last executing test programs: 8.053339607s ago: executing program 1 (id=1309): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x0, 0x2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x3}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r4, @ANYRES64=0x0, @ANYRESOCT], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'pim6reg1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000840}, 0x8c000) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x26, &(0x7f0000000000)=0xae, 0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.789618401s ago: executing program 1 (id=1313): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r1, 0xfffffffffffffff7, 0x0, 0x3}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000400)={0x73, @rand_addr=0x64010102, 0x4e23, 0x2, 'lblcr\x00', 0x20, 0x4, 0x24}, 0x2c) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket(0x8, 0x3, 0xfffffffc) bind$tipc(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001440)="bd9498a2246efea041d1915949e1790da5f95c30397e6d46e42be6e7ae97d72e527bd7b615e20733525efd7c90f0779e6e1f0d485dc044f44658a3e2bcc92b0d1bad5b5393ef858e059f8f4d03f704bb43c2b9e257f74836475940c29f9388d0780e422b37ea41b90100827a514395e4859ee8acf394db92514e866eea1ad3e4cd21762a8a63f8c4b76f6b46ec4c77f6997ee191121e06d3752bd2a69efddf4fd419f0eacc4bb8378ac43fbdfc45f6f53df4f5757c03266d8fd9e7ce68fd26d02aa2bfa9d844a55f76b305841e27139148f7c324f1fad21eb5202e8f426e474689a64e1c0c49e58fc75d4334653a6ff74bf25cceb7edea715cff70f75308039db5b1c7209513d9351e19984b4a0a52ae88e8fc4bf615a41d86f9e0171ea472d0d7f1d706ac0556e6f1fde09d8137a1ae9ff0c75053910d7d4e681133114240fabc22244821a680bbb94d8f2f7bd798aac665bbf505cc9dc2f37909b57c3875b0f42d3da80341a1154176fecb5f2ffa967c40d9a2021d6363ff7b98e59136c3800b49f4f7663d05f14f882aea1b0cfe854bfd924422bebf80b35b19d517ba9dce273a510fda6d097841f6a8a802ef835dd1dc79192ebea3a1748a29fb99b79312f711b2417f8e25ced7bf2b379017482fc2dbf2db5bdd05f9b1937ebd179b94ab2cdad6339e5b5b18b3e3e3b96ae96a2c800ad164b1f6f0111656779cfcb008ae40cc7b16e8209a52397a34f4a9f0d445402654d7538b31e4cffe108c380d0383b6a57d94926aaa8b8eddc3a6b7a50cab04904669210043b6cb151c1d433c3d8dc205454197dab01496c7537f2d97a34c31f0a7b56542b76624efd9a842f897563e5e08df64036cde9484d25396f6451ba9515d772671888641285ead63375e4d1153f6ef850950b5c2fcf828d508d532a0199252b8aa324c4af36be6b4461a1932a7512534a74cc41f43a91ccd1c76e090e01ca90723a351d282b9483b8ac0fc6c1308b1046f78a5a2f7047a3f2f9b19b0dfbda5d55a21761d5e2e155263fb165138057d3f53a1bc691dd96b0a8e922d2a0e6be951a42fd144868a82b74a383f4670f59eb0692e7ad5561374e2f2a546a33541f71a0f8e292b20499df1cfc1fee7ffd02c1cf9eaa897d5832eb44c9e4b7b79ca6f8e64885facbc6d0614feeb965153ac52b2078f0b130f4a8258b23488801fd3fc2e824c0d1406bfa788313458fdf9113dc93e77d580bd3b23b295a61f3e3aaafef50821f3d7749cf1f709c71c0d8058097d7c57798322c5e0e504e5fd3dd9a4498192879e1dd42f096b15039154c462b3f93866eb99da23e6bd4cf0e17fed9c57f2d16a403d28f9255443cc6b0dce8920eba839e5c7d04d197736213c3c46b60bce67d277203adc95b103b0a762a5d724e3db4c71ff4748492151e84714e37d273bfed4551882f2f125a75db9687b1d46565b1c70c8ec2e8c723ba70a1cc08a235c530aa304fe52ad2b75049c575577c18640de65e95658d9b439ff83d9dadb2b0921f29b3b15939aca48f7cb2551ac68caea7d3c428f76d8f07f2b6ba122b75d49a318a6618aac473261617455fc35bb1cc8d4858848fa68975c76747f51d165c8fa2347d491497330b5185cc5bccf3c699f93afd19b1a549604b4ccac53ea7a09c033238fa03f091c2392a702831a3b2432a71d6671535da00e613581fc79c7f6b09f8bda738265df55a32e3f88cd015a5eb0ffc4107b8f1c995e75bc6a45b092732f7a0e267eb050d683339033353b141e1c95731862b19e863550c0f4f88fcf152797656b2dfc8f3c6b1bee6509b2cf88c3f398c19fc00d9c87ee9a84252569faaceef382356a173237131e24718e92d4f8ac9b097991dcc78eb57c15fb4c1ca8b7fbc3176bab3cb04f50bcdf581a7fabde5bb815819d295d7621da913bfe0df9bbc1c2cc122e2229be72db96c167c6771deefd75fe8e3ad8a704aa97f350caabf2ffa6d1e5ec38585a5e744f7eed5eb2a2ba1c58c0febfcf0093d5902b5da1f2fe3f6c3ea12f52819a061f58a69d8199cc4633da2297bb50ab13c6d67f48be703fbb232518dc8ed5675f2f933942066d861f48169735fa8574e169ea86c3097b52877461017399e3b66bf51574c22de9edb39cd40663b535d4c10c347db6ce9bbd3969a322cec7a2178a1523a8f1c83501c1728852eb49801deb088bbcfb833ac8011c91e7f403d90795bc23a510cea2df74bf419bada1396e745ad42f3ff5654b19e6779f2b958c6ff15b533adf286919b6420b608dfc25f763343a0793185300f7deab06a7448716de9df8d79159296a84aef1598569ca33da3265ba1dbbd11b22ed4f222a043f75ff5921587a90a910db56feab992537dc3439507a880f514dddcfaff38a47b79a26e582f8f6481e2e41cfe21691ae7eed3b28d7b6ef409a402ed0df2255f91cc5010ffc919c1093f5c7031e8db038054ae6b100f8013d29b55bb19289c7eb13e23a9d3927f0629d2b23238fb598774eaf62bfe08f7d83600d7c53dbdd238648ddd7442770a1e875b924aabd00c3dd29d799868fea9ea267c0dc34f4ee3140ecaf5d73d68c175a343a8d119821038e624ec40002d43784fd1ced9a3df2ec83246cffa78f10445e11fbbe3249293db1cadd30e653e309f44f007e217008f0c96840e5c93decd61cdc4799b87e6b1343cc75b163c31d408b05185e06e35b70b7a0de51ffa3f44df1b37eb62b67e1fff293f5f214556e742247a4d3f3c1a9e84a75879914916afa34eead06f2514c1de7bed874b7208005ef03e0f00ee21039ba6cf0c9d2ea3f7d675d883da3cf6e5c2ea0207098034d5c4702939c99e90ac5099364bf3530ee56b3dfe3d1b371904897eca6b7cac996c8e261dc9762c4be081a1254cfbb657d111750a6405775739873325ba4adc46f2f112830dc49c3998f984488072cbfd2f00c288708f2cb2ae8b6b5ce1947fa9a9593adbbaeee130bbbe744cd44d974c5012171b0b9c1a1a0a72157e679342446dfe01c4b64625418f1e0c954f3538e44ab3ef5107207745b5271e653497086397011e5dd632ba0726fec4b6131d408d3ebe26b79d79fa290fda9261538262fe3e9b23dcd652eca92768c618450454f3496de3bfee7df544fa60d41d9bcd41b25834e35e58bb1f9f891a4fe9c766c8eb2d92f5a888ee167677a03ee47222f8c07fa4e827f768cc6fa739ba49f7a92f07ddd0557dee99a448330fde6c89d0fb0b8fea801bdb381a6fcd80032128b39c3bfdee711a2ac7979556d86074e7da67255bdab577e772079cb6cb539336aa13e6080c207f034fad774d194e32a390725c10f19c183389b7b9315fb98ef6c526eeafc32bed0df3ea3ab830997a78d2468f249612eee03949ec427efff2e2ba1a4c52f549940f6216217f51ab863db823d2ce613ffd14467f5a59c3e2144c720fd9d94a44b72effb4da300d13b0f6234a94058e8ff581414918f14211625bcc7377441fbadfcffaf5708444069916aa3295829e5deba2057e744180f4e27a3fac1f2415f95ce9d091d0c3b5d19af00398acf3edf47b88f723dd71e1be14046c623d9f9aecd39abdd6dc5ec069196b4d00065a024aa2bd1ab442ccda6857fdc2f79abedec5507af04cec3e496d8a7caacbac8afe2c702b08f8ab210d977d02167e5efbc1b349422478ed5f90dd6a9cb6dee9ba88355a3891d059d7d65f9a2606af67b74eefd9337a92cc42a01a250b935e937cd5e0f5632a3fdabc5965d6663f2a2790a99086e4579083738594aa3dbef11d4d757857689babbf1b03aa2bf909a552e390f9a08c31091de5b510d3a8bc1ba92314160fa600206088b459e7fe8d6faaa61c998b81ab6b539b16b089059e00d16545d47125e53c748e80e955de5f8e8d5971ef651c194b33ab6ff62979729343104263cf8fa3e7c8cf986bf4b84090d75b2a9581e5832033a814430196676aa0c8c367b3267766fe4514e8ae1dc03049743dc22910a26faeb3a0e804153f854fcf922d2e0b9a9fc5f67e2334f13585e93f8096b56e418f605b5fe219affad6ee03e3f9baa21e84101719dac513bbcebcba100623f3ecea1359a632d96b11122f42476abb015dda604c45c142d8a7df4c81edf01bcd0abf96a32cce4da0cd5485f256117808fbe4475ed728db5441a509196de47b971612e8d869365dcc6b55b6447fa93d3a33fa3a7d9f441798dfaacb7c5ef123f3904ad8a1122ed2ca451c9430c90b79c4db97bdc29b09a3331fea63c6bee9e3e34c16bbd63a17170e02225cfe897f03bb8b6395079d7432ab895c6c8d64f992bf347e17d5d3495217f2d49655eb2026d32e9c1175c986aece19eeaeb083a337ae1bf7eb425bbe0f585055c2d7d229643e9f16a13fa8835233b15ea965b8ef170ead6b537bc819233889e289c723fc2fac921f01520973e68602387678e0b7846878ead2e08023361213c228bf04b2b34ea82fb6edc1fe30ac62abc0fe1797e5bb4e3a18a9b9d03deda4445a4abe5e1b24b5a5e0944a99d0541f2c5047b59f639c71d943e82c41b582232b6f815ec82d1d776feabf27f35c546bd31d053458eca7dd003cea87c44fbae76317916d54544e336b072206e88501f46cbd3dd15fffd1556f0b3367453752342d27d94f06527f8efb31cf70660010b35505edf83a0b44b4a9595a28611cfeb7227f80a374afa2dfa4f6cc2fcb47ef77ad8ab2ef76a1c24e82372826428c4cdeeb53e49504d91cea90867c2ba18c5ed6edaf44c737358d79d2b21135d20cd4c7047eebc9886ebae6662aebe7bcc163d9513da46cb5e1a2dcc5c715a50b0a5de0b30149e0a3ddfbcf773ff7d92e4106526d3666712dd355ae56d357d5c6136021a27b532b3593705b042096cceec173638d83ead163cc5ca425f140765439db3b0d2034316031722091f06db2f1557150efe57f8772bc09f79ac980f2016e6d769b15547fff5a3a823d4c82abcaace78a33f5059179115f0dca0e23f0549952667a6f034f4958ebc5acbde25c329989073d3695cdbaad688277c39af5ce227b767999859725643f3eff16e89e3ff9fc9982aede71c7783fedb84618faf2859d0c1bde43ce693b8d69fc44c221d9859c2742b202de78e815239666b08332bf9e7133ec28b3cae2c0f10eda5f85787d96213381d3e56c37a328fe3bfe3549c4c4486fb718c48399104eee4b80ac43c9143c8f6384fd1851f9e3bab98ba5d876a15c1535189fe55c627c5f968beb37f9d4cecb082442323440dbae8ff8afe0275b55fd54a7d701105e7ba5780ab46cda4c03b18610ebb5d8ba6d03727090f9037943899eea324ab16429ae788b8f22add11937993cec55baa864aad70652e9a8413be47ea353acadd704ee6e48bdc0a8b87eb6b224a2a2e5cac51984da2411c4ccb466ce955dead824d87d36fb9e52129e4e838eddde73cd314f6bd9aebcddeae15fb1240c32d615abaae4da4d0170047a09b949af93be4a90ec652fbc07692bb9b95f1c011920f877105565d716935372e38721d462bf0fa77a4a58f2b0a26734c8a0b43548950f17481fca6bb98d394c61c322a68f7655d792860671d32890a80f80740889c6353c8a7a26d53d32375d8f0b59fc5fc562d6453e60dc5df81cc0d93db6d1bcb0ed1aa7069a77b57153f0bc9391b16db8b3fd1432cb2d05cebabaff050b66c4c9b198219cfb5baee20f55d689f0001805905fcb0d065e41a292df73849ab4628fd605bc9531a3f5246d1bcebfcf50172ff941fd062ed4acf7abe3b5aeeaf384e425165cb57747db799325a", 0x1000}, {&(0x7f0000000440)="60809e4cfcfa20e290d0ccf993963d7fecd28ae5f7e8bee857959c5652554b6b58544352365a908ca919ad26ae478cc98f8ecaa003d9a578bee90f232f6ffe4e9cbc6998aeee3f06b95490ec9ec8d0cb8f9c6fe3e969132f722ba9f00b7678f360cc0c4ecc", 0x65}, {&(0x7f0000000600)="56e4f1a35684006f11fcaf3bfc3e748384b68c4b7eac193428171eb68d2e12aba17ecc0b8917b341dc7329653d51f8df644cb8e4e046b019c4df4540618e2f4cfb18a359c6063bc6644f6c902db6fc36770dee2f74a629a088f16b3a552db18a13425835b7b0b928fe574780cbf5198e1864b7751aa8bb8ece6a6c0b1a43c9de1941c7fc3192367a661377e6", 0x8c}], 0x3, &(0x7f00000006c0)="3418743afa53bcfd6b95d9e8219d", 0xe, 0x80c2}, 0x20008001) socket$phonet(0x23, 0x2, 0x1) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 6.91038284s ago: executing program 1 (id=1318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) accept4(r2, &(0x7f0000000540)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, &(0x7f00000004c0)=0x80, 0x80800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xac}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x4798c000) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000a40)={&(0x7f0000000700), 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)={0x264, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x248, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x16, 0xc, 0x30, 0x1, 0x46, 0x3, 0x18, 0x3, 0x4, 0x1b, 0x0, 0x9, 0x6, 0x1b, 0x16, 0x16, 0x4, 0x16, 0x24, 0x24, 0x9, 0xb]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x30, 0x30, 0x12, 0x2, 0x16, 0x60, 0xc, 0x6c, 0x3, 0x18, 0x0, 0x1b, 0x6a, 0x3, 0x9, 0x4, 0x36, 