last executing test programs: 8.733514136s ago: executing program 3 (id=543): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x2, 0x80) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 7.978011984s ago: executing program 3 (id=547): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd}, &(0x7f0000000040)=0x8) 7.792753485s ago: executing program 2 (id=548): pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000400) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x37}, {@loopback, 0x4e23, 0x0, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) close(r2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)=[{&(0x7f0000001140)="a5", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) splice(r0, 0x0, r2, 0x0, 0x1100000000f336, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000140)) ioctl$XFS_IOC_FREE_EOFBLOCKS(r6, 0x8080583a, &(0x7f0000000180)={0x2, 0x4, 0x100, 0x0, 0x80, 0x0, 0x8}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000040)=0x84) setsockopt$sock_attach_bpf(r7, 0x1, 0x50, &(0x7f0000000100), 0x48) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000280)={0xf3, 0x1bc, 0x3, 0x3, 0xa, 0x5, 0x40}, 0xc) recvmmsg(r6, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 7.236851512s ago: executing program 3 (id=550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x8, 0x0, 0x1, 0xfffffffd, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) 6.630150251s ago: executing program 3 (id=554): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 6.536130974s ago: executing program 0 (id=555): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000", 0x17}], 0x1}, 0x8084) 6.226985608s ago: executing program 2 (id=556): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000180)}, 0x10) 6.049495612s ago: executing program 3 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x3, 0x6, 0x3c, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x50}, 0x1, 0x7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) unshare(0x68040200) r5 = socket$tipc(0x1e, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$pppl2tp(r6, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}}}, 0x32) sendmmsg(r6, &(0x7f0000004380), 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000001080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r8], 0x48}}, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 5.81940654s ago: executing program 0 (id=558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5.530331571s ago: executing program 2 (id=559): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0xc) 5.018719226s ago: executing program 0 (id=561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd}, &(0x7f0000000040)=0x8) 4.367196339s ago: executing program 0 (id=564): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x1000, 0x0, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x5, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd84, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x4) 4.237042248s ago: executing program 4 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x8, 0x0, 0x1, 0xfffffffd, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) 4.051311502s ago: executing program 2 (id=566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x3, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) 3.465781819s ago: executing program 4 (id=568): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000300000e000a", 0x23}], 0x1}, 0x8084) 3.107708227s ago: executing program 1 (id=569): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1, 0x7, 0x800) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) 2.79999007s ago: executing program 4 (id=570): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="180100002e00010000000000ffdbdf250601f2800c00180008ac0f000000000014000a"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 2.484998599s ago: executing program 1 (id=571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.159416675s ago: executing program 1 (id=572): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="080001", @ANYRES32=r1], 0x90}}, 0x0) 2.159026541s ago: executing program 4 (id=573): pipe(&(0x7f0000000080)) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0002100, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001200)=[@in6={0xa, 0x4e23, 0x10, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}]}, &(0x7f0000000080)=0xfffffffffffffe32) r4 = socket$inet6(0xa, 0x805, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f0000002640)=0xfdc) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) 1.607822906s ago: executing program 0 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f000000", @ANYRES32, @ANYBLOB="31000e008000fc00ffffffffffff080100000000000000000308710701ffff0000546800000020000e80"], 0x88}}, 0x0) 1.561302499s ago: executing program 1 (id=575): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f0000000100)=0x7, r0, 0x0, 0x5, 0x4) 1.529976058s ago: executing program 2 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@iv={0x10}], 0x10, 0x48880}, 0x14000012) 1.334562803s ago: executing program 4 (id=577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.085526393s ago: executing program 3 (id=578): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xd) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x306, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4044004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 896.424876ms ago: executing program 1 (id=579): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 896.12912ms ago: executing program 2 (id=580): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000600)='a', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xd0}}], 0x2, 0x448c0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0x72b6, 0x4) 837.682649ms ago: executing program 0 (id=581): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/225, 0xe1}], 0x1, 0x7, 0x800) r2 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000240), 0x12) 408.671386ms ago: executing program 4 (id=582): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd}, &(0x7f0000000040)=0x8) 0s ago: executing program 1 (id=583): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r2, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 201.249442][ T5553] cgroup: Unknown subsys name 'net' [ 201.386330][ T5553] cgroup: Unknown subsys name 'cpuset' [ 201.401406][ T5553] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 208.438953][ T5553] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.278404][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.285564][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 213.382416][ T5572] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.397101][ T5572] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.408873][ T5572] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.426745][ T5572] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.441528][ T5572] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.499936][ T5579] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.510041][ T5579] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.521612][ T5579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.537448][ T5579] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.555216][ T5579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.593346][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.604331][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.617304][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.627230][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.635819][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.644618][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.654559][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.656725][ T4872] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.674459][ T4872] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.686022][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.705595][ T4872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.719195][ T4872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.735351][ T5585] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.752895][ T5585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.763993][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.512217][ T5582] Bluetooth: hci0: command tx timeout [ 215.755294][ T5582] Bluetooth: hci4: command tx timeout [ 215.833339][ T5582] Bluetooth: hci1: command tx timeout [ 215.839179][ T5583] Bluetooth: hci2: command tx timeout [ 215.845048][ T5572] Bluetooth: hci3: command tx timeout [ 217.593332][ T5582] Bluetooth: hci0: command tx timeout [ 217.832182][ T5582] Bluetooth: hci4: command tx timeout [ 217.912495][ T5583] Bluetooth: hci2: command tx timeout [ 217.918725][ T5572] Bluetooth: hci3: command tx timeout [ 217.928716][ T5582] Bluetooth: hci1: command tx timeout [ 219.313179][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.321395][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.329493][ T5578] bridge_slave_0: entered allmulticast mode [ 219.339817][ T5578] bridge_slave_0: entered promiscuous mode [ 219.460240][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.473369][ T5578] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.481159][ T5578] bridge_slave_1: entered allmulticast mode [ 219.494426][ T5578] bridge_slave_1: entered promiscuous mode [ 219.653800][ T5571] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.661741][ T5571] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.669610][ T5571] bridge_slave_0: entered allmulticast mode [ 219.679881][ T5571] bridge_slave_0: entered promiscuous mode [ 219.682370][ T5582] Bluetooth: hci0: command tx timeout [ 219.696882][ T5571] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.704900][ T5571] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.713585][ T5571] bridge_slave_1: entered allmulticast mode [ 219.723261][ T5571] bridge_slave_1: entered promiscuous mode [ 219.914626][ T5582] Bluetooth: hci4: command tx timeout [ 219.992322][ T5582] Bluetooth: hci1: command tx timeout [ 219.992510][ T5572] Bluetooth: hci3: command tx timeout [ 220.004299][ T5583] Bluetooth: hci2: command tx timeout [ 220.059034][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.070768][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.079958][ T5574] bridge_slave_0: entered allmulticast mode [ 220.091609][ T5574] bridge_slave_0: entered promiscuous mode [ 220.122860][ T5578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.183313][ T5571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.195969][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.204671][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.213202][ T5574] bridge_slave_1: entered allmulticast mode [ 220.224254][ T5574] bridge_slave_1: entered promiscuous mode [ 220.275864][ T5578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.287353][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.295243][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.303351][ T5577] bridge_slave_0: entered allmulticast mode [ 220.312714][ T5577] bridge_slave_0: entered promiscuous mode [ 220.334462][ T5571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.432459][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.440622][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.449228][ T5577] bridge_slave_1: entered allmulticast mode [ 220.458147][ T5577] bridge_slave_1: entered promiscuous mode [ 220.524923][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.533037][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.540629][ T5576] bridge_slave_0: entered allmulticast mode [ 220.550911][ T5576] bridge_slave_0: entered promiscuous mode [ 220.684480][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.695114][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.703186][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.710932][ T5576] bridge_slave_1: entered allmulticast mode [ 220.721201][ T5576] bridge_slave_1: entered promiscuous mode [ 220.740990][ T5578] team0: Port device team_slave_0 added [ 220.758073][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.777978][ T5571] team0: Port device team_slave_0 added [ 220.795054][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.849438][ T5578] team0: Port device team_slave_1 added [ 220.864258][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.882844][ T5571] team0: Port device team_slave_1 added [ 221.072975][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.199610][ T5574] team0: Port device team_slave_0 added [ 221.215749][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.229093][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.237533][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.264356][ T5578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.286683][ T5577] team0: Port device team_slave_0 added [ 221.295736][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.303509][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.332262][ T5571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.354440][ T5574] team0: Port device team_slave_1 added [ 221.390104][ T5578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.397568][ T5578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.425968][ T5578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.445751][ T5577] team0: Port device team_slave_1 added [ 221.454634][ T5571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.462077][ T5571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.489470][ T5571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.661322][ T5576] team0: Port device team_slave_0 added [ 221.706651][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.714474][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.741473][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.752996][ T5572] Bluetooth: hci0: command tx timeout [ 221.766045][ T5576] team0: Port device team_slave_1 added [ 221.778845][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.786504][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.813521][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.834986][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.842576][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.869454][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.958660][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.966113][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.993263][ T5572] Bluetooth: hci4: command tx timeout [ 221.999441][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.072539][ T5583] Bluetooth: hci2: command tx timeout [ 222.072890][ T5582] Bluetooth: hci1: command tx timeout [ 222.078345][ T5572] Bluetooth: hci3: command tx timeout [ 222.220761][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.228426][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.255910][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.290103][ T5578] hsr_slave_0: entered promiscuous mode [ 222.299782][ T5578] hsr_slave_1: entered promiscuous mode [ 222.332473][ T5571] hsr_slave_0: entered promiscuous mode [ 222.341585][ T5571] hsr_slave_1: entered promiscuous mode [ 222.351250][ T5571] debugfs: 'hsr0' already exists in 'hsr' [ 222.357687][ T5571] Cannot create hsr debugfs directory [ 222.371091][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.378399][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.406381][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.556834][ T5577] hsr_slave_0: entered promiscuous mode [ 222.566347][ T5577] hsr_slave_1: entered promiscuous mode [ 222.575455][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 222.581487][ T5577] Cannot create hsr debugfs directory [ 222.690877][ T5574] hsr_slave_0: entered promiscuous mode [ 222.700303][ T5574] hsr_slave_1: entered promiscuous mode [ 222.708918][ T5574] debugfs: 'hsr0' already exists in 'hsr' [ 222.715311][ T5574] Cannot create hsr debugfs directory [ 222.946204][ T5576] hsr_slave_0: entered promiscuous mode [ 222.957887][ T5576] hsr_slave_1: entered promiscuous mode [ 222.966748][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 222.972844][ T5576] Cannot create hsr debugfs directory [ 224.306877][ T5578] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.334765][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.346597][ T5578] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.367802][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.378698][ T5578] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.399043][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.427941][ T5578] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.448023][ T5578] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.580033][ T5571] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.610025][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.622969][ T5571] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.645581][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.656950][ T5571] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.679692][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 224.717034][ T5571] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.737312][ T5571] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 224.953489][ T5577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.985994][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.008518][ T5577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.030301][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.077507][ T5577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.099409][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.127133][ T5577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.151332][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.406111][ T5574] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 225.427879][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.458644][ T5574] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.480110][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.491598][ T5574] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.520215][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.579309][ T5574] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.604672][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.894361][ T5576] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 225.919715][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 225.954187][ T5576] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 225.985204][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 225.996479][ T5576] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.018695][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.054135][ T5576] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.075744][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.249895][ T5578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.447795][ T5578] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.534321][ T5571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.576769][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.584792][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.664727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.672765][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.821083][ T5571] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.004290][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.011743][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.076522][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.105284][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.112877][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.342703][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.399133][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.542114][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.549852][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.710650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.718644][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.785879][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.887834][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.944460][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.952539][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.108288][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.116364][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.348567][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.542138][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.549761][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.717735][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.725667][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.429081][ T5578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.188012][ T5571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.111469][ T5571] veth0_vlan: entered promiscuous mode [ 233.344029][ T5571] veth1_vlan: entered promiscuous mode [ 233.590306][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.733703][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.911322][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.965099][ T5578] veth0_vlan: entered promiscuous mode [ 233.986780][ T5571] veth0_macvtap: entered promiscuous mode [ 234.088661][ T5571] veth1_macvtap: entered promiscuous mode [ 234.183771][ T5578] veth1_vlan: entered promiscuous mode [ 234.377067][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.467128][ T5577] veth0_vlan: entered promiscuous mode [ 234.487435][ T5571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.579711][ T5574] veth0_vlan: entered promiscuous mode [ 234.660931][ T1158] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.670897][ T1158] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.693250][ T5576] veth0_vlan: entered promiscuous mode [ 234.710709][ T5577] veth1_vlan: entered promiscuous mode [ 234.725496][ T1158] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.735883][ T1158] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.797735][ T5574] veth1_vlan: entered promiscuous mode [ 234.971307][ T5578] veth0_macvtap: entered promiscuous mode [ 234.995107][ T5576] veth1_vlan: entered promiscuous mode [ 235.078300][ T5578] veth1_macvtap: entered promiscuous mode [ 235.406413][ T5577] veth0_macvtap: entered promiscuous mode [ 235.479908][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.497716][ T5574] veth0_macvtap: entered promiscuous mode [ 235.522852][ T5577] veth1_macvtap: entered promiscuous mode [ 235.599787][ T5574] veth1_macvtap: entered promiscuous mode [ 235.641712][ T5578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.708921][ T5576] veth0_macvtap: entered promiscuous mode [ 235.880851][ T5576] veth1_macvtap: entered promiscuous mode [ 235.915635][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.933929][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.986061][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.009106][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.164480][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.197614][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.337457][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.375001][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.514385][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.522453][ T184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.534185][ T184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.630822][ T184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.669353][ T184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.696672][ T184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.765511][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.774672][ T184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.788184][ T184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.833746][ T82] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.009210][ T77] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.055314][ T77] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.110833][ T77] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.204195][ T77] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.257125][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.302803][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.531613][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.576318][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.117649][ T5571] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 243.187867][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.250565][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.571261][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.610844][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.685509][ T5833] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 243.732848][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6'. [ 245.022395][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.037848][ T5764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.057226][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.096316][ T5764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.347801][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.380591][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.730304][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.796234][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.182196][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.269358][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.633358][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.667200][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.865517][ T5865] block nbd0: not configured, cannot reconfigure [ 247.903094][ T5865] netlink: zone id is out of range [ 248.075961][ T5868] netem: change failed [ 248.466521][ T5876] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.553636][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.561167][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.568913][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.576307][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.583833][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.591222][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.598818][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.606371][ T5875] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 248.883132][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 248.912757][ T5876] netlink: 348 bytes leftover after parsing attributes in process `syz.3.16'. [ 248.962316][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 249.020045][ T5876] netlink: 348 bytes leftover after parsing attributes in process `syz.3.16'. [ 249.090380][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 249.492589][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 252.516307][ T5923] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 252.720954][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 252.980064][ T5923] bond0: entered promiscuous mode [ 252.999577][ T5923] bond_slave_0: entered promiscuous mode [ 253.083034][ T5923] bond_slave_1: entered promiscuous mode [ 253.195538][ T5923] batadv0: entered promiscuous mode [ 254.574042][ T5942] net_ratelimit: 760 callbacks suppressed [ 254.574132][ T5942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.462063][ T5949] Zero length message leads to an empty skb [ 256.361949][ T5961] netlink: 68 bytes leftover after parsing attributes in process `syz.4.47'. [ 256.512627][ T5964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 258.190981][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 258.247346][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 259.317692][ T5988] syz.4.58: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 259.442355][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.4.58 Not tainted syzkaller #0 PREEMPT(full) [ 259.442522][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.442626][ T5988] Call Trace: [ 259.442685][ T5988] [ 259.442742][ T5988] __dump_stack+0x26/0x30 [ 259.442940][ T5988] dump_stack_lvl+0x14c/0x1c0 [ 259.443129][ T5988] dump_stack+0x1e/0x25 [ 259.443301][ T5988] warn_alloc+0x46f/0x6a0 [ 259.443511][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.443725][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.443946][ T5988] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 259.444224][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.444458][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.444693][ T5988] ? should_fail_ex+0x45/0x8c0 [ 259.444917][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.445121][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.445331][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.445546][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 259.445785][ T5988] ? __kmalloc_cache_noprof+0x3b0/0x1240 [ 259.445947][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 259.446176][ T5988] vmalloc_user_noprof+0xce/0x140 [ 259.446357][ T5988] ? xskq_create+0x11d/0x290 [ 259.446580][ T5988] xskq_create+0x11d/0x290 [ 259.446802][ T5988] xsk_init_queue+0xce/0x180 [ 259.447005][ T5988] xsk_setsockopt+0x7f6/0xfe0 [ 259.447220][ T5988] ? __pfx_xsk_setsockopt+0x10/0x10 [ 259.447426][ T5988] __sys_setsockopt+0x43e/0x580 [ 259.447646][ T5988] __x64_sys_setsockopt+0xf4/0x1a0 [ 259.447868][ T5988] x64_sys_call+0x2a65/0x3ea0 [ 259.448083][ T5988] do_syscall_64+0x134/0xf80 [ 259.448311][ T5988] ? clear_bhb_loop+0x50/0xa0 [ 259.448499][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.448673][ T5988] RIP: 0033:0x7f20a139ce59 [ 259.448804][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.448942][ T5988] RSP: 002b:00007f20a2225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.449093][ T5988] RAX: ffffffffffffffda RBX: 00007f20a1615fa0 RCX: 00007f20a139ce59 [ 259.449220][ T5988] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 259.449326][ T5988] RBP: 00007f20a1432d6f R08: 0000000000000004 R09: 0000000000000000 [ 259.449428][ T5988] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.449531][ T5988] R13: 00007f20a1616038 R14: 00007f20a1615fa0 R15: 00007fffb5c3c898 [ 259.449691][ T5988] [ 259.931463][ T5988] Mem-Info: [ 259.936017][ T5988] active_anon:6102 inactive_anon:0 isolated_anon:0 [ 259.936017][ T5988] active_file:3528 inactive_file:39952 isolated_file:0 [ 259.936017][ T5988] unevictable:768 dirty:147 writeback:0 [ 259.936017][ T5988] slab_reclaimable:4677 slab_unreclaimable:20120 [ 259.936017][ T5988] mapped:29664 shmem:1295 pagetables:1422 [ 259.936017][ T5988] sec_pagetables:0 bounce:0 [ 259.936017][ T5988] kernel_misc_reclaimable:0 [ 259.936017][ T5988] free:375447 free_pcp:7674 free_cma:0 [ 260.000237][ T5988] Node 0 active_anon:24408kB inactive_anon:0kB active_file:14112kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118656kB dirty:588kB writeback:0kB shmem:3644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5152kB pagetables:5328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.089304][ T5988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 260.171564][ T5988] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.290372][ T5996] netlink: 'syz.4.58': attribute type 10 has an invalid length. [ 260.327794][ T5988] lowmem_reserve[]: 0 927 1241 1241 1241 [ 260.366319][ T5988] Node 0 DMA32 free:568336kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2100kB inactive_anon:0kB active_file:9728kB inactive_file:87368kB unevictable:0kB writepending:348kB zspages:0kB present:3129332kB managed:949976kB mlocked:0kB bounce:0kB free_pcp:22604kB local_pcp:15716kB free_cma:0kB [ 260.416737][ T5997] netlink: 'syz.0.61': attribute type 11 has an invalid length. [ 260.451969][ T5997] netlink: 'syz.0.61': attribute type 4 has an invalid length. [ 260.495999][ T5997] netlink: 224 bytes leftover after parsing attributes in process `syz.0.61'. [ 260.512530][ T5988] lowmem_reserve[]: 0 0 313 313 313 [ 260.550426][ T5988] Node 0 Normal free:16284kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22376kB inactive_anon:0kB active_file:4384kB inactive_file:72236kB unevictable:1536kB writepending:240kB zspages:0kB present:1048580kB managed:321476kB mlocked:0kB bounce:0kB free_pcp:7772kB local_pcp:3952kB free_cma:0kB [ 260.668402][ T5999] netlink: 'syz.4.58': attribute type 10 has an invalid length. [ 260.755610][ T5988] lowmem_reserve[]: 0 0 0 0 0 [ 260.797232][ T5988] Node 1 Normal free:913200kB boost:0kB min:40036kB low:50044kB high:60052kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985796kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.937999][ T5996] team0: Port device dummy0 added [ 261.030995][ T5988] lowmem_reserve[]: 0 0 0 0 0 [ 261.091601][ T5998] ip6gre1: entered allmulticast mode [ 261.105392][ T5988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 261.202582][ T5988] Node 0 DMA32: 2*4kB (ME) 3*8kB (UME) 3*16kB (UME) 2*32kB (UE) 1*64kB (E) 1*128kB (M) 3*256kB (UME) 2*512kB (UM) 1*1024kB (U) 2*2048kB (M) 137*4096kB (M) = 568400kB [ 261.233499][ T5988] Node 0 Normal: 3*4kB (UME) 2*8kB (UM) 0*16kB 0*32kB 2*64kB (ME) 0*128kB 1*256kB (M) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 2*4096kB (M) = 16284kB [ 261.256635][ T5988] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 16*32kB (UM) 10*64kB (UM) 4*128kB (U) 6*256kB (UM) 3*512kB (U) 3*1024kB (UM) 0*2048kB 221*4096kB (M) = 913200kB [ 261.346330][ T5988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.407951][ T5988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.457796][ T5999] team0: Port device dummy0 removed [ 261.485205][ T5988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.577656][ T5988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.602523][ T5999] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 261.622971][ T5988] 44772 total pagecache pages [ 261.655123][ T5988] 0 pages in swap cache [ 261.692475][ T5988] Free swap = 124996kB [ 261.707288][ T5988] Total swap = 124996kB [ 261.722285][ T5988] 2097051 pages RAM [ 261.728872][ T5988] 0 pages HighMem/MovableOnly [ 261.769900][ T5988] 1531715 pages reserved [ 261.787358][ T5988] 0 pages cma reserved [ 263.926923][ T6024] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 264.280268][ T6024] team0 (unregistering): Port device team_slave_0 removed [ 264.494897][ T6024] team0 (unregistering): Port device team_slave_1 removed [ 264.860836][ T6031] netlink: 'syz.0.75': attribute type 11 has an invalid length. [ 264.910171][ T6031] netlink: 'syz.0.75': attribute type 4 has an invalid length. [ 264.993507][ T6031] netlink: 224 bytes leftover after parsing attributes in process `syz.0.75'. [ 265.287893][ T6033] ip6gre1: entered allmulticast mode [ 265.320294][ T6036] netlink: 'syz.4.76': attribute type 10 has an invalid length. [ 265.373629][ T6039] netlink: 'syz.4.76': attribute type 10 has an invalid length. [ 265.618485][ T6036] bond0: (slave dummy0): Releasing backup interface [ 265.828508][ T6036] team0: Port device dummy0 added [ 266.069066][ T6039] team0: Port device dummy0 removed [ 266.187234][ T6039] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 268.859462][ T6074] netlink: 'syz.2.89': attribute type 11 has an invalid length. [ 268.888517][ T6074] netlink: 'syz.2.89': attribute type 4 has an invalid length. [ 268.924325][ T6074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.89'. [ 269.106523][ T6078] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 269.232832][ T6085] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 269.244059][ T6079] ip6gre1: entered allmulticast mode [ 269.581073][ T6078] bond0: (slave dummy0): Releasing backup interface [ 269.817248][ T6078] team0: Port device dummy0 added [ 270.016973][ T6085] team0: Port device dummy0 removed [ 270.186797][ T6085] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.723764][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 270.735175][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.443814][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 272.579781][ T6111] macsec1: entered allmulticast mode [ 272.929387][ T6114] warning: `syz.4.