last executing test programs: 1m52.144610636s ago: executing program 1 (id=1032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003000000000000", @ANYRES32=r2, @ANYBLOB="18005080040005"], 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 1m51.562312031s ago: executing program 1 (id=1037): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x38}, {&(0x7f0000000340)=""/97, 0x61}], 0x2}, 0x40007f}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 1m50.204826569s ago: executing program 1 (id=1044): clock_gettime(0xa, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4, @loopback, 0x2, 0x3}, 0x20) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @loopback, 0x2000000, 0x6}, 0x20) 1m49.619971298s ago: executing program 1 (id=1048): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x44}}, 0x24000041) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m48.979647087s ago: executing program 1 (id=1053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1m48.222503837s ago: executing program 1 (id=1059): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYBLOB='dLts,dots,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',time_offset=0x00000000000002d8,dots,dots,nodots,nodots,dots,nodots,dots,showexec,check=relaxed,sys_immutable,nodots,nodots,usefree,nodots,showexec,nodots,dots,\x00'], 0xfd, 0x1f0, &(0x7f0000000240)="$eJzs3cFqE1EUANCbmiYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadGNMYBjKj9ZxN7uS+l/fuDJlkk5sUha+3P0eWdWLnIA5i2om92Im58wAArpNpSvEtFdreCwDQjA0+/783vCUAYMtev3n78ulweHiU51nExflkNBkVj0X++Yvh4aP8p71q1sVkMrpxmX+cL393mOV342aZf1LMzy/TvYgY9eLh/SI/yz17Ncx/nd+P91uuHQAAAAAAAAAAAAAAAAAAAAAA2nI38rmV/X3295fzgzJfHC30B1rq39ONO93ysGoPlM6aKAoAAAAAAAAAAAAAAAAAAAD+MSennz6+G48/HFdBPyIWn+muGHN10ClfeKPB7Qc7UW/6oCyzxqKd8hRtt8DB6ou7SRDdv+Xq1A3yBtYarD29Kc2C1e+CeVuMK6f3ImL96g+O6m5+mlIaf7l3fHIaae3g6h7Rb/SOBAAAAAAAAAAAAAAAAAAA/6+FX33/JmtjQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQgur//2sEZxFxK/44eL7WbmTtFgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC19SMAAP//j3Mj5w==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m32.83804706s ago: executing program 32 (id=1059): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x100c404, &(0x7f0000000480)=ANY=[@ANYBLOB='dLts,dots,nodots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',time_offset=0x00000000000002d8,dots,dots,nodots,nodots,dots,nodots,dots,showexec,check=relaxed,sys_immutable,nodots,nodots,usefree,nodots,showexec,nodots,dots,\x00'], 0xfd, 0x1f0, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.030811522s ago: executing program 3 (id=1185): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {}, {0x6, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40) 1m20.001417149s ago: executing program 3 (id=1189): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x600c010}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 1m19.182079346s ago: executing program 3 (id=1193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m17.823599446s ago: executing program 3 (id=1198): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m16.929614678s ago: executing program 2 (id=1202): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x600c010}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 1m16.593772982s ago: executing program 3 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) socket$nl_route(0x10, 0x3, 0x0) accept4$netrom(r1, 0x0, 0x0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef02000100", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 1m16.311897001s ago: executing program 2 (id=1206): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="34a9bf", 0x3, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) shutdown(r0, 0x0) recvfrom(r0, 0x0, 0xfffffffffffffd1e, 0x40000002, 0x0, 0x19) 1m15.828111474s ago: executing program 3 (id=1208): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x1}], 0x1, 0x40800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1m15.548076941s ago: executing program 2 (id=1210): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m13.205441792s ago: executing program 33 (id=1208): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf80", 0x85}], 0x1}], 0x1, 0x40800) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1m13.119708824s ago: executing program 2 (id=1213): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m11.383054582s ago: executing program 2 (id=1218): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400403450101e0d5"], 0x7) tgkill(0x0, 0x0, 0xf) 1m10.415294742s ago: executing program 2 (id=1220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m7.124239571s ago: executing program 34 (id=1220): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10.644132564s ago: executing program 5 (id=1402): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES64=r4, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000007000007061a84ef3eb4f2d4bafaf33680dbad201b5b05e0601baea296a16fcc30aa18a1c4f1b8851b3a2d778bc42a00000049c4046e4e73694e1428d6e105822b000000000000000081c14513311e2a45cd2cd12ffbba523bbd08cec31ef15c8c300c87d7dd629b524320b12bdd97c01051dc5373a90e6fdd8fba8961de690ae9c0ae27ebf981283fc8f167ff9984eeb09c887036014879bf58805b5c77304692642304d929decbdf06979482d3087fe43433b35c615e274829d4cb750beb6c9f7f29"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x488c4) close(0xffffffffffffffff) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 10.186107635s ago: executing program 0 (id=1404): r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.817454897s ago: executing program 7 (id=1408): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001400)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b3f264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849418b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2f", 0x4d9, 0x6d91fb6102dc910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 7.66214901s ago: executing program 5 (id=1410): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 7.475967729s ago: executing program 4 (id=1411): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, 0x0, 0x0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9218}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0xd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40090}, 0x20000800) 6.98264651s ago: executing program 6 (id=1412): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x1}, 0xffffffffffffff86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ptrace(0x10, r0) r2 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000007239f886002020000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) socket$key(0xf, 0x3, 0x2) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 6.929855614s ago: executing program 7 (id=1413): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) 6.709607091s ago: executing program 0 (id=1414): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.396251546s ago: executing program 4 (id=1415): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000000940)=""/246, 0xf6}], 0x6}, 0x1}, {{&(0x7f0000000b00)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @rose, @rose, @remote, @null]}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/131, 0x83}], 0x2, &(0x7f0000001100)=""/28, 0x1c}, 0x7}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.235453696s ago: executing program 5 (id=1416): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 6.191012036s ago: executing program 7 (id=1417): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x20004010, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x9, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 5.955330724s ago: executing program 0 (id=1418): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001d80)=""/66, 0x42}, {&(0x7f0000001e00)=""/158, 0x9e}, {&(0x7f00000025c0)=""/4096, 0x1000}], 0x6, &(0x7f0000001f40)=""/246, 0xf6}, 0x6}], 0x1, 0x0, 0x0) 5.760233267s ago: executing program 6 (id=1419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 5.57454344s ago: executing program 4 (id=1420): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32=r6, @ANYRES64=r4, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r7, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc691bcffe1d1982a394fb44ed513975fe652678d5ce57f9b54ecd9045c02d86e82d247338"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x0, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xa0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee5233188", 0x0, 0x8000}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000000000000007000007061a84ef3eb4f2d4bafaf33680dbad201b5b05e0601baea296a16fcc30aa18a1c4f1b8851b3a2d778bc42a00000049c4046e4e73694e1428d6e105822b000000000000000081c14513311e2a45cd2cd12ffbba523bbd08cec31ef15c8c300c87d7dd629b524320b12bdd97c01051dc5373a90e6fdd8fba8961de690ae9c0ae27ebf981283fc8f167ff9984eeb09c887036014879bf58805b5c77304692642304d929decbdf06979482d3087fe43433b35c615e274829d4cb750beb6c9f7f29"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x488c4) close(0xffffffffffffffff) setsockopt$XDP_TX_RING(r9, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x400448cb, 0x0) 5.443176686s ago: executing program 7 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20048150) 5.368403828s ago: executing program 5 (id=1422): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 4.873243457s ago: executing program 6 (id=1423): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, &(0x7f0000001400)="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", 0x532, 0x6d91fb6102dc910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 4.737246988s ago: executing program 5 (id=1424): r0 = syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.453098997s ago: executing program 4 (id=1425): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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") 4.3232221s ago: executing program 0 (id=1426): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 4.319208683s ago: executing program 7 (id=1427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r5, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x88800}, 0x0) 3.56432133s ago: executing program 6 (id=1428): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.813670209s ago: executing program 0 (id=1429): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_khugepaged_scan_pmd\x00', r1, 0x0, 0x1}, 0xffffffffffffff86) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x6) ptrace(0x10, r0) r2 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000007239f886002020000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) getgid() bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) socket$key(0xf, 0x3, 0x2) r5 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, 0x0}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) waitid(0x1, r0, 0x0, 0x8, 0x0) 2.682062886s ago: executing program 4 (id=1430): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r0, &(0x7f0000001140)=[{{&(0x7f00000011c0)=@generic, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000780)=""/75, 0x4b}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/228, 0xe4}, {&(0x7f0000000940)=""/246, 0xf6}], 0x6}, 0x1}, {{&(0x7f0000000b00)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @rose, @rose, @remote, @null]}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f40)=""/75, 0x4b}, {&(0x7f0000000fc0)=""/131, 0x83}], 0x2, &(0x7f0000001100)=""/28, 0x1c}, 0x7}], 0x2, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.902380421s ago: executing program 6 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x44000) 1.073698427s ago: executing program 4 (id=1432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x382}], 0x1}}], 0x2, 0x4048884) 359.738893ms ago: executing program 6 (id=1433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) 137.266726ms ago: executing program 7 (id=1434): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 101.941972ms ago: executing program 5 (id=1435): socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) socket$kcm(0x1e, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r0], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 0s ago: executing program 0 (id=1436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) kernel console output (not intermixed with test programs): 236.214119][ T5810] bridge_slave_0: entered promiscuous mode [ 236.249352][ T49] Bluetooth: hci3: command tx timeout [ 236.255210][ T5807] Bluetooth: hci1: command tx timeout [ 236.275621][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.328397][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.336119][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.343924][ T5810] bridge_slave_1: entered allmulticast mode [ 236.353464][ T5810] bridge_slave_1: entered promiscuous mode [ 236.373342][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.427608][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.479222][ T5794] team0: Port device team_slave_0 added [ 236.485252][ T5807] Bluetooth: hci4: command tx timeout [ 236.565435][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.613909][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.629940][ T5794] team0: Port device team_slave_1 added [ 236.646724][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.671665][ T5800] hsr_slave_0: entered promiscuous mode [ 236.681631][ T5800] hsr_slave_1: entered promiscuous mode [ 236.901740][ T5798] team0: Port device team_slave_0 added [ 236.917028][ T5801] team0: Port device team_slave_0 added [ 236.964677][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.971978][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.998470][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.017675][ T5810] team0: Port device team_slave_0 added [ 237.033435][ T5801] team0: Port device team_slave_1 added [ 237.049172][ T5798] team0: Port device team_slave_1 added [ 237.087523][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.094889][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.121367][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.140258][ T5810] team0: Port device team_slave_1 added [ 