0x24]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xf, 0x5, 0xff, 0x6, 0x80, 0x9, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x2}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0x8}, {}, {0x3, 0x9}, {0x3, 0x6}, {0x4, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x7, 0x8}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x4}, {0x0, 0x6}, {}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0xa}, {0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x3, 0x9}, {0x7, 0x9}, {0x4, 0x9}, {0x4, 0x4}, {0x0, 0x3}, {0x1, 0x5}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x7}, {0x5, 0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7, 0x5}, {0x1}, {0x2, 0x9}, {0x3, 0x6}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x5}, {0x3}, {0x4, 0x4}, {}, {0x0, 0x4}, {0x2, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x5, 0x4}, {0x5, 0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x4}, {0x7, 0x1}, {0x1, 0x3}, {0x1, 0x9}, {0x5, 0x3}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x0, 0xa}, {0x4, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x4, 0x8}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x1}, {0x1, 0x5}, {0x3, 0x5}, {0x5}, {0x6, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x1b}, {0x5, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x4}, {0x6, 0x4}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x3}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x1}, {0x7, 0x1}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x1c}, {0x1, 0x1}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1, 0x8, 0x2, 0x72f6, 0xb49, 0x8, 0x2, 0x7]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x30, 0x1, 0x1b, 0x3, 0xb, 0x1b, 0x3, 0xc, 0xb, 0x1b, 0x6c, 0xb, 0x1, 0x18, 0x1, 0x6c, 0x1, 0x24, 0xb, 0x1]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x30, 0x36, 0x18, 0x30, 0x18, 0x6c, 0x5, 0xc, 0x12, 0x6f, 0x30, 0x24, 0x9, 0x4, 0x24, 0x9, 0x18, 0x18, 0x507b426c7a73e508, 0x30, 0x2, 0x6c, 0x36, 0xc, 0x24, 0x2, 0x6, 0x60, 0x60, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd1ae, 0xa, 0x80, 0x800, 0x9, 0x3ff, 0x200, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1bf, 0xddd6, 0x2cc7, 0x3, 0xa19, 0xe0, 0x5, 0x73e6]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x0, 0x5, 0x3, 0x8000, 0x2, 0xfc01]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xb596, 0x8, 0x0, 0x100, 0x40, 0x95, 0x81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x3, 0x9}, {0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x8}, {0x5, 0x3}, {0x2}, {0x1, 0x7}, {0x5, 0x2}, {0x7, 0x7}, {0x7, 0x9}, {0x1, 0x4}, {0x4, 0x1}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x9}, {0x1, 0xa}, {0x6}, {0x0, 0x5}, {0x7, 0x5}, {0x6, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) sendto$inet6(r5, &(0x7f00000005c0)="d9b6f30bbde1bacfdd98a8495ade2bba6e5c145e867c3805e0ea9cb48d50ddb992d731612be4f19a708b3b0397ad7d8cba5905bf20d82bc09870b72de35e84db960127c1bce1f1862fb1321993228aaacab0b4d50d0e93feeb1dd234994b31b0a487e5ef771ac5650781d903e59f982c4260a87cf890d86584640f01995f7dcad580b7a9c661425ce7f1cc2fe63b8d9f07f658c3c1bb10b3674988d3287acd836d36445ec7fadc53a9fccaccd9ae97f35c35fe62d6151129f71e153dfd85dd8c46af98d39d649f5db8a1e5066f75a200235ff796028ebcf4807c63d48499783c813a6a2bc26538b280f015e8c9c0be9494d8b1", 0xf3, 0x8010, &(0x7f00000006c0)={0xa, 0x4e22, 0x3, @local, 0x401}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(r4, 0x4018f514, &(0x7f0000000300)={0x4, 0x0, 0x2}) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f00000000c0)={0x2a, 0x1, 0x2}, 0x70) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r7, r3, 0x4, r0}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00142102800800010008000000060002000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 6.069430233s ago: executing program 3 (id=1324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000e4ff0000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 6.060939575s ago: executing program 1 (id=1326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendto$inet(r0, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711075000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.993962848s ago: executing program 0 (id=1327): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000070600000ee60000bf150000000000003d650000000000006507000002000000070700004c0000001f750000000000006154000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff28, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f2", @ANYRES8, @ANYRESOCT], 0xfc}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bind$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) close(r4) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00', @ANYRES32=0x0, @ANYBLOB="a739df"], 0x1c}}, 0x4000054) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000001000000000000007a03000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r9) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x20, r10, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x300048c0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(0x4) 5.773275157s ago: executing program 3 (id=1329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x4, 0x4ffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x6020480) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1000}, &(0x7f0000000280), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000008000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff0000a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800100018230000", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000005d80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000180)={0x2, 0x2, 0x7a3, 0xffffffffffffffae, 0x6, 0xfd, 0x0, 0x2}, &(0x7f0000000680)={0x7, 0x9, 0x80, 0x800, 0xf, 0x8, 0x1, 0x1ff}, &(0x7f00000006c0)={0x0, 0x5, 0x1, 0x7f, 0x8, 0x80000001, 0xc, 0x8}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0xff]}, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000900000001000000cb3f8000e70015544c2d1e062dafdcbd03d79ba62af95a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1e}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x45000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r11, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) sendmsg$nl_xfrm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="6d79737ebc0cc8fe242893208557", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x4c) 5.541266428s ago: executing program 3 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) 5.413724457s ago: executing program 0 (id=1331): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="840000001300f5d129bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="000004000000000064c31680600001800c000900010000000c0b000018000c"], 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x240480d0) 5.297473736s ago: executing program 3 (id=1332): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000180)=0x101, 0x4) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffc}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x40010, &(0x7f0000000240)={0x11, 0xf7, r4, 0x1, 0x20, 0x6, @local}, 0x14) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b15, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x10, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xffe0, 0xffe0}, {0x3, 0xb}, {0xfff3, 0x6}}, ["", ""]}, 0x24}}, 0x20000000) unshare(0x6a040000) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 5.040980967s ago: executing program 0 (id=1334): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="050000000000080000000001fcffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005b979e01d2038d84"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) r7 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000009060108000000000000000005000000090002f573797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.881414611s ago: executing program 1 (id=1335): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f00000052c0)={'broute\x00', 0x0, 0x0, 0x0, [0x9573, 0x1, 0x3, 0x5, 0x547, 0x1], 0x1, 0x0, 0x0, [{}]}, 0x88) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x6, 0x2, 0xfb, 0x9, 0xa, @broadcast}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x0, 0x0, [0x80, 0x8000000000000001, 0x6, 0x4, 0x1, 0xa6], 0x1, 0x0, 0x0, [{}]}, 0x88) 2.375959643s ago: executing program 2 (id=1339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfff8, 0x81, 0x8001, 0xffff}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xfff8, 0x81, 0x8001, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYBLOB="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", @ANYRESOCT=r1, @ANYRES8=r1], 0x3c}, 0x1, 0x11}, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.175682688s ago: executing program 0 (id=1340): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x4, 0x4ffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x6020480) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1000}, &(0x7f0000000280), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000008000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff0000a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800100018230000", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000005d80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000180)={0x2, 0x2, 0x7a3, 0xffffffffffffffae, 0x6, 0xfd, 0x0, 0x2}, &(0x7f0000000680)={0x7, 0x9, 0x80, 0x800, 0xf, 0x8, 0x1, 0x1ff}, &(0x7f00000006c0)={0x0, 0x5, 0x1, 0x7f, 0x8, 0x80000001, 0xc, 0x8}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0xff]}, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000900000001000000cb3f8000e70015544c2d1e062dafdcbd03d79ba62af95a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000110000000000000000000000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300005804b96446eeaccd1bc4adea833189dbd49e473fc70beba20702f6de3dfbccfdc8404eae8f8023788dd6a55ef8883b1925f4707215814c6b405b109a8ed9fb947ef6d199e43b6db0adcb128bcf6d43f0ebcfa378a7d0329cbaf97f0ffabbb3b952bede7d21318f7381301d511d0273bfbd8bfedb6b2ef7baea4e2e18cfbddade2a4c1f163e68b0b035ae7830b6c5745813f47546722383877a50c5d14d652fd8947bce6d556cb07c25074866c0932295888214", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1e}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x45000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r11, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) sendmsg$nl_xfrm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="6d79737ebc0cc8fe242893208557", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x4c) 1.778025957s ago: executing program 2 (id=1342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1.701878691s ago: executing program 2 (id=1343): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={r1, 0xfffffffffffffff7, 0x0, 0x3}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000400)={0x73, @rand_addr=0x64010102, 