last executing test programs: 2.483040139s ago: executing program 2 (id=3930): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, 0x0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="27ea64b718c3f2bdf311c0d1fc25d4eb5118f9a243829d0c50259b2eadcee35f1aeb0ccfeb94959d0c138562b448af845098243ac56e10227bb6d481e0117d94a304d16f320df53b5bf4b90a90", @ANYRESHEX=r2, @ANYRESDEC=r6], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) 2.209849288s ago: executing program 0 (id=3935): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ec0)={0x114, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}, [@nested={0x6c, 0x10e, 0x0, 0x1, [@nested={0x66, 0x132, 0x0, 0x1, [@typed={0x14, 0x25, 0x0, 0x0, @ipv6=@local}, @typed={0x14, 0x5d, 0x0, 0x0, @ipv6=@empty}, @generic="fe359b655f5767220d06552d5de5bdee9d3d4067814a6da38e77b5e3bf35f5602d34a594e126c7f528b207eb7c2fa8b25a7ceb01c145e7aab723"]}]}, @generic="14770753ac1d2462ff233603eebbf6c16db39dbdf9831a2900a992b375b06ef4d1cec927", @typed={0x14, 0xe3, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="3d224d40aceff5324f0a77897440309b895bc5fa6dc3e2a0dc1089b678b2d7eb97968cd69019b6984f8f139fa0132e5f0d458f2f9b61", @generic="2ce1de9942a89132009b2542e4e6e763f50345a3818c55be01f25270a19d65968185ebd3"]}, 0x114}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001040)=@getchain={0x34, 0x66, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xd}, {0xb, 0xb}, {0x9, 0x3}}, [{0x8, 0xb, 0x8ef}, {0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e2e, 0x800ea, 0x7, 0x104, 0x0, 0x0, 0x401}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0xc040ff0b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={r6, 0x58, &(0x7f0000000d80)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={r10, 0x9}, 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="2c0000000f14080025bd7000fcdbdf2508000300028300080f010001ba5600000000000000000000000000003de30872"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004050) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x44, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x0, 0x0, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@hopopts={0x11}], "bf0c7de8ed8f6ec5402a1859"}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000040000000c001a8008000580"], 0x2c}}, 0x800) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d00)=ANY=[@ANYBLOB='[\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000025bd7000fbdbdf25300000000600360017000000060036001e000000060036001b00000006003600310000000600360018000000060036000f00000006003600240000000600360020000000"], 0x54}, 0x1, 0x0, 0x0, 0x24044801}, 0x20008000) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) sendmsg$nl_generic(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={0x24, 0x12, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x24}}, 0x0) 2.080914562s ago: executing program 2 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'ipvlan0\x00', {0x2, 0x0, @remote}}) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3400000010000304000000000000000000000400", @ANYRES32=r1, @ANYBLOB="0003000002800000140012800b0001006970367680"], 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="79129800000000006113480000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000002c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a651bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc4cab575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.975774855s ago: executing program 4 (id=3940): syz_emit_ethernet(0x46, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x33, 0x0, @rand_addr=0x64010101, @multicast1}, "040022eb00000000"}}}}}, 0x0) 1.927125689s ago: executing program 0 (id=3941): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}}, 0x8004) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r6, 0x0, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400001c}, 0x24000810) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) 1.754361279s ago: executing program 4 (id=3942): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000600000000000000ffffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000077bd8502ece5bf3a558207475f389b894f9ecea976fad6191bae7a0acdba0cb6d7c1d77ade47b9cc1a829086f5b5299b09e7eb6aa481e79ad9c6ee91ad4a55b02d666163b085b0cda4b62ac6"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1e449, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180017000000050017"], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r9}, 0x10) bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r7}, 0x60) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000000140)) 1.683061834s ago: executing program 2 (id=3944): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)="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", 0x6fb}], 0x1}, 0x4048081) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000380)=0x56c, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYBLOB="6c0000000202010400000000000000000500000206a13eb3199fcc2487a37a8200074000040000500002802c00018014000300fe88000000000000000000000000010114000400000000000000000000000000000000000c00028005000100000000000c00028005000100880000000600034000030000dca62fd5e50d3f3a030214b16fde6c7709b1f6ea0b7b615b153348d17a2f0502822cc61135a4fd6bdf71bdb1f2ab96a5a7d866c4176b363826730c2fe004a9f5"], 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x4008805) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000020601000400000600000000000000000e0003006269746d61703a69700000000500040000000000050004000100000005000500020000000500010006000000"], 0x44}}, 0x0) 1.644843343s ago: executing program 2 (id=3945): bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="20f10000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) (async) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f00000000c0)=0x2ed4af45, 0x4) syz_emit_ethernet(0xe5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60fa050000af1100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e200e22"], 0x0) (async) splice(r1, &(0x7f0000000180), r1, &(0x7f00000004c0), 0x7, 0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) ppoll(&(0x7f0000000140)=[{r3, 0x40}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (async) syz_emit_ethernet(0x398, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0c020000b7c75d342e35e56a744c9dc665e0db4d5efc2511e2eeb6872a00901c26c25cd55651d0a15648bf7fcd7ea179cdcc95528774e59defab69793b0fae7e901ada414212910fb04fda018f18f2d64e22484fabb460d8d3cbbed1c948faace3f9d40e2f5a7a22bfee17e2b7fb29ec2d8486ba1c320e2cf571237bbd67ecae591baf7c00129b596d9862f013a4182c81a6ce54c690deebb186e3453f01822dc2b301df980d0039f253e2ab0801f04cc6962c45f36503c8e904c45aff202869a9056890b7d4", @ANYRES16=r0, @ANYBLOB="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"], 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x34fe, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) 1.451504972s ago: executing program 4 (id=3946): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000844}, 0x200c4094) 1.306124131s ago: executing program 4 (id=3947): r0 = socket(0x2a, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r1, 0x6180, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xb, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069004f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x6, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x4800c}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x19}]}]}]}}]}, 0x54}}, 0x20000000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2000000015, 0x80005, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) sendmmsg(r4, &(0x7f0000000540)=[{{&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'team0\x00'}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000014c0)="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", 0x1000}, {&(0x7f0000000080)="0b516fa8f718518f8a9c2ea3e864b664831c01cd31a64afeee64baa87105779e170e641c4d64c6853879514a464d3f1a8ff2980871a77975f436211d0edfd06f49be698a711fba0d201c286f0511591d515e84aeff98774b02342290bc4a767cb5237c546c97b5a03c39175ddde3f846", 0x70}, {&(0x7f0000000100)="1ce615e362cfb5ecfb72cddd29fd9a0d0687c9b0b74c", 0x16}], 0x3, &(0x7f00000024c0)=[{0x1010, 0x6, 0xcc7, "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"}, {0xb0, 0x104, 0x101, "108d26d4ab161e639793414cc36a523b5fab06b10355df899f786f53087fd023dae1685adfc5d20a7dc85f7083720935cf6fa41de664eac49d3909d8712d0c30333d6706f4cc55de44b31c51e73e06a3bf2165588cf9a9b65475a2036de17d873a540b5de6992268ba6212ee946d21b631f43f2212e56858464fbbc79525d5cdfe72088e2cfb2e1660ea4f8903f855745d5f4796b90ca6dd55a00b53"}, {0x30, 0x1, 0x8000, "9c18723ff21a210f8c4501d121d964a6397e99f098bc21cf69"}, {0x28, 0x88, 0x7, "1eae68bab1d74358caa475f7c20388f3523083fcb56ba132"}, {0x1010, 0x112, 0xfff, "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"}, {0xc0, 0x1dcefe2635261c2, 0x59, "af0090b7df288608418611fc0d9c40568c0bd78ac05de4919b86887ebc5c4c02ce510f224b1f98731252c10b6b2714dc479763cdacbd3c06c35240cca5d097ac58893371b358370677b0c78cf249be3e82c5f2fbb501faaf87873acde2d133991e4fe924b56610c53ebffb486876269b254624d87ff639e75e528d4033cf3e47d83d529d4137d4744d27b049823807d69d40f040316acc44e05449ec4bbb46575a68ecd313543b99fcf2da7a3c56df77"}, {0xc0, 0x1, 0x400, "7de160232c0f76751de61cb4242f3b3e92dec4d638bd3e1c32b0fbf63c6ef4c1ce3347bf2211ee1655ee29d40237e8cee03657706eed6df5b19de72bff19b096b6db78a47beeb95b369ef2aab01e6d9b3571371a5ad77eead315a0429b50b7ce556f8384159db97eff01e4b27e30e439f3671cda1fcf37f5608be4e387b17706aedb3b71f4eb5e37014eef0c3c3854c52966f77eb7bf6a7ae4be2042d5849d83b54a1c6585f3c25113e98bfc58"}, {0x38, 0x197, 0x3, "b555e3b7cd930417ab0e1b60db63bbcd923e4c09b9f03877a7f4f0394d22f01b2f"}], 0x22e0}}, {{&(0x7f0000000180)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)='k\"', 0x2}, {&(0x7f00000003c0)="5dbb1ce5bbf695e40ea54602222f1cd722e6ecf72de901d4927367f639ecdbe439e3a541d0da340185a085d8a1d7c36b56baa8", 0x33}, {&(0x7f0000000440)="c9a72f6c94b83e8b20c5", 0xa}, {&(0x7f0000000600)="fe9fa91496c97bc4dcb875425a6271e1d554e535cd6adf992eab836dd25701cbf4c90d24f7892c00898511d5dd2f3f486a112ade452612d70d9fb40d86809dfab8837648596ec76be15511b987367e3bc5f9a963593d60e8e410ce3beb7155b22d17a77e477649a36ac662c8e680aa20f6a1a9705d7e82aff77a2783e09154ff53005d682dd5952a8f190a66a8c23953c1e290b919228f74099ac86aebdac130730f1357c5b00061f1f7b0286e81e3830b6073e02197ac308de4bfd7bd087869fb", 0xc1}], 0x4, &(0x7f0000000700)=[{0x90, 0x6, 0x3, "c5324281e03cbabc8d9c7fea8181a91856b62a3f05275472d4aa3b6b87138b2ebb1bad186d1b2541b70a521d822b0d57a176ee98f872b67b43c1d0513b7dfa4093b2a076be03a33411906408d4417407df5241f881f5ab4287c6b5e2d0b2a910eae08fcb01ca6314bbdcfc7fc280ca9efe729029343bcc5b7b0101e2"}], 0x90}}], 0x2, 0x0) 1.086300235s ago: executing program 3 (id=3948): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0xff, 0x3}, &(0x7f0000000040)=0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000140)={r0, @in={{0x2, 0x4e23, @broadcast}}, 0x8, 0x6, 0x7, 0x5, 0x2}, &(0x7f0000000200)=0x98) (async, rerun: 32) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={r0, 0xd}, &(0x7f0000000100)=0x8) (rerun: 32) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000008800)=[{&(0x7f0000000080)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f00000002c0)="776b08de", 0x4}], 0x1, &(0x7f0000000440)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x8, 0x8, 0xf}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x81}}], 0x38, 0x4040000}], 0x1, 0x0) 1.040925238s ago: executing program 3 (id=3949): r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000040)="c5e84f03", 0x4, 0x4, &(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x53, 0x0, &(0x7f0000000200)="b9e403c6630d698cb8a00b04339c20093ee632131e024810dc1607d3bc2e1e9a954eb130db62b3cfe60134fccd8ce4924a6782691f5fafc2f9ae4a044134555a7d8ddc489cfa1ba5a786ffc1f3f83d6cac4df7", 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x14c, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x6, 0xe9, 0x4, 0x0, 0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000044}, 0x280008c5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003308030300ecff3f0200000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) 909.686526ms ago: executing program 2 (id=3951): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000fee000)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x1000d}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) 861.467848ms ago: executing program 3 (id=3952): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0xfe, 0x3, 0x1c, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast2, 0x1, 0x7800, 0xfffffffe, 0x80}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000080)=0x7, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) 755.083686ms ago: executing program 0 (id=3954): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x38, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x40, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xc}]}}}}}}}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 708.893852ms ago: executing program 3 (id=3955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x184, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x33}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x0, 0x32}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x23c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a4b6b53a80038000000060a010400000000000000000100000008000b40000000000900010073797a3000000000100004800c0001800800010066696200140000001100010000000000000000000000000a"], 0xac}}, 0x4004) sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x9c, 0xc, 0x4, 0xb03, 0x70bd2d, 0x25dfdbfe, {0x1}, [@nested={0x10, 0xe5, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @pid}, @nested={0x4, 0x2e}]}, @generic="23296e593d42b4e56c19d220b085d287f5557c413f403c587aa95b7ae184d28c011e0736ff9bb2a2c54a9c919e505e60260afda3e1ce", @generic="ac22ef133e0d2c6b77", @generic="2912aac34c4effc91d0a02e7c9ac29a93eb57526e662bda39f6ddd8cd8db46b41639b4e536b492ff04a65060f73efa28dd96c8c01b3f8b", @generic]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040844}, 0x40010) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc0000001b0089fd0000000000000000fc000000000000000000000000000000ffffffff00000000000000000000000000000000000000000200206000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e10000000000000000fcffffe6011fe4d8b8745d5fff00000000000000000000000000000000000000000c0008000800080000000000"], 0xcc}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_TARGET={0x8, 0x1, 0x10}, @TCA_CODEL_TARGET={0x8, 0x1, 0x4}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x4}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}, @TCA_CODEL_TARGET={0x8, 0x1, 0x5}]}}]}, 0x64}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xc, 0x1, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000200)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x2}, 0x18) 699.482917ms ago: executing program 0 (id=3956): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000020a000000000000000200000a0000010800024000000001080002400000000139000600682e4d830082d870aa8aec692ca0b13d82161704e1dd1ea1d58ddf54738d4129d2bafbff8b2eb3a281871480bb29bd18f09cc79375000000140000001100010000000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) (async) ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) 610.389842ms ago: executing program 1 (id=3957): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async) pipe(&(0x7f0000000480)) (async) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) (async) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) (async) 590.661267ms ago: executing program 0 (id=3958): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = epoll_create1(0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001400)={0xe0000017}) epoll_wait(r1, &(0x7f0000001940)=[{}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x82}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 566.481515ms ago: executing program 1 (id=3959): r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x4, 0x9, 0xfd, 0x5, 0xf2, 0x8, 0x7, 0x0, 0x0, 0xf, 0x4, 0x8, 0x7, 0x6}, 0xe) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) bind(r2, &(0x7f0000000140)=@hci={0x1f, 0x3, 0x4}, 0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003052abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="18800300a0010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="0e001f002c50e889"], 0x44}}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) 474.362737ms ago: executing program 0 (id=3960): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x34}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000640)={0x1, 0x0, 0x0, 0x80000001, @vifc_lcl_addr=@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x5, 0x1, 0x0, 0x0, 0xc, 0xffff}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r11, 0x8b32, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010102}, @in6={0xa, 0x1, 0x0, @private0}, @in6={0xa, 0x4e22, 0x0, @empty}, @in={0x2, 0x4e24, @multicast2}], 0x58) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x28, 0x2e, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 472.466429ms ago: executing program 3 (id=3961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="240000001a1401002abd700001dcdf250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x31}, 0x20) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x2e4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) (async) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, "78e1054910d8a0f0efd0d4c0ba321cff5db0aac6"}}}}}, 0x0) (async, rerun: 64) r4 = socket(0x2a, 0x2, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r4, 0x111, 0x3, 0x0, 0x4) (async, rerun: 32) connect$rxrpc(r3, &(0x7f00000003c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async, rerun: 32) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) connect$rose(r6, &(0x7f0000000e80)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) (async, rerun: 32) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x58, r2, 0x0, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x3c}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async, rerun: 32) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r2, 0x301, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x59}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xffffffff, 0xb}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x1) 450.399117ms ago: executing program 4 (id=3962): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x24, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40020}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0x2f2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), r9) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000580)={0x60, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r11}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)={0x2ac, r10, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x29f1b4d3}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0xcc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x2ac}}, 0x880) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0108000400000000f7ff0a00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef1f16f10ccf4000000050009000200000005000200020000000800030005ac0f00"], 0x58}}, 0x0) 350.404692ms ago: executing program 1 (id=3963): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fea010018000000000000000c0000000c0000000200000000000000feff0004000000000000"], 0x0, 0x26}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@empty, @loopback}, &(0x7f0000000080)=0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async, rerun: 64) r8 = accept$alg(r7, 0x0, 0x0) (rerun: 64) sendmmsg$alg(r8, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0}], 0x1, 0x800) (async) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r9, 0x400454d1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4c7, 0x800}}}, @TCA_RATE={0x6, 0x5, {0x1, 0x80}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r12, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) (async) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async, rerun: 32) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="9f", 0x1}], 0x1) (rerun: 32) 270.728557ms ago: executing program 3 (id=3964): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x85}]}}}]}, 0x3c}}, 0x40800) 214.139041ms ago: executing program 1 (id=3965): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) (async) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000080)}, 0x10) 160.832775ms ago: executing program 1 (id=3966): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r6, 0x1, {0x2, 0x1, 0x1}, 0x2}, 0x18) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x0, 0xfffe}}}}}, 0x0) listen(r1, 0x50) 42.361399ms ago: executing program 1 (id=3967): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4881) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000002a7d03561bce3af0009500000000000000170054e36cc17399bb9b07efb8fc5b0000000000000008bb300bbf8c0a76427e06785e09af8f4b55ea63ad271b7431875fb26da1367241cf2bcb8449ca2e447b1fcc6dbc5fdd263815b77848b7cddbbcfdb0ff9017ec88438752c5811efe11728c5e802a12e9fd52"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 36.257838ms ago: executing program 4 (id=3968): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="18080200d4ff000000000000ff000015182e1b43", @ANYRES32=r6, @ANYBLOB="0000000002000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xcc2}, 0x1c) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000380)={@multicast2, 0x1, 0x0, 0x40, 0x0, [{@private}, {@dev}, {@remote}, {@private}]}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newnexthop={0x80, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x3}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}, @NHA_ENCAP={0x50, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x4c, 0x1, {0x9, 0x48, 0x1, 0xa, 0xffff, [@ipv4={'\x00', '\xff\xff', @loopback}, @loopback, @private0, @mcast1]}}}]}, 0x80}}, 0x4000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={0x24, r3, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 0s ago: executing program 2 (id=3969): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) connect$rds(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) getsockname$inet(r2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164b9b3f427f6ba6b34f98125f30e6926996a3cfee33025a30b273683626e00dc254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d0f9a3b8e055cc4eed3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10bf647da1c6e7f20e5c6e22a10aa3fb50e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257484000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e080"], 0x0, 0x4}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x29, 0xffffffffffffffa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x41}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "f4b80e10800332c1dd9ef9f2a090118d"}, @NL80211_ATTR_PMK={0x14, 0xfe, "92eca4614b4dec2a34ab3c45adda812b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "5accac8c7f52c4bb3be861e767c25fb3"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x48000}, 0x48885) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000980)={0x0, 0x7}, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000340)={0x0, 0xfffb, 0xc}, 0x8) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c, 0x80800) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="140075aa3a67b53900005200020026bd7000fddb"], 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="030000018000000000000021e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014c5da4de4d92"], 0x90) kernel console output (not intermixed with test programs): 604][T14368] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.104904][T14388] netlink: 'syz.2.2450': attribute type 6 has an invalid length. [ 263.122591][T14389] netlink: 'syz.2.2450': attribute type 6 has an invalid length. [ 263.171554][T14388] syzkaller1: entered promiscuous mode [ 263.177094][T14388] syzkaller1: entered allmulticast mode [ 263.221922][T14368] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.390208][ T3455] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.435291][ T4318] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.526506][ T4318] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.620523][T14416] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.629638][ T4318] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.647593][T14417] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 263.653818][T14416] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 263.701412][T14416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 263.711917][T14416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 263.938073][T14430] bridge12: entered promiscuous mode [ 263.989543][T14430] bridge12: entered allmulticast mode [ 264.216966][T14454] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 264.245944][T14456] tipc: Enabled bearer , priority 0 [ 264.320675][T14461] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 264.346099][T14461] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 264.416617][T14461] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 264.526156][T14456] tipc: Resetting bearer [ 264.926540][T14499] __nla_validate_parse: 12 callbacks suppressed [ 264.926563][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2481'. [ 264.963050][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2481'. [ 264.990608][T14499] veth0_to_bond: left allmulticast mode [ 264.996222][T14499] veth0_to_bond: left promiscuous mode [ 265.010282][T14499] bridge0: port 1(veth0_to_bond) entered disabled state [ 265.031443][T14499] bridge8: port 1(veth0_to_bond) entered blocking state [ 265.038631][T14499] bridge8: port 1(veth0_to_bond) entered disabled state [ 265.045917][T14499] veth0_to_bond: entered allmulticast mode [ 265.055469][T14499] veth0_to_bond: entered promiscuous mode [ 265.109961][T14506] netlink: 'syz.3.2484': attribute type 2 has an invalid length. [ 265.131225][T14509] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2485'. [ 265.177491][T14511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2486'. [ 265.256749][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2487'. [ 265.369203][ T7514] tipc: Node number set to 2404396833 [ 265.515889][T14529] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 265.830003][T14548] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2499'. [ 265.916186][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'. [ 265.935946][T14551] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2501'. [ 265.972508][T14555] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 266.169972][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2506'. [ 266.202442][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2507'. [ 266.214848][T14567] netlink: 'syz.0.2506': attribute type 5 has an invalid length. [ 266.276828][T14579] bridge0: Caught tx_queue_len zero misconfig [ 266.560793][T14601] xt_TCPMSS: Only works on TCP SYN packets [ 266.574736][T14603] netlink: 'syz.1.2512': attribute type 58 has an invalid length. [ 266.586489][T14598] IPVS: ip_vs_add_dest(): server weight less than zero [ 266.619394][T14610] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 266.784897][T14617] netlink: 'syz.1.2518': attribute type 16 has an invalid length. [ 266.864580][T14619] x_tables: unsorted underflow at hook 4 [ 266.886762][T14621] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 267.031361][T14630] bond0: Caught tx_queue_len zero misconfig [ 267.500839][T14654] bond6: option resend_igmp: invalid value (32767) [ 267.507551][T14654] bond6: option resend_igmp: allowed values 0 - 255 [ 267.541988][T14654] bond6 (unregistering): Released all slaves [ 267.877644][T14671] netlink: 'syz.3.2538': attribute type 83 has an invalid length. [ 267.910800][T14682] netlink: 'syz.1.2540': attribute type 64 has an invalid length. [ 268.045797][T14687] syzkaller1: entered promiscuous mode [ 268.079404][T14687] syzkaller1: entered allmulticast mode [ 268.420452][T14715] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 268.478254][T14714] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 268.689705][T14718] warn_alloc: 2 callbacks suppressed [ 268.689726][T14718] syz.0.2552: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.751590][T14718] CPU: 0 UID: 0 PID: 14718 Comm: syz.0.2552 Not tainted syzkaller #0 PREEMPT(full) [ 268.751621][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.751633][T14718] Call Trace: [ 268.751641][T14718] [ 268.751649][T14718] dump_stack_lvl+0x189/0x250 [ 268.751681][T14718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.751702][T14718] ? __pfx__printk+0x10/0x10 [ 268.751738][T14718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 268.751767][T14718] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 268.751798][T14718] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 268.751830][T14718] warn_alloc+0x214/0x310 [ 268.751863][T14718] ? __pfx_warn_alloc+0x10/0x10 [ 268.751908][T14718] ? __get_vm_area_node+0x28f/0x300 [ 268.751933][T14718] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 268.751962][T14718] __vmalloc_node_range_noprof+0x690/0x12d0 [ 268.751988][T14718] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 268.752053][T14718] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 268.752079][T14718] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 268.752115][T14718] ? rcu_is_watching+0x15/0xb0 [ 268.752139][T14718] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 268.752162][T14718] __kvmalloc_node_noprof+0x670/0x910 [ 268.752189][T14718] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 268.752211][T14718] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 268.752235][T14718] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 268.752266][T14718] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 268.752308][T14718] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 268.752330][T14718] ? __fget_files+0x2a/0x420 [ 268.752362][T14718] ? __fget_files+0x2a/0x420 [ 268.752378][T14718] ? __fget_files+0x2a/0x420 [ 268.752399][T14718] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 268.752429][T14718] link_create+0x673/0x850 [ 268.752456][T14718] __sys_bpf+0x6be/0x860 [ 268.752481][T14718] ? __pfx___sys_bpf+0x10/0x10 [ 268.752526][T14718] ? rcu_is_watching+0x15/0xb0 [ 268.752555][T14718] __x64_sys_bpf+0x7c/0x90 [ 268.752575][T14718] do_syscall_64+0xfa/0xf80 [ 268.752600][T14718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.752616][T14718] ? clear_bhb_loop+0x60/0xb0 [ 268.752638][T14718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.752653][T14718] RIP: 0033:0x7fc99458f749 [ 268.752670][T14718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.752687][T14718] RSP: 002b:00007fc995412038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 268.752709][T14718] RAX: ffffffffffffffda RBX: 00007fc9947e5fa0 RCX: 00007fc99458f749 [ 268.752721][T14718] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 268.752733][T14718] RBP: 00007fc994613f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.752744][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.752754][T14718] R13: 00007fc9947e6038 R14: 00007fc9947e5fa0 R15: 00007fff3e9b0ce8 [ 268.752787][T14718] [ 268.752795][T14718] Mem-Info: [ 269.050280][T14718] active_anon:3901 inactive_anon:0 isolated_anon:0 [ 269.050280][T14718] active_file:2568 inactive_file:39951 isolated_file:0 [ 269.050280][T14718] unevictable:768 dirty:67 writeback:0 [ 269.050280][T14718] slab_reclaimable:12010 slab_unreclaimable:106111 [ 269.050280][T14718] mapped:31856 shmem:1357 pagetables:1268 [ 269.050280][T14718] sec_pagetables:0 bounce:0 [ 269.050280][T14718] kernel_misc_reclaimable:0 [ 269.050280][T14718] free:1318185 free_pcp:13171 free_cma:0 [ 269.097164][T14718] Node 0 active_anon:15604kB inactive_anon:0kB active_file:10272kB inactive_file:159600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127424kB dirty:268kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13652kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.141407][T14747] netlink: 'syz.1.2559': attribute type 2 has an invalid length. [ 269.215569][T14718] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.264801][T14718] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.299528][T14754] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 269.307234][T14754] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 269.327105][T14758] syzkaller1: entered promiscuous mode [ 269.333855][T14758] syzkaller1: entered allmulticast mode [ 269.376795][T14718] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 269.423340][T14718] Node 0 DMA32 free:1365112kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15688kB inactive_anon:0kB active_file:10272kB inactive_file:159608kB unevictable:1536kB writepending:268kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:35208kB local_pcp:20372kB free_cma:0kB [ 269.483295][T14718] lowmem_reserve[]: 0 0 0 0 0 [ 269.494596][T14718] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.525755][T14718] lowmem_reserve[]: 0 0 0 0 0 [ 269.531745][T14718] Node 1 Normal free:3891848kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17724kB local_pcp:10012kB free_cma:0kB [ 269.572166][T14718] lowmem_reserve[]: 0 0 0 0 0 [ 269.580095][T14718] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 269.593449][T14718] Node 0 DMA32: 353*4kB (UME) 311*8kB (UME) 760*16kB (UM) 775*32kB (UME) 554*64kB (UME) 410*128kB (UME) 349*256kB (UM) 256*512kB (UE) 190*1024kB (UM) 15*2048kB (UME) 193*4096kB (UM) = 1365020kB [ 269.614568][T14718] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 269.626956][T14718] Node 1 Normal: 202*4kB (U) 34*8kB (UME) 45*16kB (UME) 82*32kB (UME) 33*64kB (UME) 14*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891848kB [ 269.682238][T14718] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.708951][T14772] delete_channel: no stack [ 269.743299][T14718] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.754267][T14718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 269.765920][T14718] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 269.787641][T14718] 43875 total pagecache pages [ 269.793808][T14718] 0 pages in swap cache [ 269.799234][T14718] Free swap = 124996kB [ 269.804385][T14718] Total swap = 124996kB [ 269.809740][T14718] 2097051 pages RAM [ 269.812307][T14781] xt_hashlimit: max too large, truncated to 1048576 [ 269.813632][T14718] 0 pages HighMem/MovableOnly [ 269.829873][T14718] 424280 pages reserved [ 269.836363][T14718] 0 pages cma reserved [ 270.204197][T14791] __nla_validate_parse: 17 callbacks suppressed [ 270.204217][T14791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'. [ 270.252726][T14793] netlink: 'syz.2.2575': attribute type 1 has an invalid length. [ 270.322336][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2573'. [ 270.342049][T14799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 270.385034][T14799] netlink: 'syz.4.2572': attribute type 2 has an invalid length. [ 270.408394][T14799] netlink: 'syz.4.2572': attribute type 8 has an invalid length. [ 270.419452][T14799] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2572'. [ 270.443222][T14804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2576'. [ 270.728777][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 270.778612][T14820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2580'. [ 270.782093][T14826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 270.829029][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 270.848437][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 270.871668][T14829] netlink: 'syz.1.2585': attribute type 5 has an invalid length. [ 270.888857][T14830] netlink: 'syz.1.2585': attribute type 5 has an invalid length. [ 270.925863][T14829] geneve3: entered promiscuous mode [ 270.938845][T14829] geneve3: entered allmulticast mode [ 270.956008][ T3426] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 270.979644][ T3426] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 270.987832][ T3426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 271.011782][ T3426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 271.098904][T14847] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 271.201151][T14847] 8021q: adding VLAN 0 to HW filter on device bond7 [ 271.246853][T14844] bond7: (slave gretap2): making interface the new active one [ 271.256454][T14844] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 271.509844][T14871] netlink: 'syz.3.2598': attribute type 29 has an invalid length. [ 272.109447][T14906] `: renamed from bond0 [ 272.230627][T14910] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 272.567175][T14923] bond9: invalid ARP target 0.0.0.0 specified for