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 273.312783][ T6117] netlink: 'syz.3.106': attribute type 11 has an invalid length. [ 273.361041][ T6117] netlink: 'syz.3.106': attribute type 4 has an invalid length. [ 273.435036][ T6117] netlink: 224 bytes leftover after parsing attributes in process `syz.3.106'. [ 273.965475][ T6119] ip6gre1: entered allmulticast mode [ 274.200839][ T6118] tipc: Started in network mode [ 274.263848][ T6118] tipc: Node identity be5e1c04730b, cluster identity 4711 [ 274.323774][ T6118] tipc: Enabled bearer , priority 0 [ 274.401316][ T6124] syzkaller0: entered promiscuous mode [ 274.483110][ T6124] syzkaller0: entered allmulticast mode [ 274.693135][ T6115] tipc: Resetting bearer [ 274.847466][ T6115] tipc: Disabling bearer [ 278.499923][ T6162] netlink: 108 bytes leftover after parsing attributes in process `syz.2.121'. [ 278.526775][ T6164] netlink: 'syz.1.120': attribute type 11 has an invalid length. [ 278.566456][ T6164] netlink: 'syz.1.120': attribute type 4 has an invalid length. [ 278.650417][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.120'. [ 278.929279][ T6166] ip6gre1: entered allmulticast mode [ 279.017269][ T6171] netlink: 91 bytes leftover after parsing attributes in process `syz.4.123'. [ 279.174365][ T6165] tipc: Started in network mode [ 279.214478][ T6165] tipc: Node identity 72b5947904d5, cluster identity 4711 [ 279.309306][ T6165] tipc: Enabled bearer , priority 0 [ 279.358277][ T6167] syzkaller0: entered promiscuous mode [ 279.456459][ T6167] syzkaller0: entered allmulticast mode [ 279.689670][ T6176] tipc: Resetting bearer [ 279.763034][ T6163] tipc: Resetting bearer [ 279.841186][ T6163] tipc: Disabling bearer [ 281.013550][ T6195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.132'. [ 281.816085][ T6203] netlink: 108 bytes leftover after parsing attributes in process `syz.1.135'. [ 281.880218][ T6205] netlink: 91 bytes leftover after parsing attributes in process `syz.3.136'. [ 282.095314][ T6208] warn_alloc: 2 callbacks suppressed [ 282.095426][ T6208] syz.0.137: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.223287][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.0.137 Not tainted syzkaller #0 PREEMPT(full) [ 282.223455][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.223548][ T6208] Call Trace: [ 282.223605][ T6208] [ 282.223661][ T6208] __dump_stack+0x26/0x30 [ 282.223846][ T6208] dump_stack_lvl+0x14c/0x1c0 [ 282.224041][ T6208] dump_stack+0x1e/0x25 [ 282.224208][ T6208] warn_alloc+0x46f/0x6a0 [ 282.224416][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.224621][ T6208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.224850][ T6208] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 282.225035][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.225237][ T6208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.225465][ T6208] ? should_fail_ex+0x45/0x8c0 [ 282.225682][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.225888][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.226095][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.226302][ T6208] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.226523][ T6208] ? __kmalloc_cache_noprof+0x3b0/0x1240 [ 282.226676][ T6208] ? kmsan_get_metadata+0xf1/0x160 [ 282.226890][ T6208] vmalloc_user_noprof+0xce/0x140 [ 282.227066][ T6208] ? xskq_create+0x11d/0x290 [ 282.227288][ T6208] xskq_create+0x11d/0x290 [ 282.227507][ T6208] xsk_init_queue+0xce/0x180 [ 282.227713][ T6208] xsk_setsockopt+0x7f6/0xfe0 [ 282.227932][ T6208] ? __pfx_xsk_setsockopt+0x10/0x10 [ 282.228131][ T6208] __sys_setsockopt+0x43e/0x580 [ 282.228349][ T6208] __x64_sys_setsockopt+0xf4/0x1a0 [ 282.228563][ T6208] x64_sys_call+0x2a65/0x3ea0 [ 282.228757][ T6208] do_syscall_64+0x134/0xf80 [ 282.228953][ T6208] ? clear_bhb_loop+0x50/0xa0 [ 282.229134][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.229304][ T6208] RIP: 0033:0x7f731ff9ce59 [ 282.229421][ T6208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.229557][ T6208] RSP: 002b:00007f7320dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 282.229706][ T6208] RAX: ffffffffffffffda RBX: 00007f7320215fa0 RCX: 00007f731ff9ce59 [ 282.229822][ T6208] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 282.229914][ T6208] RBP: 00007f7320032d6f R08: 0000000000000004 R09: 0000000000000000 [ 282.230019][ T6208] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.230119][ T6208] R13: 00007f7320216038 R14: 00007f7320215fa0 R15: 00007ffd28a710a8 [ 282.230271][ T6208] [ 282.572677][ T6208] Mem-Info: [ 282.603102][ T6208] active_anon:6020 inactive_anon:0 isolated_anon:0 [ 282.603102][ T6208] active_file:3656 inactive_file:39960 isolated_file:0 [ 282.603102][ T6208] unevictable:768 dirty:67 writeback:0 [ 282.603102][ T6208] slab_reclaimable:4685 slab_unreclaimable:20227 [ 282.603102][ T6208] mapped:29644 shmem:1288 pagetables:1381 [ 282.603102][ T6208] sec_pagetables:0 bounce:0 [ 282.603102][ T6208] kernel_misc_reclaimable:0 [ 282.603102][ T6208] free:374949 free_pcp:7977 free_cma:0 [ 282.765529][ T6208] Node 0 active_anon:24032kB inactive_anon:0kB active_file:14624kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118536kB dirty:212kB writeback:68kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5088kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 282.913035][ T6209] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 283.002619][ T6215] netlink: 'syz.0.137': attribute type 10 has an invalid length. [ 283.022519][ T6208] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.108821][ T6208] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.306460][ T6209] team0: Port device dummy0 added [ 283.307323][ T6208] lowmem_reserve[]: 0 927 1241 1241 1241 [ 283.377370][ T6208] Node 0 DMA32 free:566168kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2200kB inactive_anon:0kB active_file:10240kB inactive_file:87400kB unevictable:0kB writepending:200kB zspages:0kB present:3129332kB managed:949976kB mlocked:0kB bounce:0kB free_pcp:23368kB local_pcp:14300kB free_cma:0kB [ 283.489609][ T6215] team0: Port device dummy0 removed [ 283.526268][ T6208] lowmem_reserve[]: 0 0 313 313 313 [ 283.625431][ T6208] Node 0 Normal free:16284kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22376kB inactive_anon:0kB active_file:4384kB inactive_file:72236kB unevictable:1536kB writepending:92kB zspages:0kB present:1048580kB managed:321476kB mlocked:0kB bounce:0kB free_pcp:7772kB local_pcp:3952kB free_cma:0kB [ 283.786466][ T6208] lowmem_reserve[]: 0 0 0 0 0 [ 283.792694][ T6208] Node 1 Normal free:913200kB boost:0kB min:40036kB low:50044kB high:60052kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985796kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.801192][ T6215] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 283.942778][ T6224] tipc: Started in network mode [ 283.948102][ T6208] lowmem_reserve[]: 0 0 0 0 0 [ 283.954174][ T6224] tipc: Node identity 4af60fd5c025, cluster identity 4711 [ 283.997679][ T6208] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 284.013072][ T6224] tipc: Enabled bearer , priority 0 [ 284.043042][ T6225] syzkaller0: entered promiscuous mode [ 284.052347][ T6208] Node 0 DMA32: 2*4kB (ME) 2*8kB (ME) 2*16kB (ME) 1*32kB (E) 1*64kB (E) 2*128kB (UM) 2*256kB (ME) 2*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 136*4096kB (M) = 566168kB [ 284.087243][ T6225] syzkaller0: entered allmulticast mode [ 284.129324][ T6208] Node 0 Normal: 3*4kB (UME) 2*8kB (UM) 0*16kB 0*32kB 2*64kB (ME) 0*128kB 1*256kB (M) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 2*4096kB (M) = 16284kB [ 284.233257][ T6224] tipc: Resetting bearer [ 284.237151][ T6208] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 16*32kB (UM) 10*64kB (UM) 4*128kB (U) 6*256kB (UM) 3*512kB (U) 3*1024kB (UM) 0*2048kB 221*4096kB (M) = 913200kB [ 284.315790][ T6223] tipc: Resetting bearer [ 284.342552][ T6208] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.365229][ T6208] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.429604][ T6208] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 284.444642][ T6223] tipc: Disabling bearer [ 284.519919][ T6208] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 284.545969][ T6208] 44902 total pagecache pages [ 284.556559][ T6208] 0 pages in swap cache [ 284.605694][ T6208] Free swap = 124996kB [ 284.635287][ T6208] Total swap = 124996kB [ 284.664458][ T6208] 2097051 pages RAM [ 284.685281][ T6208] 0 pages HighMem/MovableOnly [ 284.728775][ T6208] 1531715 pages reserved [ 284.757687][ T6208] 0 pages cma reserved [ 286.387151][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 287.392809][ T6268] syzkaller0: entered promiscuous mode [ 287.425017][ T6268] syzkaller0: entered allmulticast mode [ 288.126083][ T6275] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 288.259605][ T6279] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 288.338615][ T6275] bond0: (slave dummy0): Releasing backup interface [ 288.674270][ T6275] team0: Port device dummy0 added [ 289.409614][ T6277] syzkaller0: entered promiscuous mode [ 289.457316][ T6277] syzkaller0: entered allmulticast mode [ 289.655070][ T6279] team0: Port device dummy0 removed [ 289.797532][ T6279] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 291.394942][ T6313] netlink: 592 bytes leftover after parsing attributes in process `syz.2.169'. [ 291.663624][ T6315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'. [ 292.669395][ T6328] warn_alloc: 1 callbacks suppressed [ 292.669513][ T6328] syz.3.176: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 292.769576][ T6328] CPU: 1 UID: 0 PID: 6328 Comm: syz.3.176 Not tainted syzkaller #0 PREEMPT(full) [ 292.769742][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.769832][ T6328] Call Trace: [ 292.769888][ T6328] [ 292.769944][ T6328] __dump_stack+0x26/0x30 [ 292.770209][ T6328] dump_stack_lvl+0x14c/0x1c0 [ 292.770408][ T6328] dump_stack+0x1e/0x25 [ 292.770583][ T6328] warn_alloc+0x46f/0x6a0 [ 292.770794][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.771043][ T6328] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.771278][ T6328] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 292.771462][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.771682][ T6328] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.771917][ T6328] ? should_fail_ex+0x45/0x8c0 [ 292.772137][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.772339][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.772546][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.772754][ T6328] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 292.772999][ T6328] ? __kmalloc_cache_noprof+0x3b0/0x1240 [ 292.773158][ T6328] ? kmsan_get_metadata+0xf1/0x160 [ 292.773383][ T6328] vmalloc_user_noprof+0xce/0x140 [ 292.773550][ T6328] ? xskq_create+0x11d/0x290 [ 292.773766][ T6328] xskq_create+0x11d/0x290 [ 292.773990][ T6328] xsk_init_queue+0xce/0x180 [ 292.774185][ T6328] xsk_setsockopt+0x7f6/0xfe0 [ 292.774398][ T6328] ? __pfx_xsk_setsockopt+0x10/0x10 [ 292.774587][ T6328] __sys_setsockopt+0x43e/0x580 [ 292.774795][ T6328] __x64_sys_setsockopt+0xf4/0x1a0 [ 292.775018][ T6328] x64_sys_call+0x2a65/0x3ea0 [ 292.775217][ T6328] do_syscall_64+0x134/0xf80 [ 292.775411][ T6328] ? clear_bhb_loop+0x50/0xa0 [ 292.775585][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.775755][ T6328] RIP: 0033:0x7f553239ce59 [ 292.775873][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.776011][ T6328] RSP: 002b:00007f5533311028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 292.776229][ T6328] RAX: ffffffffffffffda RBX: 00007f5532615fa0 RCX: 00007f553239ce59 [ 292.776360][ T6328] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 292.776455][ T6328] RBP: 00007f5532432d6f R08: 0000000000000004 R09: 0000000000000000 [ 292.776553][ T6328] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.776653][ T6328] R13: 00007f5532616038 R14: 00007f5532615fa0 R15: 00007ffcd121e468 [ 292.776824][ T6328] [ 293.149401][ T6330] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 293.179655][ T6328] Mem-Info: [ 293.183615][ T6328] active_anon:6153 inactive_anon:0 isolated_anon:0 [ 293.183615][ T6328] active_file:3656 inactive_file:39964 isolated_file:0 [ 293.183615][ T6328] unevictable:768 dirty:125 writeback:0 [ 293.183615][ T6328] slab_reclaimable:4689 slab_unreclaimable:20400 [ 293.183615][ T6328] mapped:29644 shmem:1288 pagetables:1439 [ 293.183615][ T6328] sec_pagetables:0 bounce:0 [ 293.183615][ T6328] kernel_misc_reclaimable:0 [ 293.183615][ T6328] free:374031 free_pcp:8442 free_cma:0 [ 293.235490][ T6328] Node 0 active_anon:24612kB inactive_anon:0kB active_file:14624kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118576kB dirty:500kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5120kB pagetables:5396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 293.273440][ T6328] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:360kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 293.309491][ T6328] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.348812][ T6328] lowmem_reserve[]: 0 927 1241 1241 1241 [ 293.354953][ T6332] netlink: 'syz.3.176': attribute type 10 has an invalid length. [ 293.356279][ T6328] Node 0 DMA32 free:562544kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2236kB inactive_anon:0kB active_file:10240kB inactive_file:87416kB unevictable:0kB writepending:296kB zspages:0kB present:3129332kB managed:949976kB mlocked:0kB bounce:0kB free_pcp:26204kB local_pcp:10004kB free_cma:0kB [ 293.403922][ T6328] lowmem_reserve[]: 0 0 313 313 313 [ 293.421972][ T6328] Node 0 Normal free:16284kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22376kB inactive_anon:0kB active_file:4384kB inactive_file:72236kB unevictable:1536kB writepending:204kB zspages:0kB present:1048580kB managed:321476kB mlocked:0kB bounce:0kB free_pcp:7772kB local_pcp:3820kB free_cma:0kB [ 293.544910][ T6328] lowmem_reserve[]: 0 0 0 0 0 [ 293.579148][ T6328] Node 1 Normal free:913200kB boost:0kB min:40036kB low:50044kB high:60052kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985796kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 293.676036][ T6328] lowmem_reserve[]: 0 0 0 0 0 [ 293.750661][ T6328] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 293.887032][ T6330] team0: Port device dummy0 added [ 293.989107][ T6328] Node 0 DMA32: 2*4kB (ME) 3*8kB (UME) 2*16kB (ME) 2*32kB (UE) 1*64kB (E) 1*128kB (M) 2*256kB (ME) 1*512kB (M) 0*1024kB 2*2048kB (M) 136*4096kB (UM) = 562496kB [ 294.160948][ T6328] Node 0 Normal: 3*4kB (UME) 2*8kB (UM) 0*16kB 0*32kB 2*64kB (ME) 0*128kB 1*256kB (M) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 2*4096kB (M) [ 294.220499][ T6332] team0: Port device dummy0 removed [ 294.243153][ T6328] = 16284kB [ 294.253523][ T6328] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 8*16kB (UM) 16*32kB (UM) 10*64kB (UM) 4*128kB (U) 6*256kB (UM) 3*512kB (U) 3*1024kB (UM) 0*2048kB 221*4096kB (M) = 913200kB [ 294.386259][ T6328] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.515522][ T6328] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.571080][ T6332] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 294.650247][ T6328] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 294.690490][ T6328] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 294.781111][ T6328] 44907 total pagecache pages [ 294.815583][ T6328] 0 pages in swap cache [ 294.864004][ T6328] Free swap = 124996kB [ 294.888326][ T6328] Total swap = 124996kB [ 294.909225][ T6328] 2097051 pages RAM [ 294.944027][ T6328] 0 pages HighMem/MovableOnly [ 294.961059][ T6328] 1531715 pages reserved [ 294.991380][ T6328] 0 pages cma reserved [ 297.735133][ T6382] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 297.839937][ T6386] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 297.886724][ T6382] bond0: (slave dummy0): Releasing backup interface [ 298.178904][ T6382] team0: Port device dummy0 added [ 298.389004][ T6386] team0: Port device dummy0 removed [ 298.543387][ T6386] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 300.640569][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 301.658208][ T6417] syzkaller0: entered promiscuous mode [ 301.706163][ T6417] syzkaller0: entered allmulticast mode [ 302.934996][ T6433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 305.157548][ T6450] netlink: 'syz.1.224': attribute type 10 has an invalid length. [ 