0x4e23, 0x2, 'lblcr\x00', 0x20, 0x4, 0x24}, 0x2c) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket(0x8, 0x3, 0xfffffffc) bind$tipc(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000000440)="60809e4cfcfa20e290d0ccf993963d7fecd28ae5f7e8bee857959c5652554b6b58544352365a908ca919ad26ae478cc98f8ecaa003d9a578bee90f232f6ffe4e9cbc6998aeee3f06b95490ec9ec8d0cb8f9c6fe3e969132f722ba9f00b7678f360cc0c4ecc", 0x65}, {&(0x7f0000000600)="56e4f1a35684006f11fcaf3bfc3e748384b68c4b7eac193428171eb68d2e12aba17ecc0b8917b341dc7329653d51f8df644cb8e4e046b019c4df4540618e2f4cfb18a359c6063bc6644f6c902db6fc36770dee2f74a629a088f16b3a552db18a13425835b7b0b928fe574780cbf5198e1864b7751aa8bb8ece6a6c0b1a43c9de1941c7fc3192367a661377e6", 0x8c}], 0x3, &(0x7f00000006c0)="3418743afa53bcfd6b95d9e8219d", 0xe, 0x80c2}, 0x20008001) socket$phonet(0x23, 0x2, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 1.537118066s ago: executing program 4 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe8a) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640), 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000004000000000016401010200000003000000000000000000000a00000000000a0000009f629ed39e6d40bc1a2ba4164f71be800c4f99", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000e000000100000000000000000000000006000000040300"/180], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b40, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x2000000000000273, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000800000000000000000950000000000000092f689d491b05b68b39d94737cce99789cbb3b5f3462498d895225178ea20ee063a18a13d23a68980b6671e2c67756b0402602025b745af2cc6957af6c9144d62dd09164ba809ee4dffa2a83a72951a9965b0bd04c2895e2b7b53a1e8d85f94cf18e869f1ce36209eb8e7521737a375dee893c8be7f426210cab934ad8c254a49c9cf248c8216d37f34bc6c87b8a12f247d1c82f44e23e68a3a182763973f56e0c427dd94c6e2c7ade1730f3f92eda3df3156a7b88760106db378a13ae1f7b6c300e7ebdea99c083ea72018e66ae2e7d5f508d8cd60bb982c4552d639e44fc7f25bdd4b6cd4e95cd4c0b13"], &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0xf, '\x00', r3, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="50010000", @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d7930000000000000000000003c0001801400020070696d72656731010000000000000000080003000100000008000300000000001400020076657468305f6d6163767461700000005400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="14000200626f6e645f736c6176655f31000000000800030002000000080003000200000008000300030000001400020076657468305f746f5f626f6e6400000094000180140002007866726d300000000000000000000000140002006261746164765f736c6176655f300000140002000000000000000000000000000000000008000300020000000800030002000000140002006772657461703000000000000000000014000200687372300000000000000000000000000800030001000000140002006970365f767469300000000000000000"], 0x150}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) close(r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x8, &(0x7f0000000280)=[{0x5, 0x9, 0x3, 0x6}, {0x5be, 0x81, 0x6, 0x80000000}, {0x4, 0x1, 0x4, 0x9ea}, {0x4, 0xa5, 0x62, 0x8}, {0x5, 0x7, 0x3, 0x54d1}, {0x8, 0x4, 0x5}, {0xf, 0x4, 0xd0, 0x3}, {0x2, 0x9, 0x7, 0x401}]}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x268d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r13 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r13, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) 1.237889618s ago: executing program 0 (id=1345): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140020001000040000000000000000000000000000000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000900000080003400000004008000f40000000063c0000000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800030de4000002140000001000010000000000000000000084000a"], 0xd0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r5, &(0x7f00000070c0)=[{{0x0, 0x0, 0x0}, 0xf}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1}, 0x8}], 0x2, 0x2000, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x3000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000833000/0x13000)=nil, 0x13000, 0x300000c, 0x12, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r9, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r9, 0x1000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0xc2bd5000) 1.008386927s ago: executing program 4 (id=1346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000206010000000000000000000100000214000780080012400000000505001500060000000500010006000000050005000a00000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) 885.10601ms ago: executing program 0 (id=1347): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea616f", 0x3}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x3a8, 0xffffffff, 0x1c0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [0x0, 0x0, 0x0, 0xff], [], 'macsec0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x1, 0x48}, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x7, 0x50cc}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x42b5}}}}, {{@ipv6={@private2, @mcast1, [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffffff, 0xffffff00], 'macvlan1\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0x6c, 0x6, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x80, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r9) sendmsg$TIPC_NL_PUBL_GET(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r10, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8810}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x2c, r12, 0x301, 0x0, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x2c}}, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r12, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6d3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004011) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) 808.147276ms ago: executing program 4 (id=1348): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224efeff", 0x58}], 0x1) 637.002977ms ago: executing program 2 (id=1349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000500000100000a0900010073797a30000000002c000000020a01010000000000000000010000030900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100fffe08000b4000000000300004802c0001800b0001007470726f787900001c00028008000140000000020800024000000011080001400000000a0900010073797a30"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 545.548296ms ago: executing program 4 (id=1350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780066004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 529.307543ms ago: executing program 3 (id=1351): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket(0x8, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000440)='contention_end\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}, {0x0}], 0x2, 0x4000000, 0x80db) sendfile(r2, r3, 0x0, 0x7ffff000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) 413.500248ms ago: executing program 4 (id=1352): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x5, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x408d4) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x15, 0x5, 0x0) connect$netrom(r4, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x40004) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000004c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf251000000000000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000008000000000000000071120500000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000400000000000000000063d6f27a775af94e00000100000000120002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0) 341.523864ms ago: executing program 2 (id=1353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x40) 158.242697ms ago: executing program 3 (id=1354): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100266f17c2aa00000004000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800a1a0000000000010000000000000000002000010000000eac6d6be785b1110cd79bf620900000000020015000200000200001680100008800c00028006000100000500c7ce0c90fc0773cdd9293f764e35662338e76051913c50b32a46a13a25343f29afca3cf1a2a1759166bd8ef15c8ac63da6b48b40d5f024ba8940a1cf6e4f1f139026c920d301048faed640e4bc858f41a21075d32e3807c2026f2baeea13d3f2"], 0x38}}, 0x0) 132.278117ms ago: executing program 1 (id=1355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x83f}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x4, 0x4ffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x6020480) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1000}, &(0x7f0000000280), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000008000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff0000a100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800100018230000", @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESDEC], &(0x7f0000005d80)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000180)={0x2, 0x2, 0x7a3, 0xffffffffffffffae, 0x6, 0xfd, 0x0, 0x2}, &(0x7f0000000680)={0x7, 0x9, 0x80, 0x800, 0xf, 0x8, 0x1, 0x1ff}, &(0x7f00000006c0)={0x0, 0x5, 0x1, 0x7f, 0x8, 0x80000001, 0xc, 0x8}, &(0x7f0000000700), &(0x7f0000000780)={&(0x7f0000000740)={[0xff]}, 0x8}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200004600000000000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000900000001000000cb3f8000e70015544c2d1e062dafdcbd03d79ba62af95a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_CONFIG(r9, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100e}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x1e}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80}, 0x45000) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r11, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r11, 0x84, 0x81, &(0x7f0000000300)="1a00000002000000", 0x8) sendmsg$nl_xfrm(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x1, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000380)="6d79737ebc0cc8fe242893208557", 0x0, 0xfff00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x4c) 73.434753ms ago: executing program 2 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=""/253, &(0x7f0000000940), &(0x7f0000000000)="c8", 0xa7c, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x42894}, 0x24044884) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x9c, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) pipe(&(0x7f0000000240)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x8001, 0x5, 0x2, 0x29000, r9, 0x6, '\x00', r7, r8, 0x1, 0xfffffffc, 0x2, 0xb, @value=r5, @void, @void, @value}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 0s ago: executing program 4 (id=1357): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x6, @random="38f019fdb550"}, 0x24, {0x2, 0x4e22, @multicast2}, 'ip_vti0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000500)="ab", 