addition [ 272.590761][T14923] bond9: option arp_ip_target: invalid value (0) [ 272.649459][T14923] bond9 (unregistering): Released all slaves [ 272.885307][T14940] erspan0: entered promiscuous mode [ 272.900671][T14940] batadv_slave_1: entered promiscuous mode [ 272.908032][T14940] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.106673][T14961] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 273.484137][T14979] validate_nla: 4 callbacks suppressed [ 273.484158][T14979] netlink: 'syz.4.2627': attribute type 13 has an invalid length. [ 273.867388][T14991] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 274.261927][T15027] netlink: 'syz.0.2638': attribute type 39 has an invalid length. [ 274.615258][T15048] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 275.083652][T15082] tunl0: entered allmulticast mode [ 275.237159][T15093] __nla_validate_parse: 21 callbacks suppressed [ 275.237181][T15093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 275.280547][T15095] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2661'. [ 275.281698][T15097] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2662'. [ 275.328030][T15100] syzkaller0: entered promiscuous mode [ 275.334329][T15100] syzkaller0: entered allmulticast mode [ 275.571346][T15114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.706243][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'. [ 275.745095][T15124] netlink: 'syz.3.2670': attribute type 1 has an invalid length. [ 275.862845][T15119] 8021q: adding VLAN 0 to HW filter on device bond9 [ 275.926013][T15124] bond8: (slave ip6gretap1): making interface the new active one [ 275.970124][T15124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.978194][T15124] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 275.990401][T15124] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 276.007406][T15141] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2670'. [ 276.031475][T15132] bridge0: port 1(ipvlan0) entered blocking state [ 276.038277][T15132] bridge0: port 1(ipvlan0) entered disabled state [ 276.045193][T15132] ipvlan0: entered allmulticast mode [ 276.051249][T15132] bridge0: entered allmulticast mode [ 276.062290][T15145] netlink: 'syz.4.2673': attribute type 2 has an invalid length. [ 276.072084][T15132] ipvlan0: left allmulticast mode [ 276.078535][T15132] bridge0: left allmulticast mode [ 276.145671][T15124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2670'. [ 276.186387][T15145] : entered promiscuous mode [ 276.304589][T15157] netlink: 'syz.1.2676': attribute type 11 has an invalid length. [ 276.408889][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 276.423266][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 276.423266][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 276.423300][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 276.504247][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2677'. [ 276.505438][T15170] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 276.523622][T15170] syzkaller1: linktype set to 823 [ 276.707460][T15182] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.857421][T15195] netlink: 'syz.2.2685': attribute type 83 has an invalid length. [ 277.139372][T15205] netlink: 'syz.4.2694': attribute type 12 has an invalid length. [ 277.162288][T15205] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 277.333373][T15214] bond4 (unregistering): Released all slaves [ 277.361301][T15219] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 277.716182][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.725255][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.767244][T15238] IPVS: set_ctl: invalid protocol: 47 172.20.20.14:7 [ 277.780678][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.819014][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.684808][T15264] pimreg: entered allmulticast mode [ 278.711009][T15264] pimreg: left allmulticast mode [ 278.716061][T15264] dvmrp6: left allmulticast mode [ 279.159718][T15283] netlink: 'syz.2.2715': attribute type 1 has an invalid length. [ 279.186112][T15288] netlink: 'syz.4.2713': attribute type 3 has an invalid length. [ 279.320794][T15293] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 279.453347][T15293] 8021q: adding VLAN 0 to HW filter on device bond10 [ 279.493434][T15298] bond10: entered allmulticast mode [ 279.514843][T15293] bond10: (slave ip6gretap2): making interface the new active one [ 279.524379][T15293] ip6gretap2: entered allmulticast mode [ 279.532415][T15293] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 280.094048][T15334] block nbd5: Unsupported socket: should be TCP or UNIX. [ 280.102909][T15337] lo: Caught tx_queue_len zero misconfig [ 280.127508][T15337] netem: incorrect gi model size [ 280.132986][T15337] netem: change failed [ 280.144957][T15329] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.301217][T15341] netlink: 'syz.4.2730': attribute type 10 has an invalid length. [ 280.310311][T15341] netlink: 'syz.4.2730': attribute type 10 has an invalid length. [ 280.400182][T15347] __nla_validate_parse: 11 callbacks suppressed [ 280.400203][T15347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2733'. [ 280.511747][T15350] tipc: Enabled bearer , priority 10 [ 281.005708][T15384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 281.015665][T15384] openvswitch: netlink: Flow actions attr not present in new flow. [ 281.112799][T15386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2746'. [ 281.149288][T15388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2747'. [ 281.334033][T15400] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2750'. [ 281.532422][T15418] tipc: Enabling of bearer rejected, already enabled [ 281.645107][T15426] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2760'. [ 281.842519][T15439] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2764'. [ 281.855382][T15439] netlink: 'syz.1.2764': attribute type 9 has an invalid length. [ 281.879007][T15439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.900243][T15443] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2766'. [ 281.987053][T15449] netlink: 'syz.4.2768': attribute type 12 has an invalid length. [ 282.400552][T15471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2776'. [ 282.413824][T15472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2778'. [ 282.487939][T15471] bond4 (unregistering): Released all slaves [ 282.526505][T15480] tunl0: entered promiscuous mode [ 282.549141][T15480] netlink: 'syz.0.2777': attribute type 3 has an invalid length. [ 282.779777][T15491] netlink: 'syz.3.2784': attribute type 2 has an invalid length. [ 282.879956][T15496] tipc: Failed to remove unknown binding: 66,1,1/2886997007:2394431230/2394431232 [ 282.971653][T15496] netlink: 'syz.4.2786': attribute type 11 has an invalid length. [ 283.530546][T15529] netlink: 'syz.4.2797': attribute type 1 has an invalid length. [ 283.671843][T15534] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 283.698821][T15534] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 283.710306][T15534] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 283.980352][T15556] bond0: option miimon: invalid value (18446744073709551585) [ 283.988054][T15556] bond0: option miimon: allowed values 0 - 2147483647 [ 284.012385][T15556] bond0 (unregistering): Released all slaves [ 284.363366][T15583] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 284.415455][T15588] syzkaller1: entered promiscuous mode [ 284.431077][T15588] syzkaller1: entered allmulticast mode [ 284.510060][T15591] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 284.513213][T15596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.518146][T15591] netlink: 'syz.2.2814': attribute type 3 has an invalid length. [ 284.535750][T15591] NCSI netlink: No device for ifindex 813332851 [ 284.793255][T15618] netlink: 'syz.2.2819': attribute type 21 has an invalid length. [ 285.124028][T15636] tipc: Enabling of bearer rejected, media not registered [ 285.197494][T15643] tipc: Enabled bearer , priority 11 [ 285.208145][T15644] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 285.329768][T15654] xt_CT: You must specify a L4 protocol and not use inversions on it [ 285.475893][T15653] __nla_validate_parse: 16 callbacks suppressed [ 285.475914][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 285.535716][T15653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 285.550438][T15673] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 285.573908][T15673] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 285.584293][T15673] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 285.603581][T15673] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 285.621809][T15676] openvswitch: netlink: IP tunnel dst address not specified [ 285.632865][T15673] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 285.641426][T15673] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 285.653824][T15677] netlink: 'syz.3.2839': attribute type 9 has an invalid length. [ 285.661912][T15677] netlink: 212256 bytes leftover after parsing attributes in process `syz.3.2839'. [ 285.725067][T15682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2841'. [ 285.845675][T15690] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2844'. [ 285.881020][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2845'. [ 285.975909][T15698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2846'. [ 286.242710][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2851'. [ 286.323018][T15720] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2854'. [ 286.692410][T15746] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2866'. [ 286.728528][T15744] bond5: (slave bridge6): making interface the new active one [ 286.737187][T15744] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 286.790646][T15748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.800916][T15748] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 287.091381][T15773] tunl0: Caught tx_queue_len zero misconfig [ 287.193389][T15781] bridge7: entered promiscuous mode [ 287.211263][T15781] bridge7: entered allmulticast mode [ 287.270343][T15781] syzkaller1: entered promiscuous mode [ 287.291736][T15781] syzkaller1: entered allmulticast mode [ 287.748999][T15814] netlink: zone id is out of range [ 287.767040][T15814] netlink: zone id is out of range [ 287.780292][T15814] netlink: zone id is out of range [ 287.791771][T15814] netlink: zone id is out of range [ 287.797091][T15814] netlink: zone id is out of range [ 287.802898][T15814] netlink: zone id is out of range [ 287.808139][T15814] netlink: zone id is out of range [ 287.813516][T15814] netlink: zone id is out of range [ 287.819374][T15814] netlink: zone id is out of range [ 287.863243][T15811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.873857][T15811] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.903361][T15810] netlink: 'syz.3.2885': attribute type 11 has an invalid length. [ 287.911820][T15810] netlink: 'syz.3.2885': attribute type 11 has an invalid length. [ 287.991222][T15811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.002002][T15811] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.116804][T15811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.127992][T15811] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.257039][T15811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.267794][T15811] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.427746][ T60] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.456369][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.557524][ T4318] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.575280][ T4318] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.642684][ T4318] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.666922][ T4318] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.707610][ T4318] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 288.726611][ T4318] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.007539][T15866] bond9: entered promiscuous mode [ 289.013924][T15866] 8021q: adding VLAN 0 to HW filter on device bond9 [ 289.658175][T15923] validate_nla: 69 callbacks suppressed [ 289.658196][T15923] netlink: 'syz.2.2917': attribute type 4 has an invalid length. [ 289.682805][T15924] netlink: 'syz.2.2917': attribute type 4 has an invalid length. [ 290.283943][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.293518][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.303003][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.321930][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.322411][T15945] x_tables: duplicate underflow at hook 1 [ 290.336905][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.356896][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.364612][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.374688][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.384148][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.393537][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.564901][T15956] __nla_validate_parse: 25 callbacks suppressed [ 290.564923][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'. [ 291.007264][T15982] netlink: 'syz.2.2940': attribute type 1 has an invalid length. [ 291.091642][T15982] 8021q: adding VLAN 0 to HW filter on device bond13 [ 291.175115][T15984] 8021q: adding VLAN 0 to HW filter on device bond13 [ 291.182556][T15983] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 291.189795][T15984] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 291.201026][T15984] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 291.884927][T15985] infiniband syû: set down [ 291.900806][T15985] infiniband syû: added bond_slave_0 [ 291.907026][T15985] syû: rxe_create_cq: returned err = -12 [ 291.917246][T16023] netem: change failed [ 291.929029][T15985] infiniband syû: Couldn't create ib_mad CQ [ 291.935163][T15985] infiniband syû: Couldn't open port 1 [ 292.005279][T16034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2953'. [ 292.022597][T15985] RDS/IB: syû: added [ 292.026923][T15985] smc: adding ib device syû with port count 1 [ 292.042928][T15985] smc: ib device syû port 1 has no pnetid [ 292.049760][T16036] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2952'. [ 292.107239][T15944] chnl_net:caif_netlink_parms(): no params data found [ 292.471609][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.501668][ T5841] Bluetooth: hci1: command tx timeout [ 292.508056][T15944] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.530606][T15944] bridge_slave_0: entered allmulticast mode [ 292.539335][T15944] bridge_slave_0: entered promiscuous mode [ 292.549973][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.567481][T15944] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.579583][T15944] bridge_slave_1: entered allmulticast mode [ 292.591501][T15944] bridge_slave_1: entered promiscuous mode [ 292.612180][T16068] netlink: 'syz.3.2957': attribute type 13 has an invalid length. [ 292.935162][T16078] netlink: 'syz.2.2961': attribute type 1 has an invalid length. [ 292.960883][T16080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2960'. [ 293.169104][T16078] 8021q: adding VLAN 0 to HW filter on device bond14 [ 293.208874][T16081] bond14: (slave gretap3): making interface the new active one [ 293.220080][T16081] bond14: (slave gretap3): Enslaving as an active interface with an up link [ 293.251665][T15944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.322942][T15944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.435844][T16090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2965'. [ 293.458169][T15944] team0: Port device team_slave_0 added [ 293.481499][T16092] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 293.500436][T15944] team0: Port device team_slave_1 added [ 293.632121][T15944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.648165][T16099] net_ratelimit: 56 callbacks suppressed [ 293.648188][T16099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.648762][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.696017][T15944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.735994][T16097] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2967'. [ 293.764876][T15944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.798699][T15944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.856276][T16108] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2968'. [ 293.865557][T15944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.877063][T16106] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2968'. [ 294.054199][T15944] hsr_slave_0: entered promiscuous mode [ 294.075122][T15944] hsr_slave_1: entered promiscuous mode [ 294.088598][T15944] debugfs: 'hsr0' already exists in 'hsr' [ 294.109271][T15944] Cannot create hsr debugfs directory [ 294.569733][ T5841] Bluetooth: hci1: command tx timeout [ 294.763514][T15944] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.775220][T15944] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 294.895431][T16144] tipc: Enabled bearer , priority 0 [ 294.903143][T16145] tipc: Enabling of bearer rejected, already enabled [ 294.913471][T16144] syzkaller0: entered promiscuous mode [ 294.920330][T16144] syzkaller0: entered allmulticast mode [ 294.959162][T16144] tipc: Resetting bearer [ 294.968459][T16143] tipc: Resetting bearer [ 295.008599][T16143] tipc: Disabling bearer [ 295.284284][T16118] siw: device registration error -23 [ 295.375607][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'. [ 295.400610][T15944] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.410848][T15944] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 295.478528][T15944] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.490610][T15944] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 295.562594][T15944] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.576178][T15944] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 295.780585][T16197] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2987'. [ 295.879622][T16202] netlink: 'syz.4.2988': attribute type 10 has an invalid length. [ 295.937511][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2989'. [ 