [ 188.794424][ T9937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.869254][ T9937] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.889483][ T9937] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 188.899096][ T9937] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 188.946237][ T9937] 43818 total pagecache pages [ 188.954548][ T9937] 0 pages in swap cache [ 188.963791][ T9937] Free swap = 124996kB [ 188.972140][ T9937] Total swap = 124996kB [ 188.981921][ T9937] 2097051 pages RAM [ 188.989915][ T9937] 0 pages HighMem/MovableOnly [ 189.000459][ T9937] 425667 pages reserved [ 189.018206][ T9937] 0 pages cma reserved [ 189.685677][T10020] syz_tun: entered allmulticast mode [ 189.700666][T10020] dvmrp8: entered allmulticast mode [ 189.709009][T10020] netlink: 'syz.3.1078': attribute type 10 has an invalid length. [ 189.734434][T10020] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.747279][T10019] syz_tun: left allmulticast mode [ 190.305629][T10042] netlink: 'syz.2.1085': attribute type 24 has an invalid length. [ 190.344415][T10037] syzkaller1: entered promiscuous mode [ 190.369540][T10037] syzkaller1: entered allmulticast mode [ 191.833802][T10108] __nla_validate_parse: 7 callbacks suppressed [ 191.833826][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 191.893300][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 192.023597][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1107'. [ 192.259651][T10122] netlink: 'syz.0.1109': attribute type 5 has an invalid length. [ 192.281821][T10138] netlink: 211664 bytes leftover after parsing attributes in process `syz.3.1111'. [ 192.327449][T10139] netlink: 'syz.1.1112': attribute type 4 has an invalid length. [ 192.382841][T10143] netlink: 'syz.1.1112': attribute type 4 has an invalid length. [ 192.463701][T10146] netlink: 'syz.0.1114': attribute type 5 has an invalid length. [ 192.535075][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1116'. [ 192.612000][T10160] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 192.756522][T10170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1122'. [ 192.824397][T10170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 192.886870][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1125'. [ 192.918235][T10176] tipc: Enabling of bearer rejected, failed to enable media [ 192.956196][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.040133][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.061301][T10180] bond3: (slave gretap1): making interface the new active one [ 193.088287][T10180] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 193.111982][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.124064][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.132303][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.140550][T10179] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 193.427373][T10200] sctp: [Deprecated]: syz.3.1132 (pid 10200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.427373][T10200] Use struct sctp_sack_info instead [ 193.552409][T10207] sctp: [Deprecated]: syz.1.1136 (pid 10207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.552409][T10207] Use struct sctp_sack_info instead [ 194.128604][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 194.176475][T10245] bond5 (unregistering): Released all slaves [ 194.214056][T10243] tipc: Enabled bearer , priority 0 [ 194.240677][T10243] syzkaller0: entered promiscuous mode [ 194.258980][T10243] syzkaller0: entered allmulticast mode [ 194.271140][T10243] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 194.333351][T10243] tipc: Resetting bearer [ 194.392629][T10242] tipc: Resetting bearer [ 194.445729][T10268] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1152'. [ 194.450221][T10242] tipc: Disabling bearer [ 194.575376][T10270] : renamed from hsr0 (while UP) [ 195.411228][T10314] IPVS: Error connecting to the multicast addr [ 196.058056][T10350] netem: incorrect gi model size [ 196.069233][T10350] netem: change failed [ 196.172839][T10358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.877157][T10393] __nla_validate_parse: 2 callbacks suppressed [ 196.877176][T10393] netlink: 212296 bytes leftover after parsing attributes in process `syz.2.1186'. [ 197.104264][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1189'. [ 197.164572][T10407] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1191'. [ 197.212746][T10409] syzkaller1: entered promiscuous mode [ 197.248671][T10409] syzkaller1: entered allmulticast mode [ 197.323771][T10419] validate_nla: 61 callbacks suppressed [ 197.323792][T10419] netlink: 'syz.1.1194': attribute type 19 has an invalid length. [ 197.563655][T10437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1198'. [ 197.591672][T10437] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1198'. [ 197.740000][T10442] vlan2: entered allmulticast mode [ 197.756432][T10442] hsr0: entered allmulticast mode [ 197.776548][T10442] hsr_slave_0: entered allmulticast mode [ 197.810299][T10442] hsr_slave_1: entered allmulticast mode [ 198.338838][T10484] netlink: 'syz.0.1211': attribute type 8 has an invalid length. [ 198.546898][T10492] netlink: 'syz.4.1214': attribute type 1 has an invalid length. [ 198.570556][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1216'. [ 198.617232][T10501] netlink: 'syz.3.1217': attribute type 49 has an invalid length. [ 199.558196][ T1304] aoe: packet could not be sent on veth0. consider increasing tx_queue_len [ 199.610072][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 199.642331][T10550] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1230'. [ 199.675074][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 199.685079][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1228'. [ 199.970202][T10566] IPVS: set_ctl: invalid protocol: 2470 158.221.52.24:28963 [ 200.806522][T10598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.048889][T10611] smc: removing ib device syz0 [ 201.165099][T10615] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 201.432896][T10620] netlink: 'syz.0.1250': attribute type 32 has an invalid length. [ 201.496063][T10625] netlink: 'syz.0.1250': attribute type 1 has an invalid length. [ 201.978921][T10633] tipc: Enabling of bearer rejected, failed to enable media [ 202.134074][T10636] __nla_validate_parse: 6 callbacks suppressed [ 202.134096][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1254'. [ 202.263271][T10636] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 202.695856][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 202.724195][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'. [ 202.764996][T10658] netlink: 'syz.0.1260': attribute type 9 has an invalid length. [ 202.793201][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1262'. [ 203.251910][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 203.279542][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1265'. [ 203.319017][T10684] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 203.533704][T10692] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1268'. [ 203.614460][T10701] sctp: [Deprecated]: syz.1.1271 (pid 10701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.614460][T10701] Use struct sctp_sack_info instead [ 203.632645][T10692] netlink: 'syz.2.1268': attribute type 23 has an invalid length. [ 203.651842][T10703] tipc: Cannot configure node identity twice [ 203.845471][T10717] tipc: Enabling of bearer rejected, failed to enable media [ 203.859125][T10715] tipc: Enabled bearer , priority 0 [ 203.868363][T10715] syzkaller0: entered promiscuous mode [ 203.879222][T10715] syzkaller0: entered allmulticast mode [ 203.907017][T10715] tipc: Resetting bearer [ 203.925571][T10715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'. [ 203.939162][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1277'. [ 203.994116][T10729] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'. [ 204.123521][T10714] tipc: Resetting bearer [ 204.137852][T10736] netlink: 'syz.4.1281': attribute type 1 has an invalid length. [ 204.167772][T10733] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 204.176888][T10714] tipc: Disabling bearer [ 204.229220][T10736] 8021q: adding VLAN 0 to HW filter on device bond5 [ 204.711866][T10761] netlink: 'syz.1.1289': attribute type 1 has an invalid length. [ 204.821884][T10763] tipc: Enabled bearer , priority 0 [ 204.828976][T10763] tipc: Enabling of bearer rejected, already enabled [ 205.024128][T10763] tipc: Disabling bearer [ 206.330030][T10828] bridge_slave_0: left allmulticast mode [ 206.355923][T10828] bridge_slave_0: left promiscuous mode [ 206.373142][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.426136][T10828] bridge_slave_1: left allmulticast mode [ 206.432286][T10828] bridge_slave_1: left promiscuous mode [ 206.437940][T10838] netlink: 'syz.4.1311': attribute type 23 has an invalid length. [ 206.438268][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.503870][T10828] `: (slave bond_slave_0): Releasing backup interface [ 206.527326][T10828] `: (slave bond_slave_1): Releasing backup interface [ 206.572365][T10828] team0: Port device team_slave_0 removed [ 206.594126][T10828] team0: Port device team_slave_1 removed [ 206.602221][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.610648][T10828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.620144][T10828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.627544][T10828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.646637][T10828] bond1: (slave bond2): Releasing backup interface [ 206.653319][T10828] bond2: left promiscuous mode [ 206.658402][T10828] bond2: left allmulticast mode [ 207.136711][T10862] tipc: Enabled bearer , priority 0 [ 207.181339][T10866] __nla_validate_parse: 5 callbacks suppressed [ 207.181359][T10866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'. [ 207.220353][T10868] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1320'. [ 