0x34000, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) (fail_nth: 35) kernel console output (not intermixed with test programs): 0000000000000003 [ 204.389559][ T8680] RBP: 00007fe1eba10b39 R08: 0000000000000068 R09: 0000000000000000 [ 204.389572][ T8680] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 204.389586][ T8680] R13: 0000000000000000 R14: 00007fe1ebbb6240 R15: 00007fffb8f69fc8 [ 204.389620][ T8680] [ 204.389629][ T8680] Mem-Info: [ 204.724607][ T8680] active_anon:10058 inactive_anon:0 isolated_anon:0 [ 204.724607][ T8680] active_file:1978 inactive_file:39870 isolated_file:0 [ 204.724607][ T8680] unevictable:768 dirty:207 writeback:0 [ 204.724607][ T8680] slab_reclaimable:10423 slab_unreclaimable:98581 [ 204.724607][ T8680] mapped:33740 shmem:4230 pagetables:1252 [ 204.724607][ T8680] sec_pagetables:0 bounce:0 [ 204.724607][ T8680] kernel_misc_reclaimable:0 [ 204.724607][ T8680] free:1323444 free_pcp:9676 free_cma:0 [ 204.775239][ T8680] Node 0 active_anon:40232kB inactive_anon:0kB active_file:7912kB inactive_file:159276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134960kB dirty:824kB writeback:0kB shmem:15384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12548kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.814762][ T8695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.882'. [ 204.836930][ T8680] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.868871][ T8680] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.945541][ T8680] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 204.951405][ T8680] Node 0 DMA32 free:1380388kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39884kB inactive_anon:0kB active_file:7912kB inactive_file:157468kB unevictable:1536kB writepending:824kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:16832kB local_pcp:10464kB free_cma:0kB [ 204.986867][ T8680] lowmem_reserve[]: 0 0 1 1 1 [ 204.991672][ T8680] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 205.002476][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.1.883'. [ 205.023589][ T8680] lowmem_reserve[]: 0 0 0 0 0 [ 205.068937][ T8680] Node 1 Normal free:3898000kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22660kB local_pcp:15108kB free_cma:0kB [ 205.123170][ T8709] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 205.156526][ T8680] lowmem_reserve[]: 0 0 0 0 0 [ 205.194890][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.0.886'. [ 205.223198][ T8680] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.240798][ T8699] veth3: entered promiscuous mode [ 205.261763][ T8680] Node 0 DMA32: 851*4kB (U) 1748*8kB (UME) 888*16kB (UM) 981*32kB (UME) 342*64kB (UME) 175*128kB (UME) 89*256kB (UME) 48*512kB (UM) 37*1024kB (UME) 10*2048kB (UM) 285*4096kB (M) = 1380364kB [ 205.292627][ T8680] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 205.322339][ T8709] team0: Port device geneve0 added [ 205.336228][ T8680] Node 1 Normal: 188*4kB (UME) 48*8kB (UME) 48*16kB (UME) 111*32kB (UME) 37*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3898000kB [ 205.423423][ T8680] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.475015][ T8680] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.478370][ T8717] netlink: 'syz.2.889': attribute type 1 has an invalid length. [ 205.530622][ T8717] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.536994][ T8680] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.581340][ T8680] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.582939][ T8714] dummy0 speed is unknown, defaulting to 1000 [ 205.591041][ T8680] 46876 total pagecache pages [ 205.601853][ T8680] 0 pages in swap cache [ 205.606318][ T8680] Free swap = 124996kB [ 205.610772][ T8680] Total swap = 124996kB [ 205.615173][ T8680] 2097051 pages RAM [ 205.619011][ T8680] 0 pages HighMem/MovableOnly [ 205.623701][ T8680] 424684 pages reserved [ 205.628068][ T8680] 0 pages cma reserved [ 206.043376][ T8731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 206.076449][ T8730] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 206.099246][ T8736] netlink: 72 bytes leftover after parsing attributes in process `syz.1.896'. [ 206.744550][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 206.847346][ T8762] dummy0 speed is unknown, defaulting to 1000 [ 206.953319][ T8760] netlink: 68 bytes leftover after parsing attributes in process `syz.1.905'. [ 207.507879][ T8780] dummy0 speed is unknown, defaulting to 1000 [ 207.603245][ T8785] netlink: 72 bytes leftover after parsing attributes in process `syz.4.911'. [ 208.071633][ T8795] netlink: 'syz.3.915': attribute type 7 has an invalid length. [ 208.828583][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.918'. [ 209.354701][ T8823] FAULT_INJECTION: forcing a failure. [ 209.354701][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 209.372895][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.1.926 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 209.372928][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.372942][ T8823] Call Trace: [ 209.372951][ T8823] [ 209.372960][ T8823] dump_stack_lvl+0x189/0x250 [ 209.372998][ T8823] ? __pfx____ratelimit+0x10/0x10 [ 209.373032][ T8823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.373066][ T8823] ? __pfx__printk+0x10/0x10 [ 209.373093][ T8823] ? __pfx___might_resched+0x10/0x10 [ 209.373127][ T8823] ? fs_reclaim_acquire+0x7d/0x100 [ 209.373158][ T8823] should_fail_ex+0x414/0x560 [ 209.373191][ T8823] should_failslab+0xa8/0x100 [ 209.373216][ T8823] __kmalloc_cache_noprof+0x70/0x3d0 [ 209.373237][ T8823] ? alloc_netdev_mqs+0xbd5/0x11e0 [ 209.373256][ T8823] ? __xdp_rxq_info_reg+0x189/0x2a0 [ 209.373290][ T8823] alloc_netdev_mqs+0xbd5/0x11e0 [ 209.373319][ T8823] rtnl_create_link+0x31f/0xd10 [ 209.373348][ T8823] rtnl_newlink_create+0x25c/0xb00 [ 209.373384][ T8823] ? __pfx_aa_get_newest_label+0x10/0x10 [ 209.373416][ T8823] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 209.373442][ T8823] ? rtnl_newlink+0x8db/0x1c70 [ 209.373469][ T8823] ? __pfx___mutex_lock+0x10/0x10 [ 209.373501][ T8823] ? ns_capable+0x8a/0xf0 [ 209.373536][ T8823] rtnl_newlink+0x16d6/0x1c70 [ 209.373587][ T8823] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.373611][ T8823] ? is_bpf_text_address+0x26/0x2b0 [ 209.373652][ T8823] ? __lock_acquire+0xab9/0xd20 [ 209.373697][ T8823] ? __lock_acquire+0xab9/0xd20 [ 209.373751][ T8823] ? is_bpf_text_address+0x26/0x2b0 [ 209.373789][ T8823] ? is_bpf_text_address+0x292/0x2b0 [ 209.373825][ T8823] ? is_bpf_text_address+0x26/0x2b0 [ 209.373861][ T8823] ? kernel_text_address+0xa5/0xe0 [ 209.373903][ T8823] ? __lock_acquire+0xab9/0xd20 [ 209.373963][ T8823] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.373987][ T8823] rtnetlink_rcv_msg+0x7cf/0xb70 [ 209.374017][ T8823] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 209.374041][ T8823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.374086][ T8823] netlink_rcv_skb+0x205/0x470 [ 209.374113][ T8823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.374140][ T8823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.374181][ T8823] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.374206][ T8823] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.374238][ T8823] netlink_unicast+0x758/0x8d0 [ 209.374274][ T8823] netlink_sendmsg+0x805/0xb30 [ 209.374311][ T8823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.374341][ T8823] ? aa_sock_msg_perm+0x94/0x160 [ 209.374371][ T8823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.374398][ T8823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.374426][ T8823] __sock_sendmsg+0x219/0x270 [ 209.374452][ T8823] ____sys_sendmsg+0x505/0x830 [ 209.374490][ T8823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.374531][ T8823] ? import_iovec+0x74/0xa0 [ 209.374563][ T8823] ___sys_sendmsg+0x21f/0x2a0 [ 209.374596][ T8823] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.374670][ T8823] ? __fget_files+0x2a/0x420 [ 209.374693][ T8823] ? __fget_files+0x3a0/0x420 [ 209.374729][ T8823] __x64_sys_sendmsg+0x19b/0x260 [ 209.374763][ T8823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.374806][ T8823] ? __pfx_ksys_write+0x10/0x10 [ 209.374823][ T8823] ? __task_pid_nr_ns+0x28/0x470 [ 209.374853][ T8823] ? do_syscall_64+0xbe/0x3b0 [ 209.374878][ T8823] do_syscall_64+0xfa/0x3b0 [ 209.374897][ T8823] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.374933][ T8823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.374953][ T8823] ? clear_bhb_loop+0x60/0xb0 [ 209.374978][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.374998][ T8823] RIP: 0033:0x7f66ecb8e929 [ 209.375017][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.375035][ T8823] RSP: 002b:00007f66eda76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.375058][ T8823] RAX: ffffffffffffffda RBX: 00007f66ecdb5fa0 RCX: 00007f66ecb8e929 [ 209.375075][ T8823] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 209.375088][ T8823] RBP: 00007f66eda76090 R08: 0000000000000000 R09: 0000000000000000 [ 209.375101][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.375112][ T8823] R13: 0000000000000000 R14: 00007f66ecdb5fa0 R15: 00007ffe90142688 [ 209.375147][ T8823] [ 210.031226][ T8839] dummy0 speed is unknown, defaulting to 1000 [ 210.608031][ T8856] FAULT_INJECTION: forcing a failure. [ 210.608031][ T8856] name failslab, interval 1, probability 0, space 0, times 0 [ 210.655033][ T8856] CPU: 1 UID: 0 PID: 8856 Comm: syz.4.935 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 210.655065][ T8856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.655078][ T8856] Call Trace: [ 210.655086][ T8856] [ 210.655096][ T8856] dump_stack_lvl+0x189/0x250 [ 210.655135][ T8856] ? __pfx____ratelimit+0x10/0x10 [ 210.655177][ T8856] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.655211][ T8856] ? __pfx__printk+0x10/0x10 [ 210.655252][ T8856] should_fail_ex+0x414/0x560 [ 210.655285][ T8856] should_failslab+0xa8/0x100 [ 210.655312][ T8856] __kmalloc_cache_noprof+0x70/0x3d0 [ 210.655333][ T8856] ? sctp_add_bind_addr+0x8c/0x370 [ 210.655360][ T8856] sctp_add_bind_addr+0x8c/0x370 [ 210.655388][ T8856] sctp_copy_local_addr_list+0x30b/0x4e0 [ 210.655415][ T8856] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 210.655438][ T8856] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 210.655466][ T8856] ? sctp_v4_is_any+0x35/0x60 [ 210.655488][ T8856] ? sctp_copy_one_addr+0x93/0x360 [ 210.655515][ T8856] sctp_bind_addr_copy+0xb3/0x3c0 [ 210.655538][ T8856] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 210.655575][ T8856] sctp_connect_new_asoc+0x2e0/0x690 [ 210.655608][ T8856] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 210.655633][ T8856] ? __local_bh_enable_ip+0x12d/0x1c0 [ 