296.044103][T15944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.096006][T15944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.112442][T16209] netlink: 'syz.4.2990': attribute type 21 has an invalid length. [ 296.191937][T16209] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 296.215833][T16209] bond6 (unregistering): Released all slaves [ 296.269906][T15944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.306628][T15944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.533518][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'. [ 296.628009][T16248] netlink: 'syz.3.3000': attribute type 1 has an invalid length. [ 296.641251][T15944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.652199][ T5841] Bluetooth: hci1: command tx timeout [ 296.663759][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3000'. [ 296.685518][T15944] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.712815][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.720165][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.766828][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.774150][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.927602][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3005'. [ 296.953448][T16264] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 296.979652][T16263] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3006'. [ 297.124994][T16264] bond6: (slave ip6gretap1): making interface the new active one [ 297.142568][T16272] netlink: 'syz.3.3009': attribute type 83 has an invalid length. [ 297.160369][T16264] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 297.415231][T16288] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3012'. [ 297.430179][T16288] netlink: 'syz.0.3012': attribute type 1 has an invalid length. [ 297.620297][T15944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.633900][T16297] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3015'. [ 297.731212][T15944] veth0_vlan: entered promiscuous mode [ 297.760217][T15944] veth1_vlan: entered promiscuous mode [ 297.856690][T15944] veth0_macvtap: entered promiscuous mode [ 297.911896][T15944] veth1_macvtap: entered promiscuous mode [ 297.932343][T16316] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3020'. [ 297.980203][T15944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.015280][T15944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.051451][ T1334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.053801][T16320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 298.070981][ T1334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.112673][ T1334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.124047][ T1334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.306828][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.334580][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.424716][ T1002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.441714][ T1002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.713216][T16352] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 298.731013][ T5841] Bluetooth: hci1: command tx timeout [ 298.882093][T16352] 8021q: adding VLAN 0 to HW filter on device bond10 [ 298.915140][T16353] bond10: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 298.957201][T16353] bond10: entered allmulticast mode [ 299.250616][ T30] audit: type=1800 audit(1765846714.871:5): pid=16373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3036" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=30 res=0 errno=0 [ 299.468337][T16380] netlink: 'syz.2.3037': attribute type 24 has an invalid length. [ 299.479288][ T5836] syz_tun (unregistering): left allmulticast mode [ 299.663951][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 299.674873][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 299.685933][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 299.705089][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 299.714222][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.175264][T16413] can: request_module (can-proto-0) failed. [ 300.250199][T16420] netlink: 'syz.3.3048': attribute type 21 has an invalid length. [ 300.277951][T16420] netlink: 'syz.3.3048': attribute type 1 has an invalid length. [ 300.671715][T16442] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 300.925855][T16457] tipc: Enabling of bearer rejected, media not registered [ 301.170063][T16472] x_tables: duplicate underflow at hook 2 [ 301.196037][T16470] __nla_validate_parse: 7 callbacks suppressed [ 301.196058][T16470] netlink: 71 bytes leftover after parsing attributes in process `syz.0.3063'. [ 301.381099][T16485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 301.444051][T16489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3068'. [ 301.483089][T16485] team1: entered promiscuous mode [ 301.488399][T16485] team1: entered allmulticast mode [ 301.564591][T16489] team2: entered promiscuous mode [ 301.571222][T16489] team2: entered allmulticast mode [ 301.577040][T16494] netlink: 'syz.1.3070': attribute type 15 has an invalid length. [ 301.598817][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 301.627312][T16494] netlink: 'syz.1.3070': attribute type 15 has an invalid length. [ 301.650682][T16494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'. [ 301.662852][ T1334] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 301.682849][ T1334] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 301.734677][ T1334] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 301.768291][ T1334] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 301.778390][ T5837] Bluetooth: hci3: command tx timeout [ 302.249205][T16526] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3077'. [ 302.340955][T16387] chnl_net:caif_netlink_parms(): no params data found [ 302.434836][T16534] xt_l2tp: v2 sid > 0xffff: 1114112 [ 302.626073][T16552] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3082'. [ 302.674834][T16552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3082'. [ 302.774724][T16387] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.797437][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3084'. [ 302.806864][T16387] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.817407][T16387] bridge_slave_0: entered allmulticast mode [ 302.834960][T16562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3085'. [ 302.841592][T16387] bridge_slave_0: entered promiscuous mode [ 302.844880][T16562] netlink: 'syz.1.3085': attribute type 22 has an invalid length. [ 302.869676][T16560] macsec1: entered promiscuous mode [ 302.924161][T16562] netlink: 'syz.1.3085': attribute type 22 has an invalid length. [ 302.924166][T16387] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.924347][T16387] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.949892][T16387] bridge_slave_1: entered allmulticast mode [ 302.963236][T16387] bridge_slave_1: entered promiscuous mode [ 302.973122][ T1334] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 303.070339][T16571] Bluetooth: MGMT ver 1.23 [ 303.075799][T16571] Bluetooth: MGMT ver 1.23 [ 303.081314][ T1334] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 303.155170][ T1334] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 303.193105][T16387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.206288][T16573] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 303.206994][T16387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.252462][ T1334] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 303.323708][T16387] team0: Port device team_slave_0 added [ 303.353940][T16387] team0: Port device team_slave_1 added [ 303.458498][T16590] netlink: 'syz.3.3094': attribute type 1 has an invalid length. [ 303.505772][T16387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.530872][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.583898][T16387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.654105][T16387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.663921][T16387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.779619][T16387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.825439][T16611] netlink: 'syz.0.3101': attribute type 16 has an invalid length. [ 303.835110][T16611] netlink: 'syz.0.3101': attribute type 17 has an invalid length. [ 303.849723][ T5837] Bluetooth: hci3: command tx timeout [ 303.862660][T16611] tunl0: left promiscuous mode [ 303.873350][T16611] ip_vti0: left promiscuous mode [ 303.878787][T16611] ip_vti0: left allmulticast mode [ 303.891962][T16611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.905588][T16611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.010736][T16387] hsr_slave_0: entered promiscuous mode [ 304.034619][T16387] hsr_slave_1: entered promiscuous mode [ 304.062315][T16387] debugfs: 'hsr0' already exists in 'hsr' [ 304.068161][T16387] Cannot create hsr debugfs directory [ 304.296724][T16634] gre2: entered allmulticast mode [ 304.424171][T16642] netlink: 'syz.1.3109': attribute type 33 has an invalid length. [ 304.450423][T16645] netlink: 'syz.2.3108': attribute type 21 has an invalid length. [ 304.482799][T16645] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.520485][T16645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.527806][T16645] IPv6: NLM_F_CREATE should be set when creating new route [ 304.535164][T16645] IPv6: NLM_F_CREATE should be set when creating new route [ 304.542485][T16645] IPv6: NLM_F_CREATE should be set when creating new route [ 304.637696][T16387] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.666590][T16387] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.774654][T16387] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.785543][T16387] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.856072][T16387] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.870638][T16387] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.987150][T16387] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.002539][T16387] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.193158][T16675] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 305.396723][T16387] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.438027][T16387] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.476101][T16387] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.525582][T16387] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.727625][T16387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.774986][T16707] syzkaller0: entered promiscuous mode [ 305.791023][T16707] syzkaller0: entered allmulticast mode [ 305.881557][T16387] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.930359][ T5837] Bluetooth: hci3: command tx timeout [ 306.021398][ T3455] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.028739][ T3455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.081099][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.088369][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.218319][T16387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.240951][T16387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.268935][T16723] __nla_validate_parse: 19 callbacks suppressed [ 306.268957][T16723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3126'. [ 306.380646][T16733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.563733][T16745] x_tables: duplicate underflow at hook 1 [ 306.564697][T16747] sctp: [Deprecated]: syz.0.3133 (pid 16747) Use of int in max_burst socket option deprecated. [ 306.564697][T16747] Use struct sctp_assoc_value instead [ 306.612862][T16744] sctp: [Deprecated]: syz.0.3133 (pid 16744) Use of int in max_burst socket option deprecated. [ 306.612862][T16744] Use struct sctp_assoc_value instead [ 306.760125][T16753] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3135'. [ 306.877246][T16387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.046683][T16770] IPVS: set_ctl: invalid protocol: 47 172.20.20.14:20001 [ 307.205306][T16782] tunl0: entered promiscuous mode [ 307.229516][T16782] tunl0: left allmulticast mode [ 307.234660][T16782] netlink: 'syz.2.3144': attribute type 3 has an invalid length. [ 307.261664][T16789] netlink: 'syz.1.3145': attribute type 6 has an invalid length. [ 307.284352][T16782] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3144'. [ 307.687575][T16387] veth0_vlan: entered promiscuous mode [ 307.758165][T16387] veth1_vlan: entered promiscuous mode [ 307.932490][T16387] veth0_macvtap: entered promiscuous mode [ 307.971244][T16387] veth1_macvtap: entered promiscuous mode [ 308.009878][ T5837] Bluetooth: hci3: command tx timeout [ 308.052436][T16387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.066153][T16387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.123790][ T4897] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.150907][ T4897] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.188534][ T4897] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.295105][ T4897] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.397685][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 308.493553][T16825] xt_l2tp: v2 doesn't support IP mode [ 308.506594][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.519563][T16825] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3158'. [ 308.533248][T16834] netlink: 'syz.0.3159': attribute type 13 has an invalid length. [ 308.542611][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.585734][T16834] gretap0: refused to change device tx_queue_len [ 308.592728][T16834] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 308.640577][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.655676][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.755319][T16842] gretap3: entered promiscuous mode [ 308.765999][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3162'. [ 308.936438][T16848] dvmrp0: entered allmulticast mode [ 308.949386][T16851] dvmrp0: left allmulticast mode [ 309.026893][T16853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3032'. [ 309.646829][T16881] IPv6: sit1: Disabled Multicast RS [ 309.670895][T16881] sit1: entered allmulticast mode [ 309.768145][T16883] syzkaller1: entered promiscuous mode [ 309.774363][T16883] syzkaller1: entered allmulticast mode [ 309.812092][T16883] 8021q: VLANs not supported on wg0 [ 309.857752][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.868106][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.877128][ T1334] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x12 [ 309.877159][T16894] netlink: 'syz.2.3174': attribute type 13 has an invalid length. [ 309.900982][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.912781][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.923632][T16896] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 309.935813][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.060200][T16894] tunl0: left promiscuous mode [ 310.069740][T16894] gre0: left promiscuous mode [ 310.082286][T16894] sit0: left promiscuous mode [ 310.115201][T16894] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 310.162649][T16894] ip6gre1: left promiscuous mode [ 310.170458][T16894] bond3: left promiscuous mode [ 310.175280][T16894] bond3: left allmulticast mode [ 310.183504][T16894] bond4: left promiscuous mode [ 310.186564][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3179'. [ 310.188327][T16894] bond4: left allmulticast mode [ 310.211825][T16894] bridge5: left promiscuous mode [ 310.217121][T16894] bridge5: left allmulticast mode [ 310.226154][T16894] ip6gre2: left promiscuous mode [ 310.231701][T16894] ip6gre2: left allmulticast mode [ 310.240844][T16894] gretap2: left promiscuous mode [ 310.245838][T16894] gretap2: left allmulticast mode [ 310.257909][T16894] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 310.265474][ T7503] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.268803][T16894] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 310.286086][T16894] bond10: left allmulticast mode [ 310.291766][T16894] ip6gretap2: left allmulticast mode [ 310.319717][T16894] team1: left promiscuous mode [ 310.324556][T16894] team1: left allmulticast mode [ 310.331503][T16894] team2: left promiscuous mode [ 310.336306][T16894] team2: left allmulticast mode [ 310.345585][T16894] syzkaller1: left promiscuous mode [ 310.352013][T16894] syzkaller1: left allmulticast mode [ 310.529167][ T5894] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 310.972285][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 311.899565][T16908] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 311.909209][T16909] veth1_to_bond: entered allmulticast mode [ 312.011551][ T5837] Bluetooth: hci0: command tx timeout [ 312.043366][T16917] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3182'. [ 312.072614][T16911] veth1_to_bond (unregistering): left allmulticast mode [ 312.284823][T16926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.485173][T16934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.634698][T16937] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3188'. [ 312.658845][ T7527] IPVS: starting estimator thread 0... [ 312.748407][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 312.778789][T16942] IPVS: using max 27 ests per chain, 64800 per kthread [ 312.812469][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3192'. [ 312.857848][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 312.867072][T16950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'. [ 313.096515][T16962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 313.117235][T16964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'. [ 313.252756][T16968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3199'. [ 313.279293][T16967] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3199'. [ 314.089224][ T5837] Bluetooth: hci0: command tx timeout [ 314.483911][T17014] sctp: [Deprecated]: syz.4.3212 (pid 17014) Use of int in maxseg socket option. [ 314.483911][T17014] Use struct sctp_assoc_value instead [ 314.508381][T16972] warn_alloc: 1 callbacks suppressed [ 314.508405][T16972] syz.1.3200: vmalloc error: size 808468480, failed to allocated page array size 1579040, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 314.531944][T16972] CPU: 1 UID: 0 PID: 16972 Comm: syz.1.3200 Not tainted syzkaller #0 PREEMPT(full) [ 