207.251632][T10862] syzkaller0: entered promiscuous mode [ 207.260208][T10862] syzkaller0: entered allmulticast mode [ 207.268842][T10862] tipc: Resetting bearer [ 207.402909][T10861] tipc: Resetting bearer [ 208.823197][T10861] tipc: Disabling bearer [ 208.839188][T10890] netlink: 'syz.1.1324': attribute type 4 has an invalid length. [ 209.021881][T10899] Unsupported ieee802154 address type: 0 [ 209.096274][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1328'. [ 209.120440][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1329'. [ 209.348256][T10918] pimreg: entered allmulticast mode [ 209.386593][T10923] netlink: 'syz.4.1335': attribute type 1 has an invalid length. [ 209.523561][T10925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'. [ 209.545763][T10929] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 209.574881][T10933] netlink: 'syz.2.1339': attribute type 1 has an invalid length. [ 209.585441][T10933] netlink: 'syz.2.1339': attribute type 2 has an invalid length. [ 209.604472][T10927] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 209.664543][T10936] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 209.694485][T10936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1340'. [ 209.716999][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1340'. [ 209.726741][T10927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 209.731191][T10930] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.770755][T10930] bond4: (slave bond5): making interface the new active one [ 209.814986][T10948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1342'. [ 209.825037][T10930] bond4: (slave bond5): Enslaving as an active interface with an up link [ 209.874887][T10927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 210.219170][T10966] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 210.245276][T10962] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 210.408282][T10971] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1349'. [ 210.858056][T10990] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 211.213284][T11009] 8021q: adding VLAN 0 to HW filter on device ` [ 211.238010][T11009] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.287376][T11009] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.318762][T11007] sch_tbf: burst 127 is lower than device batadv_slave_0 mtu (1514) ! [ 211.869823][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.876669][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 211.876691][ T5874] Bluetooth: hci0: command 0x0401 tx timeout [ 211.883197][ T5880] Bluetooth: hci2: command 0x0406 tx timeout [ 212.175818][T11066] bond0: entered allmulticast mode [ 212.202944][T11066] bond_slave_0: entered allmulticast mode [ 212.221261][T11066] bond_slave_1: entered allmulticast mode [ 212.237071][T11066] geneve1: entered allmulticast mode [ 212.242131][T11071] netlink: 'syz.4.1377': attribute type 83 has an invalid length. [ 212.247578][T11066] bridge0: entered allmulticast mode [ 212.265493][ T5529] veth1_vlan: left promiscuous mode [ 212.275727][T11071] netlink: 'syz.4.1377': attribute type 1 has an invalid length. [ 212.284003][T11071] __nla_validate_parse: 2 callbacks suppressed [ 212.284021][T11071] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1377'. [ 212.310854][T11071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1377'. [ 212.334234][T11068] lo speed is unknown, defaulting to 1000 [ 212.354081][T11068] lo speed is unknown, defaulting to 1000 [ 212.382532][T11068] lo speed is unknown, defaulting to 1000 [ 212.713203][T11068] infiniband syz0: set active [ 212.718048][T11068] infiniband syz0: added lo [ 212.729218][ T43] lo speed is unknown, defaulting to 1000 [ 212.738195][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1382'. [ 212.791129][T11068] RDS/IB: syz0: added [ 212.795329][T11068] smc: adding ib device syz0 with port count 1 [ 212.801725][T11068] smc: ib device syz0 port 1 has pnetid [ 212.911447][ T43] lo speed is unknown, defaulting to 1000 [ 212.974100][T11068] lo speed is unknown, defaulting to 1000 [ 213.617143][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 213.770250][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 213.867525][T11118] validate_nla: 6 callbacks suppressed [ 213.867545][T11118] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 213.898178][T11118] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 213.921901][T11118] netlink: 'syz.1.1388': attribute type 1 has an invalid length. [ 213.949602][T11118] netlink: 'syz.1.1388': attribute type 2 has an invalid length. [ 213.959856][T11118] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1388'. [ 215.251009][T11068] lo speed is unknown, defaulting to 1000 [ 215.440881][T11133] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1393'. [ 215.607287][T11139] netlink: 1192 bytes leftover after parsing attributes in process `syz.2.1396'. [ 215.640135][T11139] veth0: entered promiscuous mode [ 215.655648][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1396'. [ 215.684525][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 215.761955][T11147] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 215.939175][T11068] lo speed is unknown, defaulting to 1000 [ 215.945810][T11144] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.981221][T11153] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 215.985375][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.081067][T11159] netlink: 'syz.4.1402': attribute type 11 has an invalid length. [ 216.088948][T11159] netlink: 'syz.4.1402': attribute type 11 has an invalid length. [ 216.108941][T11159] netlink: 'syz.4.1402': attribute type 21 has an invalid length. [ 216.660336][T11179] macsec1: entered promiscuous mode [ 216.679793][T11179] macsec1: entered allmulticast mode [ 216.708936][T11068] lo speed is unknown, defaulting to 1000 [ 216.854829][T11198] netlink: 'syz.2.1413': attribute type 2 has an invalid length. [ 216.973512][T11201] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 217.070907][ T982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.548111][T11233] __nla_validate_parse: 10 callbacks suppressed [ 217.548131][T11233] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1422'. [ 217.687145][T11068] lo speed is unknown, defaulting to 1000 [ 218.036890][T11254] netlink: 'syz.2.1427': attribute type 4 has an invalid length. [ 218.090806][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 218.135806][T11256] netlink: 'syz.0.1428': attribute type 9 has an invalid length. [ 218.149880][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 218.232843][T11256] netlink: 'syz.0.1428': attribute type 9 has an invalid length. [ 218.255277][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1428'. [ 219.049990][T11310] batman_adv: batadv0: Removing interface: dummy0 [ 219.058654][T11310] bridge_slave_0: left allmulticast mode [ 219.071769][T11310] bridge_slave_0: left promiscuous mode [ 219.078310][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.096252][T11310] bond0: (slave bridge_slave_1): Releasing backup interface [ 219.118127][T11310] bond0: (slave bond_slave_0): Releasing backup interface [ 219.133790][T11310] bond0: (slave bond_slave_1): Releasing backup interface [ 219.143733][T11310] team0: Port device team_slave_0 removed [ 219.153126][T11310] team0: Port device team_slave_1 removed [ 219.159809][T11310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.170870][T11310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.185042][T11310] bond3: (slave gretap1): Releasing active interface [ 219.243966][T11315] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 219.917761][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1449'. [ 219.960096][T11342] sch_tbf: burst 4 is lower than device ip6tnl0 mtu (1452) ! [ 219.998270][T11339] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1449'. [ 220.033202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.101231][T11350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.216512][T11355] netlink: 'syz.3.1453': attribute type 1 has an invalid length. [ 220.239071][T11355] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1453'. [ 220.514109][T11373] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1458'. [ 220.548510][T11373] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 220.621936][T11379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1461'. [ 220.641877][T11377] vxcan1 speed is unknown, defaulting to 1000 [ 220.688063][T11371] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 220.956204][T11377] lo speed is unknown, defaulting to 1000 [ 221.015921][T11386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1463'. [ 221.137732][T11388] IPv6: sit1: Disabled Multicast RS [ 221.151119][T11388] sit1: entered allmulticast mode [ 221.239053][T11394] netlink: 'syz.3.1467': attribute type 1 has an invalid length. [ 221.492344][ T7594] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 221.518743][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.528273][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.536823][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.545994][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.561915][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.570266][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.578272][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.586775][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.595996][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 221.604389][T11414] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 222.208815][T11400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.455768][T11443] sctp: [Deprecated]: syz.3.1479 (pid 11443) Use of int in max_burst socket option. [ 222.455768][T11443] Use struct sctp_assoc_value instead [ 222.693527][ T31] audit: type=1107 