308.362763][ T6478] netlink: 7 bytes leftover after parsing attributes in process `syz.3.236'. [ 311.835946][ T6512] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 313.446304][ T6531] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 313.988833][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 315.311627][ T6555] Bluetooth: MGMT ver 1.23 [ 316.563726][ T6567] netlink: 'syz.0.271': attribute type 5 has an invalid length. [ 316.820840][ T6577] Bluetooth: MGMT ver 1.23 [ 319.028698][ T6602] syzkaller0: entered promiscuous mode [ 319.082396][ T6602] syzkaller0: entered allmulticast mode [ 320.505156][ T6616] netlink: 'syz.2.289': attribute type 5 has an invalid length. [ 324.083148][ T6658] netlink: 7 bytes leftover after parsing attributes in process `syz.4.306'. [ 324.339263][ T6660] netlink: 'syz.1.307': attribute type 10 has an invalid length. [ 325.049121][ T6667] netlink: 'syz.4.311': attribute type 5 has an invalid length. [ 327.155970][ T6695] netlink: 7 bytes leftover after parsing attributes in process `syz.2.321'. [ 327.892492][ T6702] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 328.598155][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.327'. [ 328.809509][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 328.998847][ T6716] netlink: 'syz.0.328': attribute type 5 has an invalid length. [ 329.059667][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 329.311073][ T6707] 8021q: adding VLAN 0 to HW filter on device bond1 [ 329.460701][ T6712] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 329.668820][ T6714] bond1 (unregistering): Released all slaves [ 332.161618][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.172261][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 337.371992][ T6851] netlink: 'syz.0.352': attribute type 5 has an invalid length. [ 339.240412][ T6850] syz.3.355 (6850) used greatest stack depth: 2016 bytes left [ 339.270624][ T5681] IPVS: starting estimator thread 0... [ 339.363292][ T5579] Bluetooth: hci4: command 0x0406 tx timeout [ 339.366462][ T5582] Bluetooth: hci0: command 0x0406 tx timeout [ 339.378732][ T4872] Bluetooth: hci3: command 0x0406 tx timeout [ 339.380611][ T5582] Bluetooth: hci2: command 0x0406 tx timeout [ 339.403698][ T6878] IPVS: using max 192 ests per chain, 9600 per kthread [ 339.536840][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 340.836408][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 342.879539][ T6916] batadv1: entered promiscuous mode [ 342.930647][ T6916] batadv1: entered allmulticast mode [ 343.154402][ T6787] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 344.492731][ T6936] syzkaller0: entered promiscuous mode [ 344.511682][ T6936] syzkaller0: entered allmulticast mode [ 345.152852][ T6942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.639593][ T6942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.978073][ T6942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.137260][ T6955] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 346.390120][ T6942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.483570][ T6787] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.654934][ T6781] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.784927][ T6791] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.066297][ T6787] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.056189][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 349.115057][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 349.154336][ T6989] syzkaller0: entered promiscuous mode [ 349.172636][ T6989] syzkaller0: entered allmulticast mode [ 349.380600][ T6994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.405'. [ 349.423789][ T6994] netlink: 'syz.1.405': attribute type 7 has an invalid length. [ 349.463515][ T6994] netlink: 'syz.1.405': attribute type 8 has an invalid length. [ 349.526735][ T6994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 350.583530][ T7010] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 351.105852][ T7010] bond1: entered promiscuous mode [ 351.136749][ T7010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 351.378395][ T7014] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 351.422550][ T7014] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 351.475306][ T7014] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 351.856806][ T7021] syz_tun: entered allmulticast mode [ 351.944632][ T7021] netlink: 'syz.2.413': attribute type 3 has an invalid length. [ 353.900233][ T7051] syzkaller0: entered promiscuous mode [ 353.940545][ T7051] syzkaller0: entered allmulticast mode [ 356.310272][ T5680] IPVS: starting estimator thread 0... [ 356.424806][ T7082] IPVS: using max 192 ests per chain, 9600 per kthread [ 356.888943][ T7077] syzkaller0: entered promiscuous mode [ 356.908606][ T7077] syzkaller0: entered allmulticast mode [ 359.819071][ T7106] bond0: entered allmulticast mode [ 359.870224][ T7106] bond_slave_0: entered allmulticast mode [ 359.889591][ T7106] bond_slave_1: entered allmulticast mode [ 359.903359][ T7106] bond_slave_0: entered promiscuous mode [ 359.909544][ T7106] bond_slave_1: entered promiscuous mode [ 359.938212][ T7106] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 359.967788][ T7106] 8021q: adding VLAN 0 to HW filter on device eth0 [ 359.989209][ T7106] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.037577][ T7106] 8021q: adding VLAN 0 to HW filter on device eth2 [ 360.162611][ T7106] 8021q: adding VLAN 0 to HW filter on device eth3 [ 361.167611][ T7124] syzkaller0: entered promiscuous mode [ 361.204700][ T7124] syzkaller0: entered allmulticast mode [ 363.761346][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 365.943914][ T808] IPVS: starting estimator thread 0... [ 366.007719][ T7180] netlink: 'syz.2.469': attribute type 3 has an invalid length. [ 366.072975][ T7190] IPVS: using max 192 ests per chain, 9600 per kthread [ 366.573561][ T7181] syzkaller0: entered promiscuous mode [ 366.581055][ T7181] syzkaller0: entered allmulticast mode [ 368.340756][ T7212] netlink: 43 bytes leftover after parsing attributes in process `syz.3.480'. [ 369.950400][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.960761][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.181568][ T7217] bond_slave_0: left promiscuous mode [ 370.205414][ T7217] bond_slave_1: left promiscuous mode [ 371.151380][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.269914][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.373321][ T7217] bond0: left allmulticast mode [ 372.378432][ T7217] bond_slave_0: left allmulticast mode [ 372.389205][ T7217] bond_slave_1: left allmulticast mode [ 372.395210][ T7217] macsec1: left allmulticast mode [ 373.005244][ T759] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.063967][ T759] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.587950][ T759] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.645897][ T759] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.799815][ T7295] netlink: 'syz.0.502': attribute type 1 has an invalid length. [ 377.303519][ T7292] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.314077][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.565056][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.653759][ T7292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.438010][ T7295] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 379.604906][ T6791] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.678298][ T6791] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.706997][ T6791] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.742316][ T6791] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.076257][ T7340] IPVS: Error connecting to the multicast addr [ 380.616233][ T7344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.517'. [ 380.668879][ T7344] netlink: 'syz.3.517': attribute type 5 has an invalid length. [ 380.699760][ T7344] netlink: 'syz.3.517': attribute type 7 has an invalid length. [ 380.749956][ T7344] netlink: 'syz.3.517': attribute type 8 has an invalid length. [ 380.789057][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 381.019704][ T7349] syzkaller0: entered promiscuous mode [ 381.047933][ T7349] syzkaller0: entered allmulticast mode [ 383.547071][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 383.579382][ T7389] netlink: 'syz.4.533': attribute type 5 has an invalid length. [ 383.619910][ T7389] netlink: 'syz.4.533': attribute type 7 has an invalid length. [ 383.641301][ T7389] netlink: 'syz.4.533': attribute type 8 has an invalid length. [ 383.668313][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.533'. [ 391.365796][ T7467] syzkaller0: entered promiscuous mode [ 391.379324][ T7467] syzkaller0: entered