314.531974][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.531986][T16972] Call Trace: [ 314.531994][T16972] [ 314.532001][T16972] dump_stack_lvl+0x189/0x250 [ 314.532032][T16972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.532055][T16972] ? __pfx__printk+0x10/0x10 [ 314.532080][T16972] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 314.532110][T16972] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 314.532140][T16972] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 314.532183][T16972] warn_alloc+0x214/0x310 [ 314.532213][T16972] ? __pfx_warn_alloc+0x10/0x10 [ 314.532251][T16972] ? __get_vm_area_node+0x28f/0x300 [ 314.532277][T16972] ? ip_set_sockfn_get+0x13a/0xc30 [ 314.532312][T16972] __vmalloc_node_range_noprof+0x690/0x12d0 [ 314.532370][T16972] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 314.532405][T16972] ? ip_set_sockfn_get+0x13a/0xc30 [ 314.532432][T16972] vmalloc_noprof+0xb2/0xf0 [ 314.532454][T16972] ? ip_set_sockfn_get+0x13a/0xc30 [ 314.532482][T16972] ip_set_sockfn_get+0x13a/0xc30 [ 314.532518][T16972] nf_getsockopt+0x26e/0x290 [ 314.532551][T16972] ip_getsockopt+0x1c4/0x220 [ 314.532578][T16972] ? __pfx_ip_getsockopt+0x10/0x10 [ 314.532606][T16972] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 314.532633][T16972] do_sock_getsockopt+0x2b4/0x3d0 [ 314.532664][T16972] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 314.532688][T16972] ? do_syscall_64+0x80/0xf80 [ 314.532713][T16972] ? __fget_files+0x2a/0x420 [ 314.532728][T16972] ? __fget_files+0x3a0/0x420 [ 314.532744][T16972] ? __fget_files+0x2a/0x420 [ 314.532770][T16972] __x64_sys_getsockopt+0x1a5/0x250 [ 314.532797][T16972] ? do_syscall_64+0x80/0xf80 [ 314.532823][T16972] ? do_syscall_64+0x80/0xf80 [ 314.532852][T16972] do_syscall_64+0xfa/0xf80 [ 314.532878][T16972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.532898][T16972] ? clear_bhb_loop+0x60/0xb0 [ 314.532920][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.532938][T16972] RIP: 0033:0x7f36d218f749 [ 314.532958][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.532976][T16972] RSP: 002b:00007f36d3096038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 314.532999][T16972] RAX: ffffffffffffffda RBX: 00007f36d23e5fa0 RCX: 00007f36d218f749 [ 314.533013][T16972] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000006 [ 314.533025][T16972] RBP: 00007f36d2213f91 R08: 0000200000000040 R09: 0000000000000000 [ 314.533037][T16972] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 314.533049][T16972] R13: 00007f36d23e6038 R14: 00007f36d23e5fa0 R15: 00007ffe0fd41b78 [ 314.533085][T16972] [ 314.533093][T16972] Mem-Info: [ 314.848928][T16972] active_anon:3947 inactive_anon:0 isolated_anon:0 [ 314.848928][T16972] active_file:2568 inactive_file:39977 isolated_file:0 [ 314.848928][T16972] unevictable:768 dirty:38 writeback:0 [ 314.848928][T16972] slab_reclaimable:12487 slab_unreclaimable:234783 [ 314.848928][T16972] mapped:28802 shmem:1408 pagetables:1189 [ 314.848928][T16972] sec_pagetables:0 bounce:0 [ 314.848928][T16972] kernel_misc_reclaimable:0 [ 314.848928][T16972] free:1167990 free_pcp:11590 free_cma:0 [ 314.917163][T16972] Node 0 active_anon:15788kB inactive_anon:0kB active_file:10272kB inactive_file:159704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115308kB dirty:152kB writeback:0kB shmem:4096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14756kB pagetables:4528kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 314.994089][T16892] chnl_net:caif_netlink_parms(): no params data found [ 314.997541][T16972] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 315.032873][T16972] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.066957][T16972] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 315.081741][T16972] Node 0 DMA32 free:763084kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15784kB inactive_anon:0kB active_file:10272kB inactive_file:159704kB unevictable:1536kB writepending:164kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:30400kB local_pcp:17796kB free_cma:0kB [ 315.115880][T16972] lowmem_reserve[]: 0 0 0 0 0 [ 315.120876][T16972] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 315.151608][T16972] lowmem_reserve[]: 0 0 0 0 0 [ 315.152514][T17026] netlink: 'syz.4.3215': attribute type 3 has an invalid length. [ 315.156382][T16972] Node 1 Normal free:3892940kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16672kB local_pcp:7168kB free_cma:0kB [ 315.156456][T16972] lowmem_reserve[]: 0 0 0 0 0 [ 315.221799][T16972] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 315.235962][T16972] Node 0 DMA32: 12*4kB (UME) 322*8kB (ME) 181*16kB (ME) 102*32kB (UM) 64*64kB (UME) 29*128kB (ME) 174*256kB (UME) 291*512kB (UME) 193*1024kB (UM) 7*2048kB (U) 83*4096kB (UM) = 762064kB [ 315.262719][T16972] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 315.319261][T16972] Node 1 Normal: 197*4kB (U) 37*8kB (UME) 49*16kB (UME) 102*32kB (UME) 39*64kB (UME) 14*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892940kB [ 315.350465][T16972] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.366514][T17035] sctp: [Deprecated]: syz.3.3217 (pid 17035) Use of int in max_burst socket option deprecated. [ 315.366514][T17035] Use struct sctp_assoc_value instead [ 315.392723][T16892] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.398892][T16972] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.402450][T16892] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.417030][T16892] bridge_slave_0: entered allmulticast mode [ 315.425424][T16892] bridge_slave_0: entered promiscuous mode [ 315.436458][T16972] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.438612][T16892] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.454240][T16892] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.461633][T16892] bridge_slave_1: entered allmulticast mode [ 315.470316][T16972] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.481016][T16892] bridge_slave_1: entered promiscuous mode [ 315.498945][T16972] 43950 total pagecache pages [ 315.507869][T16972] 0 pages in swap cache [ 315.514726][T16972] Free swap = 124996kB [ 315.520904][T16972] Total swap = 124996kB [ 315.539886][T16972] 2097051 pages RAM [ 315.543753][T16972] 0 pages HighMem/MovableOnly [ 315.553389][T16972] 424280 pages reserved [ 315.558566][T16972] 0 pages cma reserved [ 315.577719][T16892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.618340][T16892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.724822][T16892] team0: Port device team_slave_0 added [ 315.750513][T16892] team0: Port device team_slave_1 added [ 315.895380][T16892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.907521][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.944916][T16892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.974096][T16892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.988235][T16892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.017278][T16892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.169980][ T5837] Bluetooth: hci0: command tx timeout [ 316.246439][T17065] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 316.287114][T16892] hsr_slave_0: entered promiscuous mode [ 316.306496][T16892] hsr_slave_1: entered promiscuous mode [ 316.327136][T16892] debugfs: 'hsr0' already exists in 'hsr' [ 316.348084][T16892] Cannot create hsr debugfs directory [ 316.382049][T17066] vxlan1: entered promiscuous mode [ 316.409818][T17066] vxlan1: entered allmulticast mode [ 317.003745][T17093] openvswitch: netlink: Key type 31 is not supported [ 317.054866][T16892] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.098890][T16892] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 317.119215][T16892] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.233848][T16892] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.254973][T16892] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 317.267941][T16892] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.324474][T17106] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001 [ 317.386841][T16892] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.408708][T16892] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 317.418531][T16892] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.465362][T17109] vlan0: entered promiscuous mode [ 317.475120][T17109] bridge0: entered promiscuous mode [ 317.522135][T16892] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.540065][T16892] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 317.550699][T16892] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.685477][T17112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.877349][T17112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.091596][T17112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.217905][T17112] netdevsim netdevsim4 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.249354][ T5837] Bluetooth: hci0: command tx timeout [ 318.257054][T16892] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 318.284487][T16892] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 318.313179][T16892] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 318.354066][T16892] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 318.382798][T17134] __nla_validate_parse: 19 callbacks suppressed [ 318.382819][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3248'. [ 318.466755][ T50] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.502703][T17134] tipc: Resetting bearer [ 318.535193][ T50] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.581445][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.684520][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.946752][T17149] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3251'. [ 318.949517][T16892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.003030][T17158] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 319.023246][T17158] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 319.061183][T17158] sch_fq: defrate 725 ignored. [ 319.074922][T17156] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3252'. [ 319.095001][T16892] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.110708][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3252'. [ 319.138096][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.145360][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.187207][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.194616][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.325926][T17168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 319.353318][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3256'. [ 319.382942][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3255'. [ 319.400331][T17172] netlink: 'syz.3.3257': attribute type 33 has an invalid length. [ 319.482298][T17172] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 319.506372][T17172] bond12 (unregistering): Released all slaves [ 319.655095][T17184] bond0: entered promiscuous mode [ 319.669211][T17184] bond_slave_0: entered promiscuous mode [ 319.678120][T17184] bond_slave_1: entered promiscuous mode [ 319.845620][T16892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.895836][T17196] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3260'. [ 320.040498][T16892] veth0_vlan: entered promiscuous mode [ 320.066261][T16892] veth1_vlan: entered promiscuous mode [ 320.450350][T17223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3270'. [ 320.574705][T16892] veth0_macvtap: entered promiscuous mode [ 320.640136][T17227] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3271'. [ 320.654041][T17214] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 320.674100][T17214] bond1: (slave lo): Enslaving as a backup interface with an up link [ 320.687675][T17214] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 320.706362][T17217] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 320.763584][T16892] veth1_macvtap: entered promiscuous mode [ 320.813387][T16892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.881792][T16892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.952293][ T4897] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.966162][ T4897] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.991758][ T4897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.021439][ T5944] IPVS: starting estimator thread 0... [ 321.064801][ T4897] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.119897][T17249] IPVS: using max 27 ests per chain, 64800 per kthread [ 321.277367][ T3524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.298436][ T3524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.388185][ T4897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.402649][ T4897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.495806][T17268] netlink: 'syz.1.3282': attribute type 12 has an invalid length. [ 321.596906][T17268] bond1: option primary_reselect: invalid value (255) [ 321.740918][T17268] bond1 (unregistering): Released all slaves [ 321.800332][T17285] netlink: 'syz.0.3165': attribute type 2 has an invalid length. [ 322.230142][T17291] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 322.580304][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 322.587634][ T4897] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.599473][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 322.607994][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 322.620781][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 322.630832][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.657977][ T3524] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.682582][ T3524] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.731621][ T3524] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.117241][T17329] pimreg3: entered allmulticast mode [ 323.316782][T17340] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 323.641529][T17353] netem: change failed [ 323.654521][T17353] netlink: 'syz.2.3310': attribute type 1 has an invalid length. [ 323.757085][T17359] __nla_validate_parse: 7 callbacks suppressed [ 323.757106][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.831791][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.849216][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.871676][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.909012][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.936467][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 323.988476][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 324.015074][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 324.079751][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 324.106046][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 324.483196][T17378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.656173][T17310] chnl_net:caif_netlink_parms(): no params data found [ 324.730005][ T5841] Bluetooth: hci4: command tx timeout [ 324.908386][T17310] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.919383][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.942762][T17310] bridge_slave_0: entered allmulticast mode [ 324.967363][T17310] bridge_slave_0: entered promiscuous mode [ 324.981529][T17310] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.000904][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.017219][T17310] bridge_slave_1: entered allmulticast mode [ 325.029085][T17310] bridge_slave_1: entered promiscuous mode [ 325.284248][T17423] netlink: 'syz.4.3328': attribute type 12 has an invalid length. [ 325.298875][T17423] netlink: 'syz.4.3328': attribute type 29 has an invalid length. [ 325.327385][T17310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.376970][T17428] netlink: 'syz.4.3328': attribute type 12 has an invalid length. [ 325.386740][T17428] netlink: 'syz.4.3328': attribute type 29 has an invalid length. [ 325.401755][T17310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.531331][T17433] batadv0: entered promiscuous mode [ 325.538456][T17433] debugfs: 'hsr1' already exists in 'hsr' [ 325.545264][T17433] Cannot create hsr debugfs directory [ 325.551124][T17433] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 325.608363][T17433] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 325.653311][T17310] team0: Port device team_slave_0 added [ 325.728506][T17449] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 325.759984][T17310] team0: Port device team_slave_1 added [ 325.912994][T17310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.928882][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.018810][T17310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.052996][T17469] netlink: 'syz.1.3340': attribute type 3 has an invalid length. [ 326.084661][T17310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.113499][T17310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.140327][T17310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.352644][T17310] hsr_slave_0: entered promiscuous mode [ 326.383689][T17310] hsr_slave_1: entered promiscuous mode [ 326.395098][ T30] audit: type=1800 audit(1765846742.011:6): pid=17487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3344" name="memory.events" dev="tmpfs" ino=3491 res=0 errno=0 [ 326.395563][T17310] debugfs: 'hsr0' already exists in 'hsr' [ 326.431907][T17310] Cannot create hsr debugfs directory [ 326.556080][T17498] team0: Device gtp0 is up. Set it down before adding it as a team port [ 326.638374][T17497] team0: Device gtp0 is up. Set it down before adding it as a team port [ 326.716752][T17500] syzkaller1: entered promiscuous mode [ 326.727483][T17500] syzkaller1: entered allmulticast mode [ 326.811831][ T5841] Bluetooth: hci4: command tx timeout [ 327.262606][T17310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.276030][T17310] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.297373][T17536] netlink: 'syz.4.3357': attribute type 12 has an invalid length. [ 327.305401][T17536] netlink: 'syz.4.3357': attribute type 29 has an invalid length. [ 327.412035][T17310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.438506][T17310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.556779][T17310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.568607][T17310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.704169][T17310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.721682][T17310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.003182][T17310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 