210.655673][ T8856] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 210.655704][ T8856] ? security_sctp_bind_connect+0x7e/0x2e0 [ 210.655731][ T8856] sctp_sendmsg+0x155c/0x2810 [ 210.655774][ T8856] ? __pfx_sctp_sendmsg+0x10/0x10 [ 210.655805][ T8856] ? aa_sk_perm+0x81e/0x950 [ 210.655837][ T8856] ? __pfx_aa_sk_perm+0x10/0x10 [ 210.655866][ T8856] ? sock_rps_record_flow+0x19/0x410 [ 210.655892][ T8856] ? inet_sendmsg+0x2f4/0x370 [ 210.655917][ T8856] __sock_sendmsg+0x19c/0x270 [ 210.655944][ T8856] __sys_sendto+0x3bd/0x520 [ 210.655975][ T8856] ? __pfx___sys_sendto+0x10/0x10 [ 210.655998][ T8856] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 210.656035][ T8856] ? __fget_files+0x3a0/0x420 [ 210.656073][ T8856] ? ksys_write+0x22a/0x250 [ 210.656095][ T8856] ? __pfx_ksys_write+0x10/0x10 [ 210.656112][ T8856] ? rcu_is_watching+0x15/0xb0 [ 210.656149][ T8856] __x64_sys_sendto+0xde/0x100 [ 210.656189][ T8856] do_syscall_64+0xfa/0x3b0 [ 210.656208][ T8856] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.656240][ T8856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.656261][ T8856] ? clear_bhb_loop+0x60/0xb0 [ 210.656287][ T8856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.656308][ T8856] RIP: 0033:0x7fe1eb98e929 [ 210.656327][ T8856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.656345][ T8856] RSP: 002b:00007fe1ec790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 210.656367][ T8856] RAX: ffffffffffffffda RBX: 00007fe1ebbb5fa0 RCX: 00007fe1eb98e929 [ 210.656383][ T8856] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 210.656397][ T8856] RBP: 00007fe1ec790090 R08: 0000200000000000 R09: 0000000000000010 [ 210.656410][ T8856] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 210.656423][ T8856] R13: 0000000000000000 R14: 00007fe1ebbb5fa0 R15: 00007fffb8f69fc8 [ 210.656458][ T8856] [ 211.159465][ T8847] dummy0 speed is unknown, defaulting to 1000 [ 211.353066][ T8860] netlink: 'syz.4.939': attribute type 16 has an invalid length. [ 211.374836][ T8860] netlink: 'syz.4.939': attribute type 17 has an invalid length. [ 211.429718][ T8860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.463648][ T8863] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 211.522600][ T8866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.942'. [ 211.835797][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.949'. [ 211.877575][ T8882] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.000839][ T8888] trusted_key: syz.2.950 sent an empty control message without MSG_MORE. [ 212.021210][ T8884] dummy0 speed is unknown, defaulting to 1000 [ 212.282227][ T8894] dummy0 speed is unknown, defaulting to 1000 [ 212.460031][ T8891] dummy0 speed is unknown, defaulting to 1000 [ 213.185176][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.964'. [ 213.311533][ T8933] netlink: 'syz.0.967': attribute type 4 has an invalid length. [ 213.827216][ T8946] netlink: 44 bytes leftover after parsing attributes in process `syz.2.969'. [ 214.156624][ T8949] netlink: 'syz.1.970': attribute type 1 has an invalid length. [ 214.433305][ T8946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.969'. [ 214.454473][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 214.617696][ T8949] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.647752][ T8954] batman_adv: batadv0: Adding interface: ip6gretap1 [ 214.654418][ T8954] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.714834][ T8954] batman_adv: batadv0: Interface activated: ip6gretap1 [ 214.961395][ T8957] dummy0 speed is unknown, defaulting to 1000 [ 214.993781][ T8972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.978'. [ 215.041765][ T8963] dummy0 speed is unknown, defaulting to 1000 [ 215.855993][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 215.865103][ T8994] openvswitch: netlink: Message has 8 unknown bytes. [ 216.070924][ T9002] warn_alloc: 1 callbacks suppressed [ 216.070946][ T9002] syz.0.987: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.115778][ T9002] CPU: 1 UID: 0 PID: 9002 Comm: syz.0.987 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 216.115811][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.115824][ T9002] Call Trace: [ 216.115833][ T9002] [ 216.115843][ T9002] dump_stack_lvl+0x189/0x250 [ 216.115887][ T9002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.115922][ T9002] ? __pfx__printk+0x10/0x10 [ 216.115946][ T9002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.115970][ T9002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.115996][ T9002] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 216.116023][ T9002] warn_alloc+0x214/0x310 [ 216.116055][ T9002] ? __pfx_warn_alloc+0x10/0x10 [ 216.116090][ T9002] ? __get_vm_area_node+0x28f/0x300 [ 216.116113][ T9002] ? xskq_create+0xbf/0x170 [ 216.116153][ T9002] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 216.116212][ T9002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.116244][ T9002] ? __kasan_kmalloc+0x93/0xb0 [ 216.116269][ T9002] vmalloc_user_noprof+0xad/0xf0 [ 216.116292][ T9002] ? xskq_create+0xbf/0x170 [ 216.116324][ T9002] xskq_create+0xbf/0x170 [ 216.116359][ T9002] xsk_init_queue+0xb0/0x110 [ 216.116393][ T9002] xsk_setsockopt+0x4de/0x710 [ 216.116426][ T9002] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.116464][ T9002] ? aa_sock_opt_perm+0x74/0x110 [ 216.116495][ T9002] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 216.116523][ T9002] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.116554][ T9002] do_sock_setsockopt+0x25a/0x3e0 [ 216.116587][ T9002] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 216.116622][ T9002] ? __fget_files+0x2a/0x420 [ 216.116657][ T9002] __x64_sys_setsockopt+0x18b/0x220 [ 216.116695][ T9002] do_syscall_64+0xfa/0x3b0 [ 216.116721][ T9002] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.116754][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.116775][ T9002] ? clear_bhb_loop+0x60/0xb0 [ 216.116802][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.116822][ T9002] RIP: 0033:0x7f77d278e929 [ 216.116842][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.116860][ T9002] RSP: 002b:00007f77d359e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.116883][ T9002] RAX: ffffffffffffffda RBX: 00007f77d29b5fa0 RCX: 00007f77d278e929 [ 216.116899][ T9002] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 216.116912][ T9002] RBP: 00007f77d2810b39 R08: 0000000000000004 R09: 0000000000000000 [ 216.116925][ T9002] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 216.116939][ T9002] R13: 0000000000000000 R14: 00007f77d29b5fa0 R15: 00007fff29a7cfd8 [ 216.116974][ T9002] [ 216.117064][ T9002] Mem-Info: [ 216.392849][ T9002] active_anon:7422 inactive_anon:0 isolated_anon:0 [ 216.392849][ T9002] active_file:1978 inactive_file:39876 isolated_file:0 [ 216.392849][ T9002] unevictable:768 dirty:307 writeback:0 [ 216.392849][ T9002] slab_reclaimable:10501 slab_unreclaimable:99418 [ 216.392849][ T9002] mapped:33883 shmem:1628 pagetables:1305 [ 216.392849][ T9002] sec_pagetables:0 bounce:0 [ 216.392849][ T9002] kernel_misc_reclaimable:0 [ 216.392849][ T9002] free:1326370 free_pcp:16381 free_cma:0 [ 216.476457][ T9002] Node 0 active_anon:29588kB inactive_anon:0kB active_file:7912kB inactive_file:159300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135632kB dirty:1228kB writeback:0kB shmem:4976kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12724kB pagetables:4888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.566707][ T9002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 216.614035][ T9002] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.648439][ T9002] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 216.654899][ T9002] Node 0 DMA32 free:1393508kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28440kB inactive_anon:0kB active_file:7912kB inactive_file:157492kB unevictable:1536kB writepending:1228kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:43380kB local_pcp:26936kB free_cma:0kB [ 216.697332][ T9002] lowmem_reserve[]: 0 0 1 1 1 [ 216.709515][ T9002] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 216.750525][ T9013] netlink: 'syz.3.990': attribute type 1 has an invalid length. [ 216.769711][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.989'. [ 216.787249][ T9002] lowmem_reserve[]: 0 0 0 0 0 [ 216.792055][ T9002] Node 1 Normal free:3898256kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22400kB local_pcp:15104kB free_cma:0kB [ 216.828523][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.989'. [ 216.847333][ T9015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.989'. [ 216.861767][ T9002] lowmem_reserve[]: 0 0 0 0 0 [ 216.869340][ T9002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.898162][ T5845] block nbd3: Receive control failed (result -107) [ 216.916053][ T9002] Node 0 DMA32: 1877*4kB (UM) 1974*8kB (UME) 1043*16kB (UME) 582*32kB (UME) 320*64kB (UM) 186*128kB (UME) 99*256kB (UME) 55*512kB (UME) 41*1024kB (UM) 12*2048kB (UM) 286*4096kB (UM) = 1394420kB [ 216.946969][ T9002] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 216.960129][ T9002] Node 1 Normal: 188*4kB (UME) 48*8kB (UME) 48*16kB (UME) 119*32kB (UME) 37*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3898256kB [ 216.980138][ T9015] nbd3: detected capacity change from 0 to 256 [ 216.986756][ T9002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.986818][ T9002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.999669][ T8259] block nbd3: Dead connection, failed to find a fallback [ 217.053306][ T9002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.089372][ T9023] dummy0: entered promiscuous mode [ 217.094158][ T9002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.107358][ T9023] dummy0: left promiscuous mode [ 217.117587][ T9002] 43553 total pagecache pages [ 217.132560][ T9002] 0 pages in swap cache [ 217.142669][ T9002] Free swap = 124996kB [ 217.155154][ T9002] Total swap = 124996kB [ 217.161302][ T9002] 2097051 pages RAM [ 217.171279][ T9002] 0 pages HighMem/MovableOnly [ 217.191621][ T9002] 424684 pages reserved [ 217.196959][ T9002] 0 pages cma reserved [ 217.206754][ T9027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 217.220349][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 217.221017][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 217.227364][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.278408][ T9030] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 217.305442][ T9030] netlink: 244 bytes leftover after parsing attributes in process `syz.4.995'. [ 217.314637][ T9030] NCSI netlink: No device for ifindex 169249188 [ 217.353926][ T9030] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.366199][ T9030] macvlan2: entered promiscuous mode [ 217.373323][ T9030] team0: Port device macvlan2 added [ 217.397098][ T9025] erspan0: entered allmulticast mode [ 217.447013][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 217.726291][ T9039] netlink: 'syz.4.998': attribute type 1 has an invalid length. [ 217.740241][ T9039] netlink: 'syz.4.998': attribute type 2 has an invalid length. [ 217.820411][ T9031] syz.2.993 (9031) used greatest stack depth: 15960 bytes left [ 217.843618][ T9042] FAULT_INJECTION: forcing a failure. [ 217.843618][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 217.886459][ T9042] CPU: 0 UID: 0 PID: 9042 Comm: syz.3.999 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 217.886487][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.886499][ T9042] Call Trace: [ 217.886506][ T9042] [ 217.886514][ T9042] dump_stack_lvl+0x189/0x250 [ 217.886554][ T9042] ? __pfx____ratelimit+0x10/0x10 [ 217.886582][ T9042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.886608][ T9042] ? __pfx__printk+0x10/0x10 [ 217.886632][ T9042] ? __pfx___might_resched+0x10/0x10 [ 217.886657][ T9042] ? fs_reclaim_acquire+0x7d/0x100 [ 217.886682][ T9042] should_fail_ex+0x414/0x560 [ 217.886709][ T9042] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 217.886723][ T9042] should_failslab+0xa8/0x100 [ 217.886744][ T9042] __kvmalloc_node_noprof+0x161/0x5f0 [ 217.886763][ T9042] ? alloc_netdev_mqs+0xa8b/0x11e0 [ 217.886784][ T9042] alloc_netdev_mqs+0xa8b/0x11e0 [ 217.886808][ T9042] rtnl_create_link+0x31f/0xd10 [ 217.886830][ T9042] rtnl_newlink_create+0x25c/0xb00 [ 217.886860][ T9042] ? __pfx_aa_get_newest_label+0x10/0x10 [ 217.886886][ T9042] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 217.886907][ T9042] ? rtnl_newlink+0x8db/0x1c70 [ 217.886930][ T9042] ? __pfx___mutex_lock+0x10/0x10 [ 217.886956][ T9042] ? ns_capable+0x8a/0xf0 [ 217.886990][ T9042] rtnl_newlink+0x16d6/0x1c70 [ 217.887017][ T9042] ? netlink_sendmsg+0x805/0xb30 [ 217.887056][ T9042] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.887109][ T9042] ? kasan_quarantine_put+0xdd/0x220 [ 217.887142][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.887181][ T9042] ? nlmon_xmit+0xb0/0x100 [ 217.887199][ T9042] ? kmem_cache_free+0x18f/0x400 [ 217.887228][ T9042] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.887266][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.887300][ T9042] ? __local_bh_enable_ip+0x12d/0x1c0 [ 217.887332][ T9042] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 217.887370][ T9042] ? __dev_queue_xmit+0x27e/0x3a70 [ 217.887418][ T9042] ? __lock_acquire+0xab9/0xd20 [ 217.887479][ T9042] ? __pfx_rtnl_newlink+0x10/0x10 [ 217.887503][ T9042] rtnetlink_rcv_msg+0x7cf/0xb70 [ 217.887540][ T9042] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 217.887564][ T9042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.887587][ T9042] ? ref_tracker_free+0x63a/0x7d0 [ 217.887614][ T9042] ? __copy_skb_header+0xa7/0x550 [ 217.887647][ T9042] ? __pfx_ref_tracker_free+0x10/0x10 [ 217.887675][ T9042] ? __skb_clone+0x63/0x7a0 [ 217.887716][ T9042] netlink_rcv_skb+0x205/0x470 [ 217.887742][ T9042] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 217.887770][ T9042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 217.887812][ T9042] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.887836][ T9042] ? netlink_deliver_tap+0x2e/0x1b0 [ 217.887869][ T9042] netlink_unicast+0x758/0x8d0 [ 217.887905][ T9042] netlink_sendmsg+0x805/0xb30 [ 217.887943][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.887973][ T9042] ? aa_sock_msg_perm+0x94/0x160 [ 217.888003][ T9042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 217.888030][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.888056][ T9042] __sock_sendmsg+0x219/0x270 [ 217.888083][ T9042] ____sys_sendmsg+0x505/0x830 [ 217.888121][ T9042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.888163][ T9042] ? import_iovec+0x74/0xa0 [ 217.888189][ T9042] ___sys_sendmsg+0x21f/0x2a0 [ 217.888222][ T9042] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.888296][ T9042] ? __fget_files+0x2a/0x420 [ 217.888319][ T9042] ? __fget_files+0x3a0/0x420 [ 217.888356][ T9042] __x64_sys_sendmsg+0x19b/0x260 [ 217.888391][ T9042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.888434][ T9042] ? __pfx_ksys_write+0x10/0x10 [ 217.888451][ T9042] ? rcu_is_watching+0x15/0xb0 [ 217.888491][ T9042] ? do_syscall_64+0xbe/0x3b0 [ 217.888516][ T9042] do_syscall_64+0xfa/0x3b0 [ 217.888542][ T9042] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.888574][ T9042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.888595][ T9042] ? clear_bhb_loop+0x60/0xb0 [ 217.888622][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.888643][ T9042] RIP: 0033:0x7f9fd7b8e929 [ 217.888663][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.888682][ T9042] RSP: 002b:00007f9fd8ace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.888705][ T9042] RAX: ffffffffffffffda RBX: 00007f9fd7db5fa0 RCX: 00007f9fd7b8e929 [ 217.888721][ T9042] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 217.888735][ T9042] RBP: 00007f9fd8ace090 R08: 0000000000000000 R09: 0000000000000000 [ 217.888747][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 217.888760][ T9042] R13: 0000000000000000 R14: 00007f9fd7db5fa0 R15: 00007ffe784f9a88 [ 217.888793][ T9042] [ 218.430371][ T9047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 218.719977][ T9051] dummy0 speed is unknown, defaulting to 1000 [ 218.907741][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 219.424312][ T9078] SET target dimension over the limit! [ 219.441328][ T9073] dummy0 speed is unknown, defaulting to 1000 [ 219.471052][ T9079] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 219.887271][ T9094] netlink: 'syz.0.1015': attribute type 1 has an invalid length. [ 219.913896][ T9094] netlink: 'syz.0.1015': attribute type 2 has an invalid length. [ 220.128409][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1019'. [ 220.192409][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1019'. [ 220.362168][ T9117] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 220.379884][ T9117] netlink: 'syz.4.1021': attribute type 2 has an invalid length. [ 221.114104][ T9136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1027'. [ 221.851308][ T9174] __nla_validate_parse: 1 callbacks suppressed [ 221.851330][ T9174] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1041'. [ 223.126854][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1057'. [ 223.178810][ T9210] dummy0 speed is unknown, defaulting to 1000 [ 223.408644][ T9215] dummy0 speed is unknown, defaulting to 1000 [ 223.419727][ T9229] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 223.912290][ T9239] dummy0 speed is unknown, defaulting to 1000 [ 224.404679][ T9259] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1067'. [ 224.627396][ T9264] FAULT_INJECTION: forcing a failure. [ 224.627396][ T9264] name failslab, interval 1, probability 0, space 0, times 0 [ 224.676650][ T9264] CPU: 0 UID: 0 PID: 9264 Comm: syz.1.1069 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 224.676687][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.676701][ T9264] Call Trace: [ 224.676710][ T9264] [ 224.676719][ T9264] dump_stack_lvl+0x189/0x250 [ 224.676759][ T9264] ? __pfx____ratelimit+0x10/0x10 [ 224.676793][ T9264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.676827][ T9264] ? __pfx__printk+0x10/0x10 [ 224.676866][ T9264] should_fail_ex+0x414/0x560 [ 224.676900][ T9264] should_failslab+0xa8/0x100 [ 224.676926][ T9264] __kmalloc_cache_noprof+0x70/0x3d0 [ 224.676948][ T9264] ? sctp_add_bind_addr+0x8c/0x370 [ 224.676975][ T9264] sctp_add_bind_addr+0x8c/0x370 [ 224.677003][ T9264] sctp_copy_local_addr_list+0x30b/0x4e0 [ 224.677030][ T9264] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 224.677052][ T9264] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 224.677080][ T9264] ? sctp_v4_is_any+0x35/0x60 [ 224.677102][ T9264] ? sctp_copy_one_addr+0x93/0x360 [ 224.677128][ T9264] sctp_bind_addr_copy+0xb3/0x3c0 [ 224.677152][ T9264] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 224.677195][ T9264] sctp_connect_new_asoc+0x2e0/0x690 [ 224.677228][ T9264] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 224.677255][ T9264] ? __local_bh_enable_ip+0x12d/0x1c0 [ 224.677295][ T9264] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 224.677325][ T9264] ? security_sctp_bind_connect+0x7e/0x2e0 [ 224.677352][ T9264] sctp_sendmsg+0x155c/0x2810 [ 224.677394][ T9264] ? __pfx_sctp_sendmsg+0x10/0x10 [ 224.677425][ T9264] ? aa_sk_perm+0x81e/0x950 [ 224.677455][ T9264] ? __pfx_aa_sk_perm+0x10/0x10 [ 224.677483][ T9264] ? sock_rps_record_flow+0x19/0x410 [ 224.677507][ T9264] ? inet_sendmsg+0x2f4/0x370 [ 224.677532][ T9264] __sock_sendmsg+0x19c/0x270 [ 224.677557][ T9264] __sys_sendto+0x3bd/0x520 [ 224.677588][ T9264] ? __pfx___sys_sendto+0x10/0x10 [ 224.677611][ T9264] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 224.677646][ T9264] ? __fget_files+0x3a0/0x420 [ 224.677681][ T9264] ? ksys_write+0x22a/0x250 [ 224.677703][ T9264] ? __pfx_ksys_write+0x10/0x10 [ 224.677719][ T9264] ? rcu_is_watching+0x15/0xb0 [ 224.677757][ T9264] __x64_sys_sendto+0xde/0x100 [ 224.677788][ T9264] do_syscall_64+0xfa/0x3b0 [ 224.677807][ T9264] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.677839][ T9264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.677860][ T9264] ? clear_bhb_loop+0x60/0xb0 [ 224.677887][ T9264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.677907][ T9264] RIP: 0033:0x7f66ecb8e929 [ 224.677927][ T9264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.677945][ T9264] RSP: 002b:00007f66eda76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 224.677969][ T9264] RAX: ffffffffffffffda RBX: 00007f66ecdb5fa0 RCX: 00007f66ecb8e929 [ 224.677984][ T9264] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 224.677998][ T9264] RBP: 00007f66eda76090 R08: 0000200000000000 R09: 0000000000000010 [ 224.678013][ T9264] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 224.678025][ T9264] R13: 0000000000000000 R14: 00007f66ecdb5fa0 R15: 00007ffe90142688 [ 224.678060][ T9264] [ 225.433277][ T9285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1078'. [ 225.516337][ T9288] Cannot find set identified by id 0 to match [ 226.222819][ T9305] dummy0 speed is unknown, defaulting to 1000 [ 227.044612][ T9342] dummy0 speed is unknown, defaulting to 1000 [ 227.063857][ T9359] netlink: 'syz.1.1091': attribute type 1 has an invalid length. [ 227.082576][ T9359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1091'. [ 227.162346][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 227.165370][ T9353] dummy0 