last executing test programs: 9.367847763s ago: executing program 3 (id=621): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1", 0x1}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 8.277005173s ago: executing program 3 (id=626): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000380)=0xe, 0xffffffffffffffff, 0x0, 0x8001, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008024) r1 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6.671661772s ago: executing program 2 (id=630): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRESOCT=r0], 0x20) 6.477646333s ago: executing program 3 (id=631): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000012c0), &(0x7f0000001300)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000002f80)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003240)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x7fffffff}], 0x4, 0x20, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.334932524s ago: executing program 4 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000008000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000900000900020073797a31000000000900010073797a30000000000800054000000021600000000c0a01030000000000000000070000090900020073797a31000000000900010073797a300000000034000380300000800800"], 0xe4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0xea60}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYBLOB="4f5e46ca", @ANYRESDEC=r0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 6.324783457s ago: executing program 1 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x84, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}}, 0x24000080) 5.746377244s ago: executing program 2 (id=634): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000e40100000044000480050003000500000005000300010000000500030080ff00002000030005000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) 5.612049556s ago: executing program 0 (id=635): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 5.480869168s ago: executing program 1 (id=636): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1", 0x1}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 5.09349194s ago: executing program 4 (id=637): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/82, 0x52}, {&(0x7f0000000000)=""/4, 0x4}, {&(0x7f0000000140)=""/14, 0xe}, {&(0x7f0000000180)=""/20, 0x14}], 0x4, &(0x7f0000000200)=""/8, 0x8}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/49, 0x31}, {&(0x7f0000000380)=""/149, 0x95}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/39, 0x27}, {&(0x7f0000000540)=""/67, 0x43}, {&(0x7f00000005c0)=""/192, 0xc0}, {0x0}, {&(0x7f0000000780)=""/231, 0xe7}], 0x9, &(0x7f0000000940)=""/4096, 0x1000}, 0x8a}, {{&(0x7f0000001940)=@ax25={{0x3, @bcast}, [@null, @rose, @remote, @default, @netrom, @null, @rose, @bcast]}, 0x80, &(0x7f0000003000)=[{&(0x7f00000019c0)=""/171, 0xab}, {&(0x7f0000001a80)=""/82, 0x52}, {&(0x7f0000001b00)=""/229, 0xe5}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)}, {&(0x7f0000002c40)=""/61, 0x3d}, {&(0x7f0000002c80)=""/209, 0xd1}, {&(0x7f0000002d80)=""/111, 0x6f}, {&(0x7f0000002e00)=""/203, 0xcb}, {&(0x7f0000002f00)=""/231, 0xe7}], 0xa, &(0x7f00000030c0)=""/20, 0x14}, 0x9}], 0x3, 0x20, &(0x7f00000031c0)={0x77359400}) 4.87429424s ago: executing program 2 (id=638): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x20000000000001bd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_create(0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f00000003c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/105, 0x69}, 0x4}, {{&(0x7f0000000740)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f0000000a00)=""/200, 0xc8}, {0x0}, {0x0}], 0x4, &(0x7f0000000c80)=""/15, 0xf}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1}, 0x1}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/199, 0xc7}, {&(0x7f0000001080)=""/55, 0x37}, {&(0x7f00000010c0)=""/102, 0x66}], 0x3}, 0x8000}, {{&(0x7f0000001180)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f0000001300)=""/200, 0xc8}], 0x1}, 0x3}, {{&(0x7f0000001240)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f0000001640)=""/141, 0x8d}], 0x2, &(0x7f0000001740)=""/115, 0x73}, 0x4}, {{&(0x7f00000017c0)=@hci, 0x80, 0x0}, 0x7}], 0x7, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, 0x0, 0x20000841) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 4.805731739s ago: executing program 0 (id=639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xc}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 4.759426002s ago: executing program 3 (id=640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4, 0xffffffffffffffff}, &(0x7f0000000800), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES64=r3, @ANYBLOB="34810e0517a53638d8a25bc66242bf8580433caaa8d0f6900a4d437f6de3ede889a8bb42f15f33f739", @ANYRES32, @ANYRES64=r5, @ANYRESDEC, @ANYBLOB="5bc8bfa3178ce76b5c2a014efd446afcbf55f8dd679c8c1d79f3dc5d8c3a44ed9b085986ddf6cd9810c6a6a10f3c41e8080a625f484b0abf31192d4a0c50389a1db5483f312d9faa65ee2bbaab29a10c5ec199f2a97634f8ca782d6694e01c6e3429acc79cdccf9b93cad4ca5ba8a016f4aa23dd6caab780d5f130d8db801fad3be3207b954965a69d1499692a47356dc61897f8cc69e350febf9a6d3088c88a3dce5b0485f35c3110a7601d7739aee14c7f7f6cbf1e33cfd64259d1bc69"], &(0x7f0000000080)='syzkaller\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x0, 0x0, 0x72, 0x0, &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0x9f, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee52331", 0x0, 0x8000}, 0x50) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x2) close(r7) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4.489639935s ago: executing program 1 (id=641): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) splice(0xffffffffffffffff, &(0x7f0000000380)=0xe, 0xffffffffffffffff, 0x0, 0x8001, 0xc) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4008805}, 0x4008024) r1 = socket$netlink(0x10, 0x3, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.924450592s ago: executing program 4 (id=642): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={0x0, 0x2}, &(0x7f00000002c0)=0x8) 3.670729609s ago: executing program 0 (id=643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}}, 0x0) 3.663315062s ago: executing program 2 (id=644): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r1], 0x20) 2.994220011s ago: executing program 4 (id=645): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) 2.664460397s ago: executing program 0 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x84, r1, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x81}, @device_b, @device_b, @initial, {0x6}}, 0x9, @default, 0x1971, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb5}, @void, @val={0x6, 0x2, 0xe}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x9, 0xc9, 0xb6}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0xb}}, @val={0x76, 0x6, {0x4, 0x2, 0x7, 0x5}}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x84}}, 0x24000080) 2.58118319s ago: executing program 2 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000008000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000900000900020073797a31000000000900010073797a30000000000800054000000021600000000c0a01030000000000000000070000090900020073797a31000000000900010073797a300000000034000380300000800800"], 0xe4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0xea60}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="350a00000000000061198800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYBLOB="4f5e46ca", @ANYRESDEC=r0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000001) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r10}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 2.534363992s ago: executing program 3 (id=648): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x30, 0x0, 0x0) 2.385513038s ago: executing program 1 (id=649): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000e40100000044000480050003000500000005000300010000000500030080ff00002000030005000000050003000500000055fe0300020000000500030000000000050003000100000008000200020000000800010003"], 0x68}}, 0x0) 2.047506359s ago: executing program 4 (id=650): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000012c0), &(0x7f0000001300)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/232, 0xe8}, {&(0x7f0000002f80)=""/37, 0x25}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003240)=""/4110, 0x100e}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x7fffffff}], 0x4, 0x20, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6(0xa, 0x3, 0x3) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 1.781668655s ago: executing program 0 (id=651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1", 0x1}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008034, 0x0, 0x0) 1.360007905s ago: executing program 1 (id=652): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db5264743cefb660278cb9468d2900b3cda4cca", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="c5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="c74e76aaeae46f57e25bf4c5b6735a3ecfb624ea045dadd2c32e8a24136161ce7ef213ea24f84f16c733fe057846ab0a2a8bbf52f0a9ac9bcbbb2c198b76034fe3afc742523c7c9213c91f3a42ed4c3227ca8abf15707dfe1f881f7afb3469eee31add058c70026f2590fefef80ffb98b239b37b7353585a9af554ee44f0b747aa70439c8ebed3528b8b6a9ba8f96cbc63b3f08f090037b165347bc61e413b28034d1186f41993c15a", 0xa9}, {&(0x7f0000000900)="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", 0x178}], 0x2}}], 0x3, 0x8800) 1.12874205s ago: executing program 2 (id=653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x10, 0xffe0}, {}, {0xfff2, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0xc}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x40040) 652.749378ms ago: executing program 0 (id=654): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x20000000000001bd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_create(0x8) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8943, &(0x7f0000000000)) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r5, &(0x7f0000001a00)=[{{&(0x7f00000003c0)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/105, 0x69}, 0x4}, {{&(0x7f0000000740)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f0000000a00)=""/200, 0xc8}, {0x0}, {0x0}], 0x4, &(0x7f0000000c80)=""/15, 0xf}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1}, 0x1}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/199, 0xc7}, {&(0x7f0000001080)=""/55, 0x37}, {&(0x7f00000010c0)=""/102, 0x66}], 0x3}, 0x8000}, {{&(0x7f0000001180)=@nfc_llcp, 0x80, &(0x7f0000001200)=[{&(0x7f0000001300)=""/200, 0xc8}], 0x1}, 0x3}, {{&(0x7f0000001240)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f0000001640)=""/141, 0x8d}], 0x2, &(0x7f0000001740)=""/115, 0x73}, 0x4}, {{&(0x7f00000017c0)=@hci, 0x80, 0x0}, 0x7}], 0x7, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r4, 0x0, 0x20000841) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x4040) 296.235711ms ago: executing program 1 (id=655): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0x2}, &(0x7f00000002c0)=0x8) 172.756908ms ago: executing program 3 (id=656): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000080000000600000001"], 0x50) socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x11, 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b1a, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 4 (id=657): socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3, @ANYRESOCT=r1], 0x20) kernel console output (not intermixed with test programs): data found [ 271.508423][ T5800] Bluetooth: hci4: command tx timeout [ 271.544535][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 272.165437][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 272.545646][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.556280][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.564453][ T5799] bridge_slave_0: entered allmulticast mode [ 272.574780][ T5799] bridge_slave_0: entered promiscuous mode [ 272.718149][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.729803][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.737781][ T5811] bridge_slave_0: entered allmulticast mode [ 272.748133][ T5811] bridge_slave_0: entered promiscuous mode [ 272.761647][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.769637][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.777664][ T5799] bridge_slave_1: entered allmulticast mode [ 272.787746][ T5799] bridge_slave_1: entered promiscuous mode [ 272.854458][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.862324][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.870167][ T5811] bridge_slave_1: entered allmulticast mode [ 272.885110][ T5811] bridge_slave_1: entered promiscuous mode [ 273.127087][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.135070][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.143019][ T5795] bridge_slave_0: entered allmulticast mode [ 273.153130][ T5795] bridge_slave_0: entered promiscuous mode [ 273.189788][ T5800] Bluetooth: hci0: command tx timeout [ 273.285716][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.296057][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.304016][ T5795] bridge_slave_1: entered allmulticast mode [ 273.314174][ T5795] bridge_slave_1: entered promiscuous mode [ 273.332266][ T5800] Bluetooth: hci3: command tx timeout [ 273.337974][ T5800] Bluetooth: hci2: command tx timeout [ 273.343871][ T5800] Bluetooth: hci1: command tx timeout [ 273.381017][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.389154][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.397312][ T5806] bridge_slave_0: entered allmulticast mode [ 273.407822][ T5806] bridge_slave_0: entered promiscuous mode [ 273.445226][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.466944][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.572121][ T5804] Bluetooth: hci4: command tx timeout [ 273.572283][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.587621][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.595304][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.603195][ T5806] bridge_slave_1: entered allmulticast mode [ 273.613285][ T5806] bridge_slave_1: entered promiscuous mode [ 273.633839][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.896976][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.911388][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.919557][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.927653][ T5803] bridge_slave_0: entered allmulticast mode [ 273.937268][ T5803] bridge_slave_0: entered promiscuous mode [ 274.044986][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.064000][ T5811] team0: Port device team_slave_0 added [ 274.083460][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.140884][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.148538][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.156481][ T5803] bridge_slave_1: entered allmulticast mode [ 274.166182][ T5803] bridge_slave_1: entered promiscuous mode [ 274.183007][ T5799] team0: Port device team_slave_0 added [ 274.244220][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.305091][ T5811] team0: Port device team_slave_1 added [ 274.363036][ T5799] team0: Port device team_slave_1 added [ 274.379758][ T5795] team0: Port device team_slave_0 added [ 274.523924][ T5795] team0: Port device team_slave_1 added [ 274.584366][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.648856][ T5806] team0: Port device team_slave_0 added [ 274.787188][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.794868][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.821500][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.836996][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.844637][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.871215][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.897066][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.915528][ T5806] team0: Port device team_slave_1 added [ 274.972682][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.979913][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.006584][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.021043][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.030196][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.057024][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.193814][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.201052][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.227919][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.242764][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.249981][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.269221][ T5804] Bluetooth: hci0: command tx timeout [ 275.276464][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.297080][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.304725][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.331295][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.413355][ T5804] Bluetooth: hci1: command tx timeout [ 275.416325][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.418963][ T5804] Bluetooth: hci2: command tx timeout [ 275.426333][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.432047][ T5800] Bluetooth: hci3: command tx timeout [ 275.458201][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.487660][ T5803] team0: Port device team_slave_0 added [ 275.627371][ T5803] team0: Port device team_slave_1 added [ 275.676872][ T5804] Bluetooth: hci4: command tx timeout [ 275.807313][ T5799] hsr_slave_0: entered promiscuous mode [ 275.818294][ T5799] hsr_slave_1: entered promiscuous mode [ 275.909899][ T5795] hsr_slave_0: entered promiscuous mode [ 275.920713][ T5795] hsr_slave_1: entered promiscuous mode [ 275.928944][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.936888][ T5795] Cannot create hsr debugfs directory [ 275.990218][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.997612][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.024334][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.224526][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.233312][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.259907][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.353205][ T5811] hsr_slave_0: entered promiscuous mode [ 276.364577][ T5811] hsr_slave_1: entered promiscuous mode [ 276.376468][ T5811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.384480][ T5811] Cannot create hsr debugfs directory [ 276.546898][ T5806] hsr_slave_0: entered promiscuous mode [ 276.557785][ T5806] hsr_slave_1: entered promiscuous mode [ 276.567148][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.575135][ T5806] Cannot create hsr debugfs directory [ 277.004448][ T5803] hsr_slave_0: entered promiscuous mode [ 277.014495][ T5803] hsr_slave_1: entered promiscuous mode [ 277.023584][ T5803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.031408][ T5803] Cannot create hsr debugfs directory [ 277.335028][ T5804] Bluetooth: hci0: command tx timeout [ 277.520164][ T5804] Bluetooth: hci3: command tx timeout [ 277.526169][ T5798] Bluetooth: hci2: command tx timeout [ 277.530784][ T5800] Bluetooth: hci1: command tx timeout [ 277.732253][ T5804] Bluetooth: hci4: command tx timeout [ 278.374412][ T5799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.441015][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.498890][ T5799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.523770][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.549559][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 278.574243][ T5799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.622196][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 278.645245][ T5799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.847918][ T5811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.967132][ T5811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.081069][ T5811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.129455][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.174766][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.203530][ T5811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.338788][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.394597][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.452992][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.506550][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.615349][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.723909][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.236196][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.517901][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.635529][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.703373][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.741549][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.846872][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.854834][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.955921][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.019352][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.027102][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.044858][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.052589][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.070081][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.077810][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.122789][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.177378][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.185211][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.400567][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.408602][ T1839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.530394][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.596512][ T5799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 281.607702][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.685826][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.693470][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.839000][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.846573][ T1839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.088573][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.439101][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.587982][ T1876] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.595893][ T1876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.716908][ T1876] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.724741][ T1876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.079758][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.120637][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.294655][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.823533][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.916047][ T5799] veth0_vlan: entered promiscuous mode [ 284.952351][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.972551][ T5795] veth0_vlan: entered promiscuous mode [ 285.031416][ T5799] veth1_vlan: entered promiscuous mode [ 285.208549][ T5795] veth1_vlan: entered promiscuous mode [ 285.461105][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.522314][ T5799] veth0_macvtap: entered promiscuous mode [ 285.647876][ T5799] veth1_macvtap: entered promiscuous mode [ 285.746155][ T5811] veth0_vlan: entered promiscuous mode [ 285.819178][ T5795] veth0_macvtap: entered promiscuous mode [ 285.908669][ T5795] veth1_macvtap: entered promiscuous mode [ 285.954781][ T5811] veth1_vlan: entered promiscuous mode [ 285.998092][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.153203][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.248466][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.273125][ T5799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.283137][ T5799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.297253][ T5799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.306575][ T5799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.370739][ T5803] veth0_vlan: entered promiscuous mode [ 286.424363][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.513172][ T5803] veth1_vlan: entered promiscuous mode [ 286.534759][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.544302][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.553616][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.563029][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.672333][ T5811] veth0_macvtap: entered promiscuous mode [ 286.740980][ T5811] veth1_macvtap: entered promiscuous mode [ 286.979107][ T5803] veth0_macvtap: entered promiscuous mode [ 287.060579][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.113950][ T5803] veth1_macvtap: entered promiscuous mode [ 287.191444][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.292428][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.301574][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.310994][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.320342][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.383243][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.451103][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.599882][ T5803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.609258][ T5803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.618643][ T5803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.630297][ T5803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.438604][ T5806] veth0_vlan: entered promiscuous mode [ 288.645584][ T5806] veth1_vlan: entered promiscuous mode [ 289.109278][ T5806] veth0_macvtap: entered promiscuous mode [ 289.247483][ T5806] veth1_macvtap: entered promiscuous mode [ 289.516078][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.620158][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.709908][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.719538][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.728843][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.740358][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.216371][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.224715][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.724811][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.733202][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.009511][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.021109][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.424520][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.432764][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.595884][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 295.811232][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.821165][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.954577][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.962810][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.321827][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.329971][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.555591][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.565140][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.899183][ T1839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.907775][ T1839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.408161][ T5988] netlink: 'syz.3.6': attribute type 10 has an invalid length. [ 297.417146][ T5988] team0: Device macvtap0 is up. Set it down before adding it as a team port [ 299.339820][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.348738][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.749753][ T4171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.758130][ T4171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.320087][ T6013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.661084][ T6013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.929428][ T6013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.203048][ T6013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.616746][ T6013] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.729958][ T6013] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.768034][ T6013] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.802809][ T6013] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.249325][ T6031] Zero length message leads to an empty skb [ 303.397314][ T6044] team0: Port device veth3 added [ 303.505402][ T6045] team0: Port device veth0_to_bond added [ 303.792116][ T6044] vlan2: entered allmulticast mode [ 303.797583][ T6044] veth1: entered allmulticast mode [ 303.818970][ T6044] team0: Port device vlan2 added [ 304.174040][ T1839] syzkaller0: tun_net_xmit 76 [ 304.184106][ T1839] syzkaller0: tun_net_xmit 48 [ 304.213459][ T5859] syzkaller0: tun_net_xmit 76 [ 304.263460][ T5856] syzkaller0: tun_net_xmit 76 [ 304.288645][ T6049] syzkaller0: create flow: hash 1222097708 index 1 [ 304.425887][ T6047] syzkaller0: delete flow: hash 1222097708 index 1 [ 304.440209][ T6058] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3710. macoff=82 [ 305.753161][ T6066] syz.4.28: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.769310][ T6066] CPU: 0 UID: 0 PID: 6066 Comm: syz.4.28 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 305.769475][ T6066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.769574][ T6066] Call Trace: [ 305.769630][ T6066] [ 305.769687][ T6066] __dump_stack+0x26/0x30 [ 305.769888][ T6066] dump_stack_lvl+0x1df/0x270 [ 305.770099][ T6066] dump_stack+0x1e/0x25 [ 305.770269][ T6066] warn_alloc+0x470/0x690 [ 305.770502][ T6066] ? kmsan_get_metadata+0xfb/0x160 [ 305.770734][ T6066] __vmalloc_node_range_noprof+0x133/0x2360 [ 305.770946][ T6066] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.771181][ T6066] ? should_fail_ex+0x45/0x8a0 [ 305.771366][ T6066] ? kmsan_get_metadata+0xfb/0x160 [ 305.771581][ T6066] ? kmsan_get_metadata+0xfb/0x160 [ 305.771795][ T6066] ? kmsan_get_metadata+0xfb/0x160 [ 305.772018][ T6066] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 305.772253][ T6066] ? kmsan_get_metadata+0xfb/0x160 [ 305.772476][ T6066] vmalloc_user_noprof+0xce/0x140 [ 305.772670][ T6066] ? xskq_create+0x11d/0x290 [ 305.772866][ T6066] xskq_create+0x11d/0x290 [ 305.773071][ T6066] xsk_init_queue+0xfd/0x1d0 [ 305.773258][ T6066] xsk_setsockopt+0x873/0xc30 [ 305.773462][ T6066] do_sock_setsockopt+0x4dc/0x820 [ 305.773634][ T6066] ? __pfx_xsk_setsockopt+0x10/0x10 [ 305.773813][ T6066] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 305.774030][ T6066] ia32_sys_call+0x41fa/0x42c0 [ 305.774184][ T6066] __do_fast_syscall_32+0xb0/0x150 [ 305.774364][ T6066] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 305.774538][ T6066] do_fast_syscall_32+0x38/0x80 [ 305.774709][ T6066] do_SYSENTER_32+0x1f/0x30 [ 305.774876][ T6066] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.775083][ T6066] RIP: 0023:0xf7f76539 [ 305.775204][ T6066] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 305.775339][ T6066] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 305.775486][ T6066] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 305.775591][ T6066] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 305.775688][ T6066] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.775778][ T6066] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 305.775865][ T6066] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.776062][ T6066] [ 306.025655][ T6066] Mem-Info: [ 306.029053][ T6066] active_anon:5445 inactive_anon:0 isolated_anon:0 [ 306.029053][ T6066] active_file:1557 inactive_file:39782 isolated_file:0 [ 306.029053][ T6066] unevictable:768 dirty:94 writeback:0 [ 306.029053][ T6066] slab_reclaimable:4741 slab_unreclaimable:22130 [ 306.029053][ T6066] mapped:29462 shmem:1366 pagetables:1291 [ 306.029053][ T6066] sec_pagetables:0 bounce:0 [ 306.029053][ T6066] kernel_misc_reclaimable:0 [ 306.029053][ T6066] free:378824 free_pcp:10700 free_cma:0 [ 306.075941][ T6066] Node 0 active_anon:21780kB inactive_anon:0kB active_file:6228kB inactive_file:158928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117848kB dirty:376kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5376kB pagetables:4816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.110780][ T6066] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 306.146400][ T6066] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 306.176823][ T6066] lowmem_reserve[]: 0 930 1243 1243 1243 [ 306.183410][ T6066] Node 0 DMA32 free:587352kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1748kB inactive_anon:0kB active_file:2560kB inactive_file:80908kB unevictable:0kB writepending:280kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:32120kB local_pcp:22624kB free_cma:0kB [ 306.215990][ T6066] lowmem_reserve[]: 0 0 312 312 312 [ 306.222144][ T6066] Node 0 Normal free:17764kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20172kB inactive_anon:0kB active_file:3668kB inactive_file:78020kB unevictable:1536kB writepending:96kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:9528kB local_pcp:5096kB free_cma:0kB [ 306.257752][ T6066] lowmem_reserve[]: 0 0 0 0 0 [ 306.264343][ T6066] Node 1 Normal free:906084kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:896kB local_pcp:768kB free_cma:0kB [ 306.296473][ T6066] lowmem_reserve[]: 0 0 0 0 0 [ 306.302167][ T6066] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 306.315725][ T6066] Node 0 DMA32: 10*4kB (UME) 5*8kB (UME) 3*16kB (ME) 1*32kB (U) 5*64kB (UM) 5*128kB (UM) 4*256kB (ME) 5*512kB (ME) 1*1024kB (M) 2*2048kB (UM) 141*4096kB (M) = 587360kB [ 306.339143][ T6066] Node 0 Normal: 1*4kB (M) 2*8kB (ME) 1*16kB (U) 2*32kB (UE) 4*64kB (UME) 2*128kB (UM) 1*256kB (U) 3*512kB (UE) 1*1024kB (M) 3*2048kB (UM) 2*4096kB (M) = 17764kB [ 306.359133][ T6066] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 22*64kB (UME) 9*128kB (UME) 7*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906084kB [ 306.380546][ T6066] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.390607][ T6066] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.400590][ T6066] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 306.410735][ T6066] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 306.420521][ T6066] 42701 total pagecache pages [ 306.425575][ T6066] 0 pages in swap cache [ 306.429972][ T6066] Free swap = 124996kB [ 306.437706][ T6066] Total swap = 124996kB [ 306.443203][ T6066] 2097051 pages RAM [ 306.447249][ T6066] 0 pages HighMem/MovableOnly [ 306.452400][ T6066] 1530854 pages reserved [ 306.456888][ T6066] 0 pages cma reserved [ 306.771304][ T6076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.32'. [ 308.109347][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 308.394375][ T6091] syz.3.38 uses obsolete (PF_INET,SOCK_PACKET) [ 308.920525][ T6095] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 309.874438][ T6109] netlink: 3 bytes leftover after parsing attributes in process `syz.3.43'. [ 309.885478][ T6109] unsupported nlmsg_type 40 [ 314.613391][ T6151] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.386199][ T6171] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 322.596538][ T6233] tipc: Started in network mode [ 322.603531][ T6233] tipc: Node identity 2, cluster identity 5 [ 322.614651][ T6233] tipc: Node number set to 2 [ 322.621373][ T6233] tipc: Cannot configure node identity twice [ 323.800055][ T6249] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 328.075627][ T6298] netlink: 72 bytes leftover after parsing attributes in process `syz.2.118'. [ 328.266138][ T6299] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 328.275957][ T6299] netlink: 228 bytes leftover after parsing attributes in process `syz.2.118'. [ 330.935121][ T6324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 331.614585][ T6331] tipc: Started in network mode [ 331.620091][ T6331] tipc: Node identity aaddd1256ce5, cluster identity 4711 [ 331.639578][ T6331] tipc: Enabled bearer , priority 0 [ 331.939999][ T6332] syzkaller0: entered promiscuous mode [ 331.946062][ T6332] syzkaller0: entered allmulticast mode [ 331.955913][ T6332] tipc: Resetting bearer [ 331.971199][ T1147] tipc: Resetting bearer [ 332.294211][ T6330] tipc: Resetting bearer [ 332.483376][ T6330] tipc: Disabling bearer [ 333.626291][ T6352] Bluetooth: MGMT ver 1.23 [ 334.965903][ T6367] syz.2.147: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 334.981930][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.2.147 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 334.982101][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.982188][ T6367] Call Trace: [ 334.982244][ T6367] [ 334.982299][ T6367] __dump_stack+0x26/0x30 [ 334.982486][ T6367] dump_stack_lvl+0x1df/0x270 [ 334.982693][ T6367] dump_stack+0x1e/0x25 [ 334.982868][ T6367] warn_alloc+0x470/0x690 [ 334.983106][ T6367] ? kmsan_get_metadata+0xfb/0x160 [ 334.983351][ T6367] __vmalloc_node_range_noprof+0x133/0x2360 [ 334.983565][ T6367] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.983812][ T6367] ? should_fail_ex+0x45/0x8a0 [ 334.983998][ T6367] ? kmsan_get_metadata+0xfb/0x160 [ 334.984216][ T6367] ? kmsan_get_metadata+0xfb/0x160 [ 334.984427][ T6367] ? kmsan_get_metadata+0xfb/0x160 [ 334.984654][ T6367] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.984893][ T6367] ? kmsan_get_metadata+0xfb/0x160 [ 334.985119][ T6367] vmalloc_user_noprof+0xce/0x140 [ 334.985307][ T6367] ? xskq_create+0x11d/0x290 [ 334.985500][ T6367] xskq_create+0x11d/0x290 [ 334.985702][ T6367] xsk_init_queue+0xfd/0x1d0 [ 334.985881][ T6367] xsk_setsockopt+0x873/0xc30 [ 334.986083][ T6367] do_sock_setsockopt+0x4dc/0x820 [ 334.986265][ T6367] ? __pfx_xsk_setsockopt+0x10/0x10 [ 334.986446][ T6367] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 334.986661][ T6367] ia32_sys_call+0x41fa/0x42c0 [ 334.986809][ T6367] __do_fast_syscall_32+0xb0/0x150 [ 334.986996][ T6367] do_fast_syscall_32+0x38/0x80 [ 334.987170][ T6367] do_SYSENTER_32+0x1f/0x30 [ 334.987340][ T6367] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 334.987548][ T6367] RIP: 0023:0xf7f22539 [ 334.987668][ T6367] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 334.987804][ T6367] RSP: 002b:00000000f502555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 334.987952][ T6367] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 334.988055][ T6367] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 334.988151][ T6367] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 334.988243][ T6367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 334.988336][ T6367] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 334.988467][ T6367] [ 334.988523][ T6367] Mem-Info: [ 335.267289][ T6367] active_anon:5663 inactive_anon:0 isolated_anon:0 [ 335.267289][ T6367] active_file:1608 inactive_file:39792 isolated_file:0 [ 335.267289][ T6367] unevictable:768 dirty:58 writeback:0 [ 335.267289][ T6367] slab_reclaimable:4759 slab_unreclaimable:22378 [ 335.267289][ T6367] mapped:29680 shmem:1361 pagetables:1364 [ 335.267289][ T6367] sec_pagetables:0 bounce:0 [ 335.267289][ T6367] kernel_misc_reclaimable:0 [ 335.267289][ T6367] free:379561 free_pcp:9548 free_cma:0 [ 335.321034][ T6367] Node 0 active_anon:22652kB inactive_anon:0kB active_file:6432kB inactive_file:158968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118720kB dirty:232kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5424kB pagetables:5108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.358840][ T6367] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 335.391269][ T6367] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.428256][ T6367] lowmem_reserve[]: 0 930 1243 1243 1243 [ 335.437146][ T6367] Node 0 DMA32 free:588880kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1628kB inactive_anon:0kB active_file:2628kB inactive_file:80924kB unevictable:0kB writepending:168kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:25344kB local_pcp:8560kB free_cma:0kB [ 335.445964][ T6369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 335.469472][ T6367] lowmem_reserve[]: 0 0 312 312 312 [ 335.469806][ T6367] Node 0 Normal free:18288kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21000kB inactive_anon:0kB active_file:3804kB inactive_file:78044kB unevictable:1536kB writepending:64kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:12812kB local_pcp:5844kB free_cma:0kB [ 335.470217][ T6367] lowmem_reserve[]: 0 0 0 0 0 [ 335.530368][ T6367] Node 1 Normal free:906980kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.564185][ T6367] lowmem_reserve[]: 0 0 0 0 0 [ 335.569660][ T6367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 335.583348][ T6367] Node 0 DMA32: 46*4kB (UME) 21*8kB (UME) 11*16kB (UME) 8*32kB (UM) 17*64kB (UM) 10*128kB (UM) 8*256kB (UME) 6*512kB (ME) 3*1024kB (M) 4*2048kB (UM) 139*4096kB (M) = 588880kB [ 335.603525][ T6367] Node 0 Normal: 0*4kB 2*8kB (UE) 2*16kB (ME) 22*32kB (UME) 4*64kB (U) 5*128kB (UM) 1*256kB (U) 4*512kB (UME) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 18288kB [ 335.629000][ T6367] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906980kB [ 335.652512][ T6367] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.652972][ T5804] Bluetooth: hci0: command 0x0c1a tx timeout [ 335.662506][ T6367] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.668769][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 335.678081][ T6367] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.678212][ T6367] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 335.704637][ T6367] 42757 total pagecache pages [ 335.709578][ T6367] 0 pages in swap cache [ 335.714103][ T6367] Free swap = 124996kB [ 335.726228][ T6367] Total swap = 124996kB [ 335.730668][ T6367] 2097051 pages RAM [ 335.737664][ T6367] 0 pages HighMem/MovableOnly [ 335.742856][ T6367] 1530854 pages reserved [ 335.747361][ T6367] 0 pages cma reserved [ 336.403506][ T6370] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 336.501659][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'. [ 336.515751][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.1.152'. [ 337.811127][ T6390] syzkaller0: entered promiscuous mode [ 337.817643][ T6390] syzkaller0: entered allmulticast mode [ 339.085456][ T6402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.162'. [ 339.168278][ T6405] netlink: 'syz.1.164': attribute type 1 has an invalid length. [ 339.672141][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 340.913666][ T6424] ip6gretap0: entered promiscuous mode [ 340.930621][ T6424] ip6gretap0: left promiscuous mode [ 341.292480][ T6420] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 343.083447][ T6444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.177'. [ 343.223826][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 343.332276][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 346.418902][ T6480] syz_tun: entered allmulticast mode [ 346.623076][ T6480] netlink: 14 bytes leftover after parsing attributes in process `syz.4.191'. [ 346.705157][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 346.744273][ T6480] syz_tun (unregistering): left allmulticast mode [ 346.766270][ T6467] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 347.193803][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 349.459283][ T6510] sctp: failed to load transform for md5: -2 [ 349.468931][ T6514] warning: `syz.2.203' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 350.297627][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 350.704281][ T6533] warn_alloc: 3 callbacks suppressed [ 350.704370][ T6533] syz.3.207: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 350.725506][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.3.207 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 350.725676][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.725770][ T6533] Call Trace: [ 350.725827][ T6533] [ 350.725884][ T6533] __dump_stack+0x26/0x30 [ 350.726078][ T6533] dump_stack_lvl+0x1df/0x270 [ 350.726284][ T6533] dump_stack+0x1e/0x25 [ 350.726470][ T6533] warn_alloc+0x470/0x690 [ 350.726703][ T6533] ? kmsan_get_metadata+0xfb/0x160 [ 350.726940][ T6533] __vmalloc_node_range_noprof+0x133/0x2360 [ 350.727155][ T6533] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 350.727400][ T6533] ? should_fail_ex+0x45/0x8a0 [ 350.727593][ T6533] ? kmsan_get_metadata+0xfb/0x160 [ 350.727809][ T6533] ? kmsan_get_metadata+0xfb/0x160 [ 350.728021][ T6533] ? kmsan_get_metadata+0xfb/0x160 [ 350.728238][ T6533] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 350.728484][ T6533] ? kmsan_get_metadata+0xfb/0x160 [ 350.728709][ T6533] vmalloc_user_noprof+0xce/0x140 [ 350.728902][ T6533] ? xskq_create+0x11d/0x290 [ 350.729096][ T6533] xskq_create+0x11d/0x290 [ 350.729292][ T6533] xsk_init_queue+0xfd/0x1d0 [ 350.729487][ T6533] xsk_setsockopt+0x873/0xc30 [ 350.729690][ T6533] do_sock_setsockopt+0x4dc/0x820 [ 350.729870][ T6533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 350.730058][ T6533] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 350.730267][ T6533] ia32_sys_call+0x41fa/0x42c0 [ 350.730434][ T6533] __do_fast_syscall_32+0xb0/0x150 [ 350.730630][ T6533] do_fast_syscall_32+0x38/0x80 [ 350.730797][ T6533] do_SYSENTER_32+0x1f/0x30 [ 350.730956][ T6533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 350.731151][ T6533] RIP: 0023:0xf7fa8539 [ 350.731266][ T6533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 350.731403][ T6533] RSP: 