328.030239][T17310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 328.054370][T17310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 328.091662][T17310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 328.263237][T17592] netlink: 'syz.2.3374': attribute type 1 has an invalid length. [ 328.323587][T17592] 8021q: adding VLAN 0 to HW filter on device bond15 [ 328.411790][T17310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.442299][T17310] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.457194][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.464494][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.495497][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.502787][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.843517][T17622] __nla_validate_parse: 78 callbacks suppressed [ 328.843539][T17622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3383'. [ 328.890725][ T5841] Bluetooth: hci4: command tx timeout [ 329.041120][T17310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.135293][T17632] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 329.153982][T17632] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 329.176139][T17632] tipc: Resetting bearer [ 329.268023][T17310] veth0_vlan: entered promiscuous mode [ 329.282946][T17310] veth1_vlan: entered promiscuous mode [ 329.297546][T17635] netlink: 'syz.0.3386': attribute type 1 has an invalid length. [ 329.351686][T17310] veth0_macvtap: entered promiscuous mode [ 329.366649][T17310] veth1_macvtap: entered promiscuous mode [ 329.443187][T17310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.460018][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'. [ 329.477381][T17310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.488268][T17642] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3387'. [ 329.504411][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.515369][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.534658][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.545431][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.789725][T17651] netlink: 'syz.0.3389': attribute type 1 has an invalid length. [ 329.799332][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.807198][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.831345][T17652] IPVS: set_ctl: invalid protocol: 98 172.20.20.16:20004 [ 330.022677][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.043674][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.075689][T17663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3393'. [ 330.113308][T17665] netlink: 'syz.1.3393': attribute type 2 has an invalid length. [ 330.270402][T17670] sctp: [Deprecated]: syz.2.3395 (pid 17670) Use of int in max_burst socket option deprecated. [ 330.270402][T17670] Use struct sctp_assoc_value instead [ 330.470654][T17682] tun0: tun_chr_ioctl cmd 1074025675 [ 330.476034][T17682] tun0: persist disabled [ 330.536138][T17686] IPVS: Error connecting to the multicast addr [ 330.559854][T17686] netlink: 'syz.4.3398': attribute type 10 has an invalid length. [ 330.610802][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.621724][T17686] bridge_slave_1: left allmulticast mode [ 330.628761][T17686] bridge_slave_1: left promiscuous mode [ 330.637699][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.696027][T17686] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 330.950032][T17699] IPv6: NLM_F_CREATE should be specified when creating new route [ 330.969836][ T5841] Bluetooth: hci4: command tx timeout [ 331.169830][T17707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3407'. [ 331.385490][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.400384][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.409399][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.417648][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.425777][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.520670][T17720] netlink: 'syz.1.3411': attribute type 1 has an invalid length. [ 331.599041][T17727] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3414'. [ 331.677369][T17728] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 331.752882][T17728] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 331.866913][T17727] erspan0: entered promiscuous mode [ 331.907622][T17735] gretap1: entered promiscuous mode [ 332.060310][T17742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3417'. [ 332.079741][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3418'. [ 332.533439][T17767] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode [ 332.540987][T17767] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode [ 332.708552][T17773] netlink: 'syz.0.3428': attribute type 1 has an invalid length. [ 332.762334][T17773] netlink: 'syz.0.3428': attribute type 2 has an invalid length. [ 332.817365][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3428'. [ 332.937261][T17791] netlink: 'syz.3.3431': attribute type 10 has an invalid length. [ 332.958865][T17791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3431'. [ 332.976832][T17787] block nbd5: server does not support multiple connections per device. [ 333.008203][T17787] block nbd5: shutting down sockets [ 333.111064][T17791] team0: Port device geneve0 added [ 333.502215][T17808] openvswitch: netlink: IP tunnel dst address not specified [ 333.538821][ T5837] Bluetooth: hci2: command tx timeout [ 333.596694][T17812] nbd: socks must be embedded in a SOCK_ITEM attr [ 333.935939][T17808] syzkaller0: entered promiscuous mode [ 333.942678][T17808] syzkaller0: entered allmulticast mode [ 333.967533][T17795] __nla_validate_parse: 1 callbacks suppressed [ 333.967550][T17795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 335.612157][ T5837] Bluetooth: hci2: command tx timeout [ 336.035088][T17715] chnl_net:caif_netlink_parms(): no params data found [ 336.037167][T17839] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3441'. [ 336.075904][T17841] ip6tnl1: entered promiscuous mode [ 336.081555][T17841] ip6tnl1: entered allmulticast mode [ 336.293119][T17715] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.317595][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.335265][T17715] bridge_slave_0: entered allmulticast mode [ 336.349770][T17715] bridge_slave_0: entered promiscuous mode [ 336.368390][T17715] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.376636][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.384745][T17715] bridge_slave_1: entered allmulticast mode [ 336.393402][T17715] bridge_slave_1: entered promiscuous mode [ 336.524209][T17715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.553304][T17715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.601441][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3450'. [ 336.618011][T17866] xt_NFQUEUE: number of total queues is 0 [ 336.666301][T17867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3450'. [ 336.671993][T17715] team0: Port device team_slave_0 added [ 336.693049][T17715] team0: Port device team_slave_1 added [ 336.748180][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.771964][T17869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.794442][T17872] netlink: 'syz.1.3453': attribute type 7 has an invalid length. [ 336.802884][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.873799][T17870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.875223][T17715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.901817][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.904180][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.911123][T17870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3452'. [ 336.937775][T17715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.003959][T17715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.011769][T17715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.040350][T17715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.162003][T17715] hsr_slave_0: entered promiscuous mode [ 337.183775][T17715] hsr_slave_1: entered promiscuous mode [ 337.194942][T17715] debugfs: 'hsr0' already exists in 'hsr' [ 337.216004][T17887] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 337.225822][T17715] Cannot create hsr debugfs directory [ 337.689149][ T5841] Bluetooth: hci2: command tx timeout [ 337.755665][T17919] netlink: 'syz.0.3467': attribute type 29 has an invalid length. [ 337.875136][T17715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.114415][T17715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.138547][T17937] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 338.147008][T17937] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 338.206045][ T10] IPVS: starting estimator thread 0... [ 338.257088][T17715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.267153][T17944] netlink: 'syz.3.3475': attribute type 28 has an invalid length. [ 338.278992][T17944] netlink: 'syz.3.3475': attribute type 3 has an invalid length. [ 338.298967][T17940] IPVS: using max 28 ests per chain, 67200 per kthread [ 338.306473][T17939] netlink: 'syz.0.3474': attribute type 8 has an invalid length. [ 338.318847][T17939] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 338.362229][T17715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.404810][T17948] batadv_slave_1: entered promiscuous mode [ 338.563609][T17947] batadv_slave_1: left promiscuous mode [ 338.600918][T17715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.617521][T17715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.641117][T17715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.660969][T17715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.837788][T17715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.868069][T17715] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.883462][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.890747][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.917620][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.924789][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.068295][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880520bac00: rx timeout, send abort [ 339.245107][T17982] __nla_validate_parse: 10 callbacks suppressed [ 339.245130][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 339.289757][T17982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3484'. [ 339.379378][T17715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.454463][T17989] tls_set_device_offload: netdev not found [ 339.475582][T17715] veth0_vlan: entered promiscuous mode [ 339.507566][T17715] veth1_vlan: entered promiscuous mode [ 339.545154][T17992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3488'. [ 339.570315][T17715] veth0_macvtap: entered promiscuous mode [ 339.577819][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880520bac00: abort rx timeout. Force session deactivation [ 339.628423][T17715] veth1_macvtap: entered promiscuous mode [ 339.693945][T17715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.740661][T17715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.770141][ T5841] Bluetooth: hci2: command 0x0419 tx timeout [ 339.793028][T18003] netlink: 'syz.3.3490': attribute type 10 has an invalid length. [ 339.806495][ T1002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.833817][T18003] batman_adv: batadv0: Adding interface: netdevsim0 [ 339.854022][T18003] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.908890][T18003] batman_adv: batadv0: Interface activated: netdevsim0 [ 339.965257][ T1002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.011455][ T1002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.040075][ T1002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.164851][T18018] bond1: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 340.360193][T18031] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3498'. [ 340.378238][ T1002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.398199][ T1002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.455599][ T4897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.465087][ T4897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.599492][T18040] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 340.671991][T18050] netlink: 'syz.2.3399': attribute type 1 has an invalid length. [ 340.706794][T18053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3504'. [ 340.781012][T18053] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 340.793145][T18053] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.801343][T18053] gretap3: entered promiscuous mode [ 340.807019][T18053] gretap3: entered allmulticast mode [ 341.035427][T18070] vlan3: entered promiscuous mode [ 341.051890][T18070] bridge0: entered promiscuous mode [ 341.111877][T18080] syzkaller0: entered promiscuous mode [ 341.117737][T18080] syzkaller0: entered allmulticast mode [ 341.221949][T18084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3513'. [ 341.241815][T18084] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3513'. [ 341.254305][T18084] netlink: 'syz.0.3513': attribute type 6 has an invalid length. [ 341.262964][T18084] netlink: 'syz.0.3513': attribute type 5 has an invalid length. [ 341.271895][T18084] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3513'. [ 341.343621][T18095] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3517'. [ 341.382705][T18095] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3517'. [ 341.503821][T18099] xt_hashlimit: invalid rate [ 341.848875][ T5837] Bluetooth: hci2: command 0x0419 tx timeout [ 342.311945][T18132] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 342.321538][T18132] team0: entered promiscuous mode [ 342.326608][T18132] team_slave_0: entered promiscuous mode [ 342.342468][T18132] team_slave_1: entered promiscuous mode [ 342.353721][T18132] bridge0: port 3(team0) entered blocking state [ 342.362077][T18132] bridge0: port 3(team0) entered disabled state [ 342.383838][T18132] team0: entered allmulticast mode [ 342.391463][T18132] team_slave_0: entered allmulticast mode [ 342.418070][T18132] team_slave_1: entered allmulticast mode [ 342.432270][T18132] bridge0: port 3(team0) entered blocking state [ 342.438793][T18132] bridge0: port 3(team0) entered forwarding state [ 342.526272][T18137] bond3: entered promiscuous mode [ 342.734417][T18153] bond2: option mode: invalid value (133) [ 342.762318][T18153] bond2 (unregistering): Released all slaves [ 342.996508][T18176] delete_channel: no stack [ 343.097310][T18157] bond2: ARP target 1.0.0.0 is already present [ 343.104654][T18157] bond2: option arp_ip_target: invalid value (1) [ 343.123273][T18157] bond2 (unregistering): Released all slaves [ 343.231462][T18182] xt_TCPMSS: Only works on TCP SYN packets [ 344.034503][ T5837] block nbd5: Receive control failed (result -32) [ 344.385653][T18227] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 344.395208][T18227] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 344.604190][T18240] __nla_validate_parse: 4 callbacks suppressed [ 344.604210][T18240] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3555'. [ 344.622603][T18239] syzkaller1: entered promiscuous mode [ 344.634554][T18239] syzkaller1: entered allmulticast mode [ 344.646134][T18240] bridge0: port 3(team0) entered disabled state [ 344.652718][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.660720][T18240] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.965348][T18260] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20000 [ 345.069421][T18270] veth0_to_batadv: entered allmulticast mode [ 345.197513][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3565'. [ 345.311718][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 345.460488][T18285] bond1: Removing last ns target with arp_interval on [ 345.502128][T18288] validate_nla: 2 callbacks suppressed [ 345.502143][T18288] netlink: 'syz.2.3569': attribute type 8 has an invalid length. [ 345.885452][ T3524] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 346.989654][T18336] sctp: Trying to GSO but underlying device doesn't support it. [ 347.102178][T18343] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3585'. [ 347.698036][T18384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3596'. [ 347.877797][T18400] wlan0 speed is unknown, defaulting to 1000 [ 347.884436][T18400] wlan0 speed is unknown, defaulting to 1000 [ 347.891962][T18400] wlan0 speed is unknown, defaulting to 1000 [ 347.900139][T18401] netlink: 'syz.1.3601': attribute type 32 has an invalid length. [ 347.904509][T18400] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 347.908265][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 347.931334][T18400] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 347.973107][T18401] bond2: Setting coupled_control to off (0) [ 347.987090][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.008148][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.020511][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.035976][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.045713][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.054553][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.062670][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.071490][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.079973][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.087787][T18400] wlan0 speed is unknown, defaulting to 1000 [ 348.944178][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'. [ 348.971617][T18432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3613'. [ 349.408409][T18456] syzkaller1: entered promiscuous mode [ 349.439202][T18456] syzkaller1: entered allmulticast mode [ 349.499769][T18460] sctp: [Deprecated]: syz.0.3621 (pid 18460) Use of int in maxseg socket option. [ 349.499769][T18460] Use struct sctp_assoc_value instead [ 349.541547][T18466] netlink: 'syz.3.3622': attribute type 9 has an invalid length. [ 349.698254][T18472] bond1: option mode: unable to set because the bond device has slaves [ 