237.467252][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.474847][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.501456][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.515259][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.522645][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.549134][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.583428][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.590999][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.617369][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.633642][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.641071][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.669659][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.684550][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.692108][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.718543][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.816922][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.824117][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.851902][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.941416][ T5794] hsr_slave_0: entered promiscuous mode [ 237.950530][ T5794] hsr_slave_1: entered promiscuous mode [ 237.958021][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.966109][ T5794] Cannot create hsr debugfs directory [ 238.140912][ T5810] hsr_slave_0: entered promiscuous mode [ 238.149985][ T5810] hsr_slave_1: entered promiscuous mode [ 238.150049][ T5807] Bluetooth: hci0: command tx timeout [ 238.164128][ T5810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.172056][ T5810] Cannot create hsr debugfs directory [ 238.229488][ T5807] Bluetooth: hci2: command tx timeout [ 238.319227][ T5807] Bluetooth: hci1: command tx timeout [ 238.321596][ T49] Bluetooth: hci3: command tx timeout [ 238.353485][ T5801] hsr_slave_0: entered promiscuous mode [ 238.363724][ T5801] hsr_slave_1: entered promiscuous mode [ 238.372680][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.380584][ T5801] Cannot create hsr debugfs directory [ 238.446551][ T5798] hsr_slave_0: entered promiscuous mode [ 238.455201][ T5798] hsr_slave_1: entered promiscuous mode [ 238.463957][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.471907][ T5798] Cannot create hsr debugfs directory [ 238.549329][ T49] Bluetooth: hci4: command tx timeout [ 239.553261][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.572792][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.610338][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.716037][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.016779][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.098418][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.170492][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.239114][ T49] Bluetooth: hci0: command tx timeout [ 240.266032][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.310323][ T49] Bluetooth: hci2: command tx timeout [ 240.404131][ T49] Bluetooth: hci3: command tx timeout [ 240.410068][ T49] Bluetooth: hci1: command tx timeout [ 240.468222][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.502064][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.536909][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.648113][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.656688][ T5807] Bluetooth: hci4: command tx timeout [ 240.682010][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.704590][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.724411][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.745423][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.776774][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.799773][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.827080][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.853250][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.064617][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.284397][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.410005][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.417578][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.552284][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.559965][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.864180][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.073525][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.111795][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.119446][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.179051][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.230533][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.238151][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.345916][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.384597][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.544247][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.557643][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.565350][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.596024][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.655507][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.663177][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.812401][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.825881][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.833518][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.895664][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.969098][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.976670][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.013179][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.020840][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.097076][ T5794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 243.107973][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.169130][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.176702][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.143308][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.577241][ T5800] veth0_vlan: entered promiscuous mode [ 244.672718][ T5800] veth1_vlan: entered promiscuous mode [ 244.913283][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.987236][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.007755][ T5800] veth0_macvtap: entered promiscuous mode [ 245.099431][ T5800] veth1_macvtap: entered promiscuous mode [ 245.367024][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.415775][ T5794] veth0_vlan: entered promiscuous mode [ 245.470028][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.518341][ T5800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.528162][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.537406][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.546597][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.632170][ T5794] veth1_vlan: entered promiscuous mode [ 245.740948][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.840921][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.026944][ T5794] veth0_macvtap: entered promiscuous mode [ 246.172463][ T5794] veth1_macvtap: entered promiscuous mode [ 246.256680][ T5801] veth0_vlan: entered promiscuous mode [ 246.422058][ T5798] veth0_vlan: entered promiscuous mode [ 246.472776][ T5801] veth1_vlan: entered promiscuous mode [ 246.517647][ T5798] veth1_vlan: entered promiscuous mode [ 246.537130][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.611500][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.740664][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.749894][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.759069][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.768074][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.900219][ T5798] veth0_macvtap: entered promiscuous mode [ 246.947910][ T5801] veth0_macvtap: entered promiscuous mode [ 246.994146][ T5798] veth1_macvtap: entered promiscuous mode [ 247.067551][ T5801] veth1_macvtap: entered promiscuous mode [ 247.133198][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.247375][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.299921][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.374276][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.406907][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.416337][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.426687][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.435851][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.498122][ T5801] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.507960][ T5801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.519066][ T5801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.528092][ T5801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.106343][ T5810] veth0_vlan: entered promiscuous mode [ 248.251218][ T5810] veth1_vlan: entered promiscuous mode [ 248.694335][ T5810] veth0_macvtap: entered promiscuous mode [ 248.741494][ T5810] veth1_macvtap: entered promiscuous mode [ 248.926767][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.042501][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.125815][ T5810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.135044][ T5810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.144211][ T5810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.153369][ T5810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.917619][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.925851][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.082555][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.090821][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.523732][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 253.559038][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.567028][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.893385][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.901749][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.151269][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.160420][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.337635][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.345956][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.546814][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.645373][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.786191][ T5079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.795894][ T5079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.152149][ T5979] Zero length message leads to an empty skb [ 255.386104][ T5982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6'. [ 255.975486][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 256.394616][ T5079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.402978][ T5079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.459524][ T11] IPVS: starting estimator thread 0... [ 256.561217][ T5998] IPVS: using max 240 ests per chain, 12000 per kthread [ 256.690309][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.698405][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.282654][ T6006] tipc: Started in network mode [ 257.287898][ T6006] tipc: Node identity ac14140f, cluster identity 4711 [ 257.296269][ T6006] tipc: New replicast peer: 255.255.255.255 [ 257.311078][ T6006] tipc: Enabled bearer , priority 10 [ 257.391133][ T6010] Bluetooth: MGMT ver 1.23 [ 258.421537][ T5855] tipc: Node number set to 2886997007 [ 258.704461][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.259314][ T6035] tipc: Started in network mode [ 259.264457][ T6035] tipc: Node identity 4, cluster identity 4711 [ 259.271666][ T6035] tipc: Node number set to 4 [ 259.391930][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 260.128198][ T6045] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.241036][ T6045] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 260.319782][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 263.302338][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.43'. [ 266.065583][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.56'. [ 268.253731][ T6155] syz.4.68: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 268.275059][ T6155] CPU: 1 UID: 0 PID: 6155 Comm: syz.4.68 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 268.275216][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.275313][ T6155] Call Trace: [ 268.275368][ T6155] [ 268.275419][ T6155] __dump_stack+0x26/0x30 [ 268.275606][ T6155] dump_stack_lvl+0x1df/0x270 [ 268.275786][ T6155] dump_stack+0x1e/0x25 [ 268.275940][ T6155] warn_alloc+0x470/0x690 [ 268.276144][ T6155] ? kmsan_get_metadata+0xfb/0x160 [ 268.276348][ T6155] __vmalloc_node_range_noprof+0x133/0x2360 [ 268.276526][ T6155] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.276721][ T6155] ? should_fail_ex+0x45/0x8a0 [ 268.276881][ T6155] ? kmsan_get_metadata+0xfb/0x160 [ 268.277060][ T6155] ? kmsan_get_metadata+0xfb/0x160 [ 268.277240][ T6155] ? kmsan_get_metadata+0xfb/0x160 [ 268.277417][ T6155] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 268.277610][ T6155] ? kmsan_get_metadata+0xfb/0x160 [ 268.277797][ T6155] vmalloc_user_noprof+0xce/0x140 [ 268.277954][ T6155] ? xskq_create+0x11d/0x290 [ 268.278116][ T6155] xskq_create+0x11d/0x290 [ 268.278274][ T6155] xsk_init_queue+0xfd/0x1d0 [ 268.278424][ T6155] xsk_setsockopt+0x873/0xc30 [ 268.278589][ T6155] do_sock_setsockopt+0x4dc/0x820 [ 268.278733][ T6155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 268.278894][ T6155] __x64_sys_setsockopt+0x2ad/0x4a0 [ 268.279064][ T6155] x64_sys_call+0x36f7/0x3db0 [ 268.279243][ T6155] do_syscall_64+0xd9/0x210 [ 268.279376][ T6155] ? irqentry_exit+0x16/0x60 [ 268.279490][ T6155] ? clear_bhb_loop+0x40/0x90 [ 268.279633][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.279773][ T6155] RIP: 0033:0x7fcddb58e929 [ 268.279887][ T6155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.280003][ T6155] RSP: 002b:00007fcddc472038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 268.280136][ T6155] RAX: ffffffffffffffda RBX: 00007fcddb7b6080 RCX: 00007fcddb58e929 [ 268.280233][ T6155] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 268.280313][ T6155] RBP: 00007fcddb610b39 R08: 0000000000000004 R09: 0000000000000000 [ 268.280397][ T6155] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.280481][ T6155] R13: 0000000000000000 R14: 00007fcddb7b6080 R15: 00007ffd927da8c8 [ 268.280604][ T6155] [ 268.518115][ T6155] Mem-Info: [ 268.526543][ T6155] active_anon:5822 inactive_anon:0 isolated_anon:0 [ 268.526543][ T6155] active_file:1486 inactive_file:39817 isolated_file:0 [ 268.526543][ T6155] unevictable:768 dirty:60 writeback:0 [ 268.526543][ T6155] slab_reclaimable:4736 slab_unreclaimable:22027 [ 268.526543][ T6155] mapped:29539 shmem:1361 pagetables:1382 [ 268.526543][ T6155] sec_pagetables:0 bounce:0 [ 268.526543][ T6155] kernel_misc_reclaimable:0 [ 268.526543][ T6155] free:378299 free_pcp:11013 free_cma:0 [ 268.573266][ T6155] Node 0 active_anon:23424kB inactive_anon:0kB active_file:5944kB inactive_file:159064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118156kB dirty:240kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5360kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.611028][ T6155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 268.648279][ T6155] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 268.681539][ T6155] lowmem_reserve[]: 0 930 1243 1243 1243 [ 268.687866][ T6155] Node 0 DMA32 free:585168kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2348kB inactive_anon:0kB active_file:2244kB inactive_file:82804kB unevictable:0kB writepending:184kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:32008kB local_pcp:22236kB free_cma:0kB [ 268.724198][ T6155] lowmem_reserve[]: 0 0 312 312 312 [ 268.730724][ T6155] Node 0 Normal free:16228kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20952kB inactive_anon:0kB active_file:3700kB inactive_file:76260kB unevictable:1536kB writepending:56kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:12048kB local_pcp:7028kB free_cma:0kB [ 268.763344][ T6155] lowmem_reserve[]: 0 0 0 0 0 [ 268.772248][ T6155] Node 1 Normal free:907640kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 268.804832][ T6155] lowmem_reserve[]: 0 0 0 0 0 [ 268.811625][ T6155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 268.825091][ T6155] Node 0 DMA32: 20*4kB (M) 16*8kB (UM) 22*16kB (UME) 19*32kB (UME) 10*64kB (UM) 8*128kB (UM) 9*256kB (UM) 5*512kB (ME) 4*1024kB (M) 6*2048kB (UM) 137*4096kB (M) = 585232kB [ 268.844819][ T6155] Node 0 Normal: 3*4kB (UME) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (ME) 1*128kB (M) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 2*2048kB (UM) 2*4096kB (M) = 16228kB [ 268.863668][ T6155] Node 1 Normal: 12*4kB (UE) 17*8kB (UME) 22*16kB (UME) 21*32kB (UME) 21*64kB (UME) 13*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 907640kB [ 268.887696][ T6155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.899180][ T6155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.908734][ T6155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 268.919222][ T6155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 268.929046][ T6155] 42660 total pagecache pages [ 268.933944][ T6155] 0 pages in swap cache [ 268.938294][ T6155] Free swap = 124996kB [ 268.942889][ T6155] Total swap = 124996kB [ 268.947243][ T6155] 2097051 pages RAM [ 268.952048][ T6155] 0 pages HighMem/MovableOnly [ 268.956929][ T6155] 1530865 pages reserved [ 268.962539][ T6155] 0 pages cma reserved [ 269.561107][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.70'. [ 269.597991][ T6166] team0: entered promiscuous mode [ 269.610177][ T6166] team_slave_0: entered promiscuous mode [ 269.617074][ T6166] team_slave_1: entered promiscuous mode [ 269.630238][ T6166] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.630953][ T6155] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.416032][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 273.100211][ T6198] tipc: Started in network mode [ 273.105318][ T6198] tipc: Node identity 4, cluster identity 4711 [ 273.122210][ T6198] tipc: Node number set to 4 [ 273.620317][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 273.680709][ T6205] team0: entered promiscuous mode [ 273.692498][ T6205] team_slave_0: entered promiscuous mode [ 273.701574][ T6205] team_slave_1: entered promiscuous mode [ 273.715108][ T6205] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.225553][ T6203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 274.320912][ T6212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.87'. [ 274.480071][ T6215] bridge0: entered promiscuous mode [ 274.485688][ T6215] vlan2: entered promiscuous mode [ 277.230202][ T6251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.101'. [ 277.513102][ T6246] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 280.010288][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.118'. [ 280.596323][ T6294] netlink: 36 bytes leftover after parsing attributes in process `syz.0.121'. [ 281.012353][ T6292] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 281.655867][ T6308] syzkaller0: refused to change device tx_queue_len [ 283.350357][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.0.134'. [ 285.145368][ T6334] syz.4.137 (6334) used greatest stack depth: 2472 bytes left [ 285.939102][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.945887][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.165217][ T6394] loop3: detected capacity change from 0 to 512 [ 288.342479][ T6394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.355835][ T6394] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 288.580029][ T6394] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.161: corrupted inode contents [ 288.674645][ T6394] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.161: mark_inode_dirty error [ 288.721849][ T6394] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.161: corrupted inode contents [ 288.823005][ T6394] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.161: mark_inode_dirty error [ 288.884498][ T30] audit: type=1800 audit(1750893075.998:2): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 288.989662][ T30] audit: type=1800 audit(1750893076.088:3): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 289.260049][ T5798] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.608546][ T6478] tipc: Enabling of bearer rejected, failed to enable media [ 295.360239][ T6486] warning: `syz.3.196' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 295.812640][ T6490] syz_tun: entered allmulticast mode [ 295.862769][ T6487] syz_tun: left allmulticast mode [ 295.871837][ T6492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.199'. [ 298.323736][ T6523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.213'. [ 299.167642][ T6538] xt_TCPMSS: Only works on TCP SYN packets [ 299.764122][ T5807] Bluetooth: hci4: link tx timeout [ 299.769846][ T5807] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 301.770477][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.780382][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.841027][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 302.032204][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.066976][ T6568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.492603][ T6581] netlink: 48 bytes leftover after parsing attributes in process `syz.4.238'. [ 302.695925][ T6568] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.707498][ T6568] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.716964][ T6568] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.726312][ T6568] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.801965][ T6584] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 305.367483][ T6618] netlink: 48 bytes leftover after parsing attributes in process `syz.4.254'. [ 305.480691][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.0.255'. [ 305.770502][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 307.859130][ T6653] netlink: 48 bytes leftover after parsing attributes in process `syz.0.268'. [ 310.332250][ T6686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 313.224995][ T6730] syz_tun: entered allmulticast mode [ 313.253749][ T6729] syz_tun: left allmulticast mode [ 317.037839][ T6790] netlink: 44 bytes leftover after parsing attributes in process `syz.2.317'. [ 319.472155][ T6829] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 321.169754][ T6861] syz_tun: entered allmulticast mode [ 321.231217][ T6859] syz_tun: left allmulticast mode [ 322.980991][ T6890] syz_tun: entered allmulticast mode [ 323.021055][ T6887] syz_tun: left allmulticast mode [ 325.585899][ T6927] syz_tun: entered allmulticast mode [ 325.631239][ T6926] syz_tun: left allmulticast mode [ 326.004382][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 326.508443][ T6945] netlink: 32 bytes leftover after parsing attributes in process `syz.4.373'. [ 328.004047][ T6968] syz_tun: entered allmulticast mode [ 328.031294][ T6966] syz_tun: left allmulticast mode [ 328.453630][ T6971] netlink: 14 bytes leftover after parsing attributes in process `syz.1.382'. [ 328.581153][ T6971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.678162][ T6971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.756378][ T6971] bond0 (unregistering): Released all slaves [ 329.600097][ T6991] ip6gretap0: entered promiscuous mode [ 329.605943][ T6991] vlan2: entered promiscuous mode [ 330.397616][ T7001] syz_tun: entered allmulticast mode [ 330.450428][ T6999] syz_tun: left allmulticast mode [ 331.609741][ T7027] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 331.752386][ T7026] vlan2: entered promiscuous mode [ 331.757709][ T7026] syz_tun: entered promiscuous mode [ 332.388533][ T7035] syz_tun: entered allmulticast mode [ 332.447689][ T7034] syz_tun: left allmulticast mode [ 332.852427][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802b5e6c00: rx timeout, send abort [ 332.862696][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802b5e6c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 334.220168][ T7068] syz_tun: entered promiscuous mode [ 334.225803][ T7068] vlan2: entered promiscuous mode [ 334.413848][ T7071] syz_tun: entered allmulticast mode [ 334.490803][ T7070] syz_tun: left allmulticast mode [ 335.313323][ C0] hrtimer: interrupt took 240364 ns [ 336.892615][ T7110] syz_tun: entered promiscuous mode [ 336.898196][ T7110] vlan2: entered promiscuous mode [ 337.271332][ T7109] netlink: 'syz.2.441': attribute type 5 has an invalid length. [ 338.863762][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.1.451'. [ 340.018402][ T7149] syz_tun: entered promiscuous mode [ 340.024263][ T7149] vlan2: entered promiscuous mode [ 340.970213][ T7153] netlink: 'syz.2.459': attribute type 5 has an invalid length. [ 341.600303][ T7169] netlink: 124 bytes leftover after parsing attributes in process `syz.0.465'. [ 341.654281][ T7171] x_tables: ip_tables: udp match: only valid for protocol 17 [ 342.410308][ T7181] vlan2: entered promiscuous mode [ 343.311448][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.477'. [ 343.750543][ T7205] syz.3.480: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 343.766240][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.3.480 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 343.766387][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.766477][ T7205] Call Trace: [ 343.766528][ T7205] [ 343.766577][ T7205] __dump_stack+0x26/0x30 [ 343.766748][ T7205] dump_stack_lvl+0x1df/0x270 [ 343.766923][ T7205] dump_stack+0x1e/0x25 [ 343.767074][ T7205] warn_alloc+0x470/0x690 [ 343.767278][ T7205] ? kmsan_get_metadata+0xfb/0x160 [ 343.767478][ T7205] __vmalloc_node_range_noprof+0x133/0x2360 [ 343.767662][ T7205] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 343.767863][ T7205] ? should_fail_ex+0x45/0x8a0 [ 343.768020][ T7205] ? kmsan_get_metadata+0xfb/0x160 [ 343.768208][ T7205] ? kmsan_get_metadata+0xfb/0x160 [ 343.768387][ T7205] ? kmsan_get_metadata+0xfb/0x160 [ 343.768572][ T7205] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 343.768773][ T7205] ? kmsan_get_metadata+0xfb/0x160 [ 343.768968][ T7205] vmalloc_user_noprof+0xce/0x140 [ 343.769134][ T7205] ? xskq_create+0x11d/0x290 [ 343.769305][ T7205] xskq_create+0x11d/0x290 [ 343.769472][ T7205] xsk_init_queue+0xfd/0x1d0 [ 343.769631][ T7205] xsk_setsockopt+0x873/0xc30 [ 343.769804][ T7205] do_sock_setsockopt+0x4dc/0x820 [ 343.769955][ T7205] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.770106][ T7205] __x64_sys_setsockopt+0x2ad/0x4a0 [ 343.770285][ T7205] x64_sys_call+0x36f7/0x3db0 [ 343.770465][ T7205] do_syscall_64+0xd9/0x210 [ 343.770604][ T7205] ? irqentry_exit+0x16/0x60 [ 343.770725][ T7205] ? clear_bhb_loop+0x40/0x90 [ 343.770875][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.771028][ T7205] RIP: 0033:0x7fc12bd8e929 [ 343.771131][ T7205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.771258][ T7205] RSP: 002b:00007fc12cc24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.771388][ T7205] RAX: ffffffffffffffda RBX: 00007fc12bfb6080 RCX: 00007fc12bd8e929 [ 343.771487][ T7205] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 343.771570][ T7205] RBP: 00007fc12be10b39 R08: 0000000000000004 R09: 0000000000000000 [ 343.771657][ T7205] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.771744][ T7205] R13: 0000000000000000 R14: 00007fc12bfb6080 R15: 00007ffc94b65d08 [ 343.771868][ T7205] [ 344.013478][ T7205] Mem-Info: [ 344.016819][ T7205] active_anon:5924 inactive_anon:0 isolated_anon:0 [ 344.016819][ T7205] active_file:1599 inactive_file:39854 isolated_file:0 [ 344.016819][ T7205] unevictable:768 dirty:99 writeback:0 [ 344.016819][ T7205] slab_reclaimable:4752 slab_unreclaimable:22474 [ 344.016819][ T7205] mapped:29744 shmem:1362 pagetables:1388 [ 344.016819][ T7205] sec_pagetables:0 bounce:0 [ 344.016819][ T7205] kernel_misc_reclaimable:0 [ 344.016819][ T7205] free:376992 free_pcp:12419 free_cma:0 [ 344.065474][ T7205] Node 0 active_anon:23696kB inactive_anon:0kB active_file:6396kB inactive_file:159212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118976kB dirty:396kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5376kB pagetables:5192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.102479][ T7205] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 344.135754][ T7205] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.169933][ T7205] lowmem_reserve[]: 0 930 1243 1243 1243 [ 344.176254][ T7205] Node 0 DMA32 free:578848kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1964kB inactive_anon:0kB active_file:2372kB inactive_file:82888kB unevictable:0kB writepending:244kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:36316kB local_pcp:21820kB free_cma:0kB [ 344.209903][ T7205] lowmem_reserve[]: 0 0 312 312 312 [ 344.215800][ T7205] Node 0 Normal free:17256kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21716kB inactive_anon:0kB active_file:4024kB inactive_file:76324kB unevictable:1536kB writepending:152kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:13256kB local_pcp:5436kB free_cma:0kB [ 344.248632][ T7205] lowmem_reserve[]: 0 0 0 0 0 [ 344.260907][ T7205] Node 1 Normal free:907768kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 