002b:00000000f50a555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 350.731559][ T6533] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 350.731678][ T6533] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 350.731769][ T6533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 350.731860][ T6533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 350.731953][ T6533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 350.732085][ T6533] [ 350.977075][ T6533] Mem-Info: [ 350.980465][ T6533] active_anon:5629 inactive_anon:0 isolated_anon:0 [ 350.980465][ T6533] active_file:1642 inactive_file:39798 isolated_file:0 [ 350.980465][ T6533] unevictable:768 dirty:150 writeback:0 [ 350.980465][ T6533] slab_reclaimable:4757 slab_unreclaimable:22458 [ 350.980465][ T6533] mapped:29660 shmem:1360 pagetables:1293 [ 350.980465][ T6533] sec_pagetables:0 bounce:0 [ 350.980465][ T6533] kernel_misc_reclaimable:0 [ 350.980465][ T6533] free:377873 free_pcp:11321 free_cma:0 [ 351.031342][ T6533] Node 0 active_anon:22516kB inactive_anon:0kB active_file:6568kB inactive_file:158992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118640kB dirty:600kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5360kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.066754][ T6533] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 351.105330][ T6533] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.136983][ T6533] lowmem_reserve[]: 0 930 1243 1243 1243 [ 351.143618][ T6533] Node 0 DMA32 free:583388kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1576kB inactive_anon:0kB active_file:2628kB inactive_file:80924kB unevictable:0kB writepending:376kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:31136kB local_pcp:10728kB free_cma:0kB [ 351.176422][ T6533] lowmem_reserve[]: 0 0 312 312 312 [ 351.188773][ T6533] Node 0 Normal free:17028kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20924kB inactive_anon:0kB active_file:3940kB inactive_file:78068kB unevictable:1536kB writepending:224kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:14148kB local_pcp:6384kB free_cma:0kB [ 351.223571][ T6533] lowmem_reserve[]: 0 0 0 0 0 [ 351.229042][ T6533] Node 1 Normal free:906980kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.260441][ T6533] lowmem_reserve[]: 0 0 0 0 0 [ 351.266674][ T6533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 351.280243][ T6533] Node 0 DMA32: 109*4kB (UME) 41*8kB (UME) 30*16kB (UME) 14*32kB (UM) 17*64kB (UM) 10*128kB (UM) 9*256kB (UME) 5*512kB (ME) 3*1024kB (M) 5*2048kB (UM) 137*4096kB (M) = 583388kB [ 351.309654][ T6533] Node 0 Normal: 25*4kB (UM) 4*8kB (UE) 2*16kB (ME) 1*32kB (E) 1*64kB (M) 3*128kB (UM) 0*256kB 2*512kB (UE) 1*1024kB (M) 1*2048kB (U) 3*4096kB (M) = 17028kB [ 351.330024][ T6533] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906980kB [ 351.357894][ T6533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.368037][ T6533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.377839][ T6533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.394253][ T6533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.406428][ T6533] 42796 total pagecache pages [ 351.411367][ T6533] 0 pages in swap cache [ 351.415955][ T6533] Free swap = 124996kB [ 351.420346][ T6533] Total swap = 124996kB [ 351.424929][ T6533] 2097051 pages RAM [ 351.428970][ T6533] 0 pages HighMem/MovableOnly [ 351.434102][ T6533] 1530854 pages reserved [ 351.438583][ T6533] 0 pages cma reserved [ 351.849212][ T6537] tipc: Started in network mode [ 351.854876][ T6537] tipc: Node identity a2c62a244d5f, cluster identity 4711 [ 351.864513][ T6537] tipc: Enabled bearer , priority 0 [ 351.883241][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 351.954304][ T6545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 352.060251][ T6537] syzkaller0: entered promiscuous mode [ 352.066193][ T6537] syzkaller0: entered allmulticast mode [ 352.075859][ T6537] tipc: Resetting bearer [ 352.192158][ T6534] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 352.243059][ T6535] tipc: Resetting bearer [ 352.471406][ T6535] tipc: Disabling bearer [ 352.665608][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.183513][ T6559] sctp: failed to load transform for md5: -2 [ 354.639574][ T6568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 354.963942][ T6568] netlink: 48 bytes leftover after parsing attributes in process `syz.3.219'. [ 354.977772][ T6568] unsupported nla_type 52263 [ 355.338188][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 355.433158][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.220'. [ 355.442696][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'. [ 355.452131][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.220'. [ 355.461374][ T6577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.220'. [ 357.219627][ T6589] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 359.257561][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 361.040579][ T6638] warn_alloc: 1 callbacks suppressed [ 361.040667][ T6638] syz.4.244: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.062242][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.4.244 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 361.062418][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.062508][ T6638] Call Trace: [ 361.062563][ T6638] [ 361.062619][ T6638] __dump_stack+0x26/0x30 [ 361.062807][ T6638] dump_stack_lvl+0x1df/0x270 [ 361.063010][ T6638] dump_stack+0x1e/0x25 [ 361.063187][ T6638] warn_alloc+0x470/0x690 [ 361.063428][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 361.063664][ T6638] __vmalloc_node_range_noprof+0x133/0x2360 [ 361.063877][ T6638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.064115][ T6638] ? should_fail_ex+0x45/0x8a0 [ 361.064299][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 361.064520][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 361.064730][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 361.064946][ T6638] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 361.065183][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 361.065433][ T6638] vmalloc_user_noprof+0xce/0x140 [ 361.065627][ T6638] ? xskq_create+0x11d/0x290 [ 361.065825][ T6638] xskq_create+0x11d/0x290 [ 361.066018][ T6638] xsk_init_queue+0xfd/0x1d0 [ 361.066208][ T6638] xsk_setsockopt+0x873/0xc30 [ 361.066417][ T6638] do_sock_setsockopt+0x4dc/0x820 [ 361.066597][ T6638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.066782][ T6638] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 361.066991][ T6638] ia32_sys_call+0x41fa/0x42c0 [ 361.067145][ T6638] __do_fast_syscall_32+0xb0/0x150 [ 361.067339][ T6638] do_fast_syscall_32+0x38/0x80 [ 361.067527][ T6638] do_SYSENTER_32+0x1f/0x30 [ 361.067695][ T6638] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 361.067894][ T6638] RIP: 0023:0xf7f76539 [ 361.068007][ T6638] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 361.068141][ T6638] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 361.068287][ T6638] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 361.068398][ T6638] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 361.068492][ T6638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 361.068583][ T6638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 361.068673][ T6638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 361.068804][ T6638] [ 361.068860][ T6638] Mem-Info: [ 361.328976][ T6638] active_anon:5691 inactive_anon:0 isolated_anon:0 [ 361.328976][ T6638] active_file:1642 inactive_file:39802 isolated_file:0 [ 361.328976][ T6638] unevictable:768 dirty:49 writeback:18 [ 361.328976][ T6638] slab_reclaimable:4763 slab_unreclaimable:22542 [ 361.328976][ T6638] mapped:29659 shmem:1394 pagetables:1327 [ 361.328976][ T6638] sec_pagetables:0 bounce:0 [ 361.328976][ T6638] kernel_misc_reclaimable:0 [ 361.328976][ T6638] free:377928 free_pcp:11100 free_cma:0 [ 361.375012][ T6638] Node 0 active_anon:22696kB inactive_anon:0kB active_file:6568kB inactive_file:159008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118636kB dirty:196kB writeback:72kB shmem:4040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5424kB pagetables:5028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.409176][ T6638] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.444321][ T6638] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.474640][ T6638] lowmem_reserve[]: 0 930 1243 1243 1243 [ 361.481050][ T6638] Node 0 DMA32 free:582976kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1572kB inactive_anon:0kB active_file:2628kB inactive_file:80932kB unevictable:0kB writepending:196kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:31492kB local_pcp:16632kB free_cma:0kB [ 361.515122][ T6638] lowmem_reserve[]: 0 0 312 312 312 [ 361.521248][ T6638] Node 0 Normal free:17468kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21144kB inactive_anon:0kB active_file:3940kB inactive_file:78076kB unevictable:1536kB writepending:68kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:12864kB local_pcp:6836kB free_cma:0kB [ 361.557737][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 361.563528][ T6638] Node 1 Normal free:906980kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.595441][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 361.600906][ T6638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 361.623127][ T6638] Node 0 DMA32: 102*4kB (UME) 43*8kB (UME) 29*16kB (UME) 4*32kB (UM) 6*64kB (UM) 5*128kB (UM) 6*256kB (ME) 7*512kB (UME) 2*1024kB (M) 4*2048kB (UM) 138*4096kB (M) = 582976kB [ 361.647263][ T6638] Node 0 Normal: 159*4kB (UM) 42*8kB (UM) 5*16kB (UM) 5*32kB (UM) 4*64kB (U) 3*128kB (UM) 1*256kB (U) 2*512kB (UE) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 17468kB [ 361.666137][ T6638] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906980kB [ 361.687741][ T6638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.697906][ T6638] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.707770][ T6638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.717899][ T6638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.730902][ T6638] 42804 total pagecache pages [ 361.736740][ T6638] 0 pages in swap cache [ 361.741142][ T6638] Free swap = 124996kB [ 361.745779][ T6638] Total swap = 124996kB [ 361.750191][ T6638] 2097051 pages RAM [ 361.754381][ T6638] 0 pages HighMem/MovableOnly [ 361.759293][ T6638] 1530854 pages reserved [ 361.766415][ T6638] 0 pages cma reserved [ 363.012354][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 363.022021][ T6641] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 368.941322][ T6702] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 375.065303][ T6682] Set syz1 is full, maxelem 65536 reached [ 375.303992][ T6741] warn_alloc: 1 callbacks suppressed [ 375.304081][ T6741] syz.4.281: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.329972][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.4.281 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 375.330148][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.330248][ T6741] Call Trace: [ 375.330305][ T6741] [ 375.330362][ T6741] __dump_stack+0x26/0x30 [ 375.330554][ T6741] dump_stack_lvl+0x1df/0x270 [ 375.330759][ T6741] dump_stack+0x1e/0x25 [ 375.330937][ T6741] warn_alloc+0x470/0x690 [ 375.331172][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 375.331417][ T6741] __vmalloc_node_range_noprof+0x133/0x2360 [ 375.331630][ T6741] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 375.331868][ T6741] ? should_fail_ex+0x45/0x8a0 [ 375.332060][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 375.332285][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 375.332490][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 375.332697][ T6741] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 375.332928][ T6741] ? kmsan_get_metadata+0xfb/0x160 [ 375.333156][ T6741] vmalloc_user_noprof+0xce/0x140 [ 375.333358][ T6741] ? xskq_create+0x11d/0x290 [ 375.333550][ T6741] xskq_create+0x11d/0x290 [ 375.333747][ T6741] xsk_init_queue+0xfd/0x1d0 [ 375.333934][ T6741] xsk_setsockopt+0x873/0xc30 [ 375.334141][ T6741] do_sock_setsockopt+0x4dc/0x820 [ 375.334331][ T6741] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.334518][ T6741] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 375.334727][ T6741] ia32_sys_call+0x41fa/0x42c0 [ 375.334879][ T6741] __do_fast_syscall_32+0xb0/0x150 [ 375.335072][ T6741] do_fast_syscall_32+0x38/0x80 [ 375.335252][ T6741] do_SYSENTER_32+0x1f/0x30 [ 375.335420][ T6741] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.335621][ T6741] RIP: 0023:0xf7f76539 [ 375.335734][ T6741] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 375.335870][ T6741] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 375.336034][ T6741] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 375.336137][ T6741] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 375.336240][ T6741] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.336330][ T6741] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 375.336423][ T6741] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.336551][ T6741] [ 375.582425][ T6741] Mem-Info: [ 375.585822][ T6741] active_anon:5660 inactive_anon:0 isolated_anon:0 [ 375.585822][ T6741] active_file:1642 inactive_file:39808 isolated_file:0 [ 375.585822][ T6741] unevictable:768 dirty:72 writeback:0 [ 375.585822][ T6741] slab_reclaimable:4763 slab_unreclaimable:23551 [ 375.585822][ T6741] mapped:29697 shmem:1360 pagetables:1348 [ 375.585822][ T6741] sec_pagetables:0 bounce:0 [ 375.585822][ T6741] kernel_misc_reclaimable:0 [ 375.585822][ T6741] free:376005 free_pcp:12181 free_cma:0 [ 375.635041][ T6741] Node 0 active_anon:22640kB inactive_anon:0kB active_file:6568kB inactive_file:159032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118788kB dirty:288kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5136kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.675524][ T6741] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 375.709674][ T6741] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.739254][ T6741] lowmem_reserve[]: 0 930 1243 1243 1243 [ 375.745804][ T6741] Node 0 DMA32 free:576680kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1632kB inactive_anon:0kB active_file:2628kB inactive_file:80940kB unevictable:0kB writepending:208kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:33852kB local_pcp:14392kB free_cma:0kB [ 375.786194][ T6741] lowmem_reserve[]: 0 0 312 312 312 [ 375.795974][ T6741] Node 0 Normal free:16264kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20904kB inactive_anon:0kB active_file:3940kB inactive_file:78092kB unevictable:1536kB writepending:80kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15156kB local_pcp:7160kB free_cma:0kB [ 375.828779][ T6741] lowmem_reserve[]: 0 0 0 0 0 [ 375.834434][ T6741] Node 1 Normal free:906980kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.872092][ T6741] lowmem_reserve[]: 0 0 0 0 0 [ 375.877566][ T6741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 375.893256][ T6741] Node 0 DMA32: 8*4kB (UME) 5*8kB (UME) 4*16kB (ME) 