audit(1757267873.007:3): pid=11450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='“2‰ý¡=]U‹k¢&î6ìF1·p§p²' [ 222.815788][T11462] sctp: [Deprecated]: syz.4.1487 (pid 11462) Use of int in maxseg socket option. [ 222.815788][T11462] Use struct sctp_assoc_value instead [ 222.853427][T11462] __nla_validate_parse: 5 callbacks suppressed [ 222.853445][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1487'. [ 222.876370][T11464] gtp0: entered promiscuous mode [ 222.882637][T11464] gtp0: entered allmulticast mode [ 222.999907][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1489'. [ 223.051974][T11478] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1491'. [ 223.216237][T11491] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1494'. [ 223.225475][T11493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1495'. [ 223.241920][T11491] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1494'. [ 223.311295][T11498] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1496'. [ 223.393856][T11504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'. [ 223.715460][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 223.935225][T11522] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 224.122750][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1505'. [ 224.162161][T11538] netlink: 'syz.4.1504': attribute type 13 has an invalid length. [ 224.477182][T11557] veth1_to_bond: entered allmulticast mode [ 224.525534][T11557] veth1_to_bond (unregistering): left allmulticast mode [ 224.654021][T11562] vlan3: entered allmulticast mode [ 224.660168][T11562] veth1: entered allmulticast mode [ 224.920022][T11577] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 224.952379][T11577] netlink: 'syz.1.1515': attribute type 4 has an invalid length. [ 225.127331][T11585] veth0: entered promiscuous mode [ 225.135941][T11584] veth0: left promiscuous mode [ 227.281973][T11605] net_ratelimit: 23 callbacks suppressed [ 227.281995][T11605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.261733][T11625] netlink: 'syz.1.1528': attribute type 21 has an invalid length. [ 228.276835][T11625] __nla_validate_parse: 5 callbacks suppressed [ 228.276856][T11625] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1528'. [ 229.011669][T11605] team0 (unregistering): Port device team_slave_0 removed [ 229.024207][T11605] team0 (unregistering): Port device team_slave_1 removed [ 229.089817][T11628] netlink: 'syz.1.1529': attribute type 5 has an invalid length. [ 229.321233][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 229.333594][T11636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 229.452765][T11639] dvmrp0: entered allmulticast mode [ 229.478097][T11639] dvmrp0: left allmulticast mode [ 229.493363][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 229.506403][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 229.520534][T11641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1536'. [ 229.726198][T11652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1535'. [ 229.766527][T11652] netlink: 'syz.3.1535': attribute type 7 has an invalid length. [ 229.792861][T11652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 231.036515][T11676] netlink: 'syz.0.1540': attribute type 14 has an invalid length. [ 231.078524][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 231.113572][T11676] netlink: 'syz.0.1540': attribute type 14 has an invalid length. [ 231.159543][T11676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1540'. [ 233.290777][T11703] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 233.318890][T11703] __nla_validate_parse: 1 callbacks suppressed [ 233.318910][T11703] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1547'. [ 233.382528][T11703] netlink: 'syz.2.1547': attribute type 1 has an invalid length. [ 233.585480][T11715] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 233.659687][T11715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 233.678971][T11717] netlink: 'syz.3.1550': attribute type 11 has an invalid length. [ 233.727913][T11717] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1550'. [ 235.347182][T11756] geneve2: entered promiscuous mode [ 235.364561][T11756] geneve2: entered allmulticast mode [ 236.197846][T11762] netlink: 'syz.3.1557': attribute type 2 has an invalid length. [ 236.613805][T11777] netlink: 'syz.0.1560': attribute type 83 has an invalid length. [ 236.622913][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1560'. [ 239.269615][T11787] netlink: 524 bytes leftover after parsing attributes in process `syz.1.1565'. [ 239.373070][T11790] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 239.462382][T11795] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 239.805140][T11809] netlink: 'syz.0.1569': attribute type 21 has an invalid length. [ 239.853018][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1570'. [ 240.807052][T11811] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 240.850873][T11811] gretap1: entered promiscuous mode [ 241.333464][T11835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1576'. [ 241.375003][T11835] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.1576'. [ 244.087438][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'. [ 244.097050][T11891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1586'. [ 244.608299][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1590'. [ 244.766778][T11911] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 244.881160][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1589'. [ 244.956549][T11917] ip6erspan0: entered promiscuous mode [ 245.613673][T11933] netlink: 'syz.3.1600': attribute type 1 has an invalid length. [ 245.746881][T11933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.946680][T11944] netlink: 'syz.2.1603': attribute type 1 has an invalid length. [ 245.967766][T11945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1602'. [ 248.360204][T11935] veth3: entered promiscuous mode [ 248.369135][T11935] bond4: (slave veth3): Enslaving as an active interface with an up link [ 248.444475][T11944] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 251.325844][T11951] veth1_macvtap: left allmulticast mode [ 251.416275][ T5876] lo speed is unknown, defaulting to 1000 [ 251.430091][ T5876] syz0: Port: 1 Link DOWN [ 251.438491][T11988] vcan0: entered allmulticast mode [ 251.462461][T11994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1612'. [ 251.543558][T11995] bridge0: port 3(team0) entered disabled state [ 251.620345][T11995] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.748609][T11995] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.904135][ T7590] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.980865][T12023] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1617'. [ 253.031686][ T7590] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.086037][ T7590] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.147674][ T7590] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.265965][T12028] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1614'. [ 253.371488][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 253.390418][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1619'. [ 253.706939][ T5876] lo speed is unknown, defaulting to 1000 [ 253.712548][ T10] vxcan1 speed is unknown, defaulting to 1000 [ 253.753358][ T7590] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.816096][ T7590] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.826076][ T7590] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.901835][ T7590] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.968839][T12041] openvswitch: netlink: Missing key (keys=40, expected=100) [ 253.997071][T12045] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 254.379726][T12068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1627'. [ 254.405878][T12069] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1624'. [ 254.789873][T12085] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1630'. [ 255.019641][T12082] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1624'. [ 256.274655][T12091] syz.2.1631: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 256.294462][T12091] CPU: 1 UID: 0 PID: 12091 Comm: syz.2.1631 Not tainted syzkaller #0 PREEMPT(full) [ 256.294490][T12091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.294516][T12091] Call Trace: [ 256.294525][T12091] [ 256.294534][T12091] dump_stack_lvl+0x189/0x250 [ 256.294570][T12091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.294595][T12091] ? __pfx__printk+0x10/0x10 [ 256.294625][T12091] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 256.294651][T12091] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 256.294677][T12091] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 256.294705][T12091] warn_alloc+0x214/0x310 [ 256.294744][T12091] ? __pfx_warn_alloc+0x10/0x10 [ 256.294794][T12091] ? __get_vm_area_node+0x28f/0x300 [ 256.294826][T12091] ? fq_pie_init+0x430/0x840 [ 256.294858][T12091] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 256.294923][T12091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.294961][T12091] ? rcu_is_watching+0x15/0xb0 [ 256.294984][T12091] ? fq_pie_init+0x430/0x840 [ 256.295009][T12091] ? fq_pie_init+0x430/0x840 [ 256.295034][T12091] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 256.295064][T12091] ? fq_pie_init+0x430/0x840 [ 256.295090][T12091] ? tcf_block_get+0x67/0xa0 [ 256.295119][T12091] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 256.295156][T12091] fq_pie_init+0x430/0x840 [ 256.295187][T12091] ? __pfx_fq_pie_init+0x10/0x10 [ 256.295214][T12091] qdisc_create+0x7ac/0xea0 [ 256.295252][T12091] tc_modify_qdisc+0x1538/0x20e0 [ 256.295296][T12091] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 256.295355][T12091] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 256.295382][T12091] rtnetlink_rcv_msg+0x77c/0xb70 [ 256.295418][T12091] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 