speed is unknown, defaulting to 1000 [ 227.270566][ T9352] dummy0 speed is unknown, defaulting to 1000 [ 227.769825][ T9369] dummy0 speed is unknown, defaulting to 1000 [ 228.104049][ T9380] dummy0 speed is unknown, defaulting to 1000 [ 228.132226][ T9342] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1092'. [ 228.259046][ T9342] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1092'. [ 228.815197][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 229.907437][ T9428] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1109'. [ 230.093243][ T9406] team0 (unregistering): Port device C removed [ 230.113086][ T9406] team0 (unregistering): Port device team_slave_1 removed [ 230.137694][ T9406] team0 (unregistering): Port device geneve0 removed [ 230.264431][ T9425] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.272115][ T9425] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.371134][ T9425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.384098][ T9425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.410991][ T9425] hsr0: left promiscuous mode [ 230.514190][ T9425] ip6gre1: left allmulticast mode [ 230.521552][ T9425] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 230.647330][ T9430] dummy0 speed is unknown, defaulting to 1000 [ 230.907604][ T9447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 231.137456][ T9463] xt_policy: output policy not valid in PREROUTING and INPUT [ 231.348850][ T9468] vlan3: entered promiscuous mode [ 231.513404][ T9475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 231.598233][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.608055][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 231.618967][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.635486][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 231.647691][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.673062][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 231.697258][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.714142][ T9481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 231.725636][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.753258][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.786601][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.812040][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.852094][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.917004][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 231.960606][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 232.013935][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 232.048401][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 232.066711][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 232.175547][ T5156] Bluetooth: hci4: command 0x0406 tx timeout [ 232.275890][ T9501] siw: device registration error -23 [ 233.342941][ T9517] __nla_validate_parse: 62 callbacks suppressed [ 233.342962][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1127'. [ 235.015699][ T5206] udevd[5206]: worker [5898] /devices/virtual/block/nbd1 is taking a long time [ 235.749642][ T9479] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 235.862562][ T9519] bridge2: port 1(ip6gretap2) entered blocking state [ 235.888758][ T9519] bridge2: port 1(ip6gretap2) entered disabled state [ 235.905588][ T9519] ip6gretap2: entered allmulticast mode [ 235.913079][ T9519] ip6gretap2: entered promiscuous mode [ 235.982410][ T9523] veth3: entered promiscuous mode [ 236.146623][ T9523] bridge2: port 2(veth3) entered blocking state [ 236.175236][ T9523] bridge2: port 2(veth3) entered disabled state [ 236.266212][ T9523] veth3: entered allmulticast mode [ 236.333985][ T9525] dummy0 speed is unknown, defaulting to 1000 [ 236.578442][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1132'. [ 236.798699][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1128'. [ 236.811624][ T5955] IPVS: starting estimator thread 0... [ 236.872681][ T9564] netlink: 'syz.3.1134': attribute type 1 has an invalid length. [ 236.905754][ T9561] IPVS: using max 25 ests per chain, 60000 per kthread [ 236.925730][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 236.935284][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1134'. [ 236.972754][ T9564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.097375][ T9564] vlan2: entered allmulticast mode [ 237.103298][ T9564] bond1: entered allmulticast mode [ 237.189324][ T9572] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 238.735402][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1137'. [ 239.088425][ T9592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1144'. [ 239.127090][ T9594] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 239.243046][ T3005] IPVS: stop unused estimator thread 0... [ 239.340005][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 239.383547][ T9601] dummy0 speed is unknown, defaulting to 1000 [ 239.849961][ T9613] siw: device registration error -23 [ 240.120846][ T9625] xt_TPROXY: Can be used only with -p tcp or -p udp [ 240.200618][ T9627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1155'. [ 242.995564][ T9629] dummy0 speed is unknown, defaulting to 1000 [ 243.341465][ T9652] dummy0 speed is unknown, defaulting to 1000 [ 244.309711][ T9687] netlink: 'syz.2.1169': attribute type 1 has an invalid length. [ 244.318423][ T9687] netlink: 'syz.2.1169': attribute type 2 has an invalid length. [ 244.561220][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1173'. [ 244.862412][ T9702] netlink: 'syz.3.1175': attribute type 10 has an invalid length. [ 245.006245][ T9702] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 245.051598][ T9702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.063181][ T9708] FAULT_INJECTION: forcing a failure. [ 245.063181][ T9708] name failslab, interval 1, probability 0, space 0, times 0 [ 245.082439][ T9710] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 245.090441][ T9708] CPU: 1 UID: 0 PID: 9708 Comm: syz.1.1178 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 245.090471][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.090484][ T9708] Call Trace: [ 245.090493][ T9708] [ 245.090502][ T9708] dump_stack_lvl+0x189/0x250 [ 245.090540][ T9708] ? __pfx____ratelimit+0x10/0x10 [ 245.090568][ T9708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.090595][ T9708] ? __pfx__printk+0x10/0x10 [ 245.090617][ T9708] ? __pfx___might_resched+0x10/0x10 [ 245.090645][ T9708] ? fs_reclaim_acquire+0x7d/0x100 [ 245.090671][ T9708] should_fail_ex+0x414/0x560 [ 245.090698][ T9708] should_failslab+0xa8/0x100 [ 245.090719][ T9708] __kmalloc_noprof+0xcb/0x4f0 [ 245.090734][ T9708] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 245.090761][ T9708] ? _ib_alloc_device+0x3d/0x660 [ 245.090788][ T9708] _ib_alloc_device+0x3d/0x660 [ 245.090813][ T9708] siw_newlink+0xe3/0xd70 [ 245.090840][ T9708] nldev_newlink+0x4a5/0x5a0 [ 245.090864][ T9708] ? __pfx_nldev_newlink+0x10/0x10 [ 245.090964][ T9708] ? aa_get_newest_label+0xf7/0x5d0 [ 245.090985][ T9708] ? __pfx_aa_get_newest_label+0x10/0x10 [ 245.091007][ T9708] ? __pfx_aa_get_newest_label+0x10/0x10 [ 245.091043][ T9708] ? bpf_lsm_capable+0x9/0x20 [ 245.091058][ T9708] ? security_capable+0x7e/0x2e0 [ 245.091083][ T9708] ? __pfx_nldev_newlink+0x10/0x10 [ 245.091106][ T9708] rdma_nl_rcv+0x6ae/0x980 [ 245.091140][ T9708] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 245.091162][ T9708] ? __lock_acquire+0xab9/0xd20 [ 245.091205][ T9708] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.091226][ T9708] ? netlink_deliver_tap+0x2e/0x1b0 [ 245.091252][ T9708] netlink_unicast+0x758/0x8d0 [ 245.091280][ T9708] netlink_sendmsg+0x805/0xb30 [ 245.091310][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.091334][ T9708] ? aa_sock_msg_perm+0x94/0x160 [ 245.091364][ T9708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.091390][ T9708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.091412][ T9708] __sock_sendmsg+0x219/0x270 [ 245.091434][ T9708] ____sys_sendmsg+0x505/0x830 [ 245.091464][ T9708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.091497][ T9708] ? import_iovec+0x74/0xa0 [ 245.091518][ T9708] ___sys_sendmsg+0x21f/0x2a0 [ 245.091544][ T9708] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.091602][ T9708] ? __fget_files+0x2a/0x420 [ 245.091621][ T9708] ? __fget_files+0x3a0/0x420 [ 245.091650][ T9708] __x64_sys_sendmsg+0x19b/0x260 [ 245.091677][ T9708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.091711][ T9708] ? __pfx_ksys_write+0x10/0x10 [ 245.091725][ T9708] ? rcu_is_watching+0x15/0xb0 [ 245.091757][ T9708] ? do_syscall_64+0xbe/0x3b0 [ 245.091777][ T9708] do_syscall_64+0xfa/0x3b0 [ 245.091791][ T9708] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.091818][ T9708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.091835][ T9708] ? clear_bhb_loop+0x60/0xb0 [ 245.091863][ T9708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.091879][ T9708] RIP: 0033:0x7f66ecb8e929 [ 245.091896][ T9708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.091911][ T9708] RSP: 002b:00007f66eda76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.091930][ T9708] RAX: ffffffffffffffda RBX: 00007f66ecdb5fa0 RCX: 00007f66ecb8e929 [ 245.091943][ T9708] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 245.091955][ T9708] RBP: 00007f66eda76090 R08: 0000000000000000 R09: 0000000000000000 [ 245.091966][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.091976][ T9708] R13: 0000000000000000 R14: 00007f66ecdb5fa0 R15: 00007ffe90142688 [ 245.092003][ T9708] [ 245.457390][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1180'. [ 245.657285][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1183'. [ 245.695188][ T9723] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 245.772784][ T9725] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1185'. [ 245.847165][ T9729] openvswitch: netlink: IP tunnel dst address not specified [ 246.008525][ T9736] netlink: 'syz.1.1188': attribute type 32 has an invalid length. [ 246.017090][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1188'. [ 246.108276][ T9741] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1189'. [ 246.536922][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1195'. [ 246.807359][ T9759] erspan0: left allmulticast mode [ 246.852764][ T9759] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.861661][ T9759] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.904597][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 247.098909][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.111784][ T9759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.136557][ T9759] hsr0: left promiscuous mode [ 247.140706][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 