344.293033][ T7205] lowmem_reserve[]: 0 0 0 0 0 [ 344.298383][ T7205] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 344.313107][ T7205] Node 0 DMA32: 142*4kB (UM) 11*8kB (UM) 7*16kB (ME) 9*32kB (UME) 6*64kB (UM) 5*128kB (UM) 3*256kB (M) 5*512kB (UME) 6*1024kB (UM) 7*2048kB (UM) 135*4096kB (UM) = 578848kB [ 344.332874][ T7205] Node 0 Normal: 20*4kB (UE) 26*8kB (UM) 4*16kB (UM) 13*32kB (UM) 13*64kB (UME) 2*128kB (U) 6*256kB (UE) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 2*4096kB (M) = 17216kB [ 344.355819][ T7205] Node 1 Normal: 12*4kB (UE) 17*8kB (UME) 22*16kB (UME) 21*32kB (UME) 23*64kB (UME) 13*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 907768kB [ 344.377217][ T7205] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.387394][ T7205] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.397279][ T7205] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.407328][ T7205] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.417240][ T7205] 42811 total pagecache pages [ 344.422353][ T7205] 0 pages in swap cache [ 344.426705][ T7205] Free swap = 124996kB [ 344.431433][ T7205] Total swap = 124996kB [ 344.435786][ T7205] 2097051 pages RAM [ 344.440487][ T7205] 0 pages HighMem/MovableOnly [ 344.448431][ T7205] 1530865 pages reserved [ 344.454017][ T7205] 0 pages cma reserved [ 345.001047][ T7209] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 345.660179][ T7228] vlan2: entered promiscuous mode [ 347.381165][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.387991][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.877725][ T7252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 348.409464][ T7270] vlan2: entered promiscuous mode [ 348.414772][ T7270] ip6gretap0: entered promiscuous mode [ 348.511901][ T7274] netlink: 68 bytes leftover after parsing attributes in process `syz.3.506'. [ 349.192236][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.2.511'. [ 351.170992][ T7305] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 351.457780][ T7315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.524'. [ 354.002994][ T7350] warn_alloc: 2 callbacks suppressed [ 354.003066][ T7350] syz.4.537: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 354.024556][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.4.537 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 354.024706][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.024787][ T7350] Call Trace: [ 354.024837][ T7350] [ 354.024894][ T7350] __dump_stack+0x26/0x30 [ 354.025066][ T7350] dump_stack_lvl+0x1df/0x270 [ 354.025242][ T7350] dump_stack+0x1e/0x25 [ 354.025395][ T7350] warn_alloc+0x470/0x690 [ 354.025596][ T7350] ? kmsan_get_metadata+0xfb/0x160 [ 354.025798][ T7350] __vmalloc_node_range_noprof+0x133/0x2360 [ 354.026012][ T7350] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.026215][ T7350] ? should_fail_ex+0x45/0x8a0 [ 354.026375][ T7350] ? kmsan_get_metadata+0xfb/0x160 [ 354.026560][ T7350] ? kmsan_get_metadata+0xfb/0x160 [ 354.026740][ T7350] ? kmsan_get_metadata+0xfb/0x160 [ 354.026932][ T7350] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 354.027133][ T7350] ? kmsan_get_metadata+0xfb/0x160 [ 354.027328][ T7350] vmalloc_user_noprof+0xce/0x140 [ 354.027494][ T7350] ? xskq_create+0x11d/0x290 [ 354.027659][ T7350] xskq_create+0x11d/0x290 [ 354.027823][ T7350] xsk_init_queue+0xfd/0x1d0 [ 354.027986][ T7350] xsk_setsockopt+0x873/0xc30 [ 354.028158][ T7350] do_sock_setsockopt+0x4dc/0x820 [ 354.028311][ T7350] ? __pfx_xsk_setsockopt+0x10/0x10 [ 354.028468][ T7350] __x64_sys_setsockopt+0x2ad/0x4a0 [ 354.028640][ T7350] x64_sys_call+0x36f7/0x3db0 [ 354.028818][ T7350] do_syscall_64+0xd9/0x210 [ 354.028967][ T7350] ? irqentry_exit+0x16/0x60 [ 354.029087][ T7350] ? clear_bhb_loop+0x40/0x90 [ 354.029238][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.029386][ T7350] RIP: 0033:0x7fcddb58e929 [ 354.029489][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.029606][ T7350] RSP: 002b:00007fcddc472038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.029734][ T7350] RAX: ffffffffffffffda RBX: 00007fcddb7b6080 RCX: 00007fcddb58e929 [ 354.029835][ T7350] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 354.029924][ T7350] RBP: 00007fcddb610b39 R08: 0000000000000004 R09: 0000000000000000 [ 354.030008][ T7350] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.030098][ T7350] R13: 0000000000000000 R14: 00007fcddb7b6080 R15: 00007ffd927da8c8 [ 354.030222][ T7350] [ 354.270130][ T7350] Mem-Info: [ 354.277013][ T7350] active_anon:6143 inactive_anon:0 isolated_anon:0 [ 354.277013][ T7350] active_file:1599 inactive_file:39858 isolated_file:0 [ 354.277013][ T7350] unevictable:768 dirty:63 writeback:0 [ 354.277013][ T7350] slab_reclaimable:4754 slab_unreclaimable:22534 [ 354.277013][ T7350] mapped:29733 shmem:1362 pagetables:1405 [ 354.277013][ T7350] sec_pagetables:0 bounce:0 [ 354.277013][ T7350] kernel_misc_reclaimable:0 [ 354.277013][ T7350] free:376993 free_pcp:12183 free_cma:0 [ 354.323452][ T7350] Node 0 active_anon:24572kB inactive_anon:0kB active_file:6396kB inactive_file:159228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118932kB dirty:252kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5344kB pagetables:5260kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.357535][ T7350] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 354.392433][ T7350] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.422791][ T7350] lowmem_reserve[]: 0 930 1243 1243 1243 [ 354.429274][ T7350] Node 0 DMA32 free:578848kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1964kB inactive_anon:0kB active_file:2372kB inactive_file:82888kB unevictable:0kB writepending:68kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:36320kB local_pcp:14496kB free_cma:0kB [ 354.461607][ T7350] lowmem_reserve[]: 0 0 312 312 312 [ 354.467477][ T7350] Node 0 Normal free:17260kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22752kB inactive_anon:0kB active_file:4024kB inactive_file:76340kB unevictable:1536kB writepending:184kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:12384kB local_pcp:5092kB free_cma:0kB [ 354.502740][ T7350] lowmem_reserve[]: 0 0 0 0 0 [ 354.508087][ T7350] Node 1 Normal free:907768kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 354.540111][ T7350] lowmem_reserve[]: 0 0 0 0 0 [ 354.545451][ T7350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 354.559233][ T7350] Node 0 DMA32: 142*4kB (UM) 11*8kB (UM) 7*16kB (ME) 9*32kB (UME) 6*64kB (UM) 5*128kB (UM) 3*256kB (M) 5*512kB (UME) 6*1024kB (UM) 7*2048kB (UM) 135*4096kB (UM) = 578848kB [ 354.582627][ T7350] Node 0 Normal: 17*4kB (UE) 23*8kB (UM) 13*16kB (U) 12*32kB (U) 14*64kB (UE) 3*128kB (UM) 7*256kB (UME) 4*512kB (UME) 1*1024kB (E) 1*2048kB (U) 2*4096kB (M) = 17228kB [ 354.602226][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 354.602357][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 354.602471][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 354.621593][ T7350] Node 1 Normal: 12*4kB (UE) 17*8kB (UME) 22*16kB (UME) 21*32kB (UME) 23*64kB (UME) 13*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 907768kB [ 354.642135][ T7350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.652168][ T7350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.661942][ T7350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 354.673230][ T7350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 354.685575][ T7350] 42815 total pagecache pages [ 354.691524][ T7350] 0 pages in swap cache [ 354.695876][ T7350] Free swap = 124996kB [ 354.701007][ T7350] Total swap = 124996kB [ 354.705363][ T7350] 2097051 pages RAM [ 354.710164][ T7350] 0 pages HighMem/MovableOnly [ 354.715047][ T7350] 1530865 pages reserved [ 354.719712][ T7350] 0 pages cma reserved [ 354.980305][ T7349] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 357.359261][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.1.551'. [ 361.294627][ T7439] netlink: 332 bytes leftover after parsing attributes in process `syz.1.572'. [ 361.304326][ T7439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.572'. [ 361.314079][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'. [ 362.396492][ T7450] netlink: 'syz.3.577': attribute type 5 has an invalid length. [ 362.904831][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 362.987309][ T7462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 363.922249][ T7476] netlink: 332 bytes leftover after parsing attributes in process `syz.3.589'. [ 363.932461][ T7476] netlink: 104 bytes leftover after parsing attributes in process `syz.3.589'. [ 363.941860][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.3.589'. [ 365.248357][ T7494] netlink: 'syz.3.595': attribute type 5 has an invalid length. [ 365.339960][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.597'. [ 366.433929][ T7515] netlink: 332 bytes leftover after parsing attributes in process `syz.3.605'. [ 366.444800][ T7515] netlink: 104 bytes leftover after parsing attributes in process `syz.3.605'. [ 366.455432][ T7515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.605'. [ 367.594609][ T7533] netlink: 'syz.2.612': attribute type 5 has an invalid length. [ 367.847515][ T7540] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 368.140008][ T7543] netlink: 84 bytes leftover after parsing attributes in process `syz.1.617'. [ 368.599988][ T7552] ip6gretap0: entered promiscuous mode [ 368.605878][ T7552] vlan2: entered promiscuous mode [ 369.946441][ T7569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.629'. [ 370.087803][ T7567] netlink: 'syz.0.628': attribute type 5 has an invalid length. [ 370.915648][ T7584] ip6gretap0: entered promiscuous mode [ 370.921702][ T7584] vlan2: entered promiscuous mode [ 372.770021][ T7613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.647'. [ 373.124407][ T7611] netlink: 'syz.4.646': attribute type 5 has an invalid length. [ 373.611375][ T7622] netlink: 124 bytes leftover after parsing attributes in process `syz.1.651'. [ 376.034568][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 376.108520][ T7657] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 377.435684][ T7686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.677'. [ 377.449409][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 379.690027][ T7718] Bluetooth: MGMT ver 1.23 [ 381.694300][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 382.273035][ T7754] vlan2: entered promiscuous mode [ 383.706650][ T7771] xt_CT: No such helper "syz0" [ 384.386766][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 384.981072][ T7797] syz_tun: entered promiscuous mode [ 384.986692][ T7797] vlan2: entered promiscuous mode [ 386.502377][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 388.074244][ T7840] ip6gre1: entered allmulticast mode [ 389.025452][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 390.898361][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.4.762'. [ 391.385354][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.763'. [ 394.037784][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 396.911627][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 397.708623][ T7969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 399.655746][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 400.550768][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.807'. [ 402.146864][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 402.606561][ T8033] netlink: 332 bytes leftover after parsing attributes in process `syz.3.819'. [ 402.616352][ T8033] netlink: 104 bytes leftover after parsing attributes in process `syz.3.819'. [ 402.626196][ T8033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.819'. [ 404.912820][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.833'. [ 405.439889][ T8072] bpq0: entered promiscuous mode [ 405.445103][ T8072] bpq0: entered allmulticast mode [ 405.453359][ T8077] netlink: 'syz.0.836': attribute type 9 has an invalid length. [ 405.461943][ T8077] netlink: 'syz.0.836': attribute type 9 has an invalid length. [ 405.484181][ T8076] netlink: 332 bytes leftover after parsing attributes in process `syz.2.835'. [ 405.494103][ T8076] netlink: 104 bytes leftover after parsing attributes in process `syz.2.835'. [ 405.503542][ T8076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.835'. [ 405.584950][ T8079] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 405.912468][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 406.011734][ T8083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 406.028976][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.195143][ T8083] bridge_slave_1 (unregistering): left allmulticast mode [ 406.202833][ T8083] bridge_slave_1 (unregistering): left promiscuous mode [ 406.210434][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.991414][ T8097] ip6gre1: entered allmulticast mode [ 407.394753][ T8104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.845'. [ 408.236033][ T8120] netlink: 332 bytes leftover after parsing attributes in process `syz.2.850'. [ 408.251097][ T8120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.850'. [ 408.260555][ T8120] netlink: 32 bytes leftover after parsing attributes in process `syz.2.850'. [ 408.823717][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.830643][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.370799][ T8151] __nla_validate_parse: 2 callbacks suppressed [ 410.370878][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 411.169969][ T8163] netlink: 332 bytes leftover after parsing attributes in process `syz.3.863'. [ 411.179526][ T8163] netlink: 104 bytes leftover after parsing attributes in process `syz.3.863'. [ 411.189027][ T8163] netlink: 32 bytes leftover after parsing attributes in process `syz.3.863'. [ 411.974077][ T8178] ip6gre1: entered allmulticast mode [ 412.913996][ T8193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.875'. [ 414.674414][ T8224] ip6gre1: entered allmulticast mode [ 416.083346][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.1.892'. [ 418.575920][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.907'. [ 421.411177][ T8331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 423.690484][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 425.036781][ T30] audit: type=1326 audit(1750893212.148:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.060858][ T30] audit: type=1326 audit(1750893212.158:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.083502][ T30] audit: type=1326 audit(1750893212.188:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.101472][ T8387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.944'. [ 425.327977][ T30] audit: type=1326 audit(1750893212.308:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.353544][ T30] audit: type=1326 audit(1750893212.308:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.376999][ T30] audit: type=1326 audit(1750893212.308:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.399795][ T30] audit: type=1326 audit(1750893212.308:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.422421][ T30] audit: type=1326 audit(1750893212.318:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.447803][ T30] audit: type=1326 audit(1750893212.318:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 425.471351][ T30] audit: type=1326 audit(1750893212.318:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 426.596512][ T49] Bluetooth: hci4: link tx timeout [ 426.602252][ T49] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 426.837549][ T8408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.845760][ T8408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.896739][ T8408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.904875][ T8408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.371012][ T8415] pim6reg1: entered promiscuous mode [ 427.376721][ T8415] pim6reg1: entered allmulticast mode [ 428.273305][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.959'. [ 428.630527][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 429.118052][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 430.541149][ T8464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 432.799694][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 433.209264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 436.442707][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1008'. [ 438.308975][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1023'. [ 438.512039][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 438.512122][ T30] audit: type=1326 audit(1750893225.628:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34d98e929 code=0x7ffc0000 [ 438.659204][ T30] audit: type=1326 audit(1750893225.688:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc34d98e929 code=0x7ffc0000 [ 438.682287][ T30] audit: type=1326 audit(1750893225.688:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34d98e929 code=0x7ffc0000 [ 438.705413][ T30] audit: type=1326 audit(1750893225.718:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc34d98e929 code=0x7ffc0000 [ 438.893089][ T30] audit: type=1326 audit(1750893225.908:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8578 comm="syz.1.1024" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fc34d98e929 code=0x7ffc0000 [ 438.936239][ T8589] vlan2: entered promiscuous mode [ 440.342088][ T8610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1036'. [ 440.945007][ T8617] vlan2: entered promiscuous mode [ 442.476774][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1051'. [ 443.136749][ T8652] vlan2: entered promiscuous mode [ 443.590333][ T8661] loop1: detected capacity change from 0 to 256 [ 443.642109][ T8661] msdos: Unknown parameter 'dLts' [ 445.169266][ T8684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1065'. [ 445.696050][ T30] audit: type=1326 audit(1750893232.808:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982758e929 code=0x7ffc0000 [ 445.834507][ T30] audit: type=1326 audit(1750893232.888:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982758e929 code=0x7ffc0000 [ 446.210138][ T8696] vlan2: entered promiscuous mode [ 448.005001][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1080'. [ 450.581387][ T8749] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 453.000139][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1110'. [ 455.276673][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1125'. [ 459.270728][ T8848] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1140'. [ 460.141258][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 460.171247][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 460.183008][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 460.207743][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 460.221547][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.910167][ T8870] loop2: detected capacity change from 0 to 1024 [ 460.924911][ T8870] ======================================================= [ 460.924911][ T8870] WARNING: The mand mount option has been deprecated and [ 460.924911][ T8870] and is ignored by this kernel. Remove the mand [ 460.924911][ T8870] option from the mount to silence this warning. [ 460.924911][ T8870] ======================================================= [ 461.176390][ T8870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.380931][ T30] audit: type=1800 audit(1750893248.508:23): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1149" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 461.827260][ T5801] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.040773][ T8888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1153'. [ 462.142562][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 462.309411][ T5795] Bluetooth: hci5: command tx timeout [ 462.365161][ T8892] loop0: detected capacity change from 0 to 512 [ 462.502171][ T8892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 462.740705][ T8892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.753948][ T8892] ext4 filesystem being mounted at /223/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.512748][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.606004][ T8910] loop3: detected capacity change from 0 to 512 [ 463.643612][ T8910] journal_path: Lookup failure for './file0/../file0/../file0/../file0' [ 463.652518][ T8910] EXT4-fs: error: could not find journal device path [ 464.419483][ T5795] Bluetooth: hci5: command tx timeout [ 464.564843][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.572666][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.582968][ T8859] bridge_slave_0: entered allmulticast mode [ 464.592806][ T8859] bridge_slave_0: entered promiscuous mode [ 465.207930][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 465.554658][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.562452][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.570477][ T8859] bridge_slave_1: entered allmulticast mode [ 465.583721][ T8859] bridge_slave_1: entered promiscuous mode [ 465.972090][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.036609][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.293500][ T8859] team0: Port device team_slave_0 added [ 466.349710][ T8859] team0: Port device team_slave_1 added [ 466.489317][ T5795] Bluetooth: hci5: command tx timeout [ 466.799457][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.806911][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.837057][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.942806][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.950192][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.977050][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.409696][ T8859] hsr_slave_0: entered promiscuous mode [ 467.420143][ T8859] hsr_slave_1: entered promiscuous mode [ 467.431347][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.439412][ T8859] Cannot create hsr debugfs directory [ 468.078407][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1171'. [ 468.139378][ T8939] syz.3.1169 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 468.569233][ T5795] Bluetooth: hci5: command tx timeout [ 469.264915][ T8859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 469.390333][ T8859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 469.500636][ T8859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 469.598722][ T8859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 470.282385][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.290808][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.396195][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1182'. [ 471.023232][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.288417][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.372429][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.380084][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.521828][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.529967][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.807300][ T8859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.811007][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.819792][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.875735][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.884149][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.229694][ T30] audit: type=1326 audit(1750893260.328:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 473.252929][ T30] audit: type=1326 audit(1750893260.358:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.0.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 473.333896][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 474.001477][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.157801][ T9007] loop3: detected capacity change from 0 to 256 [ 474.229701][ T9007] exfat: Deprecated parameter 'namecase' [ 474.235980][ T9007] exfat: Deprecated parameter 'utf8' [ 474.404105][ T9007] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 474.670586][ T9013] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 475.614273][ T3887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.794503][ T3887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.044349][ T3887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.284358][ T3887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.678006][ T3887] bridge_slave_0: left allmulticast mode [ 476.684176][ T3887] bridge_slave_0: left promiscuous mode [ 476.692788][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.690829][ T3887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.754099][ T3887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.801921][ T3887] bond0 (unregistering): Released all slaves [ 478.104982][ T3887] tipc: Left network mode [ 478.123314][ T8859] veth0_vlan: entered promiscuous mode [ 478.345503][ T8859] veth1_vlan: entered promiscuous mode [ 478.757864][ T3887] hsr_slave_0: left promiscuous mode [ 478.775528][ T3887] hsr_slave_1: left promiscuous mode [ 478.812620][ T9042] loop2: detected capacity change from 0 to 256 [ 478.848555][ T3887] team0: left promiscuous mode [ 478.854055][ T3887] team_slave_0: left promiscuous mode [ 478.861184][ T3887] team_slave_1: left promiscuous mode [ 478.868659][ T3887] veth1_macvtap: left promiscuous mode [ 478.874690][ T3887] veth0_macvtap: left promiscuous mode [ 478.880887][ T3887] veth1_vlan: left promiscuous mode [ 478.886546][ T3887] veth0_vlan: left promiscuous mode [ 478.894353][ T9042] exfat: Deprecated parameter 'namecase' [ 478.901515][ T9042] exfat: Deprecated parameter 'utf8' [ 479.429671][ T9042] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 480.076935][ T3887] team0 (unregistering): Port device team_slave_1 removed [ 480.102603][ T3887] team0 (unregistering): Port device team_slave_0 removed [ 480.154684][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.170128][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.191269][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.369689][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.403876][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.551184][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 480.560659][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 480.963222][ T8859] veth0_macvtap: entered promiscuous mode [ 480.998941][ T3887] IPVS: stop unused estimator thread 0... [ 481.052594][ T8859] veth1_macvtap: entered promiscuous mode [ 481.312523][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.419990][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.454775][ T8859] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.464986][ T8859] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.474313][ T8859] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.483465][ T8859] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.450145][ T9053] chnl_net:caif_netlink_parms(): no params data found [ 482.869314][ T49] Bluetooth: hci1: command tx timeout [ 483.326033][ T3783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.476547][ T3783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.649971][ T3783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.880231][ T3783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.936373][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.944220][ T9053] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.952293][ T9053] bridge_slave_0: entered allmulticast mode [ 483.962147][ T9053] bridge_slave_0: entered promiscuous mode [ 484.086900][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.094817][ T9053] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.102796][ T9053] bridge_slave_1: entered allmulticast mode [ 484.112542][ T9053] bridge_slave_1: entered promiscuous mode [ 484.552980][ T9053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.671490][ T9053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.823480][ T3783] bridge_slave_1: left allmulticast mode [ 484.829553][ T3783] bridge_slave_1: left promiscuous mode [ 484.838012][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.930731][ T3783] bridge_slave_0: left allmulticast mode [ 484.938461][ T3783] bridge_slave_0: left promiscuous mode [ 484.945392][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.963790][ T49] Bluetooth: hci1: command tx timeout [ 485.697430][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.707328][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.718659][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.733980][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.760907][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.262983][ T9053] team0: Port device team_slave_0 added [ 486.378422][ T9053] team0: Port device team_slave_1 added [ 486.397230][ T3783] tipc: Left network mode [ 486.716851][ T9109] random: crng reseeded on system resumption [ 486.817195][ T30] audit: type=1326 audit(1750893273.938:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 486.887222][ T30] audit: type=1326 audit(1750893273.968:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 486.888447][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.910493][ T30] audit: type=1326 audit(1750893273.968:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 486.916871][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.917188][ T9053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.939704][ T30] audit: type=1326 audit(1750893273.978:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.000623][ T30] audit: type=1326 audit(1750893273.978:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.023871][ T30] audit: type=1326 audit(1750893273.978:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.046700][ T30] audit: type=1326 audit(1750893273.978:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.069453][ T30] audit: type=1326 audit(1750893273.978:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.093940][ T30] audit: type=1326 audit(1750893273.978:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.119732][ T30] audit: type=1326 audit(1750893273.988:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.0.