3*32kB (M) 5*64kB (M) 5*128kB (UM) 6*256kB (ME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 137*4096kB (M) = 576680kB [ 375.913425][ T6741] Node 0 Normal: 112*4kB (M) 21*8kB (M) 6*16kB (UM) 2*32kB (UM) 0*64kB 1*128kB (M) 2*256kB (U) 1*512kB (E) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 16264kB [ 375.931386][ T6741] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906980kB [ 375.952553][ T6741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.968852][ T6741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 375.980712][ T6741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 375.990875][ T6741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.000666][ T6741] 42806 total pagecache pages [ 376.005774][ T6741] 0 pages in swap cache [ 376.010165][ T6741] Free swap = 124996kB [ 376.014718][ T6741] Total swap = 124996kB [ 376.019115][ T6741] 2097051 pages RAM [ 376.023399][ T6741] 0 pages HighMem/MovableOnly [ 376.028312][ T6741] 1530854 pages reserved [ 376.032978][ T6741] 0 pages cma reserved [ 376.456641][ T6743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 377.543910][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 380.393759][ T6786] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 383.256438][ T6827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.314'. [ 384.637757][ T6832] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 386.915593][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.1.330'. [ 388.049068][ T6884] warn_alloc: 2 callbacks suppressed [ 388.049164][ T6884] syz.1.335: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 388.071038][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.1.335 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 388.071221][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.071314][ T6884] Call Trace: [ 388.071370][ T6884] [ 388.071427][ T6884] __dump_stack+0x26/0x30 [ 388.071620][ T6884] dump_stack_lvl+0x1df/0x270 [ 388.071824][ T6884] dump_stack+0x1e/0x25 [ 388.071997][ T6884] warn_alloc+0x470/0x690 [ 388.072229][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 388.072464][ T6884] __vmalloc_node_range_noprof+0x133/0x2360 [ 388.072673][ T6884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.072908][ T6884] ? should_fail_ex+0x45/0x8a0 [ 388.073093][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 388.073323][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 388.073533][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 388.073749][ T6884] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 388.073986][ T6884] ? kmsan_get_metadata+0xfb/0x160 [ 388.074219][ T6884] vmalloc_user_noprof+0xce/0x140 [ 388.074412][ T6884] ? xskq_create+0x11d/0x290 [ 388.074606][ T6884] xskq_create+0x11d/0x290 [ 388.074801][ T6884] xsk_init_queue+0xfd/0x1d0 [ 388.074986][ T6884] xsk_setsockopt+0x873/0xc30 [ 388.075195][ T6884] do_sock_setsockopt+0x4dc/0x820 [ 388.075374][ T6884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 388.075560][ T6884] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 388.075768][ T6884] ia32_sys_call+0x41fa/0x42c0 [ 388.075941][ T6884] __do_fast_syscall_32+0xb0/0x150 [ 388.076141][ T6884] do_fast_syscall_32+0x38/0x80 [ 388.076315][ T6884] do_SYSENTER_32+0x1f/0x30 [ 388.076481][ T6884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 388.076678][ T6884] RIP: 0023:0xf70de539 [ 388.076790][ T6884] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 388.076923][ T6884] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 388.077068][ T6884] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 388.077176][ T6884] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 388.077271][ T6884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 388.077362][ T6884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 388.077460][ T6884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 388.077594][ T6884] [ 388.320205][ T6884] Mem-Info: [ 388.324441][ T6884] active_anon:5705 inactive_anon:0 isolated_anon:0 [ 388.324441][ T6884] active_file:1642 inactive_file:39812 isolated_file:0 [ 388.324441][ T6884] unevictable:768 dirty:100 writeback:0 [ 388.324441][ T6884] slab_reclaimable:4763 slab_unreclaimable:23507 [ 388.324441][ T6884] mapped:29715 shmem:1360 pagetables:1388 [ 388.324441][ T6884] sec_pagetables:0 bounce:0 [ 388.324441][ T6884] kernel_misc_reclaimable:0 [ 388.324441][ T6884] free:376022 free_pcp:12209 free_cma:0 [ 388.373169][ T6884] Node 0 active_anon:22820kB inactive_anon:0kB active_file:6568kB inactive_file:159048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118792kB dirty:400kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5184kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.407969][ T6884] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 388.440242][ T6884] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.472754][ T6884] lowmem_reserve[]: 0 930 1243 1243 1243 [ 388.487413][ T6884] Node 0 DMA32 free:576680kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1572kB inactive_anon:0kB active_file:2628kB inactive_file:80940kB unevictable:0kB writepending:268kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:34104kB local_pcp:19524kB free_cma:0kB [ 388.520627][ T6884] lowmem_reserve[]: 0 0 312 312 312 [ 388.526860][ T6884] Node 0 Normal free:16332kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20904kB inactive_anon:0kB active_file:3940kB inactive_file:78108kB unevictable:1536kB writepending:140kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15128kB local_pcp:8060kB free_cma:0kB [ 388.562647][ T6884] lowmem_reserve[]: 0 0 0 0 0 [ 388.568135][ T6884] Node 1 Normal free:906980kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 388.600305][ T6884] lowmem_reserve[]: 0 0 0 0 0 [ 388.610616][ T6884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 388.627496][ T6884] Node 0 DMA32: 8*4kB (UME) 5*8kB (UME) 4*16kB (ME) 3*32kB (M) 5*64kB (M) 5*128kB (UM) 6*256kB (ME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 137*4096kB (M) = 576680kB [ 388.647873][ T6884] Node 0 Normal: 3*4kB (UM) 40*8kB (UM) 12*16kB (UM) 4*32kB (UM) 1*64kB (U) 2*128kB (UM) 2*256kB (U) 1*512kB (E) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 16332kB [ 388.672927][ T6884] Node 1 Normal: 7*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906980kB [ 388.695221][ T6884] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.705404][ T6884] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.715215][ T6884] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 388.725292][ T6884] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 388.735064][ T6884] 42810 total pagecache pages [ 388.740004][ T6884] 0 pages in swap cache [ 388.746551][ T6884] Free swap = 124996kB [ 388.750945][ T6884] Total swap = 124996kB [ 388.756024][ T6884] 2097051 pages RAM [ 388.760072][ T6884] 0 pages HighMem/MovableOnly [ 388.768380][ T6884] 1530854 pages reserved [ 388.773840][ T6884] 0 pages cma reserved [ 389.924168][ T6884] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 391.455592][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.345'. [ 394.389258][ T5800] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 394.463613][ T6938] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 395.063855][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.4.360'. [ 395.231176][ T6954] bridge_slave_0: left allmulticast mode [ 395.237381][ T6954] bridge_slave_0: left promiscuous mode [ 395.244800][ T6954] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.335228][ T6954] bridge_slave_1: left allmulticast mode [ 395.341332][ T6954] bridge_slave_1: left promiscuous mode [ 395.348646][ T6954] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.604531][ T6954] bond0: (slave bond_slave_0): Releasing backup interface [ 395.652630][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 395.652999][ T5808] Bluetooth: hci3: command 0x0406 tx timeout [ 395.658870][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 395.807023][ T6954] bond0: (slave bond_slave_1): Releasing backup interface [ 395.960669][ T6954] team0: Port device team_slave_0 removed [ 396.095252][ T6954] team0: Port device team_slave_1 removed [ 396.109021][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.117238][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.283082][ T6954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.291032][ T6954] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.071185][ T5804] Bluetooth: hci4: link tx timeout [ 397.080577][ T5804] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 398.608924][ T6990] netlink: 176 bytes leftover after parsing attributes in process `syz.2.373'. [ 398.724296][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 398.734492][ T6987] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 399.172808][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 399.714514][ T7001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 399.920289][ T7002] warn_alloc: 4 callbacks suppressed [ 399.920379][ T7002] syz.2.380: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 399.950203][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: syz.2.380 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 399.950377][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 399.950471][ T7002] Call Trace: [ 399.950526][ T7002] [ 399.950583][ T7002] __dump_stack+0x26/0x30 [ 399.950778][ T7002] dump_stack_lvl+0x1df/0x270 [ 399.950990][ T7002] dump_stack+0x1e/0x25 [ 399.951167][ T7002] warn_alloc+0x470/0x690 [ 399.951399][ T7002] ? kmsan_get_metadata+0xfb/0x160 [ 399.951634][ T7002] __vmalloc_node_range_noprof+0x133/0x2360 [ 399.951848][ T7002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.952092][ T7002] ? should_fail_ex+0x45/0x8a0 [ 399.952280][ T7002] ? kmsan_get_metadata+0xfb/0x160 [ 399.952493][ T7002] ? kmsan_get_metadata+0xfb/0x160 [ 399.952703][ T7002] ? kmsan_get_metadata+0xfb/0x160 [ 399.952919][ T7002] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 399.953154][ T7002] ? kmsan_get_metadata+0xfb/0x160 [ 399.953379][ T7002] vmalloc_user_noprof+0xce/0x140 [ 399.953572][ T7002] ? xskq_create+0x11d/0x290 [ 399.953762][ T7002] xskq_create+0x11d/0x290 [ 399.953968][ T7002] xsk_init_queue+0xfd/0x1d0 [ 399.954156][ T7002] xsk_setsockopt+0x873/0xc30 [ 399.954359][ T7002] do_sock_setsockopt+0x4dc/0x820 [ 399.954539][ T7002] ? __pfx_xsk_setsockopt+0x10/0x10 [ 399.954726][ T7002] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 399.954943][ T7002] ia32_sys_call+0x41fa/0x42c0 [ 399.955097][ T7002] __do_fast_syscall_32+0xb0/0x150 [ 399.955293][ T7002] do_fast_syscall_32+0x38/0x80 [ 399.955466][ T7002] do_SYSENTER_32+0x1f/0x30 [ 399.955635][ T7002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 399.955851][ T7002] RIP: 0023:0xf7f22539 [ 399.955970][ T7002] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 399.956105][ T7002] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 399.956252][ T7002] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000000000011b [ 399.956355][ T7002] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 399.956452][ T7002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 399.956543][ T7002] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 399.956636][ T7002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 399.956765][ T7002] [ 400.203589][ T7002] Mem-Info: [ 400.206983][ T7002] active_anon:5663 inactive_anon:0 isolated_anon:0 [ 400.206983][ T7002] active_file:1642 inactive_file:39818 isolated_file:0 [ 400.206983][ T7002] unevictable:768 dirty:90 writeback:0 [ 400.206983][ T7002] slab_reclaimable:4767 slab_unreclaimable:23548 [ 400.206983][ T7002] mapped:29696 shmem:1360 pagetables:1374 [ 400.206983][ T7002] sec_pagetables:0 bounce:0 [ 400.206983][ T7002] kernel_misc_reclaimable:0 [ 400.206983][ T7002] free:374355 free_pcp:13957 free_cma:0 [ 400.257244][ T7002] Node 0 active_anon:22652kB inactive_anon:0kB active_file:6568kB inactive_file:159072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118784kB dirty:360kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5168kB pagetables:5148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.297779][ T7002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 400.332120][ T7002] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.368164][ T7002] lowmem_reserve[]: 0 930 1243 1243 1243 [ 400.376769][ T7002] Node 0 DMA32 free:569208kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1568kB inactive_anon:0kB active_file:2628kB inactive_file:80940kB unevictable:0kB writepending:240kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:41676kB local_pcp:22768kB free_cma:0kB [ 400.409418][ T7002] lowmem_reserve[]: 0 0 312 312 312 [ 400.415705][ T7002] Node 0 Normal free:17388kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20984kB inactive_anon:0kB active_file:3940kB inactive_file:78132kB unevictable:1536kB writepending:120kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:14028kB local_pcp:6096kB free_cma:0kB [ 400.454870][ T7002] lowmem_reserve[]: 0 0 0 0 0 [ 400.460326][ T7002] Node 1 Normal free:906728kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 400.494555][ T7002] lowmem_reserve[]: 0 0 0 0 0 [ 400.500034][ T7002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 400.513728][ T7002] Node 0 DMA32: 122*4kB (UME) 26*8kB (UME) 6*16kB (UME) 3*32kB (M) 6*64kB (UM) 5*128kB (UM) 6*256kB (ME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 135*4096kB (M) = 569208kB [ 400.534855][ T7002] Node 0 Normal: 121*4kB (UME) 65*8kB (UM) 14*16kB (M) 8*32kB (UM) 1*64kB (U) 2*128kB (UM) 2*256kB (U) 1*512kB (E) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 17164kB [ 400.562480][ T7002] Node 1 Normal: 2*4kB (E) 6*8kB (ME) 7*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906728kB [ 400.583116][ T7002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.593224][ T7002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.603316][ T7002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.613471][ T7002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 400.623495][ T7002] 42816 total pagecache pages [ 400.628606][ T7002] 0 pages in swap cache [ 400.633265][ T7002] Free swap = 124996kB [ 400.637664][ T7002] Total swap = 124996kB [ 400.648799][ T7002] 2097051 pages RAM [ 400.655033][ T7002] 0 pages HighMem/MovableOnly [ 400.659977][ T7002] 1530854 pages reserved [ 400.664875][ T7002] 0 pages cma reserved [ 400.973842][ T7010] syz_tun: entered allmulticast mode [ 401.103923][ T7008] netlink: 14 bytes leftover after parsing attributes in process `syz.0.381'. [ 401.286107][ T7008] syz_tun (unregistering): left allmulticast mode [ 403.172433][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 403.189925][ T7024] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 404.794939][ T7054] syz_tun: entered allmulticast mode [ 404.914385][ T7054] netlink: 14 bytes leftover after parsing attributes in process `syz.3.399'. [ 405.057505][ T7054] syz_tun (unregistering): left allmulticast mode [ 406.772689][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 407.137934][ T7070] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 