349.743145][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.760298][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.773728][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.832579][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.856800][T18478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.896272][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3626'. [ 349.970883][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 349.991815][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.055455][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 350.119851][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.165049][T18495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3629'. [ 350.167356][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 350.185042][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.232037][T18497] netlink: 'syz.3.3632': attribute type 11 has an invalid length. [ 350.240814][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.262051][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.273663][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.281606][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.289971][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.298944][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.307360][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.405537][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.458515][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.472210][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.484464][T18514] ipt_REJECT: ECHOREPLY no longer supported. [ 350.493629][T18476] block nbd8: Unsupported socket: should be TCP or UNIX. [ 350.514007][T18517] syz.2.3636: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.554207][T18517] CPU: 0 UID: 0 PID: 18517 Comm: syz.2.3636 Not tainted syzkaller #0 PREEMPT(full) [ 350.554238][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.554249][T18517] Call Trace: [ 350.554258][T18517] [ 350.554266][T18517] dump_stack_lvl+0x189/0x250 [ 350.554299][T18517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.554320][T18517] ? __pfx__printk+0x10/0x10 [ 350.554346][T18517] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 350.554375][T18517] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 350.554405][T18517] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 350.554438][T18517] warn_alloc+0x214/0x310 [ 350.554463][T18517] ? stack_depot_save_flags+0x40/0x850 [ 350.554488][T18517] ? __pfx_warn_alloc+0x10/0x10 [ 350.554511][T18517] ? kasan_save_track+0x3e/0x80 [ 350.554533][T18517] ? __kasan_kmalloc+0x93/0xb0 [ 350.554559][T18517] ? xsk_setsockopt+0x4dc/0x8d0 [ 350.554577][T18517] ? do_sock_setsockopt+0x17c/0x1b0 [ 350.554600][T18517] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 350.554623][T18517] ? do_syscall_64+0xfa/0xf80 [ 350.554645][T18517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.554674][T18517] __vmalloc_node_range_noprof+0x125/0x12d0 [ 350.554746][T18517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 350.554776][T18517] ? __kasan_kmalloc+0x93/0xb0 [ 350.554808][T18517] vmalloc_user_noprof+0xad/0xf0 [ 350.554832][T18517] ? xskq_create+0xbf/0x170 [ 350.554854][T18517] xskq_create+0xbf/0x170 [ 350.554877][T18517] xsk_init_queue+0xb0/0x110 [ 350.554902][T18517] xsk_setsockopt+0x4dc/0x8d0 [ 350.554926][T18517] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.554950][T18517] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.554981][T18517] ? aa_sock_opt_perm+0xff/0x1a0 [ 350.555004][T18517] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 350.555027][T18517] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.555049][T18517] do_sock_setsockopt+0x17c/0x1b0 [ 350.555081][T18517] __x64_sys_setsockopt+0x13f/0x1b0 [ 350.555115][T18517] do_syscall_64+0xfa/0xf80 [ 350.555140][T18517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.555158][T18517] ? clear_bhb_loop+0x60/0xb0 [ 350.555181][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.555199][T18517] RIP: 0033:0x7ffb21d8f749 [ 350.555215][T18517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.555231][T18517] RSP: 002b:00007ffb22b54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 350.555252][T18517] RAX: ffffffffffffffda RBX: 00007ffb21fe6090 RCX: 00007ffb21d8f749 [ 350.555265][T18517] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 350.555276][T18517] RBP: 00007ffb21e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 350.555287][T18517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.555298][T18517] R13: 00007ffb21fe6128 R14: 00007ffb21fe6090 R15: 00007ffd94899fd8 [ 350.555330][T18517] [ 350.555337][T18517] Mem-Info: [ 350.571206][T18521] netlink: 'syz.4.3638': attribute type 58 has an invalid length. [ 350.599153][T18517] active_anon:3829 inactive_anon:0 isolated_anon:0 [ 350.599153][T18517] active_file:2568 inactive_file:39994 isolated_file:0 [ 350.599153][T18517] unevictable:768 dirty:76 writeback:0 [ 350.599153][T18517] slab_reclaimable:12986 slab_unreclaimable:221713 [ 350.599153][T18517] mapped:28728 shmem:1357 pagetables:1180 [ 350.599153][T18517] sec_pagetables:0 bounce:0 [ 350.599153][T18517] kernel_misc_reclaimable:0 [ 350.599153][T18517] free:1200720 free_pcp:13945 free_cma:0 [ 350.599213][T18517] Node 0 active_anon:15316kB inactive_anon:0kB active_file:10272kB inactive_file:159772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114912kB dirty:304kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16188kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.599263][T18517] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 350.599308][T18517] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.599367][T18517] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 350.599505][T18517] Node 0 DMA32 free:894820kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15316kB inactive_anon:0kB active_file:10272kB inactive_file:159772kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:38932kB local_pcp:21652kB free_cma:0kB [ 350.599565][T18517] lowmem_reserve[]: 0 0 0 [ 350.748996][T18524] netlink: 'syz.4.3638': attribute type 58 has an invalid length. [ 350.763039][T18517] 0 0 [ 350.763071][T18517] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.763128][T18517] lowmem_reserve[]: 0 0 0 0 0 [ 350.763173][T18517] Node 1 Normal free:3892700kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16848kB local_pcp:9968kB free_cma:0kB [ 350.763229][T18517] lowmem_reserve[]: 0 0 0 0 0 [ 350.763269][T18517] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 350.763395][T18517] Node 0 DMA32: 796*4kB (UME) 343*8kB (UME) 149*16kB (UME) 280*32kB (UME) 63*64kB (UME) 41*128kB (UME) 372*256kB (UME) 320*512kB (UM) 207*1024kB (UME) 10*2048kB (UE) 92*4096kB (UM) = 894904kB [ 350.763571][T18517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 350.763679][T18517] Node 1 Normal: 8*4kB (U) 36*8kB (UME) 49*16kB (UME) 114*32kB (UME) 42*64kB (UME) 14*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892752kB [ 351.218017][T18517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.228320][T18517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.238169][T18517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.330454][T18517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.358722][T18517] 43918 total pagecache pages [ 351.363468][T18517] 0 pages in swap cache [ 351.376625][T18517] Free swap = 124996kB [ 351.382601][T18517] Total swap = 124996kB [ 351.386793][T18517] 2097051 pages RAM [ 351.455251][T18517] 0 pages HighMem/MovableOnly [ 351.475313][T18517] 424280 pages reserved [ 351.486176][T18517] 0 pages cma reserved [ 351.520080][T18552] C: renamed from lo (while UP) [ 351.542185][T18552] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.735823][T18563] wg0: entered allmulticast mode [ 352.431961][T18606] veth3: entered promiscuous mode [ 352.447351][T18606] veth3: entered allmulticast mode [ 352.533332][T18617] openvswitch: netlink: Message has 8 unknown bytes. [ 352.540846][T18617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.993402][T18636] netlink: 'syz.4.3676': attribute type 1 has an invalid length. [ 353.545265][T18670] pimreg: entered allmulticast mode [ 354.773545][T18703] __nla_validate_parse: 23 callbacks suppressed [ 354.773611][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3694'. [ 354.846575][T18710] netlink: 'syz.0.3697': attribute type 16 has an invalid length. [ 354.855247][T18710] netlink: 'syz.0.3697': attribute type 3 has an invalid length. [ 354.866626][T18710] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3697'. [ 355.416152][T18740] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 355.563134][T18749] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 355.587237][T18749] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 355.624189][T18749] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3707'. [ 355.657480][T18749] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 355.787013][T18756] netlink: 'syz.0.3708': attribute type 1 has an invalid length. [ 355.806351][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3709'. [ 355.945504][T18762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 355.955694][T18762] bond4: (slave bond5): making interface the new active one [ 355.964857][T18762] bond4: (slave bond5): Enslaving as an active interface with an up link [ 356.154476][T18778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3713'. [ 356.423192][T18790] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 356.539988][T18796] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3719'. [ 356.562143][T18796] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.3719'. [ 356.580288][T18792] tipc: Started in network mode [ 356.589371][T18792] tipc: Node identity 0a6c48da41de, cluster identity 4711 [ 356.610095][T18792] tipc: Enabled bearer , priority 0 [ 356.624863][T18792] syzkaller0: entered promiscuous mode [ 356.645641][T18792] syzkaller0: entered allmulticast mode [ 356.676098][T18792] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 356.686220][T18806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3722'. [ 356.737617][T18801] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 356.746490][T18791] tipc: Resetting bearer [ 356.771533][T18791] tipc: Disabling bearer [ 356.810491][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3724'. [ 357.161370][T18842] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 357.177813][T18842] netlink: 696 bytes leftover after parsing attributes in process `syz.3.3731'. [ 357.250125][T18850] syzkaller1: entered promiscuous mode [ 357.256026][T18850] syzkaller1: entered allmulticast mode [ 357.311460][T18858] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 357.357406][T18861] netlink: 'syz.4.3734': attribute type 1 has an invalid length. [ 357.507364][T18872] netlink: 'syz.4.3738': attribute type 29 has an invalid length. [ 357.525962][T18872] netlink: 'syz.4.3738': attribute type 29 has an invalid length. [ 357.632264][ T3558] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.655737][ T3558] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.682959][ T3558] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.708166][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.721420][T18879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.734138][T18879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.749901][T18879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.799918][ T3558] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.934687][T18889] netlink: 'syz.3.3742': attribute type 10 has an invalid length. [ 358.177828][T18900] x_tables: duplicate underflow at hook 1 [ 358.304604][T18906] openvswitch: netlink: Message has -2 unknown bytes. [ 358.351175][T18908] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 358.631888][T18922] netlink: 'syz.0.3754': attribute type 21 has an invalid length. [ 358.680205][T18926] syzkaller0: entered promiscuous mode [ 358.685830][T18926] syzkaller0: entered allmulticast mode [ 358.825825][T18932] mac80211_hwsim hwsim26 syzkaller0: left promiscuous mode [ 358.835140][T18932] mac80211_hwsim hwsim26 syzkaller0: left allmulticast mode [ 359.000518][T18948] netlink: 'syz.4.3764': attribute type 1 has an invalid length. [ 359.054095][T18948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.063368][T18945] vcan0: entered allmulticast mode [ 359.144971][T18948] veth5: entered promiscuous mode [ 359.155444][T18948] bond3: (slave veth5): Enslaving as an active interface with a down link [ 359.208396][T18949] veth7: entered promiscuous mode [ 359.221619][T18949] bond3: (slave veth7): Enslaving as an active interface with a down link [ 359.428069][T18969] netlink: 'syz.0.3771': attribute type 8 has an invalid length. [ 359.441951][T18969] delete_channel: no stack [ 359.663795][T18981] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 359.790615][T18993] netlink: 'syz.4.3779': attribute type 11 has an invalid length. [ 359.871020][T18981] bond2: entered promiscuous mode [ 359.871662][T18999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.876719][T18981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.976934][T19003] __nla_validate_parse: 21 callbacks suppressed [ 359.976956][T19003] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3781'. [ 359.994000][T19003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3781'. [ 360.335233][T19023] bond0: Error: Cannot enslave bond to itself. [ 360.561688][T19028] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3790'. [ 360.596076][T19030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3790'. [ 360.684188][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3794'. [ 360.705307][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3794'. [ 360.727354][T19041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3794'. [ 360.733812][T19043] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3795'. [ 360.771733][T19041] geneve2: entered promiscuous mode [ 360.851869][T19048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3797'. [ 360.922264][T19054] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3797'. [ 361.033862][T19053] validate_nla: 1 callbacks suppressed [ 361.033884][T19053] netlink: 'syz.2.3799': attribute type 1 has an invalid length. [ 361.150816][T19051] bond3 (unregistering): Released all slaves [ 361.409413][T19072] netlink: 'syz.3.3802': attribute type 4 has an invalid length. [ 362.517775][T19123] netlink: 'syz.0.3818': attribute type 1 has an invalid length. [ 363.036806][T19086] wlan0 speed is unknown, defaulting to 1000 [ 363.525978][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.801622][T19173] tipc: Started in network mode [ 363.811529][T19173] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 363.822201][T19173] tipc: Enabled bearer , priority 10 [ 363.832956][T19174] block nbd8: Unsupported socket: should be TCP or UNIX. [ 364.843460][T19207] syzkaller0: entered promiscuous mode [ 364.858876][T19207] syzkaller0: entered allmulticast mode [ 364.893101][T19209] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.432577][T19226] __nla_validate_parse: 15 callbacks suppressed [ 365.432599][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3850'. [ 365.454700][ T7522] tipc: Node number set to 10005162 [ 366.008045][T19219] netlink: 'syz.4.3846': attribute type 4 has an invalid length. [ 366.060939][T19237] gretap1: left promiscuous mode [ 366.066938][T19237] vlan3: left promiscuous mode [ 366.089229][T19237] bridge0: left promiscuous mode [ 366.453315][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3854'. [ 366.482317][T19255] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3855'. [ 366.842875][T19271] netlink: 'syz.0.3857': attribute type 11 has an invalid length. [ 366.874820][T19271] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3857'. [ 366.973912][T19277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3861'. [ 366.994813][T19277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3861'. [ 367.219989][T19290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3864'. [ 367.343557][T19292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.623112][T19309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3871'. [ 367.732916][T19314] netlink: 'syz.2.3873': attribute type 6 has an invalid length. [ 367.766128][T19316] syzkaller0: entered promiscuous mode [ 367.799579][T19316] syzkaller0: entered allmulticast mode [ 367.835663][T19320] netlink: 'syz.1.3874': attribute type 1 has an invalid length. [ 367.850059][T19319] syzkaller0: entered promiscuous mode [ 367.866576][T19320] netlink: 'syz.1.3874': attribute type 4 has an invalid length. [ 367.875059][T19319] syzkaller0: entered allmulticast mode [ 367.889523][T19320] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.3874'. [ 368.057156][T19331] netlink: 'syz.2.3878': attribute type 21 has an invalid length. [ 368.096697][T19331] netlink: 'syz.2.3878': attribute type 1 has an invalid length. [ 368.181545][T19334] netlink: 'syz.3.3879': attribute type 10 has an invalid length. [ 368.312156][ T6849] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 368.544926][T19357] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3885'. [ 368.925523][T19385] mac80211_hwsim hwsim26 syzkaller0: entered promiscuous mode [ 368.933338][T19385] mac80211_hwsim hwsim26 syzkaller0: entered allmulticast mode [ 369.330821][T19401] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 369.516476][T19409] netlink: 'syz.2.3899': attribute type 21 has an invalid length. [ 369.930560][T19433] block nbd0: reconnected socket [ 369.999842][ T5837] block nbd0: Receive control failed (result -32) [ 370.264659][T19446] --map-set only usable from mangle table [ 370.581539][T19464] __nla_validate_parse: 9 callbacks suppressed [ 370.581561][T19464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 370.656866][T19462] syzkaller1: entered promiscuous mode [ 370.689546][T19462] syzkaller1: entered allmulticast mode [ 370.760467][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 370.779500][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 370.806473][T19470] bridge0: port 2(vlan2) entered blocking state [ 370.817997][T19470] bridge0: port 2(vlan2) entered disabled state [ 370.825324][T19470] vlan2: entered allmulticast mode [ 370.830780][T19470] bridge0: entered allmulticast mode [ 