allmulticast mode [ 391.430234][ T7491] netlink: 228 bytes leftover after parsing attributes in process `syz.4.570'. [ 391.957714][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.572'. [ 391.982764][ T7497] syz_tun: entered allmulticast mode [ 392.017000][ T7496] netlink: 'syz.1.572': attribute type 7 has an invalid length. [ 392.045973][ T7496] netlink: 'syz.1.572': attribute type 8 has an invalid length. [ 392.058931][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 392.602286][ T7502] netlink: 116 bytes leftover after parsing attributes in process `syz.0.574'. [ 393.602801][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.613196][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.628673][ T1312] ------------[ cut here ]------------ [ 393.634423][ T1312] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xa0e/0x1d00, CPU#1: aoe_tx0/1312 [ 393.644763][ T1312] Modules linked in: [ 393.648910][ T1312] CPU: 1 UID: 0 PID: 1312 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 393.658383][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.668768][ T1312] RIP: 0010:lowpan_xmit+0xa0e/0x1d00 [ 393.674696][ T1312] Code: fb 8b 7d d4 e8 83 42 25 f2 48 89 df e9 35 fd ff ff 44 89 f7 e8 73 42 25 f2 66 41 83 fd ff 0f 85 7f fd ff ff e8 d3 1f 77 f1 90 <0f> 0b 90 80 7d c0 00 0f 84 3b 12 00 00 48 8b bd 00 ff ff ff 0f b7 [ 393.694696][ T1312] RSP: 0018:ffff88810dd83960 EFLAGS: 00010293 [ 393.701040][ T1312] RAX: ffffffff90895dbd RBX: 0000000000000000 RCX: ffff88810d1d2140 [ 393.709560][ T1312] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 393.717985][ T1312] RBP: ffff88810dd83ac0 R08: ffffea000000000f R09: 0000000000000000 [ 393.726288][ T1312] R10: ffff88810d5838d8 R11: ffff88811ae28e50 R12: ffff88810d1d2d00 [ 393.734719][ T1312] R13: 000000000000ffff R14: 0000000000000000 R15: ffff88811d937300 [ 393.743103][ T1312] FS: 0000000000000000(0000) GS:ffff8881aa70f000(0000) knlGS:0000000000000000 [ 393.752676][ T1312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 393.759610][ T1312] CR2: 00007f20a21456b8 CR3: 0000000012666000 CR4: 00000000003526f0 [ 393.767943][ T1312] Call Trace: [ 393.771390][ T1312] [ 393.774744][ T1312] ? validate_xmit_xfrm+0x84/0x19e0 [ 393.780404][ T1312] ? netif_skb_features+0x1bd3/0x1ea0 [ 393.786195][ T1312] ? kmsan_report+0x2f0/0x320 [ 393.791202][ T1312] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 393.798037][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 393.803348][ T1312] dev_hard_start_xmit+0x22f/0xa80 [ 393.808890][ T1312] __dev_queue_xmit+0x2990/0x5a00 [ 393.814405][ T1312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 393.820790][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 393.826421][ T1312] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 393.833163][ T1312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 393.839554][ T1312] ? __dev_queue_xmit+0x2d4/0x5a00 [ 393.845136][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 393.850624][ T1312] tx+0xb6/0x440 [ 393.854588][ T1312] ? __pfx_tx+0x10/0x10 [ 393.859035][ T1312] kthread+0x17d/0x370 [ 393.863566][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 393.869705][ T1312] kthread+0x53a/0x5f0 [ 393.874196][ T1312] ? __pfx_kthread+0x10/0x10 [ 393.879196][ T1312] ? __pfx_kthread+0x10/0x10 [ 393.884268][ T1312] ret_from_fork+0x20f/0x8d0 [ 393.889157][ T1312] ? __switch_to+0x573/0x7a0 [ 393.894209][ T1312] ? __pfx_kthread+0x10/0x10 [ 393.899230][ T1312] ret_from_fork_asm+0x1a/0x30 [ 393.904571][ T1312] [ 393.907753][ T1312] ---[ end trace 0000000000000000 ]--- [ 393.913466][ T1312] ===================================================== [ 393.920696][ T1312] BUG: KMSAN: uninit-value in lowpan_xmit+0xa6b/0x1d00 [ 393.927934][ T1312] lowpan_xmit+0xa6b/0x1d00 [ 393.932722][ T1312] dev_hard_start_xmit+0x22f/0xa80 [ 393.938052][ T1312] __dev_queue_xmit+0x2990/0x5a00 [ 393.943463][ T1312] tx+0xb6/0x440 [ 393.947231][ T1312] kthread+0x17d/0x370 [ 393.951513][ T1312] kthread+0x53a/0x5f0 [ 393.955982][ T1312] ret_from_fork+0x20f/0x8d0 [ 393.960815][ T1312] ret_from_fork_asm+0x1a/0x30 [ 393.966060][ T1312] [ 393.968485][ T1312] Uninit was stored to memory at: [ 393.973922][ T1312] lowpan_xmit+0x68f/0x1d00 [ 393.978637][ T1312] dev_hard_start_xmit+0x22f/0xa80 [ 393.984063][ T1312] __dev_queue_xmit+0x2990/0x5a00 [ 393.989294][ T1312] tx+0xb6/0x440 [ 393.993158][ T1312] kthread+0x17d/0x370 [ 393.997474][ T1312] kthread+0x53a/0x5f0 [ 394.001926][ T1312] ret_from_fork+0x20f/0x8d0 [ 394.006708][ T1312] ret_from_fork_asm+0x1a/0x30 [ 394.011697][ T1312] [ 394.014316][ T1312] Uninit was created at: [ 394.018862][ T1312] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 394.025196][ T1312] __alloc_skb+0x855/0x1190 [ 394.029897][ T1312] new_skb+0x4a/0x550 [ 394.034262][ T1312] aoecmd_cfg+0x2c2/0xb70 [ 394.038820][ T1312] discover_timer+0x64/0x80 [ 394.043660][ T1312] call_timer_fn+0x4c/0x510 [ 394.048364][ T1312] __run_timer_base+0x80a/0xdb0 [ 394.053621][ T1312] run_timer_softirq+0x3a/0x70 [ 394.058599][ T1312] handle_softirqs+0x171/0x7b0 [ 394.063698][ T1312] __irq_exit_rcu+0x9a/0x1e0 [ 394.068525][ T1312] irq_exit_rcu+0x12/0x20 [ 394.073284][ T1312] sysvec_apic_timer_interrupt+0x84/0x90 [ 394.079238][ T1312] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 394.085756][ T1312] [ 394.088225][ T1312] CPU: 1 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G W syzkaller #0 PREEMPT(full) [ 394.099160][ T1312] Tainted: [W]=WARN [ 394.103172][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.113558][ T1312] ===================================================== [ 394.120598][ T1312] Disabling lock debugging due to kernel taint [ 394.127110][ T1312] Kernel panic - not syncing: kmsan.panic set ... [ 394.133683][ T1312] CPU: 1 UID: 0 PID: 1312 Comm: aoe_tx0 Tainted: G B W syzkaller #0 PREEMPT(full) [ 394.144508][ T1312] Tainted: [B]=BAD_PAGE, [W]=WARN [ 394.149725][ T1312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.159916][ T1312] Call Trace: [ 394.163394][ T1312] [ 394.166438][ T1312] __dump_stack+0x26/0x30 [ 394.170971][ T1312] dump_stack_lvl+0x50/0x1c0 [ 394.175840][ T1312] ? dump_stack+0x12/0x25 [ 394.180636][ T1312] dump_stack+0x1e/0x25 [ 394.185016][ T1312] vpanic+0x7b4/0x1430 [ 394.189341][ T1312] panic+0x15d/0x160 [ 394.193520][ T1312] kmsan_report+0x31a/0x320 [ 394.198523][ T1312] ? __msan_warning+0x1b/0x30 [ 394.203399][ T1312] ? lowpan_xmit+0xa6b/0x1d00 [ 394.208291][ T1312] ? dev_hard_start_xmit+0x22f/0xa80 [ 394.213778][ T1312] ? __dev_queue_xmit+0x2990/0x5a00 [ 394.219351][ T1312] ? tx+0xb6/0x440 [ 394.223284][ T1312] ? kthread+0x17d/0x370 [ 394.227728][ T1312] ? kthread+0x53a/0x5f0 [ 394.232188][ T1312] ? ret_from_fork+0x20f/0x8d0 [ 394.237228][ T1312] ? ret_from_fork_asm+0x1a/0x30 [ 394.242384][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 394.247734][ T1312] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 394.254297][ T1312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 394.260605][ T1312] ? report_bug+0x196/0x1d0 [ 394.265322][ T1312] ? lowpan_xmit+0xa10/0x1d00 [ 394.270233][ T1312] ? lowpan_xmit+0xa0e/0x1d00 [ 394.275127][ T1312] ? handle_bug+0xb2/0x230 [ 394.279788][ T1312] ? exc_invalid_op+0x1f/0x50 [ 394.284716][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 394.290161][ T1312] __msan_warning+0x1b/0x30 [ 394.294957][ T1312] lowpan_xmit+0xa6b/0x1d00 [ 394.299678][ T1312] ? validate_xmit_xfrm+0x84/0x19e0 [ 394.305098][ T1312] ? netif_skb_features+0x1bd3/0x1ea0 [ 394.310706][ T1312] ? kmsan_report+0x2f0/0x320 [ 394.315711][ T1312] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 394.322359][ T1312] ? __pfx_lowpan_xmit+0x10/0x10 [ 394.327519][ T1312] dev_hard_start_xmit+0x22f/0xa80 [ 394.332966][ T1312] __dev_queue_xmit+0x2990/0x5a00 [ 394.338197][ T1312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 394.344488][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 394.349850][ T1312] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 394.356439][ T1312] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 394.362762][ T1312] ? __dev_queue_xmit+0x2d4/0x5a00 [ 394.368088][ T1312] ? kmsan_get_metadata+0xf1/0x160 [ 394.373473][ T1312] tx+0xb6/0x440 [ 394.377253][ T1312] ? __pfx_tx+0x10/0x10 [ 394.381621][ T1312] kthread+0x17d/0x370 [ 394.385905][ T1312] ? __pfx_default_wake_function+0x10/0x10 [ 394.391931][ T1312] kthread+0x53a/0x5f0 [ 394.396232][ T1312] ? __pfx_kthread+0x10/0x10 [ 394.401044][ T1312] ? __pfx_kthread+0x10/0x10 [ 394.405860][ T1312] ret_from_fork+0x20f/0x8d0 [ 394.410643][ T1312] ? __switch_to+0x573/0x7a0 [ 394.415481][ T1312] ? __pfx_kthread+0x10/0x10 [ 394.420418][ T1312] ret_from_fork_asm+0x1a/0x30 [ 394.425438][ T1312] [ 394.428761][ T1312] Kernel Offset: disabled [ 394.433148][ T1312] Rebooting in 86400 seconds..