408.151339][ T7089] syz_tun: entered allmulticast mode [ 408.265450][ T7089] netlink: 14 bytes leftover after parsing attributes in process `syz.2.415'. [ 408.386706][ T7089] syz_tun (unregistering): left allmulticast mode [ 410.621994][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 411.626420][ T7132] lo: entered allmulticast mode [ 411.685382][ T7132] netlink: 14 bytes leftover after parsing attributes in process `syz.2.430'. [ 411.900144][ T7133] warn_alloc: 4 callbacks suppressed [ 411.900229][ T7133] syz.0.433: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.926870][ T7133] CPU: 0 UID: 0 PID: 7133 Comm: syz.0.433 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 411.927055][ T7133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.927146][ T7133] Call Trace: [ 411.927203][ T7133] [ 411.927260][ T7133] __dump_stack+0x26/0x30 [ 411.927451][ T7133] dump_stack_lvl+0x1df/0x270 [ 411.927652][ T7133] dump_stack+0x1e/0x25 [ 411.927828][ T7133] warn_alloc+0x470/0x690 [ 411.928072][ T7133] ? kmsan_get_metadata+0xfb/0x160 [ 411.928310][ T7133] __vmalloc_node_range_noprof+0x133/0x2360 [ 411.928525][ T7133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.928761][ T7133] ? should_fail_ex+0x45/0x8a0 [ 411.928949][ T7133] ? kmsan_get_metadata+0xfb/0x160 [ 411.929176][ T7133] ? kmsan_get_metadata+0xfb/0x160 [ 411.929392][ T7133] ? kmsan_get_metadata+0xfb/0x160 [ 411.929611][ T7133] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 411.929845][ T7133] ? kmsan_get_metadata+0xfb/0x160 [ 411.930063][ T7133] vmalloc_user_noprof+0xce/0x140 [ 411.930255][ T7133] ? xskq_create+0x11d/0x290 [ 411.930449][ T7133] xskq_create+0x11d/0x290 [ 411.930643][ T7133] xsk_init_queue+0xfd/0x1d0 [ 411.930828][ T7133] xsk_setsockopt+0x873/0xc30 [ 411.931041][ T7133] do_sock_setsockopt+0x4dc/0x820 [ 411.931219][ T7133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.931403][ T7133] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 411.931611][ T7133] ia32_sys_call+0x41fa/0x42c0 [ 411.931770][ T7133] __do_fast_syscall_32+0xb0/0x150 [ 411.931959][ T7133] do_fast_syscall_32+0x38/0x80 [ 411.932151][ T7133] do_SYSENTER_32+0x1f/0x30 [ 411.932322][ T7133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 411.932526][ T7133] RIP: 0023:0xf7f23539 [ 411.932638][ T7133] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 411.932772][ T7133] RSP: 002b:00000000f502555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 411.932922][ T7133] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 411.933027][ T7133] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 411.933132][ T7133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 411.933220][ T7133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 411.933314][ T7133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 411.933443][ T7133] [ 412.175235][ T7133] Mem-Info: [ 412.179286][ T7133] active_anon:5681 inactive_anon:0 isolated_anon:0 [ 412.179286][ T7133] active_file:1642 inactive_file:39824 isolated_file:0 [ 412.179286][ T7133] unevictable:768 dirty:81 writeback:0 [ 412.179286][ T7133] slab_reclaimable:4767 slab_unreclaimable:23498 [ 412.179286][ T7133] mapped:29701 shmem:1360 pagetables:1350 [ 412.179286][ T7133] sec_pagetables:0 bounce:0 [ 412.179286][ T7133] kernel_misc_reclaimable:0 [ 412.179286][ T7133] free:374430 free_pcp:14041 free_cma:0 [ 412.227919][ T7133] Node 0 active_anon:22724kB inactive_anon:0kB active_file:6568kB inactive_file:159096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118804kB dirty:324kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5200kB pagetables:5052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.263340][ T7133] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.295600][ T7133] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.328675][ T7133] lowmem_reserve[]: 0 930 1243 1243 1243 [ 412.336073][ T7133] Node 0 DMA32 free:569208kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1568kB inactive_anon:0kB active_file:2628kB inactive_file:80940kB unevictable:0kB writepending:240kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:41816kB local_pcp:18988kB free_cma:0kB [ 412.368708][ T7133] lowmem_reserve[]: 0 0 312 312 312 [ 412.374998][ T7133] Node 0 Normal free:17440kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21172kB inactive_anon:0kB active_file:3940kB inactive_file:78156kB unevictable:1536kB writepending:84kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:14320kB local_pcp:8016kB free_cma:0kB [ 412.407897][ T7133] lowmem_reserve[]: 0 0 0 0 0 [ 412.413685][ T7133] Node 1 Normal free:906976kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.449097][ T7133] lowmem_reserve[]: 0 0 0 0 0 [ 412.455624][ T7133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 412.469367][ T7133] Node 0 DMA32: 122*4kB (UME) 26*8kB (UME) 6*16kB (UME) 3*32kB (M) 6*64kB (UM) 5*128kB (UM) 6*256kB (ME) 7*512kB (UME) 3*1024kB (UM) 3*2048kB (UM) 135*4096kB (M) = 569208kB [ 412.490651][ T7133] Node 0 Normal: 29*4kB (UME) 11*8kB (UM) 35*16kB (UM) 16*32kB (UM) 3*64kB (U) 3*128kB (U) 3*256kB (UM) 1*512kB (E) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 17468kB [ 412.510044][ T7133] Node 1 Normal: 6*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906976kB [ 412.533907][ T7133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.544869][ T7133] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.554869][ T7133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.565126][ T7133] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.575031][ T7133] 42822 total pagecache pages [ 412.579961][ T7133] 0 pages in swap cache [ 412.584636][ T7133] Free swap = 124996kB [ 412.589048][ T7133] Total swap = 124996kB [ 412.593727][ T7133] 2097051 pages RAM [ 412.597776][ T7133] 0 pages HighMem/MovableOnly [ 412.603013][ T7133] 1530854 pages reserved [ 412.607580][ T7133] 0 pages cma reserved [ 413.254253][ T7143] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.396192][ T7146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 414.149835][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 415.335483][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 416.918359][ T7187] netlink: 14 bytes leftover after parsing attributes in process `syz.2.448'. [ 421.699748][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 422.675734][ T7213] netlink: 'syz.4.458': attribute type 1 has an invalid length. [ 422.948801][ T7213] 8021q: adding VLAN 0 to HW filter on device bond1 [ 424.358815][ T7218] bond1: (slave veth3): Enslaving as an active interface with a down link [ 424.719886][ T7213] bond1: (slave veth0_to_bond): making interface the new active one [ 424.735282][ T7213] veth0_to_bond: entered promiscuous mode [ 424.743395][ T7213] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 425.046781][ T7220] vlan2: entered allmulticast mode [ 425.052496][ T7220] veth1: entered allmulticast mode [ 425.061266][ T7220] veth1: entered promiscuous mode [ 425.069381][ T7220] veth1: left promiscuous mode [ 425.085231][ T7220] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 425.389651][ T7176] Set syz1 is full, maxelem 65536 reached [ 427.050873][ T7242] warn_alloc: 1 callbacks suppressed [ 427.050980][ T7242] syz.2.468: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 427.077191][ T7242] CPU: 0 UID: 0 PID: 7242 Comm: syz.2.468 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 427.077374][ T7242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.077467][ T7242] Call Trace: [ 427.077524][ T7242] [ 427.077581][ T7242] __dump_stack+0x26/0x30 [ 427.077777][ T7242] dump_stack_lvl+0x1df/0x270 [ 427.077989][ T7242] dump_stack+0x1e/0x25 [ 427.078167][ T7242] warn_alloc+0x470/0x690 [ 427.078417][ T7242] ? kmsan_get_metadata+0xfb/0x160 [ 427.078658][ T7242] __vmalloc_node_range_noprof+0x133/0x2360 [ 427.078876][ T7242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 427.079125][ T7242] ? should_fail_ex+0x45/0x8a0 [ 427.079313][ T7242] ? kmsan_get_metadata+0xfb/0x160 [ 427.079525][ T7242] ? kmsan_get_metadata+0xfb/0x160 [ 427.079732][ T7242] ? kmsan_get_metadata+0xfb/0x160 [ 427.079953][ T7242] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 427.080188][ T7242] ? kmsan_get_metadata+0xfb/0x160 [ 427.080413][ T7242] vmalloc_user_noprof+0xce/0x140 [ 427.080605][ T7242] ? xskq_create+0x11d/0x290 [ 427.080797][ T7242] xskq_create+0x11d/0x290 [ 427.081001][ T7242] xsk_init_queue+0xfd/0x1d0 [ 427.081188][ T7242] xsk_setsockopt+0x873/0xc30 [ 427.081392][ T7242] do_sock_setsockopt+0x4dc/0x820 [ 427.081569][ T7242] ? __pfx_xsk_setsockopt+0x10/0x10 [ 427.081756][ T7242] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 427.081977][ T7242] ia32_sys_call+0x41fa/0x42c0 [ 427.082127][ T7242] __do_fast_syscall_32+0xb0/0x150 [ 427.082320][ T7242] do_fast_syscall_32+0x38/0x80 [ 427.082492][ T7242] do_SYSENTER_32+0x1f/0x30 [ 427.082657][ T7242] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 427.082852][ T7242] RIP: 0023:0xf7f22539 [ 427.082970][ T7242] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 427.083104][ T7242] RSP: 002b:00000000f502555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 427.083244][ T7242] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 427.083341][ T7242] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 427.083432][ T7242] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 427.083519][ T7242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 427.083608][ T7242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 427.083731][ T7242] [ 427.325634][ T7242] Mem-Info: [ 427.329020][ T7242] active_anon:5712 inactive_anon:0 isolated_anon:0 [ 427.329020][ T7242] active_file:1642 inactive_file:39830 isolated_file:0 [ 427.329020][ T7242] unevictable:768 dirty:36 writeback:0 [ 427.329020][ T7242] slab_reclaimable:4768 slab_unreclaimable:24593 [ 427.329020][ T7242] mapped:29704 shmem:1360 pagetables:1387 [ 427.329020][ T7242] sec_pagetables:0 bounce:0 [ 427.329020][ T7242] kernel_misc_reclaimable:0 [ 427.329020][ T7242] free:373590 free_pcp:13823 free_cma:0 [ 427.378309][ T7242] Node 0 active_anon:22780kB inactive_anon:0kB active_file:6568kB inactive_file:159120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118816kB dirty:144kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5168kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.415831][ T7242] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.448616][ T7242] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.480829][ T7242] lowmem_reserve[]: 0 930 1243 1243 1243 [ 427.488074][ T7242] Node 0 DMA32 free:566964kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1600kB inactive_anon:0kB active_file:2628kB inactive_file:80948kB unevictable:0kB writepending:116kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:40964kB local_pcp:22592kB free_cma:0kB [ 427.520966][ T7242] lowmem_reserve[]: 0 0 312 312 312 [ 427.527187][ T7242] Node 0 Normal free:16324kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21168kB inactive_anon:0kB active_file:3940kB inactive_file:78172kB unevictable:1536kB writepending:28kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:14484kB local_pcp:8024kB free_cma:0kB [ 427.559943][ T7242] lowmem_reserve[]: 0 0 0 0 0 [ 427.565620][ T7242] Node 1 Normal free:906976kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.600481][ T7242] lowmem_reserve[]: 0 0 0 0 0 [ 427.619574][ T7242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 427.633652][ T7242] Node 0 DMA32: 7*4kB (ME) 5*8kB (UME) 5*16kB (UME) 3*32kB (M) 5*64kB (M) 5*128kB (UM) 6*256kB (ME) 6*512kB (ME) 2*1024kB (M) 3*2048kB (U) 135*4096kB (M) = 566964kB [ 427.653041][ T7242] Node 0 Normal: 3*4kB (UE) 1*8kB (E) 1*16kB (U) 4*32kB (UME) 2*64kB (ME) 5*128kB (UME) 2*256kB (U) 1*512kB (E) 2*1024kB (UM) 0*2048kB 3*4096kB (M) = 16292kB [ 427.672284][ T7242] Node 1 Normal: 6*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906976kB [ 427.695894][ T7242] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.706851][ T7242] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.716762][ T7242] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 427.726937][ T7242] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 427.736823][ T7242] 42828 total pagecache pages [ 427.742045][ T7242] 0 pages in swap cache [ 427.746433][ T7242] Free swap = 124996kB [ 427.750815][ T7242] Total swap = 124996kB [ 427.755578][ T7242] 2097051 pages RAM [ 427.759631][ T7242] 0 pages HighMem/MovableOnly [ 427.765439][ T7242] 1530854 pages reserved [ 427.769917][ T7242] 0 pages cma reserved [ 428.452931][ T7255] netlink: 'syz.4.474': attribute type 1 has an invalid length. [ 428.730557][ T7255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.802646][ T1839] syzkaller0: tun_net_xmit 76 [ 428.808356][ T1839] syzkaller0: tun_net_xmit 48 [ 428.824179][ T11] syzkaller0: tun_net_xmit 76 [ 429.187313][ T7259] bond2: (slave veth5): Enslaving as an active interface with a down link [ 429.675941][ T7255] bond1: (slave veth0_to_bond): Releasing active interface [ 429.683757][ T7255] veth0_to_bond: left promiscuous mode [ 429.697129][ T7255] bond1: (slave vlan2): making interface the new active one [ 429.708691][ T7255] veth1: entered promiscuous mode [ 429.717817][ T7255] vlan2: entered promiscuous mode [ 429.800168][ T7255] bond2: (slave veth0_to_bond): making interface the new active one [ 429.816312][ T7255] veth0_to_bond: entered promiscuous mode [ 429.835360][ T7255] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 430.310506][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 434.787080][ T7312] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 435.058362][ T7312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.258468][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 435.722082][ T7312] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 436.669113][ T7311] bond1: (slave veth3): Enslaving as an active interface with a down link [ 437.091574][ T7319] vlan2: entered allmulticast mode [ 437.100411][ T7319] veth1: entered allmulticast mode [ 437.118060][ T7319] veth1: entered promiscuous mode [ 437.126063][ T7319] veth1: left promiscuous mode [ 437.142961][ T7319] bond1: (slave vlan2): making interface the new active one [ 437.154083][ T7319] veth1: entered promiscuous mode [ 437.163306][ T7319] vlan2: entered promiscuous mode [ 437.171932][ T7319] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 437.852761][ T7324] Can't find ip_set type has [ 442.130819][ T7302] Set syz1 is full, maxelem 65536 reached [ 442.892319][ T12] vlan2: left promiscuous mode [ 443.003974][ T1147] veth0_to_bond: left promiscuous mode [ 444.048487][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 445.061211][ T7365] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 445.198243][ T7365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.993423][ T7367] bond1: (slave veth5): Enslaving as an active interface with a down link [ 446.232858][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 446.356803][ T7365] team0: Port device veth0_to_bond removed [ 446.382667][ T7365] bond1: (slave veth0_to_bond): making interface the new active one [ 446.397801][ T7365] veth0_to_bond: entered promiscuous mode [ 446.405915][ T7365] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 450.518935][ T3663] vlan2: left promiscuous mode [ 450.767450][ T7330] Set syz1 is full, maxelem 65536 reached [ 451.965808][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.4.520'. [ 452.523591][ T7407] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 452.903412][ T7409] vlan2: entered allmulticast mode [ 452.908882][ T7409] veth1: entered allmulticast mode [ 452.927405][ T7412] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.523'. [ 453.209049][ T7407] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 454.384958][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 456.558502][ T7449] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.538'. [ 456.739930][ T7450] syz.2.536: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 456.759085][ T7450] CPU: 0 UID: 0 PID: 7450 Comm: syz.2.536 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 456.759258][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.759348][ T7450] Call Trace: [ 456.759397][ T7450] [ 456.759454][ T7450] __dump_stack+0x26/0x30 [ 456.759669][ T7450] dump_stack_lvl+0x1df/0x270 [ 456.759875][ T7450] dump_stack+0x1e/0x25 [ 456.760043][ T7450] warn_alloc+0x470/0x690 [ 456.760271][ T7450] ? kmsan_get_metadata+0xfb/0x160 [ 456.760559][ T7450] __vmalloc_node_range_noprof+0x133/0x2360 [ 456.760779][ T7450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 456.761012][ T7450] ? should_fail_ex+0x45/0x8a0 [ 456.761203][ T7450] ? kmsan_get_metadata+0xfb/0x160 [ 456.761433][ T7450] ? kmsan_get_metadata+0xfb/0x160 [ 456.761650][ T7450] ? kmsan_get_metadata+0xfb/0x160 [ 456.761864][ T7450] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 456.762107][ T7450] ? kmsan_get_metadata+0xfb/0x160 [ 456.762339][ T7450] vmalloc_user_noprof+0xce/0x140 [ 456.762582][ T7450] ? xskq_create+0x11d/0x290 [ 456.762777][ T7450] xskq_create+0x11d/0x290 [ 456.762971][ T7450] xsk_init_queue+0xfd/0x1d0 [ 456.763161][ T7450] xsk_setsockopt+0x873/0xc30 [ 456.763370][ T7450] do_sock_setsockopt+0x4dc/0x820 [ 456.763553][ T7450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 456.763741][ T7450] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 456.763947][ T7450] ia32_sys_call+0x41fa/0x42c0 [ 456.764104][ T7450] __do_fast_syscall_32+0xb0/0x150 [ 456.764303][ T7450] do_fast_syscall_32+0x38/0x80 [ 456.764487][ T7450] do_SYSENTER_32+0x1f/0x30 [ 456.764655][ T7450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.764857][ T7450] RIP: 0023:0xf7f22539 [ 456.764972][ T7450] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 456.765110][ T7450] RSP: 002b:00000000f502555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 456.765260][ T7450] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 456.765372][ T7450] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 456.765469][ T7450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.765562][ T7450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 456.765655][ T7450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.765786][ T7450] [ 457.009570][ T7450] Mem-Info: [ 457.013864][ T7450] active_anon:5709 inactive_anon:0 isolated_anon:0 [ 457.013864][ T7450] active_file:1642 inactive_file:39840 isolated_file:0 [ 457.013864][ T7450] unevictable:768 dirty:63 writeback:0 [ 457.013864][ T7450] slab_reclaimable:4772 slab_unreclaimable:26603 [ 457.013864][ T7450] mapped:29760 shmem:1360 pagetables:1378 [ 457.013864][ T7450] sec_pagetables:0 bounce:0 [ 457.013864][ T7450] kernel_misc_reclaimable:0 [ 457.013864][ T7450] free:371716 free_pcp:13749 free_cma:0 [ 457.059797][ T7450] Node 0 active_anon:22836kB inactive_anon:0kB active_file:6568kB inactive_file:159160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119040kB dirty:252kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5248kB pagetables:5232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.096736][ T7450] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 457.129747][ T7450] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 457.159345][ T7450] lowmem_reserve[]: 0 930 1243 1243 1243 [ 457.169083][ T7450] Node 0 DMA32 free:561112kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2092kB inactive_anon:0kB active_file:2628kB inactive_file:80972kB unevictable:0kB writepending:144kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:37780kB local_pcp:17928kB free_cma:0kB [ 457.202412][ T7450] lowmem_reserve[]: 0 0 312 312 312 [ 457.208392][ T7450] Node 0 Normal free:16444kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20744kB inactive_anon:0kB active_file:3940kB inactive_file:78188kB unevictable:1536kB writepending:108kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15308kB local_pcp:7516kB free_cma:0kB [ 457.241451][ T7450] lowmem_reserve[]: 0 0 0 0 0 [ 457.247300][ T7450] Node 1 Normal free:905212kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB [ 457.282419][ T7450] lowmem_reserve[]: 0 0 0 0 0 [ 457.287873][ T7450] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 457.302724][ T7450] Node 0 DMA32: 8*4kB (UME) 5*8kB (UME) 5*16kB (UME) 4*32kB (UM) 5*64kB (M) 5*128kB (UM) 7*256kB (UME) 6*512kB (ME) 2*1024kB (M) 2*2048kB (UM) 134*4096kB (M) = 561112kB [ 457.323445][ T7450] Node 0 Normal: 1*4kB (E) 3*8kB (ME) 2*16kB (UM) 12*32kB (UM) 3*64kB (UME) 4*128kB (UME) 3*256kB (UM) 2*512kB (ME) 1*1024kB (U) 0*2048kB 3*4096kB (M) = 16252kB [ 457.342591][ T7450] Node 1 Normal: 3*4kB (UE) 6*8kB (ME) 4*16kB (ME) 10*32kB (ME) 17*64kB (ME) 8*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 905212kB [ 457.363427][ T7450] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.376358][ T7450] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.386944][ T7450] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 457.397334][ T7450] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 457.407254][ T7450] 42838 total pagecache pages [ 457.412677][ T7450] 0 pages in swap cache [ 457.417077][ T7450] Free swap = 124996kB [ 457.421460][ T7450] Total swap = 124996kB [ 457.426267][ T7450] 2097051 pages RAM [ 457.430406][ T7450] 0 pages HighMem/MovableOnly [ 457.435617][ T7450] 1530854 pages reserved [ 457.440103][ T7450] 0 pages cma reserved [ 457.698539][ T7452] syzkaller0: entered promiscuous mode [ 457.704661][ T7452] syzkaller0: entered allmulticast mode [ 458.505687][ T7461] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 458.641228][ T7461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.004740][ T7464] bond3: (slave veth7): Enslaving as an active interface with a down link [ 459.121925][ T7461] bond2: (slave veth0_to_bond): Releasing active interface [ 459.269696][ T7461] bond3: (slave veth0_to_bond): making interface the new active one [ 459.285317][ T7461] veth0_to_bond: entered promiscuous mode [ 459.293334][ T7461] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 459.333472][ T1316] veth0_to_bond: left promiscuous mode [ 462.071000][ T7492] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.551'. [ 464.629477][ T7503] syzkaller0: entered promiscuous mode [ 464.635767][ T7503] syzkaller0: entered allmulticast mode [ 464.666988][ T7504] lo: left allmulticast mode [ 466.938306][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 467.592999][ T7514] netlink: 'syz.2.558': attribute type 3 has an invalid length. [ 468.723944][ T7524] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 468.953717][ T7524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.964680][ T7475] Set syz1 is full, maxelem 65536 reached [ 469.218845][ T7521] bond3: (slave veth0_to_bond): Releasing active interface [ 469.226902][ T7521] veth0_to_bond: left promiscuous mode [ 469.416870][ T7521] bond4: (slave veth0_to_bond): making interface the new active one [ 469.432907][ T7521] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 470.345099][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.565'. [ 471.619818][ T7550] syzkaller0: entered promiscuous mode [ 471.626156][ T7550] syzkaller0: entered allmulticast mode [ 471.916718][ T7555] warn_alloc: 1 callbacks suppressed [ 471.916805][ T7555] syz.4.571: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 471.939129][ T7555] CPU: 0 UID: 0 PID: 7555 Comm: syz.4.571 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 471.939303][ T7555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.939396][ T7555] Call Trace: [ 471.939461][ T7555] [ 471.939518][ T7555] __dump_stack+0x26/0x30 [ 471.939715][ T7555] dump_stack_lvl+0x1df/0x270 [ 471.939923][ T7555] dump_stack+0x1e/0x25 [ 471.940099][ T7555] warn_alloc+0x470/0x690 [ 471.940332][ T7555] ? kmsan_get_metadata+0xfb/0x160 [ 471.940577][ T7555] __vmalloc_node_range_noprof+0x133/0x2360 [ 471.940793][ T7555] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 471.941032][ T7555] ? should_fail_ex+0x45/0x8a0 [ 471.941217][ T7555] ? kmsan_get_metadata+0xfb/0x160 [ 471.941444][ T7555] ? kmsan_get_metadata+0xfb/0x160 [ 471.941661][ T7555] ? kmsan_get_metadata+0xfb/0x160 [ 471.941884][ T7555] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 471.942131][ T7555] ? kmsan_get_metadata+0xfb/0x160 [ 471.942360][ T7555] vmalloc_user_noprof+0xce/0x140 [ 471.942578][ T7555] ? xskq_create+0x11d/0x290 [ 471.942825][ T7555] xskq_create+0x11d/0x290 [ 471.943023][ T7555] xsk_init_queue+0xfd/0x1d0 [ 471.943212][ T7555] xsk_setsockopt+0x873/0xc30 [ 471.943424][ T7555] do_sock_setsockopt+0x4dc/0x820 [ 471.943604][ T7555] ? __pfx_xsk_setsockopt+0x10/0x10 [ 471.943794][ T7555] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 471.944006][ T7555] ia32_sys_call+0x41fa/0x42c0 [ 471.944161][ T7555] __do_fast_syscall_32+0xb0/0x150 [ 471.944355][ T7555] do_fast_syscall_32+0x38/0x80 [ 471.944536][ T7555] do_SYSENTER_32+0x1f/0x30 [ 471.944706][ T7555] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 471.944905][ T7555] RIP: 0023:0xf7f76539 [ 471.945020][ T7555] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 471.945152][ T7555] RSP: 002b:00000000f507555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 471.945338][ T7555] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000011b [ 471.945449][ T7555] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 471.945545][ T7555] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.945637][ T7555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 471.945730][ T7555] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 471.945861][ T7555] [ 472.188991][ T7555] Mem-Info: [ 472.193348][ T7555] active_anon:5697 inactive_anon:0 isolated_anon:0 [ 472.193348][ T7555] active_file:1642 inactive_file:39846 isolated_file:0 [ 472.193348][ T7555] unevictable:768 dirty:67 writeback:0 [ 472.193348][ T7555] slab_reclaimable:4774 slab_unreclaimable:27755 [ 472.193348][ T7555] mapped:29751 shmem:1360 pagetables:1371 [ 472.193348][ T7555] sec_pagetables:0 bounce:0 [ 472.193348][ T7555] kernel_misc_reclaimable:0 [ 472.193348][ T7555] free:370418 free_pcp:13958 free_cma:0 [ 472.242252][ T7555] Node 0 active_anon:22856kB inactive_anon:0kB active_file:6568kB inactive_file:159184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119004kB dirty:268kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5328kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 472.276967][ T7555] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 472.310109][ T7555] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 472.342906][ T7555] lowmem_reserve[]: 0 930 1243 1243 1243 [ 472.349343][ T7555] Node 0 DMA32 free:554940kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1832kB inactive_anon:0kB active_file:2628kB inactive_file:80988kB unevictable:0kB writepending:220kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:39908kB local_pcp:19576kB free_cma:0kB [ 472.383146][ T7555] lowmem_reserve[]: 0 0 312 312 312 [ 472.389197][ T7555] Node 0 Normal free:16212kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20956kB inactive_anon:0kB active_file:3940kB inactive_file:78196kB unevictable:1536kB writepending:48kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15364kB local_pcp:8004kB free_cma:0kB [ 472.425649][ T7555] lowmem_reserve[]: 0 0 0 0 0 [ 472.431109][ T7555] Node 1 Normal free:906424kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 472.463568][ T7555] lowmem_reserve[]: 0 0 0 0 0 [ 472.469003][ T7555] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 472.483677][ T7555] Node 0 DMA32: 7*4kB (ME) 4*8kB (ME) 6*16kB (UME) 25*32kB (UM) 18*64kB (UM) 5*128kB (UM) 9*256kB (UME) 8*512kB (UME) 3*1024kB (M) 1*2048kB (M) 132*4096kB (M) = 554940kB [ 472.503753][ T7555] Node 0 Normal: 157*4kB (UME) 40*8kB (UME) 12*16kB (UM) 1*32kB (M) 3*64kB (UME) 4*128kB (UME) 2*256kB (UM) 3*512kB (UME) 0*1024kB 0*2048kB 3*4096kB (M) = 16212kB [ 472.523643][ T7555] Node 1 Normal: 2*4kB (E) 6*8kB (ME) 5*16kB (UME) 15*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906472kB [ 472.546904][ T7555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.558089][ T7555] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 472.568010][ T7555] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 472.578274][ T7555] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 472.588167][ T7555] 42844 total pagecache pages [ 472.593308][ T7555] 0 pages in swap cache [ 472.597709][ T7555] Free swap = 124996kB [ 472.602474][ T7555] Total swap = 124996kB [ 472.606895][ T7555] 2097051 pages RAM [ 472.610942][ T7555] 0 pages HighMem/MovableOnly [ 472.616722][ T7555] 1530854 pages reserved [ 472.621259][ T7555] 0 pages cma reserved [ 473.970949][ T7577] netlink: 'syz.3.577': attribute type 1 has an invalid length. [ 474.130308][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 474.401492][ T7579] bond2: (slave veth7): Enslaving as an active interface with a down link [ 475.172840][ T5804] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 475.523726][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.895968][ T7601] syzkaller0: entered promiscuous mode [ 475.902029][ T7601] syzkaller0: entered allmulticast mode [ 477.967865][ T7621] netlink: 'syz.3.593': attribute type 1 has an invalid length. [ 478.117037][ T7621] 8021q: adding VLAN 0 to HW filter on device bond3 [ 478.270069][ T7628] bond1: (slave veth0_to_bond): Releasing active interface [ 478.386265][ T7628] bond3: (slave veth0_to_bond): making interface the new active one [ 478.402642][ T7628] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.680430][ T7626] bond3: (slave veth9): Enslaving as an active interface with a down link [ 481.977205][ T7666] syz.1.608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 481.993044][ T7666] CPU: 0 UID: 0 PID: 7666 Comm: syz.1.608 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 481.993207][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.993297][ T7666] Call Trace: [ 481.993358][ T7666] [ 481.993413][ T7666] __dump_stack+0x26/0x30 [ 481.993599][ T7666] dump_stack_lvl+0x1df/0x270 [ 481.993795][ T7666] dump_stack+0x1e/0x25 [ 481.993965][ T7666] warn_alloc+0x470/0x690 [ 481.994188][ T7666] ? kmsan_get_metadata+0xfb/0x160 [ 481.994421][ T7666] __vmalloc_node_range_noprof+0x133/0x2360 [ 481.994624][ T7666] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 481.994851][ T7666] ? should_fail_ex+0x45/0x8a0 [ 481.995051][ T7666] ? kmsan_get_metadata+0xfb/0x160 [ 481.995259][ T7666] ? kmsan_get_metadata+0xfb/0x160 [ 481.995473][ T7666] ? kmsan_get_metadata+0xfb/0x160 [ 481.995679][ T7666] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 481.995906][ T7666] ? kmsan_get_metadata+0xfb/0x160 [ 481.996123][ T7666] vmalloc_user_noprof+0xce/0x140 [ 481.996308][ T7666] ? xskq_create+0x11d/0x290 [ 481.996502][ T7666] xskq_create+0x11d/0x290 [ 481.996690][ T7666] xsk_init_queue+0xfd/0x1d0 [ 481.996870][ T7666] xsk_setsockopt+0x873/0xc30 [ 481.997064][ T7666] do_sock_setsockopt+0x4dc/0x820 [ 481.997238][ T7666] ? __pfx_xsk_setsockopt+0x10/0x10 [ 481.997425][ T7666] __ia32_sys_setsockopt+0x2ac/0x4a0 [ 481.997625][ T7666] ia32_sys_call+0x41fa/0x42c0 [ 481.997771][ T7666] __do_fast_syscall_32+0xb0/0x150 [ 481.997956][ T7666] do_fast_syscall_32+0x38/0x80 [ 481.998122][ T7666] do_SYSENTER_32+0x1f/0x30 [ 481.998284][ T7666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 481.998481][ T7666] RIP: 0023:0xf70de539 [ 481.998589][ T7666] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 481.998717][ T7666] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 481.998858][ T7666] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000000011b [ 481.998956][ T7666] RDX: 0000000000000006 RSI: 0000000080000000 RDI: 0000000000000004 [ 481.999047][ T7666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 481.999133][ T7666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 481.999222][ T7666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 481.999353][ T7666] [ 481.999419][ T7666] Mem-Info: [ 482.268706][ T7666] active_anon:5732 inactive_anon:0 isolated_anon:0 [ 482.268706][ T7666] active_file:1642 inactive_file:39850 isolated_file:0 [ 482.268706][ T7666] unevictable:768 dirty:109 writeback:0 [ 482.268706][ T7666] slab_reclaimable:4776 slab_unreclaimable:27763 [ 482.268706][ T7666] mapped:32217 shmem:1360 pagetables:1410 [ 482.268706][ T7666] sec_pagetables:0 bounce:0 [ 482.268706][ T7666] kernel_misc_reclaimable:0 [ 482.268706][ T7666] free:369825 free_pcp:14539 free_cma:0 [ 482.314825][ T7666] Node 0 active_anon:22928kB inactive_anon:0kB active_file:6568kB inactive_file:159200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131112kB dirty:436kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5408kB pagetables:5292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 482.348847][ T7666] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:32kB pagetables:348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 482.384008][ T7666] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.414457][ T7666] lowmem_reserve[]: 0 930 1243 1243 1243 [ 482.420901][ T7666] Node 0 DMA32 free:552028kB boost:0kB min:36868kB low:46084kB high:55300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1712kB inactive_anon:0kB active_file:2628kB inactive_file:80988kB unevictable:0kB writepending:360kB present:3129332kB managed:953032kB mlocked:0kB bounce:0kB free_pcp:43044kB local_pcp:22124kB free_cma:0kB [ 482.460006][ T7666] lowmem_reserve[]: 0 0 312 312 312 [ 482.466885][ T7666] Node 0 Normal free:16204kB boost:0kB min:13004kB low:16252kB high:19500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21188kB inactive_anon:0kB active_file:3940kB inactive_file:78212kB unevictable:1536kB writepending:76kB present:1048580kB managed:320456kB mlocked:0kB bounce:0kB free_pcp:15072kB local_pcp:7864kB free_cma:0kB [ 482.500156][ T7666] lowmem_reserve[]: 0 0 0 0 0 [ 482.505826][ T7666] Node 1 Normal free:906972kB boost:0kB min:40064kB low:50080kB high:60096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:987204kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.538636][ T7666] lowmem_reserve[]: 0 0 0 0 0 [ 482.544323][ T7666] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 482.557945][ T7666] Node 0 DMA32: 7*4kB (ME) 4*8kB (ME) 6*16kB (UME) 2*32kB (M) 6*64kB (UM) 4*128kB (UM) 6*256kB (UME) 7*512kB (UME) 3*1024kB (M) 1*2048kB (M) 132*4096kB (M) = 552028kB [ 482.581516][ T7666] Node 0 Normal: 5*4kB (UME) 24*8kB (UME) 25*16kB (UM) 4*32kB (UM) 5*64kB (UM) 4*128kB (UME) 3*256kB (UME) 3*512kB (UME) 0*1024kB 0*2048kB 3*4096kB (M) = 16164kB [ 482.601193][ T7666] Node 1 Normal: 5*4kB (UE) 15*8kB (UME) 17*16kB (UME) 22*32kB (UME) 24*64kB (UME) 13*128kB (UME) 8*256kB (UME) 5*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 215*4096kB (M) = 906972kB [ 482.622912][ T7666] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.633086][ T7666] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.642944][ T7666] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 482.653176][ T7666] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 482.665788][ T7666] 42848 total pagecache pages [ 482.670737][ T7666] 0 pages in swap cache [ 482.676061][ T7666] Free swap = 124996kB [ 482.680496][ T7666] Total swap = 124996kB [ 482.685142][ T7666] 2097051 pages RAM [ 482.689194][ T7666] 0 pages HighMem/MovableOnly [ 482.694312][ T7666] 1530854 pages reserved [ 482.698797][ T7666] 0 pages cma reserved [ 482.743507][ T7665] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 482.885235][ T7665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.117487][ T7675] bond1: (slave veth3): Enslaving as an active interface with a down link [ 483.312996][ T7665] bond1: (slave veth0_to_bond): making interface the new active one [ 483.334492][ T7665] veth0_to_bond: entered promiscuous mode [ 483.338355][ T7669] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 483.343926][ T7665] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 483.425956][ T7676] vlan2: entered allmulticast mode [ 483.435271][ T7676] veth1: entered promiscuous mode [ 483.443320][ T7676] veth1: left promiscuous mode [ 483.458681][ T7676] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 486.736389][ T7715] netlink: 'syz.3.626': attribute type 1 has an invalid length. [ 486.967383][ T7715] 8021q: adding VLAN 0 to HW filter on device bond4 [ 487.230170][ T7719] bond4: (slave veth11): Enslaving as an active interface with a down link [ 487.390833][ T7712] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 487.396046][ T7715] bond3: (slave veth0_to_bond): Releasing active interface [ 487.404976][ T7715] bond3: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 487.466682][ T7715] bond4: (slave veth0_to_bond): making interface the new active one [ 487.486297][ T7715] veth0_to_bond: entered promiscuous mode [ 487.495001][ T7715] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 488.655678][ T7739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.632'. [ 488.665872][ T7739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.632'. [ 490.566628][ T7759] netlink: 'syz.1.641': attribute type 1 has an invalid length. [ 490.697934][ T7759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.034642][ T7758] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 491.120361][ T7759] bond2: (slave veth3): Enslaving as an active interface with a down link [ 491.309401][ T7762] bond2: (slave veth0_to_bond): making interface the new active one [ 491.325202][ T7762] veth0_to_bond: entered promiscuous mode [ 491.333224][ T7762] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 491.452871][ T7763] vlan2: entered allmulticast mode [ 491.467134][ T7763] veth1: entered allmulticast mode [ 491.481284][ T7763] veth1: entered promiscuous mode [ 491.489545][ T7763] veth1: left promiscuous mode [ 491.505594][ T7763] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 492.375687][ T7776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 492.385176][ T7776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.647'. [ 494.863581][ T4249] veth0_to_bond: left promiscuous mode [ 494.938280][ T5446] ===================================================== [ 494.945920][ T5446] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 494.959988][ T5446] _copy_to_iter+0xf0e/0x33f0 [ 494.967250][ T5446] __skb_datagram_iter+0x196/0x12c0 [ 494.972918][ T5446] skb_copy_datagram_iter+0x5b/0x1e0 [ 494.978458][ T5446] netlink_recvmsg+0x4bb/0xfe0 [ 494.983749][ T5446] sock_recvmsg+0x2dc/0x390 [ 494.988524][ T5446] ____sys_recvmsg+0x193/0x610 [ 494.993669][ T5446] ___sys_recvmsg+0x20b/0x850 [ 494.998600][ T5446] __x64_sys_recvmsg+0x20e/0x3d0 [ 495.004667][ T5446] x64_sys_call+0x11ff/0x3db0 [ 495.009629][ T5446] do_syscall_64+0xd9/0x210 [ 495.015206][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.021349][ T5446] [ 495.024072][ T5446] Uninit was stored to memory at: [ 495.029496][ T5446] pskb_expand_head+0x310/0x1610 [ 495.034826][ T5446] netlink_trim+0x496/0x500 [ 495.039545][ T5446] netlink_broadcast_filtered+0x80/0x2370 [ 495.045720][ T5446] nlmsg_notify+0x15b/0x2f0 [ 495.050493][ T5446] rtnl_notify+0xba/0x100 [ 495.064020][ T5446] wireless_nlevent_process+0xfe/0x290 [ 495.069827][ T5446] process_scheduled_works+0xb91/0x1d80 [ 495.075802][ T5446] worker_thread+0xedf/0x1590 [ 495.080783][ T5446] kthread+0xd5c/0xf00 [ 495.085833][ T5446] ret_from_fork+0x1e3/0x310 [ 495.090674][ T5446] ret_from_fork_asm+0x1a/0x30 [ 495.095840][ T5446] [ 495.098306][ T5446] Uninit was stored to memory at: [ 495.103872][ T5446] wireless_send_event+0x67f/0x1530 [ 495.109367][ T5446] ioctl_standard_iw_point+0x12b0/0x13f0 [ 495.115545][ T5446] compat_standard_call+0x188/0x4c0 [ 495.121028][ T5446] wext_ioctl_dispatch+0x192/0x7a0 [ 495.126554][ T5446] compat_wext_handle_ioctl+0x1a1/0x300 [ 495.132516][ T5446] compat_sock_ioctl+0x20c/0xff0 [ 495.137729][ T5446] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 495.143750][ T5446] ia32_sys_call+0x2d07/0x42c0 [ 495.148740][ T5446] __do_fast_syscall_32+0xb0/0x150 [ 495.160856][ T5446] do_fast_syscall_32+0x38/0x80 [ 495.168103][ T5446] do_SYSENTER_32+0x1f/0x30 [ 495.173115][ T5446] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.179740][ T5446] [ 495.182360][ T5446] Local variable iwp created at: [ 495.187453][ T5446] compat_standard_call+0x4a/0x4c0 [ 495.192981][ T5446] wext_ioctl_dispatch+0x192/0x7a0 [ 495.198394][ T5446] [ 495.200850][ T5446] Bytes 60-63 of 64 are uninitialized [ 495.206590][ T5446] Memory access of size 64 starts at ffff88811ce13180 [ 495.213636][ T5446] Data copied to user address 00007fffb24bc830 [ 495.219952][ T5446] [ 495.222624][ T5446] CPU: 1 UID: 101 PID: 5446 Comm: dhcpcd Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 495.235083][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.245614][ T5446] ===================================================== [ 495.252910][ T5446] Disabling lock debugging due to kernel taint [ 495.265717][ T5446] Kernel panic - not syncing: kmsan.panic set ... [ 495.272350][ T5446] CPU: 1 UID: 101 PID: 5446 Comm: dhcpcd Tainted: G B 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(undef) [ 495.286104][ T5446] Tainted: [B]=BAD_PAGE [ 495.290408][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 495.300651][ T5446] Call Trace: [ 495.304077][ T5446] [ 495.307151][ T5446] __dump_stack+0x26/0x30 [ 495.311746][ T5446] dump_stack_lvl+0x53/0x270 [ 495.316598][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.322706][ T5446] dump_stack+0x1e/0x25 [ 495.327106][ T5446] panic+0x4bd/0xd50 [ 495.331306][ T5446] kmsan_report+0x31c/0x320 [ 495.336079][ T5446] ? kmsan_internal_check_memory+0x1e1/0x230 [ 495.342377][ T5446] ? kmsan_copy_to_user+0xf1/0x190 [ 495.347749][ T5446] ? _copy_to_iter+0xf0e/0x33f0 [ 495.352834][ T5446] ? __skb_datagram_iter+0x196/0x12c0 [ 495.358444][ T5446] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 495.364231][ T5446] ? netlink_recvmsg+0x4bb/0xfe0 [ 495.369407][ T5446] ? sock_recvmsg+0x2dc/0x390 [ 495.374341][ T5446] ? ____sys_recvmsg+0x193/0x610 [ 495.379510][ T5446] ? ___sys_recvmsg+0x20b/0x850 [ 495.384596][ T5446] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 495.389941][ T5446] ? x64_sys_call+0x11ff/0x3db0 [ 495.395068][ T5446] ? do_syscall_64+0xd9/0x210 [ 495.399985][ T5446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.406303][ T5446] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 495.412644][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.418036][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.423420][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.429524][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.434914][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.441041][ T5446] ? _raw_spin_lock+0x31/0x60 [ 495.445980][ T5446] ? filter_irq_stacks+0x49/0x190 [ 495.451231][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.456623][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.462740][ T5446] kmsan_internal_check_memory+0x1e1/0x230 [ 495.468862][ T5446] kmsan_copy_to_user+0xf1/0x190 [ 495.474083][ T5446] _copy_to_iter+0xf0e/0x33f0 [ 495.478996][ T5446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 495.485596][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.490988][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.497088][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.502499][ T5446] ? kmsan_internal_set_shadow_origin+0x11/0x110 [ 495.509143][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.514561][ T5446] __skb_datagram_iter+0x196/0x12c0 [ 495.520026][ T5446] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 495.525970][ T5446] skb_copy_datagram_iter+0x5b/0x1e0 [ 495.531494][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.537608][ T5446] netlink_recvmsg+0x4bb/0xfe0 [ 495.542676][ T5446] ? __pfx_netlink_recvmsg+0x10/0x10 [ 495.548207][ T5446] sock_recvmsg+0x2dc/0x390 [ 495.552992][ T5446] ____sys_recvmsg+0x193/0x610 [ 495.558000][ T5446] ? setup_fault_attr+0x270/0x300 [ 495.563306][ T5446] ? stack_depot_save_flags+0x35/0x7b0 [ 495.569086][ T5446] ___sys_recvmsg+0x20b/0x850 [ 495.574052][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.580161][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.585564][ T5446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 495.591668][ T5446] __x64_sys_recvmsg+0x20e/0x3d0 [ 495.596976][ T5446] ? kmsan_get_metadata+0xfb/0x160 [ 495.602385][ T5446] x64_sys_call+0x11ff/0x3db0 [ 495.607337][ T5446] do_syscall_64+0xd9/0x210 [ 495.612069][ T5446] ? irqentry_exit+0x16/0x60 [ 495.616867][ T5446] ? clear_bhb_loop+0x40/0x90 [ 495.621797][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.627952][ T5446] RIP: 0033:0x7f0d946b1407 [ 495.632553][ T5446] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 495.652418][ T5446] RSP: 002b:00007fffb24bc720 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 495.661075][ T5446] RAX: ffffffffffffffda RBX: 00007f0d94627740 RCX: 00007f0d946b1407 [ 495.669255][ T5446] RDX: 0000000000000040 RSI: 00007fffb24bc7a0 RDI: 0000000000000009 [ 495.677422][ T5446] RBP: 000055591568baa0 R08: 0000000000000000 R09: 0000000000000000 [ 495.685588][ T5446] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 495.693743][ T5446] R13: 00007fffb24c0900 R14: 0000000000000000 R15: 00007fffb24c08f0 [ 495.701962][ T5446] [ 495.705497][ T5446] Kernel Offset: disabled [ 495.709926][ T5446] Rebooting in 86400 seconds..