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 487.135285][ T9053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.144089][ T5795] Bluetooth: hci1: command tx timeout [ 487.150943][ T9053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.183145][ T9053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.244568][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 487.254202][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1230'. [ 487.508955][ T3783] hsr_slave_0: left promiscuous mode [ 487.543864][ T3783] hsr_slave_1: left promiscuous mode [ 487.552108][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.561620][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.623030][ T3783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.631038][ T3783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.720243][ T3783] veth1_macvtap: left promiscuous mode [ 487.726057][ T3783] veth0_macvtap: left promiscuous mode [ 487.732799][ T3783] veth1_vlan: left promiscuous mode [ 487.738398][ T3783] veth0_vlan: left promiscuous mode [ 487.839456][ T49] Bluetooth: hci2: command tx timeout [ 488.505999][ T3783] team0 (unregistering): Port device team_slave_1 removed [ 488.576405][ T3783] team0 (unregistering): Port device team_slave_0 removed [ 488.808361][ T9125] program syz.4.1232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 489.250715][ T49] Bluetooth: hci1: command tx timeout [ 489.467433][ T9053] hsr_slave_0: entered promiscuous mode [ 489.477684][ T9053] hsr_slave_1: entered promiscuous mode [ 489.909079][ T49] Bluetooth: hci2: command tx timeout [ 490.706142][ T9100] chnl_net:caif_netlink_parms(): no params data found [ 490.831612][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.840062][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.044960][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.053899][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.373604][ T9053] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 491.456799][ T9053] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 491.540343][ T9053] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 491.650575][ T9053] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 491.998140][ T49] Bluetooth: hci2: command tx timeout [ 492.006229][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1238'. [ 492.017372][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1238'. [ 492.714133][ T9100] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.725139][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.733352][ T9100] bridge_slave_0: entered allmulticast mode [ 492.743034][ T9100] bridge_slave_0: entered promiscuous mode [ 492.785638][ T9100] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.794013][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.802050][ T9100] bridge_slave_1: entered allmulticast mode [ 492.811841][ T9100] bridge_slave_1: entered promiscuous mode [ 492.989592][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 492.989676][ T30] audit: type=1326 audit(1750893280.108:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9166 comm="syz.4.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 493.077914][ T9100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.191812][ T9100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.667585][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.683757][ T9100] team0: Port device team_slave_0 added [ 493.776095][ T9100] team0: Port device team_slave_1 added [ 494.070390][ T49] Bluetooth: hci2: command tx timeout [ 494.105864][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.113801][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.140769][ T9100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.224179][ T9100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.232262][ T9100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.261652][ T9100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.306761][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.433569][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.441305][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.557637][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.565342][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.906647][ T9100] hsr_slave_0: entered promiscuous mode [ 494.917383][ T9100] hsr_slave_1: entered promiscuous mode [ 494.926773][ T9100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.934748][ T9100] Cannot create hsr debugfs directory [ 495.699681][ T9202] program syz.5.1249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 496.260171][ T30] audit: type=1326 audit(1750893283.368:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 496.405146][ T30] audit: type=1326 audit(1750893283.428:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9207 comm="syz.0.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 496.751162][ T9100] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 496.921306][ T9100] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 497.022361][ T9100] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 497.077307][ T9100] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 497.137211][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.320793][ T30] audit: type=1326 audit(1750893285.428:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.343602][ T30] audit: type=1326 audit(1750893285.428:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.553096][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.580363][ T30] audit: type=1326 audit(1750893285.548:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.607481][ T30] audit: type=1326 audit(1750893285.548:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.632819][ T30] audit: type=1326 audit(1750893285.548:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.657494][ T30] audit: type=1326 audit(1750893285.548:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.681381][ T30] audit: type=1326 audit(1750893285.558:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.706765][ T30] audit: type=1326 audit(1750893285.558:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.732248][ T30] audit: type=1326 audit(1750893285.558:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.755311][ T30] audit: type=1326 audit(1750893285.568:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9234 comm="syz.5.1259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0e58e929 code=0x7ffc0000 [ 498.914511][ T9100] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.945131][ T9240] program syz.4.1260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 499.061544][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.069239][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.209809][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.217403][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.695014][ T9053] veth0_vlan: entered promiscuous mode [ 500.815918][ T9053] veth1_vlan: entered promiscuous mode [ 500.829078][ T9260] syz.5.1264: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.844949][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.5.1264 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 500.845102][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 500.845186][ T9260] Call Trace: [ 500.845240][ T9260] [ 500.845290][ T9260] __dump_stack+0x26/0x30 [ 500.845460][ T9260] dump_stack_lvl+0x1df/0x270 [ 500.845635][ T9260] dump_stack+0x1e/0x25 [ 500.845788][ T9260] warn_alloc+0x470/0x690 [ 500.845989][ T9260] ? kmsan_get_metadata+0xfb/0x160 [ 500.846189][ T9260] __vmalloc_node_range_noprof+0x133/0x2360 [ 500.846363][ T9260] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 500.846562][ T9260] ? should_fail_ex+0x45/0x8a0 [ 500.846720][ T9260] ? kmsan_get_metadata+0xfb/0x160 [ 500.846911][ T9260] ? kmsan_get_metadata+0xfb/0x160 [ 500.847092][ T9260] ? kmsan_get_metadata+0xfb/0x160 [ 500.847276][ T9260] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 500.847478][ T9260] ? kmsan_get_metadata+0xfb/0x160 [ 500.847672][ T9260] vmalloc_user_noprof+0xce/0x140 [ 500.847931][ T9260] ? xskq_create+0x11d/0x290 [ 500.848100][ T9260] xskq_create+0x11d/0x290 [ 500.848265][ T9260] xsk_init_queue+0xfd/0x1d0 [ 500.848422][ T9260] xsk_setsockopt+0x873/0xc30 [ 500.848604][ T9260] do_sock_setsockopt+0x4dc/0x820 [ 500.848762][ T9260] ? __pfx_xsk_setsockopt+0x10/0x10 [ 500.848917][ T9260] __x64_sys_setsockopt+0x2ad/0x4a0 [ 500.849096][ T9260] x64_sys_call+0x36f7/0x3db0 [ 500.849280][ T9260] do_syscall_64+0xd9/0x210 [ 500.849423][ T9260] ? irqentry_exit+0x16/0x60 [ 500.849591][ T9260] ? clear_bhb_loop+0x40/0x90 [ 500.849747][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.849906][ T9260] RIP: 0033:0x7fbe0e58e929 [ 500.850026][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.850139][ T9260] RSP: 002b:00007fbe0f4c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.850272][ T9260] RAX: ffffffffffffffda RBX: 00007fbe0e7b5fa0 RCX: 00007fbe0e58e929 [ 500.850368][ T9260] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 500.850447][ T9260] RBP: 00007fbe0e610b39 R08: 0000000000000004 R09: 0000000000000000 [ 500.850563][ T9260] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.850653][ T9260] R13: 0000000000000000 R14: 00007fbe0e7b5fa0 R15: 00007fff68322438 [ 500.850775][ T9260] [ 501.097622][ T9260] Mem-Info: [ 501.103319][ T9260] active_anon:6240 inactive_anon:0 isolated_anon:0 [ 501.103319][ T9260] active_file:1650 inactive_file:39921 isolated_file:0 [ 501.103319][ T9260] unevictable:768 dirty:50 writeback:0 [ 501.103319][ T9260] slab_reclaimable:4909 slab_unreclaimable:23548 [ 501.103319][ T9260] mapped:29722 shmem:1439 pagetables:1509 [ 501.103319][ T9260] sec_pagetables:0 bounce:0 [ 501.103319][ T9260] kernel_misc_reclaimable:0 [ 501.103319][ T9260] free:379000 free_pcp:9364 free_cma:0 [ 501.151248][ T9260] Node 0 active_anon:24960kB inactive_anon:0kB active_file:6600kB inactive_file:159480kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118888kB dirty:200kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5152kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 501.186197][ T9260] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 501.221100][ T9260] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.251386][ T9260] lowmem_reserve[]: 0 930 1243 1243 1243 [ 501.257719][ T9260] Node 0 DMA32 free:587216kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4812kB inactive_anon:0kB active_file:2508kB inactive_file:83008kB unevictable:0kB writepending:80kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:23440kB local_pcp:9208kB free_cma:0kB [ 501.290098][ T9260] lowmem_reserve[]: 0 0 312 312 312 [ 501.295970][ T9260] Node 0 Normal free:16908kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20180kB inactive_anon:0kB active_file:4092kB inactive_file:76472kB unevictable:1536kB writepending:120kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:13992kB local_pcp:6876kB free_cma:0kB [ 501.334175][ T9260] lowmem_reserve[]: 0 0 0 0 0 [ 501.340307][ T9260] Node 1 Normal free:907780kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.358244][ T9053] veth0_macvtap: entered promiscuous mode [ 501.371502][ T9260] lowmem_reserve[]: 0 0 0 0 0 [ 501.382678][ T9260] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 501.396028][ T9260] Node 0 DMA32: 2*4kB (UM) 115*8kB (ME) 153*16kB (UME) 59*32kB (ME) 27*64kB (ME) 15*128kB (UM) 21*256kB (UM) 29*512kB (UM) 17*1024kB (UM) 8*2048kB (UM) 128*4096kB (UM) = 587216kB [ 501.416175][ T9260] Node 0 Normal: 60*4kB (ME) 16*8kB (ME) 6*16kB (ME) 10*32kB (UME) 9*64kB (UM) 7*128kB (UME) 1*256kB (E) 4*512kB (UE) 2*1024kB (E) 1*2048kB (U) 2*4096kB (M) = 16848kB [ 501.437026][ T9260] Node 1 Normal: 11*4kB (UE) 17*8kB (UME) 21*16kB (UME) 20*32kB (UME) 24*64kB (UME) 13*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 907780kB [ 501.458151][ T9260] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.468118][ T9260] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.479773][ T9260] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.489929][ T9260] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.499638][ T9260] 43006 total pagecache pages [ 501.504571][ T9260] 0 pages in swap cache [ 501.509251][ T9260] Free swap = 124996kB [ 501.513606][ T9260] Total swap = 124996kB [ 501.517968][ T9260] 2097051 pages RAM [ 501.526427][ T9260] 0 pages HighMem/MovableOnly [ 501.532108][ T9260] 1530865 pages reserved [ 501.536559][ T9260] 0 pages cma reserved [ 501.558589][ T9053] veth1_macvtap: entered promiscuous mode [ 501.622914][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.766455][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.868637][ T9053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.877979][ T9053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.887228][ T9053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.896527][ T9053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.456321][ T9100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.220853][ T9292] program syz.0.