256.295449][T12091] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.295479][T12091] ? ref_tracker_free+0x63a/0x7d0 [ 256.295509][T12091] ? __asan_memcpy+0x40/0x70 [ 256.295533][T12091] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.295575][T12091] netlink_rcv_skb+0x205/0x470 [ 256.295609][T12091] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 256.295643][T12091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.295688][T12091] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.295730][T12091] netlink_unicast+0x82c/0x9e0 [ 256.295769][T12091] ? __pfx_netlink_unicast+0x10/0x10 [ 256.295809][T12091] ? netlink_sendmsg+0x642/0xb30 [ 256.295825][T12091] ? skb_put+0x11b/0x210 [ 256.295851][T12091] netlink_sendmsg+0x805/0xb30 [ 256.295882][T12091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.295906][T12091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 256.295928][T12091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 256.295952][T12091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.295973][T12091] __sock_sendmsg+0x21c/0x270 [ 256.296006][T12091] ____sys_sendmsg+0x505/0x830 [ 256.296037][T12091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.296071][T12091] ? import_iovec+0x74/0xa0 [ 256.296101][T12091] ___sys_sendmsg+0x21f/0x2a0 [ 256.296127][T12091] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.296194][T12091] ? __fget_files+0x2a/0x420 [ 256.296211][T12091] ? __fget_files+0x3a0/0x420 [ 256.296242][T12091] __x64_sys_sendmsg+0x19b/0x260 [ 256.296269][T12091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.296306][T12091] ? rcu_is_watching+0x15/0xb0 [ 256.296333][T12091] ? do_syscall_64+0xbe/0x3b0 [ 256.296358][T12091] do_syscall_64+0xfa/0x3b0 [ 256.296376][T12091] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.296406][T12091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.296427][T12091] ? clear_bhb_loop+0x60/0xb0 [ 256.296453][T12091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.296473][T12091] RIP: 0033:0x7f4e3e58ebe9 [ 256.296494][T12091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.296511][T12091] RSP: 002b:00007f4e3f4c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.296534][T12091] RAX: ffffffffffffffda RBX: 00007f4e3e7c5fa0 RCX: 00007f4e3e58ebe9 [ 256.296550][T12091] RDX: 000000002000400c RSI: 0000200000000300 RDI: 0000000000000004 [ 256.296563][T12091] RBP: 00007f4e3e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.296576][T12091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.296588][T12091] R13: 00007f4e3e7c6038 R14: 00007f4e3e7c5fa0 R15: 00007ffea0499068 [ 256.296623][T12091] [ 256.296632][T12091] Mem-Info: [ 256.730149][T12091] active_anon:5775 inactive_anon:0 isolated_anon:0 [ 256.730149][T12091] active_file:2629 inactive_file:39906 isolated_file:0 [ 256.730149][T12091] unevictable:768 dirty:23 writeback:0 [ 256.730149][T12091] slab_reclaimable:11417 slab_unreclaimable:105682 [ 256.730149][T12091] mapped:29134 shmem:1367 pagetables:1364 [ 256.730149][T12091] sec_pagetables:0 bounce:0 [ 256.730149][T12091] kernel_misc_reclaimable:0 [ 256.730149][T12091] free:1320128 free_pcp:13385 free_cma:0 [ 256.840633][T12091] Node 0 active_anon:23200kB inactive_anon:0kB active_file:10516kB inactive_file:159416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116536kB dirty:92kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13968kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 256.956636][T12091] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 257.039206][T12091] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.097287][T12091] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 257.110260][T12091] Node 0 DMA32 free:1371412kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23164kB inactive_anon:0kB active_file:10516kB inactive_file:157852kB unevictable:1536kB writepending:132kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:31284kB local_pcp:16044kB free_cma:0kB [ 257.149764][T12091] lowmem_reserve[]: 0 0 1 1 1 [ 257.155523][T12091] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 257.189809][T12091] lowmem_reserve[]: 0 0 0 0 0 [ 257.195180][T12091] Node 1 Normal free:3893728kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20992kB local_pcp:10080kB free_cma:0kB [ 257.234030][T12091] lowmem_reserve[]: 0 0 0 0 0 [ 257.239025][T12091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.260132][T12091] Node 0 DMA32: 513*4kB (UM) 56*8kB (UME) 115*16kB (UM) 801*32kB (UM) 214*64kB (UME) 101*128kB (UM) 56*256kB (UME) 24*512kB (UM) 8*1024kB (UME) 9*2048kB (UM) 308*4096kB (UM) = 1371412kB [ 257.283796][T12091] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 257.297151][T12091] Node 1 Normal: 194*4kB (UME) 45*8kB (UME) 27*16kB (UME) 86*32kB (UME) 36*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893728kB [ 257.323567][T12091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.337245][T12091] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.352545][T12091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.367130][T12091] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.382418][T12091] 43900 total pagecache pages [ 257.387282][T12091] 0 pages in swap cache [ 257.393008][T12091] Free swap = 124996kB [ 257.397340][T12091] Total swap = 124996kB [ 257.405850][T12091] 2097051 pages RAM [ 257.410937][T12091] 0 pages HighMem/MovableOnly [ 257.415871][T12091] 425667 pages reserved [ 257.423740][T12091] 0 pages cma reserved [ 257.680004][T12121] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1640'. [ 257.834342][T12127] netlink: 'syz.0.1643': attribute type 15 has an invalid length. [ 257.853907][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 257.867238][T12127] netlink: 'syz.0.1643': attribute type 15 has an invalid length. [ 257.877417][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 261.064042][ T1304] aoe: packet could not be sent on veth0. consider increasing tx_queue_len [ 261.256666][T12186] tipc: Enabled bearer , priority 0 [ 261.264313][T12186] syzkaller0: entered promiscuous mode [ 261.270394][T12186] syzkaller0: entered allmulticast mode [ 261.323607][T12188] openvswitch: netlink: IP tunnel dst address not specified [ 261.349081][T12186] tipc: Resetting bearer [ 261.487884][T12185] tipc: Resetting bearer [ 261.540773][T12197] netlink: 808 bytes leftover after parsing attributes in process `syz.3.1657'. [ 261.614586][T12198] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1657'. [ 262.161445][T12207] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 262.424952][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1662'. [ 262.873451][T12185] tipc: Disabling bearer [ 262.877412][ T5930] tipc: Node number set to 2551253369 [ 263.576389][T12207] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 263.756487][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1665'. [ 263.848034][T12235] tipc: Enabled bearer , priority 0 [ 263.861732][T12235] tipc: Disabling bearer [ 265.228560][T12271] tipc: New replicast peer: 255.255.255.83 [ 265.251176][T12271] tipc: Enabled bearer , priority 10 [ 267.553741][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1698'. [ 271.815473][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 271.868015][T12370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1721'. [ 272.229841][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1719'. [ 272.921315][T12383] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 275.193811][T12413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1741'. [ 277.165052][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1744'. [ 277.466557][T12436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1752'. [ 279.764400][T12450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1757'. [ 279.779355][T12450] ksmbd: Unknown IPC event: 4, ignore. [ 280.810807][T12459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1761'. [ 280.917570][T12463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 285.035107][T12512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1784'. [ 285.060976][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1784'. [ 285.537277][T12519] batadv_slave_1: entered promiscuous mode [ 285.555109][T12519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1783'. [ 285.631803][T12519] batadv_slave_1 (unregistering): left promiscuous mode [ 285.649178][T12521] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1785'. [ 285.892214][T12527] tipc: Enabled bearer , priority 0 [ 286.302783][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1789'. [ 287.189820][T12522] tipc: Resetting bearer [ 287.289657][ T10] tipc: Node number set to 3094261609 [ 289.577834][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1798'. [ 298.062554][T12522] tipc: Disabling bearer [ 298.080560][T12554] team_slave_0: entered promiscuous mode [ 298.086275][T12554] team_slave_0: entered allmulticast mode [ 298.997192][T12580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1803'. [ 300.168030][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1806'. [ 300.188321][T12581] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1806'. [ 300.472444][T12607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1815'. [ 300.576122][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1816'. [ 300.853403][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 300.907344][T12619] netlink: 'syz.1.1818': attribute type 21 has an invalid length. [ 300.933348][T12619] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1818'. [ 301.108724][T12621] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 301.132102][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 301.377542][T12619] netlink: 'syz.1.1818': attribute type 4 has an invalid length. [ 301.394336][T12619] netlink: 'syz.1.1818': attribute type 5 has an invalid length. [ 301.406020][T12619] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1818'. [ 