370.832510][T19478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.850250][T19470] vlan2: left allmulticast mode [ 370.880021][T19470] bridge0: left allmulticast mode [ 371.079493][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3927'. [ 371.111521][T19493] x_tables: duplicate underflow at hook 2 [ 371.175919][T19496] macvlan2: entered promiscuous mode [ 371.217359][T19500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3931'. [ 371.247082][T19496] Bluetooth: MGMT ver 1.23 [ 371.268398][T19496] macvlan3: entered promiscuous mode [ 371.507367][T19516] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 371.640709][T19528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3938'. [ 371.972736][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3943'. [ 372.000249][T19547] openvswitch: netlink: Flow key attr not present in new flow. [ 373.067581][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3955'. [ 373.152577][T19596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 373.240668][T19598] netlink: 'syz.0.3960': attribute type 11 has an invalid length. [ 373.260953][T19603] netlink: 'syz.4.3962': attribute type 1 has an invalid length. [ 373.343157][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3963'. [ 373.356285][T19603] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.415993][T19608] bond4: (slave geneve2): making interface the new active one [ 373.446224][T19608] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 373.538569][T19613] bond3: option mode: invalid value (133) [ 373.547302][T19613] bond3 (unregistering): Released all slaves [ 373.690473][ C0] [ 373.692865][ C0] ====================================================== [ 373.699904][ C0] WARNING: possible circular locking dependency detected [ 373.706949][ C0] syzkaller #0 Not tainted [ 373.711386][ C0] ------------------------------------------------------ [ 373.718423][ C0] syz.1.3967/19627 is trying to acquire lock: [ 373.724503][ C0] ffff88807cd38f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 373.733567][ C0] [ 373.733567][ C0] but task is already holding lock: [ 373.740931][ C0] ffff888031421158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 373.750777][ C0] [ 373.750777][ C0] which lock already depends on the new lock. [ 373.750777][ C0] [ 373.761180][ C0] [ 373.761180][ C0] the existing dependency chain (in reverse order) is: [ 373.770194][ C0] [ 373.770194][ C0] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 373.778453][ C0] _raw_spin_lock+0x2e/0x40 [ 373.783478][ C0] sch_direct_xmit+0x153/0x4b0 [ 373.788770][ C0] __dev_queue_xmit+0x136f/0x3140 [ 373.794315][ C0] hsr_forward_skb+0x158b/0x2860 [ 373.799781][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 373.806022][ C0] hsr_announce+0x1d5/0x360 [ 373.811044][ C0] call_timer_fn+0x16e/0x590 [ 373.816176][ C0] __run_timer_base+0x61a/0x860 [ 373.821546][ C0] run_timer_softirq+0xb7/0x180 [ 373.826917][ C0] handle_softirqs+0x27d/0x850 [ 373.832197][ C0] __irq_exit_rcu+0xca/0x1f0 [ 373.837306][ C0] irq_exit_rcu+0x9/0x30 [ 373.842066][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.848235][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.854773][ C0] check_preemption_disabled+0x17/0x120 [ 373.860873][ C0] rcu_is_watching+0x15/0xb0 [ 373.866007][ C0] rcu_read_lock_held+0x15/0x50 [ 373.871397][ C0] page_ext_lookup+0xe7/0x180 [ 373.876597][ C0] page_table_check_clear+0x238/0x5f0 [ 373.882498][ C0] unmap_page_range+0x344b/0x4370 [ 373.888074][ C0] unmap_vmas+0x399/0x580 [ 373.892947][ C0] exit_mmap+0x23b/0xb20 [ 373.897719][ C0] __mmput+0x118/0x430 [ 373.902307][ C0] exit_mm+0x1da/0x2c0 [ 373.906911][ C0] do_exit+0x658/0x2310 [ 373.911617][ C0] do_group_exit+0x21c/0x2d0 [ 373.916753][ C0] get_signal+0x1285/0x1340 [ 373.921793][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 373.927862][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 373.933665][ C0] do_syscall_64+0x2e3/0xf80 [ 373.938786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.945201][ C0] [ 373.945201][ C0] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 373.952936][ C0] __lock_acquire+0x15a6/0x2cf0 [ 373.958308][ C0] lock_acquire+0x117/0x340 [ 373.963327][ C0] _raw_spin_lock_bh+0x36/0x50 [ 373.968619][ C0] hsr_dev_xmit+0x237/0x360 [ 373.973726][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 373.979362][ C0] __dev_queue_xmit+0x1493/0x3140 [ 373.984903][ C0] NF_HOOK+0x310/0x3a0 [ 373.989538][ C0] arp_xmit+0x16c/0x270 [ 373.994214][ C0] arp_solicit+0xc1d/0xe60 [ 373.999149][ C0] __neigh_event_send+0xf3e/0x1520 [ 374.004784][ C0] neigh_resolve_output+0x198/0x750 [ 374.010542][ C0] ip_finish_output2+0xd40/0x1160 [ 374.016098][ C0] ip_output+0x29f/0x450 [ 374.020862][ C0] iptunnel_xmit+0x5f8/0xa90 [ 374.026059][ C0] ip_tunnel_xmit+0x1c41/0x2390 [ 374.031424][ C0] gre_tap_xmit+0x590/0x7a0 [ 374.036459][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 374.042088][ C0] sch_direct_xmit+0x241/0x4b0 [ 374.047372][ C0] __dev_queue_xmit+0x136f/0x3140 [ 374.052926][ C0] bond_start_xmit+0xdc7/0x1a10 [ 374.058300][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 374.063928][ C0] __dev_queue_xmit+0x1493/0x3140 [ 374.069473][ C0] ip6_finish_output2+0xfb3/0x1480 [ 374.075103][ C0] ip6_output+0x340/0x550 [ 374.079953][ C0] ndisc_send_skb+0xbce/0x1510 [ 374.085235][ C0] addrconf_rs_timer+0x369/0x670 [ 374.090689][ C0] call_timer_fn+0x16e/0x590 [ 374.095812][ C0] __run_timer_base+0x61a/0x860 [ 374.101189][ C0] run_timer_softirq+0xb7/0x180 [ 374.106579][ C0] handle_softirqs+0x27d/0x850 [ 374.111875][ C0] __irq_exit_rcu+0xca/0x1f0 [ 374.117004][ C0] irq_exit_rcu+0x9/0x30 [ 374.121768][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.127926][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.134433][ C0] lock_is_held_type+0x137/0x190 [ 374.139894][ C0] page_ext_lookup+0xe7/0x180 [ 374.145092][ C0] page_table_check_clear+0x238/0x5f0 [ 374.150983][ C0] unmap_page_range+0x344b/0x4370 [ 374.156536][ C0] unmap_vmas+0x399/0x580 [ 374.161393][ C0] exit_mmap+0x23b/0xb20 [ 374.166160][ C0] __mmput+0x118/0x430 [ 374.170752][ C0] exit_mm+0x1da/0x2c0 [ 374.175344][ C0] do_exit+0x658/0x2310 [ 374.180017][ C0] do_group_exit+0x21c/0x2d0 [ 374.185131][ C0] get_signal+0x1285/0x1340 [ 374.190157][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 374.196226][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 374.202031][ C0] do_syscall_64+0x2e3/0xf80 [ 374.207145][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.213563][ C0] [ 374.213563][ C0] other info that might help us debug this: [ 374.213563][ C0] [ 374.223798][ C0] Possible unsafe locking scenario: [ 374.223798][ C0] [ 374.231249][ C0] CPU0 CPU1 [ 374.236609][ C0] ---- ---- [ 374.241963][ C0] lock(&qdisc_xmit_lock_key#4); [ 374.246997][ C0] lock(&hsr->seqnr_lock); [ 374.254039][ C0] lock(&qdisc_xmit_lock_key#4); [ 374.261588][ C0] lock(&hsr->seqnr_lock); [ 374.266188][ C0] [ 374.266188][ C0] *** DEADLOCK *** [ 374.266188][ C0] [ 374.274322][ C0] 17 locks held by syz.1.3967/19627: [ 374.279600][ C0] #0: ffff88802ea41bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x126/0xb20 [ 374.288833][ C0] #1: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 374.298545][ C0] #2: ffff88802e8890d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210 [ 374.309170][ C0] #3: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x144/0x5f0 [ 374.319269][ C0] #4: ffffc90000007be0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x590 [ 374.328846][ C0] #5: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x1e4/0x1510 [ 374.338356][ C0] #6: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 374.347406][ C0] #7: ffffffff8df41d20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x3140 [ 374.357329][ C0] #8: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xf8/0x1a10 [ 374.366913][ C0] #9: ffffffff8df41d20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x3140 [ 374.376919][ C0] #10: ffff888055a10228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#3){+...}-{3:3}, at: __dev_queue_xmit+0xeb4/0x3140 [ 374.389532][ C0] #11: ffff888031421158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x153/0x4b0 [ 374.399979][ C0] #12: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 374.408950][ C0] #13: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x452/0x1160 [ 374.418806][ C0] #14: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 374.427959][ C0] #15: ffffffff8df41d20 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x289/0x3140 [ 374.437967][ C0] #16: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 374.447190][ C0] [ 374.447190][ C0] stack backtrace: [ 374.453174][ C0] CPU: 0 UID: 0 PID: 19627 Comm: syz.1.3967 Not tainted syzkaller #0 PREEMPT(full) [ 374.453193][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 374.453202][ C0] Call Trace: [ 374.453208][ C0] [ 374.453214][ C0] dump_stack_lvl+0x189/0x250 [ 374.453234][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.453248][ C0] ? __pfx__printk+0x10/0x10 [ 374.453265][ C0] ? stack_trace_save+0x9c/0xe0 [ 374.453288][ C0] print_circular_bug+0x2e2/0x300 [ 374.453306][ C0] check_noncircular+0x12e/0x150 [ 374.453324][ C0] __lock_acquire+0x15a6/0x2cf0 [ 374.453341][ C0] ? netif_skb_features+0xa69/0x1540 [ 374.453354][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 374.453370][ C0] ? hsr_dev_xmit+0x237/0x360 [ 374.453381][ C0] lock_acquire+0x117/0x340 [ 374.453411][ C0] ? hsr_dev_xmit+0x237/0x360 [ 374.453426][ C0] ? hsr_dev_xmit+0x237/0x360 [ 374.453437][ C0] _raw_spin_lock_bh+0x36/0x50 [ 374.453454][ C0] ? hsr_dev_xmit+0x237/0x360 [ 374.453465][ C0] hsr_dev_xmit+0x237/0x360 [ 374.453476][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 374.453488][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 374.453507][ C0] __dev_queue_xmit+0x1493/0x3140 [ 374.453524][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 374.453542][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.453557][ C0] ? arpt_do_table+0x238/0x1fd0 [ 374.453576][ C0] ? __pfx_arpt_do_table+0x10/0x10 [ 374.453601][ C0] ? NF_HOOK+0x9e/0x3a0 [ 374.453614][ C0] NF_HOOK+0x310/0x3a0 [ 374.453627][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 374.453639][ C0] ? NF_HOOK+0x9e/0x3a0 [ 374.453651][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 374.453663][ C0] ? __pfx_arp_xmit_finish+0x10/0x10 [ 374.453679][ C0] arp_xmit+0x16c/0x270 [ 374.453697][ C0] ? arp_xmit+0x23/0x270 [ 374.453709][ C0] arp_solicit+0xc1d/0xe60 [ 374.453724][ C0] ? arp_solicit+0x11a/0xe60 [ 374.453738][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 374.453753][ C0] ? __neigh_event_send+0xed6/0x1520 [ 374.453772][ C0] ? __pfx_arp_solicit+0x10/0x10 [ 374.453784][ C0] __neigh_event_send+0xf3e/0x1520 [ 374.453806][ C0] neigh_resolve_output+0x198/0x750 [ 374.453824][ C0] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 374.453847][ C0] ip_finish_output2+0xd40/0x1160 [ 374.453866][ C0] ? ip_skb_dst_mtu+0x18d/0xb70 [ 374.453885][ C0] ? ip_finish_output2+0x452/0x1160 [ 374.453905][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 374.453924][ C0] ? ip_skb_dst_mtu+0x18d/0xb70 [ 374.453942][ C0] ? ip_skb_dst_mtu+0x917/0xb70 [ 374.453960][ C0] ? ip_finish_output+0x33a/0x3f0 [ 374.453978][ C0] ip_output+0x29f/0x450 [ 374.453995][ C0] ? ip_output+0x5b/0x450 [ 374.454013][ C0] iptunnel_xmit+0x5f8/0xa90 [ 374.454034][ C0] ip_tunnel_xmit+0x1c41/0x2390 [ 374.454055][ C0] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 374.454067][ C0] ? gre_build_header+0x3fd/0xa40 [ 374.454089][ C0] ? __pfx_gre_build_header+0x10/0x10 [ 374.454108][ C0] ? iptunnel_handle_offloads+0x2fd/0x630 [ 374.454126][ C0] gre_tap_xmit+0x590/0x7a0 [ 374.454147][ C0] ? __pfx_gre_tap_xmit+0x10/0x10 [ 374.454168][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 374.454186][ C0] sch_direct_xmit+0x241/0x4b0 [ 374.454206][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 374.454227][ C0] __dev_queue_xmit+0x136f/0x3140 [ 374.454240][ C0] ? unwind_next_frame+0xa5/0x2390 [ 374.454257][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 374.454273][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 374.454286][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.454302][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 374.454319][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 374.454344][ C0] bond_start_xmit+0xdc7/0x1a10 [ 374.454364][ C0] ? bond_start_xmit+0xf8/0x1a10 [ 374.454380][ C0] ? __pfx_bond_start_xmit+0x10/0x10 [ 374.454395][ C0] ? netif_skb_features+0xa69/0x1540 [ 374.454409][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 374.454424][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 374.454437][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 374.454451][ C0] ? qdisc_pkt_len_segs_init+0x2c4/0x910 [ 374.454466][ C0] ? validate_xmit_skb+0xd78/0x1500 [ 374.454482][ C0] dev_hard_start_xmit+0x2cd/0x800 [ 374.454500][ C0] __dev_queue_xmit+0x1493/0x3140 [ 374.454517][ C0] ? __dev_queue_xmit+0x289/0x3140 [ 374.454529][ C0] ? neigh_resolve_output+0x438/0x750 [ 374.454550][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 374.454564][ C0] ? read_seqbegin+0x1ac/0x250 [ 374.454581][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 374.454596][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 374.454609][ C0] ? eth_header+0x11b/0x200 [ 374.454622][ C0] ? __asan_memcpy+0x40/0x70 [ 374.454645][ C0] ip6_finish_output2+0xfb3/0x1480 [ 374.454663][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 374.454676][ C0] ? ip6_mtu+0x7d/0x490 [ 374.454701][ C0] ? ip6_mtu+0x38c/0x490 [ 374.454719][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 374.454737][ C0] ? ip6_output+0x126/0x550 [ 374.454755][ C0] ip6_output+0x340/0x550 [ 374.454775][ C0] ndisc_send_skb+0xbce/0x1510 [ 374.454792][ C0] ? ndisc_send_skb+0x1e4/0x1510 [ 374.454809][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 374.454825][ C0] ? __pfx_dst_output+0x10/0x10 [ 374.454847][ C0] addrconf_rs_timer+0x369/0x670 [ 374.454863][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 374.454880][ C0] call_timer_fn+0x16e/0x590 [ 374.454893][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 374.454906][ C0] ? call_timer_fn+0xbe/0x590 [ 374.454920][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 374.454937][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.454951][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 374.454967][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 374.454981][ C0] __run_timer_base+0x61a/0x860 [ 374.454998][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 374.455010][ C0] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 374.455034][ C0] run_timer_softirq+0xb7/0x180 [ 374.455047][ C0] handle_softirqs+0x27d/0x850 [ 374.455061][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 374.455075][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 374.455090][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 374.455109][ C0] __irq_exit_rcu+0xca/0x1f0 [ 374.455121][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 374.455136][ C0] irq_exit_rcu+0x9/0x30 [ 374.455148][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 374.455165][ C0] [ 374.455170][ C0] [ 374.455175][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 374.455189][ C0] RIP: 0010:lock_is_held_type+0x137/0x190 [ 374.455208][ C0] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 a9 aa 2d 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 374.455220][ C0] RSP: 0018:ffffc9000dfb72b0 EFLAGS: 00000206 [ 374.455234][ C0] RAX: f45ea7b36d0ae100 RBX: 0000000000000001 RCX: f45ea7b36d0ae100 [ 374.455244][ C0] RDX: 0000000000000000 RSI: ffffffff8d9520e6 RDI: ffffffff8bbfc660 [ 374.455253][ C0] RBP: 00000000ffffffff R08: ffffffff82324194 R09: ffffffff8df41cc0 [ 374.455263][ C0] R10: dffffc0000000000 R11: fffff940003d6b79 R12: 0000000000000246 [ 374.455273][ C0] R13: ffff88803f135b80 R14: ffffffff8df41cc0 R15: 0000000000000001 [ 374.455285][ C0] ? page_table_check_clear+0x144/0x5f0 [ 374.455307][ C0] page_ext_lookup+0xe7/0x180 [ 374.455324][ C0] page_table_check_clear+0x238/0x5f0 [ 374.455340][ C0] ? page_table_check_clear+0x144/0x5f0 [ 374.455356][ C0] ? vm_normal_page+0x10d/0x240 [ 374.455376][ C0] unmap_page_range+0x344b/0x4370 [ 374.455410][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 374.455431][ C0] ? mas_find+0xb0e/0xd30 [ 374.455447][ C0] ? unmap_vmas+0x144/0x580 [ 374.455466][ C0] unmap_vmas+0x399/0x580 [ 374.455488][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 374.455514][ C0] exit_mmap+0x23b/0xb20 [ 374.455530][ C0] ? uprobe_clear_state+0x20f/0x290 [ 374.455550][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 374.455565][ C0] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 374.455586][ C0] ? __pfx_exit_aio+0x10/0x10 [ 374.455603][ C0] ? uprobe_clear_state+0x27c/0x290 [ 374.455623][ C0] __mmput+0x118/0x430 [ 374.455636][ C0] exit_mm+0x1da/0x2c0 [ 374.455652][ C0] ? __pfx_exit_mm+0x10/0x10 [ 374.455671][ C0] do_exit+0x658/0x2310 [ 374.455695][ C0] ? do_raw_spin_lock+0x121/0x290 [ 374.455713][ C0] ? __pfx_do_exit+0x10/0x10 [ 374.455733][ C0] do_group_exit+0x21c/0x2d0 [ 374.455749][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 374.455766][ C0] get_signal+0x1285/0x1340 [ 374.455792][ C0] arch_do_signal_or_restart+0x9a/0x7a0 [ 374.455811][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 374.455833][ C0] ? exit_to_user_mode_loop+0x55/0x4f0 [ 374.455847][ C0] exit_to_user_mode_loop+0x87/0x4f0 [ 374.455860][ C0] ? rcu_is_watching+0x15/0xb0 [ 374.455877][ C0] do_syscall_64+0x2e3/0xf80 [ 374.455894][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.455907][ C0] ? clear_bhb_loop+0x60/0xb0 [ 374.455921][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.455934][ C0] RIP: 0033:0x7f36d218f749 [ 374.455946][ C0] Code: Unable to access opcode bytes at 0x7f36d218f71f. [ 374.455953][ C0] RSP: 002b:00007f36d30960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 374.455966][ C0] RAX: 0000000000000001 RBX: 00007f36d23e5fa8 RCX: 00007f36d218f749 [ 374.455976][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f36d23e5fac [ 374.455985][ C0] RBP: 00007f36d23e5fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 374.455994][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 374.456003][ C0] R13: 00007f36d23e6038 R14: 00007ffe0fd41a90 R15: 00007ffe0fd41b78 [ 374.456018][ C0]