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.527469][ T9279] loop5: detected capacity change from 0 to 8192 [ 505.792178][ T9100] veth0_vlan: entered promiscuous mode [ 505.925507][ T9100] veth1_vlan: entered promiscuous mode [ 506.026135][ T9325] loop5: detected capacity change from 0 to 512 [ 506.105588][ T9325] ext4: Unknown parameter 'mask' [ 506.391766][ T9100] veth0_macvtap: entered promiscuous mode [ 506.556580][ T9100] veth1_macvtap: entered promiscuous mode [ 506.822729][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.915092][ T9100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.065365][ T9100] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.074756][ T9100] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.084015][ T9100] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.093234][ T9100] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.396894][ T9339] loop4: detected capacity change from 0 to 512 [ 507.513018][ T9339] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 507.732391][ T9339] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.745733][ T9339] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.558205][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.486650][ T4098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.495740][ T4098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.902775][ T3783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.911129][ T3783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.897358][ T9404] loop4: detected capacity change from 0 to 512 [ 512.060118][ T9404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 512.249313][ T9404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.262759][ T9404] ext4 filesystem being mounted at /292/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.015076][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.544131][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 513.544208][ T30] audit: type=1326 audit(1750893300.648:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.573860][ T30] audit: type=1326 audit(1750893300.648:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.597130][ T30] audit: type=1326 audit(1750893300.678:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.622205][ T30] audit: type=1326 audit(1750893300.678:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.645672][ T30] audit: type=1326 audit(1750893300.678:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.668539][ T30] audit: type=1326 audit(1750893300.698:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcddb58d3df code=0x7ffc0000 [ 513.691257][ T30] audit: type=1326 audit(1750893300.718:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.716216][ T30] audit: type=1326 audit(1750893300.768:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.739720][ T30] audit: type=1326 audit(1750893300.768:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 513.763814][ T30] audit: type=1326 audit(1750893300.768:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9429 comm="syz.4.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcddb58e929 code=0x7ffc0000 [ 514.374190][ T9443] loop6: detected capacity change from 0 to 1024 [ 514.406342][ T9443] EXT4-fs: Ignoring removed nobh option [ 514.412533][ T9443] EXT4-fs: Ignoring removed bh option [ 514.624222][ T9443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.710420][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.718503][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.016909][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.025466][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.739682][ T9053] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.827706][ T9469] loop4: detected capacity change from 0 to 512 [ 516.984248][ T9469] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 517.202399][ T9469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.216504][ T9469] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 518.038168][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.576592][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 518.576668][ T30] audit: type=1326 audit(1750893305.698:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.608705][ T30] audit: type=1326 audit(1750893305.698:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.637291][ T30] audit: type=1326 audit(1750893305.698:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.662988][ T30] audit: type=1326 audit(1750893305.708:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.687620][ T30] audit: type=1326 audit(1750893305.708:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.711693][ T30] audit: type=1326 audit(1750893305.708:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.737336][ T30] audit: type=1326 audit(1750893305.708:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.761068][ T30] audit: type=1326 audit(1750893305.708:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 518.783913][ T30] audit: type=1326 audit(1750893305.708:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fceb0d8e963 code=0x7ffc0000 [ 518.806578][ T30] audit: type=1326 audit(1750893305.788:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9494 comm="syz.6.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fceb0d8d3df code=0x7ffc0000 [ 518.951469][ T9497] loop6: detected capacity change from 0 to 1024 [ 519.008363][ T9504] loop4: detected capacity change from 0 to 1024 [ 519.008503][ T9497] ext4: Unknown parameter 'uid<00000000000000000000' [ 519.051395][ T9504] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 519.190747][ T9504] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.1315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 519.235238][ T9504] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1315: Bad quota inode: 3, type: 0 [ 519.421142][ T9504] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 519.560121][ T9504] EXT4-fs (loop4): mount failed [ 519.774142][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 521.051836][ T9530] loop4: detected capacity change from 0 to 512 [ 521.120517][ T9530] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 521.410375][ T9530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.423669][ T9530] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.425946][ T9541] loop7: detected capacity change from 0 to 1024 [ 521.683535][ T9541] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 521.701075][ T9541] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.538704][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.639838][ T753] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 393: padding at end of block bitmap is not set [ 522.674492][ T753] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 248 with error 117 [ 522.687701][ T753] EXT4-fs (loop7): This should not happen!! Data will be lost [ 522.687701][ T753] [ 522.748704][ T753] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 522.762440][ T753] EXT4-fs (loop7): This should not happen!! Data will be lost [ 522.762440][ T753] [ 522.772570][ T753] EXT4-fs (loop7): Total free blocks count 0 [ 522.778875][ T753] EXT4-fs (loop7): Free/Dirty block details [ 522.784994][ T753] EXT4-fs (loop7): free_blocks=0 [ 522.790386][ T753] EXT4-fs (loop7): dirty_blocks=32 [ 522.795728][ T753] EXT4-fs (loop7): Block reservation details [ 524.898015][ T9590] vlan2: entered promiscuous mode [ 525.190732][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 525.190805][ T30] audit: type=1326 audit(1750893312.318:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 525.364463][ T30] audit: type=1326 audit(1750893312.348:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 525.391301][ T30] audit: type=1326 audit(1750893312.358:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9598 comm="syz.6.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 526.438225][ T9615] loop4: detected capacity change from 0 to 1024 [ 526.647444][ T9615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.660470][ T9615] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.981945][ T9615] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1349: bg 0: block 393: padding at end of block bitmap is not set [ 527.050351][ T9615] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 527.063892][ T9615] EXT4-fs (loop4): This should not happen!! Data will be lost [ 527.063892][ T9615] [ 527.074083][ T9615] EXT4-fs (loop4): Total free blocks count 0 [ 527.080622][ T9615] EXT4-fs (loop4): Free/Dirty block details [ 527.086753][ T9615] EXT4-fs (loop4): free_blocks=0 [ 527.092211][ T9615] EXT4-fs (loop4): dirty_blocks=16 [ 527.097554][ T9615] EXT4-fs (loop4): Block reservation details [ 527.104017][ T9615] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 527.191941][ T30] audit: type=1326 audit(1750893314.288:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.337185][ T30] audit: type=1326 audit(1750893314.358:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.360930][ T30] audit: type=1326 audit(1750893314.358:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.384058][ T30] audit: type=1326 audit(1750893314.388:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.407012][ T30] audit: type=1326 audit(1750893314.388:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.434571][ T30] audit: type=1326 audit(1750893314.398:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.459343][ T30] audit: type=1326 audit(1750893314.398:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9625 comm="syz.0.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 527.747478][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.184219][ T9656] vlan2: entered promiscuous mode [ 531.706459][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.713618][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.702257][ T9697] warn_alloc: 2 callbacks suppressed [ 532.702333][ T9697] syz.6.1372: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 532.724679][ T9697] CPU: 0 UID: 0 PID: 9697 Comm: syz.6.1372 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 532.724824][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 532.724905][ T9697] Call Trace: [ 532.724954][ T9697] [ 532.725003][ T9697] __dump_stack+0x26/0x30 [ 532.725170][ T9697] dump_stack_lvl+0x1df/0x270 [ 532.725354][ T9697] dump_stack+0x1e/0x25 [ 532.725507][ T9697] warn_alloc+0x470/0x690 [ 532.725708][ T9697] ? kmsan_get_metadata+0xfb/0x160 [ 532.725910][ T9697] __vmalloc_node_range_noprof+0x133/0x2360 [ 532.726091][ T9697] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.726298][ T9697] ? should_fail_ex+0x45/0x8a0 [ 532.726455][ T9697] ? kmsan_get_metadata+0xfb/0x160 [ 532.726641][ T9697] ? kmsan_get_metadata+0xfb/0x160 [ 532.726822][ T9697] ? kmsan_get_metadata+0xfb/0x160 [ 532.727006][ T9697] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 532.727206][ T9697] ? kmsan_get_metadata+0xfb/0x160 [ 532.727404][ T9697] vmalloc_user_noprof+0xce/0x140 [ 532.727568][ T9697] ? xskq_create+0x11d/0x290 [ 532.727730][ T9697] xskq_create+0x11d/0x290 [ 532.727895][ T9697] xsk_init_queue+0xfd/0x1d0 [ 532.728052][ T9697] xsk_setsockopt+0x873/0xc30 [ 532.728231][ T9697] do_sock_setsockopt+0x4dc/0x820 [ 532.728385][ T9697] ? __pfx_xsk_setsockopt+0x10/0x10 [ 532.728541][ T9697] __x64_sys_setsockopt+0x2ad/0x4a0 [ 532.728723][ T9697] x64_sys_call+0x36f7/0x3db0 [ 532.728904][ T9697] do_syscall_64+0xd9/0x210 [ 532.729040][ T9697] ? irqentry_exit+0x16/0x60 [ 532.729161][ T9697] ? clear_bhb_loop+0x40/0x90 [ 532.729320][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.729467][ T9697] RIP: 0033:0x7fceb0d8e929 [ 532.729570][ T9697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.729688][ T9697] RSP: 002b:00007fceb1bee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 532.729818][ T9697] RAX: ffffffffffffffda RBX: 00007fceb0fb5fa0 RCX: 00007fceb0d8e929 [ 532.729915][ T9697] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 532.729994][ T9697] RBP: 00007fceb0e10b39 R08: 0000000000000004 R09: 0000000000000000 [ 532.730079][ T9697] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.730167][ T9697] R13: 0000000000000000 R14: 00007fceb0fb5fa0 R15: 00007fff5b6905b8 [ 532.730299][ T9697] [ 532.976885][ T9697] Mem-Info: [ 532.983472][ T9697] active_anon:6488 inactive_anon:0 isolated_anon:0 [ 532.983472][ T9697] active_file:1650 inactive_file:39936 isolated_file:0 [ 532.983472][ T9697] unevictable:768 dirty:93 writeback:0 [ 532.983472][ T9697] slab_reclaimable:5042 slab_unreclaimable:24441 [ 532.983472][ T9697] mapped:29772 shmem:1447 pagetables:1576 [ 532.983472][ T9697] sec_pagetables:0 bounce:0 [ 532.983472][ T9697] kernel_misc_reclaimable:0 [ 532.983472][ T9697] free:375172 free_pcp:12056 free_cma:0 [ 533.029269][ T9697] Node 0 active_anon:25816kB inactive_anon:0kB active_file:6600kB inactive_file:159540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119088kB dirty:372kB writeback:0kB shmem:4252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5248kB pagetables:5944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.067264][ T9697] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 533.099485][ T9697] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 533.129074][ T9697] lowmem_reserve[]: 0 930 1243 1243 1243 [ 533.135386][ T9697] Node 0 DMA32 free:573668kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6036kB inactive_anon:0kB active_file:2508kB inactive_file:83040kB unevictable:0kB writepending:236kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:31660kB local_pcp:21764kB free_cma:0kB [ 533.171536][ T9697] lowmem_reserve[]: 0 0 312 312 312 [ 533.177434][ T9697] Node 0 Normal free:16224kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19780kB inactive_anon:0kB active_file:4092kB inactive_file:76500kB unevictable:1536kB writepending:136kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15804kB local_pcp:7908kB free_cma:0kB [ 533.211015][ T9697] lowmem_reserve[]: 0 0 0 0 0 [ 533.216378][ T9697] Node 1 Normal free:906700kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:956kB local_pcp:956kB free_cma:0kB [ 533.248967][ T9697] lowmem_reserve[]: 0 0 0 0 0 [ 533.254328][ T9697] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 533.272329][ T9697] Node 0 DMA32: 5*4kB (UM) 2*8kB (ME) 0*16kB 0*32kB 1*64kB (U) 1*128kB (E) 6*256kB (UME) 29*512kB (UME) 18*1024kB (UME) 9*2048kB (UME) 127*4096kB (UM) = 573668kB [ 533.290873][ T9697] Node 0 Normal: 226*4kB (UME) 77*8kB (UM) 1*16kB (E) 9*32kB (U) 3*64kB (UM) 3*128kB (UME) 4*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (M) = 