304.820150][T12697] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1835'. [ 304.878999][T12705] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 306.489461][T12727] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1841'. [ 307.068781][T12757] warn_alloc: 1 callbacks suppressed [ 307.068800][T12757] syz.2.1848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.102391][T12757] CPU: 0 UID: 0 PID: 12757 Comm: syz.2.1848 Not tainted syzkaller #0 PREEMPT(full) [ 307.102437][T12757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.102459][T12757] Call Trace: [ 307.102468][T12757] [ 307.102477][T12757] dump_stack_lvl+0x189/0x250 [ 307.102512][T12757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.102538][T12757] ? __pfx__printk+0x10/0x10 [ 307.102567][T12757] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.102592][T12757] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.102619][T12757] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.102645][T12757] warn_alloc+0x214/0x310 [ 307.102678][T12757] ? stack_depot_save_flags+0x40/0x860 [ 307.102709][T12757] ? __pfx_warn_alloc+0x10/0x10 [ 307.102742][T12757] ? kasan_save_track+0x4f/0x80 [ 307.102768][T12757] ? xskq_create+0x56/0x170 [ 307.102795][T12757] ? xsk_init_queue+0xb0/0x110 [ 307.102820][T12757] ? xsk_setsockopt+0x4dc/0x8d0 [ 307.102844][T12757] ? do_sock_setsockopt+0x17c/0x1b0 [ 307.102864][T12757] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 307.102883][T12757] ? do_syscall_64+0xfa/0x3b0 [ 307.102900][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.102930][T12757] __vmalloc_node_range_noprof+0x125/0x12f0 [ 307.102996][T12757] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.103033][T12757] ? __kasan_kmalloc+0x93/0xb0 [ 307.103068][T12757] vmalloc_user_noprof+0xad/0xf0 [ 307.103098][T12757] ? xskq_create+0xbf/0x170 [ 307.103128][T12757] xskq_create+0xbf/0x170 [ 307.103161][T12757] xsk_init_queue+0xb0/0x110 [ 307.103192][T12757] xsk_setsockopt+0x4dc/0x8d0 [ 307.103223][T12757] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.103256][T12757] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.103290][T12757] ? aa_sock_opt_perm+0xff/0x1b0 [ 307.103314][T12757] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 307.103335][T12757] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.103364][T12757] do_sock_setsockopt+0x17c/0x1b0 [ 307.103391][T12757] __x64_sys_setsockopt+0x13f/0x1b0 [ 307.103419][T12757] do_syscall_64+0xfa/0x3b0 [ 307.103437][T12757] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.103466][T12757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.103485][T12757] ? clear_bhb_loop+0x60/0xb0 [ 307.103510][T12757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.103529][T12757] RIP: 0033:0x7f4e3e58ebe9 [ 307.103547][T12757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.103564][T12757] RSP: 002b:00007f4e3f4c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.103584][T12757] RAX: ffffffffffffffda RBX: 00007f4e3e7c5fa0 RCX: 00007f4e3e58ebe9 [ 307.103599][T12757] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 307.103611][T12757] RBP: 00007f4e3e611e19 R08: 0000000000000004 R09: 0000000000000000 [ 307.103623][T12757] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.103636][T12757] R13: 00007f4e3e7c6038 R14: 00007f4e3e7c5fa0 R15: 00007ffea0499068 [ 307.103670][T12757] [ 307.103794][T12757] Mem-Info: [ 307.474614][T12757] active_anon:4873 inactive_anon:0 isolated_anon:0 [ 307.474614][T12757] active_file:2629 inactive_file:39924 isolated_file:0 [ 307.474614][T12757] unevictable:768 dirty:52 writeback:0 [ 307.474614][T12757] slab_reclaimable:11361 slab_unreclaimable:106974 [ 307.474614][T12757] mapped:28953 shmem:1367 pagetables:1643 [ 307.474614][T12757] sec_pagetables:0 bounce:0 [ 307.474614][T12757] kernel_misc_reclaimable:0 [ 307.474614][T12757] free:1316513 free_pcp:16678 free_cma:0 [ 307.532092][T12757] Node 0 active_anon:19492kB inactive_anon:0kB active_file:10516kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115812kB dirty:204kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14000kB pagetables:6524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.640376][T12757] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.722398][T12757] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 307.909626][T12757] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 307.919755][T12757] Node 0 DMA32 free:1356696kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19648kB inactive_anon:0kB active_file:10516kB inactive_file:157916kB unevictable:1536kB writepending:204kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:45324kB local_pcp:23620kB free_cma:0kB [ 307.961264][T12757] lowmem_reserve[]: 0 0 1 1 1 [ 307.966160][T12757] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 308.001215][T12757] lowmem_reserve[]: 0 0 0 0 0 [ 308.006165][T12757] Node 1 Normal free:3893984kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:9824kB free_cma:0kB [ 308.046185][T12757] lowmem_reserve[]: 0 0 0 0 0 [ 308.051420][T12757] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.068931][T12757] Node 0 DMA32: 2579*4kB (UM) 972*8kB (UME) 598*16kB (UM) 1047*32kB (UME) 522*64kB (UME) 372*128kB (UM) 304*256kB (UME) 246*512kB (UM) 181*1024kB (UME) 14*2048kB (UM) 195*4096kB (M) = 1358700kB [ 308.136817][T12757] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 308.175818][T12757] Node 1 Normal: 194*4kB (UME) 45*8kB (UME) 27*16kB (UME) 90*32kB (UME) 38*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893984kB [ 308.224404][T12757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.257036][T12757] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.285275][T12757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.313070][T12757] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.338501][T12757] 43916 total pagecache pages [ 308.354822][T12757] 0 pages in swap cache [ 308.374650][T12757] Free swap = 124996kB [ 308.392627][T12757] Total swap = 124996kB [ 308.412879][T12757] 2097051 pages RAM [ 308.428523][T12757] 0 pages HighMem/MovableOnly [ 308.451749][T12757] 425667 pages reserved [ 308.468985][T12757] 0 pages cma reserved [ 309.469550][T12806] netlink: 'syz.0.1854': attribute type 12 has an invalid length. [ 310.867248][T12836] syz_tun: entered promiscuous mode [ 310.907806][T12836] batadv_slave_0: entered promiscuous mode [ 311.752559][T12872] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 311.861473][T12868] IPVS: stopping backup sync thread 12872 ... [ 312.127332][T12886] netlink: 'syz.3.1867': attribute type 1 has an invalid length. [ 312.507102][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1867'. [ 312.607013][T12893] tipc: Enabled bearer , priority 0 [ 312.733374][T12895] bond5 (unregistering): Released all slaves [ 313.305362][T12927] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1874'. [ 313.606892][T12938] netlink: 'syz.0.1878': attribute type 32 has an invalid length. [ 313.636274][T12898] netlink: 'syz.3.1867': attribute type 29 has an invalid length. [ 313.647438][T12884] netlink: 'syz.3.1867': attribute type 29 has an invalid length. [ 313.732828][T12893] tipc: Disabling bearer [ 313.753393][T12922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.060069][T12950] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1883'. [ 314.094599][T12952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1883'. [ 314.111456][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1881'. [ 315.026248][T12977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 315.252033][T12973] syzkaller0: entered promiscuous mode [ 315.268102][T12973] syzkaller0: entered allmulticast mode [ 316.410715][T13000] netlink: 4388 bytes leftover after parsing attributes in process `syz.4.1891'. [ 316.704819][T13007] netlink: 'syz.4.1893': attribute type 21 has an invalid length. [ 316.714743][T13007] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1893'. [ 323.054927][T12996] bridge0: port 4(syz_tun) entered blocking state [ 323.062143][T12996] bridge0: port 4(syz_tun) entered disabled state [ 323.068834][T12996] syz_tun: entered allmulticast mode [ 323.094665][T12996] syz_tun: left allmulticast mode [ 323.130275][T13007] netlink: 'syz.4.1893': attribute type 5 has an invalid length. [ 323.138068][T13007] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1893'. [ 324.297823][T13063] batadv_slave_0: entered promiscuous mode [ 324.605168][T13086] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1915'. [ 326.512655][T13110] netlink: 'syz.1.1919': attribute type 4 has an invalid length. [ 326.623790][T13061] batadv_slave_0: left promiscuous mode [ 326.733748][T13126] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 326.779645][T13126] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1924'. [ 327.071072][T13145] netlink: 'syz.1.1927': attribute type 11 has an invalid length. [ 327.156836][T13152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1929'. [ 327.370865][T13163] vxcan1 speed is unknown, defaulting to 1000 [ 327.498462][T13174] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1932'. [ 327.713451][T13163] lo speed is unknown, defaulting to 1000 [ 328.228989][T13182] netlink: 'syz.0.1935': attribute type 6 has an invalid length. [ 328.228995][T13185] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 328.229020][T13185] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1936'. [ 328.247273][T13182] netlink: 'syz.0.1935': attribute type 1 has an invalid length. [ 328.289645][T13182] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1935'. [ 328.432941][T13196] netlink: 'syz.3.1939': attribute type 16 has an invalid length. [ 328.441176][T13196] netlink: 'syz.3.1939': attribute type 17 has an invalid length. [ 328.502285][T13196] 8021q: adding VLAN 0 to HW filter on device ` [ 328.514956][T13196] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.545148][T13196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.605555][ T886] lo speed is unknown, defaulting to 1000 [ 328.607138][T13199] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 328.620442][ T886] syz0: Port: 1 Link ACTIVE [ 328.658101][T13199] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 328.718712][ T886] lo speed is unknown, defaulting to 1000 [ 328.878456][T13203] syz.0.1941: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 328.928152][T13214] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1944'. [ 328.945967][T13203] CPU: 1 UID: 0 PID: 13203 Comm: syz.0.1941 Not tainted syzkaller #0 PREEMPT(full) [ 328.945998][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.946012][T13203] Call Trace: [ 328.946020][T13203] [ 328.946030][T13203] dump_stack_lvl+0x189/0x250 [ 328.946065][T13203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.946090][T13203] ? __pfx__printk+0x10/0x10 [ 328.946119][T13203] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.946144][T13203] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 328.946171][T13203] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 328.946198][T13203] warn_alloc+0x214/0x310 [ 328.946239][T13203] ? __pfx_warn_alloc+0x10/0x10 [ 328.946282][T13203] ? __get_vm_area_node+0x28f/0x300 [ 328.946311][T13203] ? hash_netportnet_create+0x354/0xf90 [ 328.946338][T13203] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 328.946411][T13203] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 328.946448][T13203] ? rcu_is_watching+0x15/0xb0 [ 328.946471][T13203] ? hash_netportnet_create+0x354/0xf90 [ 328.946491][T13203] ? hash_netportnet_create+0x354/0xf90 [ 328.946509][T13203] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 328.946540][T13203] ? hash_netportnet_create+0x354/0xf90 [ 328.946561][T13203] ? hash_netportnet_create+0x2fa/0xf90 [ 328.946587][T13203] hash_netportnet_create+0x354/0xf90 [ 328.946616][T13203] ? __nla_parse+0x40/0x60 [ 328.946648][T13203] ? __pfx_hash_netportnet_create+0x10/0x10 [ 328.946671][T13203] ip_set_create+0xa97/0x1940 [ 328.946700][T13203] ? ip_set_create+0x4a2/0x1940 [ 328.946737][T13203] ? __pfx_ip_set_create+0x10/0x10 [ 328.946805][T13203] nfnetlink_rcv_msg+0xb4a/0x1130 [ 328.946835][T13203] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 328.946884][T13203] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.946942][T13203] ? __lock_acquire+0xab9/0xd20 [ 328.946995][T13203] netlink_rcv_skb+0x205/0x470 [ 328.947027][T13203] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 328.947057][T13203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.947101][T13203] ? bpf_lsm_capable+0x9/0x20 [ 328.947128][T13203] ? security_capable+0x7e/0x2e0 [ 328.947168][T13203] nfnetlink_rcv+0x26a/0x2520 [ 328.947196][T13203] ? is_bpf_text_address+0x26/0x2b0 [ 328.947231][T13203] ? kernel_text_address+0xa5/0xe0 [ 328.947261][T13203] ? __kernel_text_address+0xd/0x40 [ 328.947289][T13203] ? unwind_get_return_address+0x4d/0x90 [ 328.947312][T13203] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 328.947337][T13203] ? arch_stack_walk+0xfc/0x150 [ 328.947380][T13203] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 328.947417][T13203] ? stack_depot_save_flags+0x40/0x860 [ 328.947450][T13203] ? __lock_acquire+0xab9/0xd20 [ 328.947505][T13203] ? __lock_acquire+0xab9/0xd20 [ 328.947548][T13203] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.947586][T13203] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.947627][T13203] netlink_unicast+0x82c/0x9e0 [ 328.947666][T13203] ? __pfx_netlink_unicast+0x10/0x10 [ 328.947697][T13203] ? netlink_sendmsg+0x642/0xb30 [ 328.947714][T13203] ? skb_put+0x11b/0x210 [ 328.947739][T13203] netlink_sendmsg+0x805/0xb30 [ 328.947769][T13203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.947793][T13203] ? aa_sock_msg_perm+0xf1/0x1d0 [ 328.947815][T13203] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 328.947837][T13203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.947857][T13203] __sock_sendmsg+0x21c/0x270 [ 328.947890][T13203] ____sys_sendmsg+0x505/0x830 [ 328.947920][T13203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.947955][T13203] ? import_iovec+0x74/0xa0 [ 328.947983][T13203] ___sys_sendmsg+0x21f/0x2a0 [ 328.948009][T13203] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.948086][T13203] ? __fget_files+0x2a/0x420 [ 328.948103][T13203] ? __fget_files+0x3a0/0x420 [ 328.948134][T13203] __x64_sys_sendmsg+0x19b/0x260 [ 328.948161][T13203] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.948197][T13203] ? rcu_is_watching+0x15/0xb0 [ 328.948229][T13203] ? do_syscall_64+0xbe/0x3b0 [ 328.948254][T13203] do_syscall_64+0xfa/0x3b0 [ 328.948272][T13203] ? lockdep_hardirqs_on+0x9c/0x150 [ 328.948302][T13203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.948322][T13203] ? clear_bhb_loop+0x60/0xb0 [ 328.948347][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.948367][T13203] RIP: 0033:0x7f444458ebe9 [ 328.948386][T13203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.948412][T13203] RSP: 002b:00007f44454a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.948434][T13203] RAX: ffffffffffffffda RBX: 00007f44447c6090 RCX: 00007f444458ebe9 [ 328.948450][T13203] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 328.948462][T13203] RBP: 00007f4444611e19 R08: 0000000000000000 R09: 0000000000000000 [ 328.948474][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.948486][T13203] R13: 00007f44447c6128 R14: 00007f44447c6090 R15: 00007ffd51b98a38 [ 328.948521][T13203] [ 328.948721][T13203] Mem-Info: [ 329.098388][T13212] syzkaller0: entered promiscuous mode [ 329.256450][T13203] active_anon:4705 inactive_anon:0 isolated_anon:0 [ 329.256450][T13203] active_file:2629 inactive_file:39932 isolated_file:0 [ 329.256450][T13203] unevictable:768 dirty:62 writeback:0 [ 329.256450][T13203] slab_reclaimable:11437 slab_unreclaimable:106643 [ 329.256450][T13203] mapped:29008 shmem:1367 pagetables:1444 [ 329.256450][T13203] sec_pagetables:0 bounce:0 [ 329.256450][T13203] kernel_misc_reclaimable:0 [ 329.256450][T13203] free:1318118 free_pcp:15147 free_cma:0 [ 329.326040][T13212] syzkaller0: entered allmulticast mode [ 329.351995][T13203] Node 0 active_anon:18920kB inactive_anon:0kB active_file:10516kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116032kB dirty:248kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13784kB pagetables:5728kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.583484][T13203] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 329.619374][T13203] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 329.659053][T13203] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 329.665800][T13203] Node 0 DMA32 free:1363360kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18776kB inactive_anon:0kB active_file:10516kB inactive_file:157948kB unevictable:1536kB writepending:248kB present:3129332kB managed:2557432kB mlocked:0kB bounce:0kB free_pcp:40700kB local_pcp:20200kB free_cma:0kB [ 329.719872][T13203] lowmem_reserve[]: 0 0 1 1 1 [ 329.727703][T13203] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 329.805786][T13250] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 329.819775][T13203] lowmem_reserve[]: 0 0 0 0 0 [ 329.824995][T13203] Node 1 Normal free:3894240kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20480kB local_pcp:9824kB free_cma:0kB [ 329.909692][T13203] lowmem_reserve[]: 0 0 0 0 0 [ 329.927779][T13203] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 329.957642][T13203] Node 0 DMA32: 2307*4kB (UM) 1065*8kB (UME) 679*16kB (UM) 1013*32kB (UME) 559*64kB (UM) 379*128kB (UM) 316*256kB (UME) 247*512kB (UM) 187*1024kB (UME) 10*2048kB (UM) 195*4096kB (M) = 1363364kB [ 330.039312][T13203] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 330.063864][T13203] Node 1 Normal: 194*4kB (UME) 45*8kB (UME) 27*16kB (UME) 96*32kB (UME) 39*64kB (UME) 8*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3894240kB [ 330.102059][T13203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.130370][T13203] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.140083][T13203] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.151072][T13203] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.160625][T13203] 43924 total pagecache pages [ 330.165731][T13203] 0 pages in swap cache [ 330.172497][T13203] Free swap = 124996kB [ 330.176749][T13203] Total swap = 124996kB [ 330.181989][T13203] 2097051 pages RAM [ 330.186776][T13203] 0 pages HighMem/MovableOnly [ 330.191957][T13203] 425667 pages reserved [ 330.196136][T13203] 0 pages cma reserved [ 330.197175][T13266] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1956'. [ 330.237309][T13266] nbd: illegal input index -8454144 [ 330.364235][T13279] netlink: 'syz.2.1961': attribute type 11 has an invalid length. [ 330.375713][T13279] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1961'. [ 330.512681][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 330.557765][T13284] vxcan1 speed is unknown, defaulting to 1000 [ 330.602628][T13294] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 330.892535][T13308] IPVS: set_ctl: invalid protocol: 1 172.20.20.187:20000 [ 330.902975][T13307] netlink: 'syz.1.1970': attribute type 21 has an invalid length. [ 330.911010][T13307] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1970'. [ 330.932011][T13307] tipc: Enabled bearer , priority 0 [ 330.939851][T13307] syzkaller0: entered promiscuous mode [ 330.945514][T13307] syzkaller0: entered allmulticast mode [ 330.966839][T13307] tipc: Resetting bearer [ 330.977466][T13305] tipc: Resetting bearer [ 331.032722][T13305] tipc: Disabling bearer [ 331.648970][T13285] netlink: 'syz.0.1963': attribute type 13 has an invalid length. [ 331.673852][T13285] netlink: 'syz.0.1963': attribute type 17 has an invalid length. [ 331.829980][T13351] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1978'. [ 331.852422][T13285] C: left promiscuous mode [ 