16224kB [ 533.310578][ T9697] Node 1 Normal: 3*4kB (UE) 8*8kB (UME) 13*16kB (UME) 9*32kB (UME) 19*64kB (UME) 12*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 906748kB [ 533.330751][ T9697] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.340979][ T9697] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.350875][ T9697] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 533.362896][ T9697] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 533.376227][ T9697] 43029 total pagecache pages [ 533.382135][ T9697] 0 pages in swap cache [ 533.386504][ T9697] Free swap = 124996kB [ 533.391087][ T9697] Total swap = 124996kB [ 533.395454][ T9697] 2097051 pages RAM [ 533.399661][ T9697] 0 pages HighMem/MovableOnly [ 533.404535][ T9697] 1530865 pages reserved [ 533.409293][ T9697] 0 pages cma reserved [ 536.273878][ T9740] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1385'. [ 542.737389][ T9796] warn_alloc: 1 callbacks suppressed [ 542.737459][ T9796] syz.5.1402: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 542.759360][ T9796] CPU: 0 UID: 0 PID: 9796 Comm: syz.5.1402 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 542.759521][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 542.759605][ T9796] Call Trace: [ 542.759659][ T9796] [ 542.759709][ T9796] __dump_stack+0x26/0x30 [ 542.759875][ T9796] dump_stack_lvl+0x1df/0x270 [ 542.760054][ T9796] dump_stack+0x1e/0x25 [ 542.760211][ T9796] warn_alloc+0x470/0x690 [ 542.760416][ T9796] ? kmsan_get_metadata+0xfb/0x160 [ 542.760617][ T9796] __vmalloc_node_range_noprof+0x133/0x2360 [ 542.760805][ T9796] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 542.761008][ T9796] ? should_fail_ex+0x45/0x8a0 [ 542.761172][ T9796] ? kmsan_get_metadata+0xfb/0x160 [ 542.761361][ T9796] ? kmsan_get_metadata+0xfb/0x160 [ 542.761545][ T9796] ? kmsan_get_metadata+0xfb/0x160 [ 542.761731][ T9796] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 542.761937][ T9796] ? kmsan_get_metadata+0xfb/0x160 [ 542.762135][ T9796] vmalloc_user_noprof+0xce/0x140 [ 542.762309][ T9796] ? xskq_create+0x11d/0x290 [ 542.762472][ T9796] xskq_create+0x11d/0x290 [ 542.762643][ T9796] xsk_init_queue+0xfd/0x1d0 [ 542.762804][ T9796] xsk_setsockopt+0x873/0xc30 [ 542.762974][ T9796] do_sock_setsockopt+0x4dc/0x820 [ 542.763131][ T9796] ? __pfx_xsk_setsockopt+0x10/0x10 [ 542.763291][ T9796] __x64_sys_setsockopt+0x2ad/0x4a0 [ 542.763469][ T9796] x64_sys_call+0x36f7/0x3db0 [ 542.763650][ T9796] do_syscall_64+0xd9/0x210 [ 542.763790][ T9796] ? irqentry_exit+0x16/0x60 [ 542.763914][ T9796] ? clear_bhb_loop+0x40/0x90 [ 542.764062][ T9796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.764222][ T9796] RIP: 0033:0x7fbe0e58e929 [ 542.764329][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.764449][ T9796] RSP: 002b:00007fbe0f4a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 542.764580][ T9796] RAX: ffffffffffffffda RBX: 00007fbe0e7b6080 RCX: 00007fbe0e58e929 [ 542.764682][ T9796] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 542.764771][ T9796] RBP: 00007fbe0e610b39 R08: 0000000000000004 R09: 0000000000000000 [ 542.764857][ T9796] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.764948][ T9796] R13: 0000000000000000 R14: 00007fbe0e7b6080 R15: 00007fff68322438 [ 542.765073][ T9796] [ 542.765127][ T9796] Mem-Info: [ 543.027606][ T9796] active_anon:6570 inactive_anon:0 isolated_anon:0 [ 543.027606][ T9796] active_file:1650 inactive_file:39940 isolated_file:0 [ 543.027606][ T9796] unevictable:768 dirty:99 writeback:0 [ 543.027606][ T9796] slab_reclaimable:5054 slab_unreclaimable:24620 [ 543.027606][ T9796] mapped:29871 shmem:1449 pagetables:1550 [ 543.027606][ T9796] sec_pagetables:0 bounce:0 [ 543.027606][ T9796] kernel_misc_reclaimable:0 [ 543.027606][ T9796] free:374739 free_pcp:12157 free_cma:0 [ 543.073780][ T9796] Node 0 active_anon:26280kB inactive_anon:0kB active_file:6600kB inactive_file:159556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119484kB dirty:396kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5264kB pagetables:5840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 543.111146][ T9796] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 543.145035][ T9796] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.174678][ T9796] lowmem_reserve[]: 0 930 1243 1243 1243 [ 543.181338][ T9796] Node 0 DMA32 free:571124kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6504kB inactive_anon:0kB active_file:2508kB inactive_file:83056kB unevictable:0kB writepending:228kB present:3129332kB managed:952988kB mlocked:0kB bounce:0kB free_pcp:32412kB local_pcp:22696kB free_cma:0kB [ 543.216900][ T9796] lowmem_reserve[]: 0 0 312 312 312 [ 543.223828][ T9796] Node 0 Normal free:16224kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19776kB inactive_anon:0kB active_file:4092kB inactive_file:76500kB unevictable:1536kB writepending:168kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15860kB local_pcp:7928kB free_cma:0kB [ 543.256701][ T9796] lowmem_reserve[]: 0 0 0 0 0 [ 543.262280][ T9796] Node 1 Normal free:907512kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:192kB free_cma:0kB [ 543.293853][ T9796] lowmem_reserve[]: 0 0 0 0 0 [ 543.299467][ T9796] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 543.316424][ T9796] Node 0 DMA32: 47*4kB (UM) 1*8kB (E) 1*16kB (U) 1*32kB (M) 0*64kB 2*128kB (UE) 3*256kB (UE) 25*512kB (UME) 18*1024kB (UME) 9*2048kB (UME) 127*4096kB (UM) = 571124kB [ 543.336191][ T9796] Node 0 Normal: 226*4kB (UME) 77*8kB (UM) 1*16kB (E) 9*32kB (U) 3*64kB (UM) 3*128kB (UME) 4*256kB (UME) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (M) 1*4096kB (M) = 16224kB [ 543.355903][ T9796] Node 1 Normal: 10*4kB (UE) 18*8kB (UME) 12*16kB (UME) 20*32kB (UME) 24*64kB (UME) 12*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 217*4096kB (UM) = 907512kB [ 543.376409][ T9796] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.386495][ T9796] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.396299][ T9796] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 543.409717][ T9796] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 543.420571][ T9796] 43035 total pagecache pages [ 543.425702][ T9796] 0 pages in swap cache [ 543.430324][ T9796] Free swap = 124996kB [ 543.434676][ T9796] Total swap = 124996kB [ 543.439261][ T9796] 2097051 pages RAM [ 543.443278][ T9796] 0 pages HighMem/MovableOnly [ 543.448156][ T9796] 1530865 pages reserved [ 543.452840][ T9796] 0 pages cma reserved [ 545.204327][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 545.204401][ T30] audit: type=1326 audit(1750893332.328:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9826 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 545.394665][ T30] audit: type=1326 audit(1750893332.428:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9826 comm="syz.6.1412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb0d8e929 code=0x7ffc0000 [ 547.991081][ T9864] loop4: detected capacity change from 0 to 764 [ 548.290071][ T9864] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 550.139721][ T30] audit: type=1326 audit(1750893337.248:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 550.393727][ T30] audit: type=1326 audit(1750893337.378:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9878 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b558e929 code=0x7ffc0000 [ 551.593176][ T9889] ===================================================== [ 551.604218][ T9889] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 551.612814][ T9889] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 551.618000][ T9889] sctp_inq_push+0x2a6/0x350 [ 551.623224][ T9889] sctp_backlog_rcv+0x3c7/0xda0 [ 551.628298][ T9889] sk_backlog_rcv+0x142/0x420 [ 551.633394][ T9889] __release_sock+0x1d3/0x330 [ 551.638291][ T9889] release_sock+0x6b/0x270 [ 551.643111][ T9889] sctp_wait_for_connect+0x458/0x820 [ 551.648630][ T9889] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 551.654361][ T9889] sctp_sendmsg+0x3910/0x49f0 [ 551.659469][ T9889] inet_sendmsg+0x269/0x2a0 [ 551.664197][ T9889] __sock_sendmsg+0x278/0x3d0 [ 551.669338][ T9889] __sys_sendto+0x593/0x720 [ 551.674094][ T9889] __x64_sys_sendto+0x130/0x200 [ 551.679418][ T9889] x64_sys_call+0x3c0b/0x3db0 [ 551.684335][ T9889] do_syscall_64+0xd9/0x210 [ 551.689132][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.695242][ T9889] [ 551.697673][ T9889] Uninit was created at: [ 551.705867][ T9889] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 551.713584][ T9889] kmalloc_reserve+0x22f/0x4b0 [ 551.718597][ T9889] __alloc_skb+0x347/0x7d0 [ 551.723422][ T9889] sctp_packet_transmit+0x18a1/0x46d0 [ 551.729135][ T9889] sctp_outq_flush+0x1c7d/0x67c0 [ 551.734311][ T9889] sctp_outq_uncork+0x9e/0xc0 [ 551.739685][ T9889] sctp_do_sm+0x8c8e/0x9720 [ 551.744407][ T9889] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 551.749752][ T9889] sctp_inq_push+0x2a6/0x350 [ 551.754557][ T9889] sctp_backlog_rcv+0x3c7/0xda0 [ 551.759850][ T9889] sk_backlog_rcv+0x142/0x420 [ 551.764762][ T9889] __release_sock+0x1d3/0x330 [ 551.769889][ T9889] release_sock+0x6b/0x270 [ 551.774552][ T9889] sctp_wait_for_connect+0x458/0x820 [ 551.780234][ T9889] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 551.785814][ T9889] sctp_sendmsg+0x3910/0x49f0 [ 551.790847][ T9889] inet_sendmsg+0x269/0x2a0 [ 551.795553][ T9889] __sock_sendmsg+0x278/0x3d0 [ 551.800639][ T9889] __sys_sendto+0x593/0x720 [ 551.809054][ T9889] __x64_sys_sendto+0x130/0x200 [ 551.814102][ T9889] x64_sys_call+0x3c0b/0x3db0 [ 551.820078][ T9889] do_syscall_64+0xd9/0x210 [ 551.824780][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.831393][ T9889] [ 551.833862][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.4.1432 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 551.846393][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.856819][ T9889] ===================================================== [ 551.864289][ T9889] Disabling lock debugging due to kernel taint [ 551.871222][ T9889] Kernel panic - not syncing: kmsan.panic set ... [ 551.877820][ T9889] CPU: 0 UID: 0 PID: 9889 Comm: syz.4.1432 Tainted: G B 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(undef) [ 551.891703][ T9889] Tainted: [B]=BAD_PAGE [ 551.895974][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.906187][ T9889] Call Trace: [ 551.909680][ T9889] [ 551.912731][ T9889] __dump_stack+0x26/0x30 [ 551.917281][ T9889] dump_stack_lvl+0x53/0x270 [ 551.922085][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 551.928146][ T9889] dump_stack+0x1e/0x25 [ 551.932503][ T9889] panic+0x4bd/0xd50 [ 551.936753][ T9889] kmsan_report+0x31c/0x320 [ 551.941489][ T9889] ? __msan_warning+0x1b/0x30 [ 551.946371][ T9889] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 551.951701][ T9889] ? sctp_inq_push+0x2a6/0x350 [ 551.956664][ T9889] ? sctp_backlog_rcv+0x3c7/0xda0 [ 551.961886][ T9889] ? sk_backlog_rcv+0x142/0x420 [ 551.966957][ T9889] ? __release_sock+0x1d3/0x330 [ 551.971999][ T9889] ? release_sock+0x6b/0x270 [ 551.976804][ T9889] ? sctp_wait_for_connect+0x458/0x820 [ 551.982467][ T9889] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 551.988209][ T9889] ? sctp_sendmsg+0x3910/0x49f0 [ 551.993246][ T9889] ? inet_sendmsg+0x269/0x2a0 [ 551.998287][ T9889] ? __sock_sendmsg+0x278/0x3d0 [ 552.003352][ T9889] ? __sys_sendto+0x593/0x720 [ 552.008265][ T9889] ? __x64_sys_sendto+0x130/0x200 [ 552.013478][ T9889] ? x64_sys_call+0x3c0b/0x3db0 [ 552.018553][ T9889] ? do_syscall_64+0xd9/0x210 [ 552.023420][ T9889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.029706][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.035761][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.041102][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.047150][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.052497][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.058556][ T9889] ? sctp_inq_pop+0x15ea/0x19e0 [ 552.063625][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.068977][ T9889] __msan_warning+0x1b/0x30 [ 552.073690][ T9889] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 552.078881][ T9889] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 552.084557][ T9889] sctp_inq_push+0x2a6/0x350 [ 552.089363][ T9889] sctp_backlog_rcv+0x3c7/0xda0 [ 552.094456][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.099825][ T9889] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 552.105417][ T9889] sk_backlog_rcv+0x142/0x420 [ 552.110345][ T9889] __release_sock+0x1d3/0x330 [ 552.115257][ T9889] release_sock+0x6b/0x270 [ 552.119938][ T9889] sctp_wait_for_connect+0x458/0x820 [ 552.125508][ T9889] ? __pfx_autoremove_wake_function+0x10/0x10 [ 552.131867][ T9889] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 552.137463][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.142811][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.148908][ T9889] sctp_sendmsg+0x3910/0x49f0 [ 552.153787][ T9889] ? kmsan_save_stack_with_flags+0x10/0x60 [ 552.159908][ T9889] ? __pfx_sctp_sendmsg+0x10/0x10 [ 552.165187][ T9889] inet_sendmsg+0x269/0x2a0 [ 552.169916][ T9889] __sock_sendmsg+0x278/0x3d0 [ 552.174834][ T9889] __sys_sendto+0x593/0x720 [ 552.179581][ T9889] ? do_futex+0x3a1/0x480 [ 552.184148][ T9889] ? kmsan_get_metadata+0xfb/0x160 [ 552.189513][ T9889] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 552.195617][ T9889] __x64_sys_sendto+0x130/0x200 [ 552.200677][ T9889] x64_sys_call+0x3c0b/0x3db0 [ 552.205581][ T9889] do_syscall_64+0xd9/0x210 [ 552.210271][ T9889] ? irqentry_exit+0x16/0x60 [ 552.215040][ T9889] ? clear_bhb_loop+0x40/0x90 [ 552.219935][ T9889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.226043][ T9889] RIP: 0033:0x7fcddb58e929 [ 552.230606][ T9889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.250525][ T9889] RSP: 002b:00007fcddc493038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 552.259143][ T9889] RAX: ffffffffffffffda RBX: 00007fcddb7b5fa0 RCX: 00007fcddb58e929 [ 552.267289][ T9889] RDX: 000000000000fee4 RSI: 0000200000847fff RDI: 0000000000000003 [ 552.275459][ T9889] RBP: 00007fcddb610b39 R08: 000020000005ffe4 R09: 000000000000001c [ 552.283590][ T9889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.291714][ T9889] R13: 0000000000000000 R14: 00007fcddb7b5fa0 R15: 00007ffd927da8c8 [ 552.299879][ T9889] [ 552.303304][ T9889] Kernel Offset: disabled [ 552.307716][ T9889] Rebooting in 86400 seconds..