332.074619][T13285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.092389][T13285] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.136409][T13285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.224414][T13284] lo speed is unknown, defaulting to 1000 [ 332.370011][T13382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.556292][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1993'. [ 333.583948][T13435] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2004'. [ 333.773701][T13442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2005'. [ 334.264868][T13460] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2011'. [ 334.508830][T13476] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 334.625936][T13479] syzkaller1: entered promiscuous mode [ 334.635971][T13479] syzkaller1: entered allmulticast mode [ 334.686846][T13482] tipc: Enabled bearer , priority 0 [ 334.719056][T13482] syzkaller0: entered promiscuous mode [ 334.745465][T13482] syzkaller0: entered allmulticast mode [ 334.839730][T13482] tipc: Resetting bearer [ 334.988726][T13502] erspan0: entered allmulticast mode [ 335.077502][T13507] pimreg3: entered allmulticast mode [ 335.099645][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2027'. [ 335.487743][T13480] tipc: Resetting bearer [ 335.582301][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 335.610977][T13480] tipc: Disabling bearer [ 335.657043][T13533] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 335.683120][T13533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2033'. [ 335.921593][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2036'. [ 336.104138][T13542] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.113317][T13542] bridge0: port 1() entered disabled state [ 336.269847][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.291933][T13542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.503524][ T7608] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.547082][ T7608] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.584295][ T7608] netdevsim netdevsim1 netdevsim1: unset [1, 2] type 2 family 0 port 19999 - 0 [ 336.594109][ T7608] netdevsim netdevsim1 netdevsim1: unset [1, 3] type 2 family 0 port 256 - 0 [ 336.616223][ T7608] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.617422][T13581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.649443][ T7608] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.676776][ T7608] netdevsim netdevsim1 netdevsim2: unset [1, 2] type 2 family 0 port 19999 - 0 [ 336.717138][ T7608] netdevsim netdevsim1 netdevsim2: unset [1, 3] type 2 family 0 port 256 - 0 [ 336.721117][T13589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2047'. [ 336.788410][ T7608] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.802212][ T7608] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 336.815064][ T7608] netdevsim netdevsim1 netdevsim3: unset [1, 2] type 2 family 0 port 19999 - 0 [ 336.816687][T13588] delete_channel: no stack [ 336.859470][ T7608] netdevsim netdevsim1 netdevsim3: unset [1, 3] type 2 family 0 port 256 - 0 [ 336.904901][T13599] openvswitch: netlink: IP tunnel dst address not specified [ 337.007613][T13605] netlink: 'syz.2.2053': attribute type 83 has an invalid length. [ 337.166277][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 337.864712][T13650] netlink: 'syz.4.2065': attribute type 28 has an invalid length. [ 337.874778][T13650] netlink: 'syz.4.2065': attribute type 3 has an invalid length. [ 337.884188][T13650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2065'. [ 337.937974][T13652] delete_channel: no stack [ 338.147864][T13657] vxcan1 speed is unknown, defaulting to 1000 [ 338.292645][T13673] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 338.700280][T13699] netlink: 'syz.1.2080': attribute type 7 has an invalid length. [ 338.855072][T13712] __nla_validate_parse: 2 callbacks suppressed [ 338.855093][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2081'. [ 338.889896][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'. [ 338.932446][T13714] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 338.956604][T13714] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 339.169038][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2087'. [ 339.558881][T13756] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2096'. [ 339.593686][T13763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2097'. [ 339.598923][T13759] netlink: 'syz.3.2098': attribute type 1 has an invalid length. [ 339.713070][T13759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 339.744160][T13769] bond5: (slave wlan0): Enslaving as an active interface with a down link [ 339.786435][T13774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2100'. [ 339.948064][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2103'. [ 340.225755][T13799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2109'. [ 340.298804][T13806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2110'. [ 340.600748][T13822] tls_set_device_offload_rx: netdev not found [ 340.680160][T13826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.728789][T13829] ================================================================== [ 340.736922][T13829] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 340.744860][T13829] Read of size 1 at addr ffff888057604ff0 by task syz.4.2117/13829 [ 340.752779][T13829] [ 340.755131][T13829] CPU: 0 UID: 0 PID: 13829 Comm: syz.4.2117 Not tainted syzkaller #0 PREEMPT(full) [ 340.755159][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.755174][T13829] Call Trace: [ 340.755182][T13829] [ 340.755192][T13829] dump_stack_lvl+0x189/0x250 [ 340.755221][T13829] ? __kasan_check_byte+0x12/0x40 [ 340.755254][T13829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.755279][T13829] ? lock_release+0x4b/0x3e0 [ 340.755313][T13829] ? __virt_addr_valid+0x4a5/0x5c0 [ 340.755342][T13829] print_report+0xca/0x240 [ 340.755361][T13829] ? xfrm_state_find+0x2cf2/0x5400 [ 340.755381][T13829] kasan_report+0x118/0x150 [ 340.755411][T13829] ? xfrm_state_find+0x2cf2/0x5400 [ 340.755437][T13829] xfrm_state_find+0x2cf2/0x5400 [ 340.755471][T13829] ? xfrm_state_find+0x1da/0x5400 [ 340.755494][T13829] ? __pfx_xfrm_state_find+0x10/0x10 [ 340.755525][T13829] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 340.755566][T13829] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 340.755606][T13829] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 340.755635][T13829] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 340.755666][T13829] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 340.755715][T13829] ? xfrm_expand_policies+0x41f/0x6a0 [ 340.755744][T13829] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 340.755775][T13829] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 340.755809][T13829] xfrm_lookup_route+0x3c/0x1c0 [ 340.755834][T13829] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 340.755866][T13829] sctp_v6_get_dst+0x7cc/0x1bc0 [ 340.755896][T13829] ? crng_make_state+0x13a/0x700 [ 340.755922][T13829] ? __pfx_crng_make_state+0x10/0x10 [ 340.755951][T13829] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 340.755980][T13829] ? __asan_memset+0x22/0x50 [ 340.756016][T13829] ? dst_release+0x72/0x1b0 [ 340.756043][T13829] sctp_transport_route+0x118/0x2f0 [ 340.756072][T13829] sctp_assoc_add_peer+0x657/0x13b0 [ 340.756102][T13829] sctp_connect_new_asoc+0x30a/0x690 [ 340.756126][T13829] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 340.756146][T13829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 340.756180][T13829] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 340.756206][T13829] ? security_sctp_bind_connect+0x7e/0x2e0 [ 340.756236][T13829] sctp_sendmsg+0x155c/0x2810 [ 340.756262][T13829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 340.756281][T13829] ? rcu_is_watching+0x15/0xb0 [ 340.756303][T13829] ? aa_sk_perm+0x81e/0x950 [ 340.756336][T13829] ? __pfx_aa_sk_perm+0x10/0x10 [ 340.756368][T13829] ? sock_rps_record_flow+0x19/0x410 [ 340.756397][T13829] ? inet_sendmsg+0x2f4/0x370 [ 340.756425][T13829] __sock_sendmsg+0x19c/0x270 [ 340.756454][T13829] ____sys_sendmsg+0x52d/0x830 [ 340.756480][T13829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.756508][T13829] ? import_iovec+0x74/0xa0 [ 340.756534][T13829] ___sys_sendmsg+0x21f/0x2a0 [ 340.756557][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.756609][T13829] ? __fget_files+0x2a/0x420 [ 340.756627][T13829] ? __fget_files+0x3a0/0x420 [ 340.756650][T13829] __sys_sendmmsg+0x227/0x430 [ 340.756676][T13829] ? __pfx___sys_sendmmsg+0x10/0x10 [ 340.756705][T13829] ? bpf_trace_run2+0x322/0x4b0 [ 340.756744][T13829] ? rcu_is_watching+0x15/0xb0 [ 340.756765][T13829] __x64_sys_sendmmsg+0xa0/0xc0 [ 340.756789][T13829] do_syscall_64+0xfa/0x3b0 [ 340.756807][T13829] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.756837][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.756858][T13829] ? clear_bhb_loop+0x60/0xb0 [ 340.756882][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.756903][T13829] RIP: 0033:0x7f5131f8ebe9 [ 340.756921][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.756940][T13829] RSP: 002b:00007f5132dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 340.756963][T13829] RAX: ffffffffffffffda RBX: 00007f51321c5fa0 RCX: 00007f5131f8ebe9 [ 340.756978][T13829] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000005 [ 340.756992][T13829] RBP: 00007f5132011e19 R08: 0000000000000000 R09: 0000000000000000 [ 340.757006][T13829] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 340.757019][T13829] R13: 00007f51321c6038 R14: 00007f51321c5fa0 R15: 00007fff23a28208 [ 340.757044][T13829] [ 340.757052][T13829] [ 341.166188][T13829] Allocated by task 11800: [ 341.170608][T13829] kasan_save_track+0x3e/0x80 [ 341.175296][T13829] __kasan_slab_alloc+0x6c/0x80 [ 341.180153][T13829] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 341.185624][T13829] xfrm_state_alloc+0x24/0x2f0 [ 341.190394][T13829] xfrm_state_find+0x37d4/0x5400 [ 341.195340][T13829] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 341.201510][T13829] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 341.206889][T13829] xfrm_lookup_route+0x3c/0x1c0 [ 341.211747][T13829] rawv6_sendmsg+0xdab/0x1820 [ 341.216438][T13829] __sock_sendmsg+0x19c/0x270 [ 341.221127][T13829] ____sys_sendmsg+0x52d/0x830 [ 341.225900][T13829] ___sys_sendmsg+0x21f/0x2a0 [ 341.230584][T13829] __sys_sendmmsg+0x227/0x430 [ 341.235265][T13829] __x64_sys_sendmmsg+0xa0/0xc0 [ 341.240118][T13829] do_syscall_64+0xfa/0x3b0 [ 341.244624][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.250518][T13829] [ 341.252840][T13829] Freed by task 886: [ 341.256726][T13829] kasan_save_track+0x3e/0x80 [ 341.261412][T13829] kasan_save_free_info+0x46/0x50 [ 341.266438][T13829] __kasan_slab_free+0x5b/0x80 [ 341.271221][T13829] kmem_cache_free+0x18f/0x400 [ 341.275994][T13829] xfrm_state_gc_task+0x52d/0x6b0 [ 341.281027][T13829] process_scheduled_works+0xae1/0x17b0 [ 341.286578][T13829] worker_thread+0x8a0/0xda0 [ 341.291172][T13829] kthread+0x70e/0x8a0 [ 341.295247][T13829] ret_from_fork+0x3fc/0x770 [ 341.299841][T13829] ret_from_fork_asm+0x1a/0x30 [ 341.304616][T13829] [ 341.306937][T13829] The buggy address belongs to the object at ffff888057604cc0 [ 341.306937][T13829] which belongs to the cache xfrm_state of size 928 [ 341.320923][T13829] The buggy address is located 816 bytes inside of [ 341.320923][T13829] freed 928-byte region [ffff888057604cc0, ffff888057605060) [ 341.334731][T13829] [ 341.337075][T13829] The buggy address belongs to the physical page: [ 341.343487][T13829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888057604cc0 pfn:0x57604 [ 341.353565][T13829] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 341.362070][T13829] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 341.369624][T13829] page_type: f5(slab) [ 341.373615][T13829] raw: 00fff00000000040 ffff8881422f58c0 dead000000000122 0000000000000000 [ 341.382206][T13829] raw: ffff888057604cc0 00000000800f0009 00000000f5000000 0000000000000000 [ 341.390810][T13829] head: 00fff00000000040 ffff8881422f58c0 dead000000000122 0000000000000000 [ 341.399509][T13829] head: ffff888057604cc0 00000000800f0009 00000000f5000000 0000000000000000 [ 341.408207][T13829] head: 00fff00000000002 ffffea00015d8101 00000000ffffffff 00000000ffffffff [ 341.416986][T13829] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 341.425662][T13829] page dumped because: kasan: bad access detected [ 341.432096][T13829] page_owner tracks the page as allocated [ 341.437831][T13829] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6597, tgid 6596 (syz.0.171), ts 111071575944, free_ts 110890319721 [ 341.457048][T13829] post_alloc_hook+0x240/0x2a0 [ 341.461870][T13829] get_page_from_freelist+0x21e4/0x22c0 [ 341.467437][T13829] __alloc_frozen_pages_noprof+0x181/0x370 [ 341.473254][T13829] alloc_pages_mpol+0x232/0x4a0 [ 341.478121][T13829] allocate_slab+0x8a/0x370 [ 341.482631][T13829] ___slab_alloc+0xbeb/0x1420 [ 341.487324][T13829] kmem_cache_alloc_noprof+0x283/0x3c0 [ 341.492790][T13829] xfrm_state_alloc+0x24/0x2f0 [ 341.497569][T13829] xfrm_add_sa+0x17d1/0x4070 [ 341.502166][T13829] xfrm_user_rcv_msg+0x7a0/0xab0 [ 341.507119][T13829] netlink_rcv_skb+0x205/0x470 [ 341.511897][T13829] xfrm_netlink_rcv+0x79/0x90 [ 341.516586][T13829] netlink_unicast+0x82c/0x9e0 [ 341.521360][T13829] netlink_sendmsg+0x805/0xb30 [ 341.526123][T13829] __sock_sendmsg+0x21c/0x270 [ 341.530810][T13829] ____sys_sendmsg+0x505/0x830 [ 341.535589][T13829] page last free pid 5234 tgid 5234 stack trace: [ 341.541915][T13829] __free_frozen_pages+0xbc4/0xd30 [ 341.547042][T13829] __slab_free+0x303/0x3c0 [ 341.551471][T13829] qlist_free_all+0x97/0x140 [ 341.556067][T13829] kasan_quarantine_reduce+0x148/0x160 [ 341.561531][T13829] __kasan_slab_alloc+0x22/0x80 [ 341.566394][T13829] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 341.571865][T13829] getname_flags+0xb8/0x540 [ 341.576375][T13829] do_sys_openat2+0xbc/0x1c0 [ 341.580968][T13829] __x64_sys_openat+0x138/0x170 [ 341.585819][T13829] do_syscall_64+0xfa/0x3b0 [ 341.590328][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.596239][T13829] [ 341.598578][T13829] Memory state around the buggy address: [ 341.604210][T13829] ffff888057604e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.612279][T13829] ffff888057604f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 341.620345][T13829] >ffff888057604f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 341.628404][T13829] ^ [ 341.636126][T13829] ffff888057605000: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 341.644232][T13829] ffff888057605080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 341.652298][T13829] ================================================================== [ 341.683228][T13831] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2118'. [ 341.707301][T13829] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 341.714554][T13829] CPU: 0 UID: 0 PID: 13829 Comm: syz.4.2117 Not tainted syzkaller #0 PREEMPT(full) [ 341.723953][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.734032][T13829] Call Trace: [ 341.737332][T13829] [ 341.740280][T13829] dump_stack_lvl+0x99/0x250 [ 341.744890][T13829] ? __asan_memcpy+0x40/0x70 [ 341.749496][T13829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.754705][T13829] ? __pfx__printk+0x10/0x10 [ 341.759323][T13829] vpanic+0x281/0x750 [ 341.763322][T13829] ? preempt_schedule+0xae/0xc0 [ 341.768187][T13829] ? __pfx_vpanic+0x10/0x10 [ 341.772694][T13829] ? preempt_schedule_common+0x83/0xd0 [ 341.778265][T13829] ? preempt_schedule+0xae/0xc0 [ 341.783133][T13829] ? __pfx_preempt_schedule+0x10/0x10 [ 341.788528][T13829] panic+0xb9/0xc0 [ 341.792258][T13829] ? __pfx_panic+0x10/0x10 [ 341.796686][T13829] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 341.802598][T13829] ? xfrm_state_find+0x2cf2/0x5400 [ 341.807724][T13829] check_panic_on_warn+0x89/0xb0 [ 341.812679][T13829] ? xfrm_state_find+0x2cf2/0x5400 [ 341.817801][T13829] end_report+0x78/0x160 [ 341.822060][T13829] kasan_report+0x129/0x150 [ 341.826581][T13829] ? xfrm_state_find+0x2cf2/0x5400 [ 341.831711][T13829] xfrm_state_find+0x2cf2/0x5400 [ 341.836672][T13829] ? xfrm_state_find+0x1da/0x5400 [ 341.841714][T13829] ? __pfx_xfrm_state_find+0x10/0x10 [ 341.847071][T13829] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 341.853250][T13829] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 341.859164][T13829] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 341.865771][T13829] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 341.871690][T13829] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 341.877702][T13829] ? xfrm_expand_policies+0x41f/0x6a0 [ 341.883095][T13829] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 341.888486][T13829] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 341.894312][T13829] xfrm_lookup_route+0x3c/0x1c0 [ 341.899177][T13829] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 341.904224][T13829] sctp_v6_get_dst+0x7cc/0x1bc0 [ 341.909089][T13829] ? crng_make_state+0x13a/0x700 [ 341.914038][T13829] ? __pfx_crng_make_state+0x10/0x10 [ 341.919344][T13829] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 341.924657][T13829] ? __asan_memset+0x22/0x50 [ 341.929427][T13829] ? dst_release+0x72/0x1b0 [ 341.933960][T13829] sctp_transport_route+0x118/0x2f0 [ 341.939218][T13829] sctp_assoc_add_peer+0x657/0x13b0 [ 341.944448][T13829] sctp_connect_new_asoc+0x30a/0x690 [ 341.949759][T13829] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 341.955577][T13829] ? __local_bh_enable_ip+0x12d/0x1c0 [ 341.960963][T13829] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 341.966523][T13829] ? security_sctp_bind_connect+0x7e/0x2e0 [ 341.972372][T13829] sctp_sendmsg+0x155c/0x2810 [ 341.977096][T13829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 341.982131][T13829] ? rcu_is_watching+0x15/0xb0 [ 341.986936][T13829] ? aa_sk_perm+0x81e/0x950 [ 341.991462][T13829] ? __pfx_aa_sk_perm+0x10/0x10 [ 341.996334][T13829] ? sock_rps_record_flow+0x19/0x410 [ 342.001633][T13829] ? inet_sendmsg+0x2f4/0x370 [ 342.006326][T13829] __sock_sendmsg+0x19c/0x270 [ 342.011018][T13829] ____sys_sendmsg+0x52d/0x830 [ 342.015824][T13829] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.021133][T13829] ? import_iovec+0x74/0xa0 [ 342.025655][T13829] ___sys_sendmsg+0x21f/0x2a0 [ 342.030431][T13829] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.035663][T13829] ? __fget_files+0x2a/0x420 [ 342.040261][T13829] ? __fget_files+0x3a0/0x420 [ 342.044956][T13829] __sys_sendmmsg+0x227/0x430 [ 342.049652][T13829] ? __pfx___sys_sendmmsg+0x10/0x10 [ 342.054868][T13829] ? bpf_trace_run2+0x322/0x4b0 [ 342.059743][T13829] ? rcu_is_watching+0x15/0xb0 [ 342.064516][T13829] __x64_sys_sendmmsg+0xa0/0xc0 [ 342.069383][T13829] do_syscall_64+0xfa/0x3b0 [ 342.073901][T13829] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.079116][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.085189][T13829] ? clear_bhb_loop+0x60/0xb0 [ 342.089878][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.095780][T13829] RIP: 0033:0x7f5131f8ebe9 [ 342.100205][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.119827][T13829] RSP: 002b:00007f5132dca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 342.128259][T13829] RAX: ffffffffffffffda RBX: 00007f51321c5fa0 RCX: 00007f5131f8ebe9 [ 342.136235][T13829] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000005 [ 342.144215][T13829] RBP: 00007f5132011e19 R08: 0000000000000000 R09: 0000000000000000 [ 342.152196][T13829] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000000 [ 342.160179][T13829] R13: 00007f51321c6038 R14: 00007f51321c5fa0 R15: 00007fff23a28208 [ 342.168177][T13829] [ 342.171370][T13829] Kernel Offset: disabled [ 342.175699][T13829] Rebooting in 86400 seconds..