247.166185][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1200'. [ 247.257394][ T9759] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.270027][ T9759] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.283254][ T9759] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.297496][ T9759] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.371306][ T9759] ip6gre1: left allmulticast mode [ 247.956965][ T9803] FAULT_INJECTION: forcing a failure. [ 247.956965][ T9803] name failslab, interval 1, probability 0, space 0, times 0 [ 247.988095][ T9803] CPU: 1 UID: 0 PID: 9803 Comm: syz.3.1203 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 247.988128][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 247.988142][ T9803] Call Trace: [ 247.988151][ T9803] [ 247.988160][ T9803] dump_stack_lvl+0x189/0x250 [ 247.988200][ T9803] ? __pfx____ratelimit+0x10/0x10 [ 247.988239][ T9803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.988272][ T9803] ? __pfx__printk+0x10/0x10 [ 247.988300][ T9803] ? __pfx___might_resched+0x10/0x10 [ 247.988333][ T9803] ? fs_reclaim_acquire+0x7d/0x100 [ 247.988365][ T9803] should_fail_ex+0x414/0x560 [ 247.988399][ T9803] should_failslab+0xa8/0x100 [ 247.988424][ T9803] __kmalloc_cache_noprof+0x70/0x3d0 [ 247.988445][ T9803] ? vlan_vid_add+0x313/0x760 [ 247.988474][ T9803] vlan_vid_add+0x313/0x760 [ 247.988510][ T9803] bond_vlan_rx_add_vid+0x121/0x2a0 [ 247.988549][ T9803] ? __pfx_bond_vlan_rx_add_vid+0x10/0x10 [ 247.988580][ T9803] ? __kasan_kmalloc+0x93/0xb0 [ 247.988604][ T9803] ? vlan_vid_add+0x313/0x760 [ 247.988633][ T9803] vlan_vid_add+0x64d/0x760 [ 247.988655][ T9803] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 247.988686][ T9803] register_vlan_dev+0x9e/0x800 [ 247.988713][ T9803] ? vlan_changelink+0x4ac/0x560 [ 247.988743][ T9803] ? vlan_check_real_dev+0x148/0x380 [ 247.988772][ T9803] vlan_newlink+0x4b2/0x610 [ 247.988814][ T9803] ? __pfx_vlan_newlink+0x10/0x10 [ 247.988848][ T9803] rtnl_newlink_create+0x310/0xb00 [ 247.988884][ T9803] ? __mutex_lock+0x51b/0xe80 [ 247.988911][ T9803] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 247.988937][ T9803] ? rtnl_newlink+0x8db/0x1c70 [ 247.988965][ T9803] ? __pfx___mutex_lock+0x10/0x10 [ 247.988998][ T9803] ? ns_capable+0x8a/0xf0 [ 247.989033][ T9803] rtnl_newlink+0x16d6/0x1c70 [ 247.989078][ T9803] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.989101][ T9803] ? is_bpf_text_address+0x26/0x2b0 [ 247.989142][ T9803] ? __lock_acquire+0xab9/0xd20 [ 247.989187][ T9803] ? __lock_acquire+0xab9/0xd20 [ 247.989241][ T9803] ? is_bpf_text_address+0x26/0x2b0 [ 247.989279][ T9803] ? is_bpf_text_address+0x292/0x2b0 [ 247.989311][ T9803] ? is_bpf_text_address+0x26/0x2b0 [ 247.989347][ T9803] ? kernel_text_address+0xa5/0xe0 [ 247.989390][ T9803] ? __lock_acquire+0xab9/0xd20 [ 247.989450][ T9803] ? __pfx_rtnl_newlink+0x10/0x10 [ 247.989474][ T9803] rtnetlink_rcv_msg+0x7cf/0xb70 [ 247.989504][ T9803] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 247.989528][ T9803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.989574][ T9803] netlink_rcv_skb+0x205/0x470 [ 247.989602][ T9803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 247.989630][ T9803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.989671][ T9803] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.989696][ T9803] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.989728][ T9803] netlink_unicast+0x758/0x8d0 [ 247.989764][ T9803] netlink_sendmsg+0x805/0xb30 [ 247.989809][ T9803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.989839][ T9803] ? aa_sock_msg_perm+0x94/0x160 [ 247.989869][ T9803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 247.989905][ T9803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.989933][ T9803] __sock_sendmsg+0x219/0x270 [ 247.989959][ T9803] ____sys_sendmsg+0x505/0x830 [ 247.989996][ T9803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.990038][ T9803] ? import_iovec+0x74/0xa0 [ 247.990064][ T9803] ___sys_sendmsg+0x21f/0x2a0 [ 247.990098][ T9803] ? __pfx____sys_sendmsg+0x10/0x10 [ 247.990173][ T9803] ? __fget_files+0x2a/0x420 [ 247.990196][ T9803] ? __fget_files+0x3a0/0x420 [ 247.990232][ T9803] __x64_sys_sendmsg+0x19b/0x260 [ 247.990267][ T9803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 247.990310][ T9803] ? __pfx_ksys_write+0x10/0x10 [ 247.990327][ T9803] ? rcu_is_watching+0x15/0xb0 [ 247.990366][ T9803] ? do_syscall_64+0xbe/0x3b0 [ 247.990391][ T9803] do_syscall_64+0xfa/0x3b0 [ 247.990410][ T9803] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.990441][ T9803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.990463][ T9803] ? clear_bhb_loop+0x60/0xb0 [ 247.990489][ T9803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.990510][ T9803] RIP: 0033:0x7f9fd7b8e929 [ 247.990529][ T9803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.990548][ T9803] RSP: 002b:00007f9fd8ace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.990571][ T9803] RAX: ffffffffffffffda RBX: 00007f9fd7db5fa0 RCX: 00007f9fd7b8e929 [ 247.990586][ T9803] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 247.990600][ T9803] RBP: 00007f9fd8ace090 R08: 0000000000000000 R09: 0000000000000000 [ 247.990613][ T9803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.990626][ T9803] R13: 0000000000000000 R14: 00007f9fd7db5fa0 R15: 00007ffe784f9a88 [ 247.990661][ T9803] [ 248.671683][ T9817] xt_CT: No such helper "pptp" [ 248.890989][ T9828] netlink: 'syz.2.1207': attribute type 2 has an invalid length. [ 249.377065][ T9843] syzkaller1: entered promiscuous mode [ 249.382719][ T9843] syzkaller1: entered allmulticast mode [ 249.492266][ T9843] bridge_slave_1 (unregistering): left allmulticast mode [ 249.549403][ T9843] bridge_slave_1 (unregistering): left promiscuous mode [ 249.589462][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.664113][ T9852] __nla_validate_parse: 7 callbacks suppressed [ 249.664133][ T9852] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1219'. [ 249.705843][ T9850] siw: device registration error -23 [ 249.936563][ T9856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1222'. [ 249.936662][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 249.954712][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 249.965096][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.005082][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.052011][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.061848][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.073924][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.083038][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1220'. [ 250.544370][ T9888] dummy0 speed is unknown, defaulting to 1000 [ 250.790572][ T9894] netlink: 'syz.0.1232': attribute type 4 has an invalid length. [ 251.617083][ T9923] dummy0 speed is unknown, defaulting to 1000 [ 252.585726][ T9974] FAULT_INJECTION: forcing a failure. [ 252.585726][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 252.613889][ T9960] dummy0 speed is unknown, defaulting to 1000 [ 252.622041][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.4.1249 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 252.622071][ T9974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.622084][ T9974] Call Trace: [ 252.622093][ T9974] [ 252.622102][ T9974] dump_stack_lvl+0x189/0x250 [ 252.622141][ T9974] ? __pfx____ratelimit+0x10/0x10 [ 252.622175][ T9974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.622209][ T9974] ? __pfx__printk+0x10/0x10 [ 252.622239][ T9974] ? __pfx___might_resched+0x10/0x10 [ 252.622271][ T9974] ? fs_reclaim_acquire+0x7d/0x100 [ 252.622302][ T9974] should_fail_ex+0x414/0x560 [ 252.622333][ T9974] should_failslab+0xa8/0x100 [ 252.622358][ T9974] __kmalloc_noprof+0xcb/0x4f0 [ 252.622377][ T9974] ? kfree+0x4d/0x440 [ 252.622414][ T9974] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.622451][ T9974] tomoyo_realpath_from_path+0xe3/0x5d0 [ 252.622484][ T9974] ? tomoyo_domain+0xd9/0x130 [ 252.622517][ T9974] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 252.622541][ T9974] tomoyo_path_number_perm+0x1e8/0x5a0 [ 252.622566][ T9974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 252.622603][ T9974] ? __lock_acquire+0xab9/0xd20 [ 252.622656][ T9974] ? __fget_files+0x2a/0x420 [ 252.622681][ T9974] ? __fget_files+0x2a/0x420 [ 252.622703][ T9974] ? __fget_files+0x3a0/0x420 [ 252.622725][ T9974] ? __fget_files+0x2a/0x420 [ 252.622752][ T9974] security_file_ioctl+0xcb/0x2d0 [ 252.622779][ T9974] __se_sys_ioctl+0x47/0x170 [ 252.622815][ T9974] do_syscall_64+0xfa/0x3b0 [ 252.622834][ T9974] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.622866][ T9974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.622892][ T9974] ? clear_bhb_loop+0x60/0xb0 [ 252.622918][ T9974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.622939][ T9974] RIP: 0033:0x7fe1eb98e929 [ 252.622958][ T9974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.622977][ T9974] RSP: 002b:00007fe1ec76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.623000][ T9974] RAX: ffffffffffffffda RBX: 00007fe1ebbb6080 RCX: 00007fe1eb98e929 [ 252.623015][ T9974] RDX: 0000200000000300 RSI: 000000008004745a RDI: 0000000000000003 [ 252.623029][ T9974] RBP: 00007fe1ec76f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.623043][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.623055][ T9974] R13: 0000000000000001 R14: 00007fe1ebbb6080 R15: 00007fffb8f69fc8 [ 252.623090][ T9974] [ 252.869621][ T9974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 253.421869][ T9995] netlink: 'syz.4.1256': attribute type 16 has an invalid length. [ 253.465656][ T9995] netlink: 'syz.4.1256': attribute type 17 has an invalid length. [ 253.601099][ T9995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.613591][ T9995] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.690035][ T9995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.514809][T10026] macvtap1: entered promiscuous mode [ 254.526899][T10026] hsr0: entered promiscuous mode [ 254.538358][T10026] macvtap1: entered allmulticast mode [ 254.555191][T10026] hsr0: entered allmulticast mode [ 254.573742][T10026] hsr_slave_0: entered allmulticast mode [ 254.583026][T10026] hsr_slave_1: entered allmulticast mode [ 254.597496][T10026] hsr0: left allmulticast mode [ 254.602477][T10026] hsr_slave_0: left allmulticast mode [ 254.611888][T10026] hsr_slave_1: left allmulticast mode [ 254.622544][T10026] hsr0: left promiscuous mode [ 254.783821][T10030] dummy0 speed is unknown, defaulting to 1000 [ 254.959779][T10045] __nla_validate_parse: 86 callbacks suppressed [ 254.959801][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1269'. [ 255.086845][T10047] dummy0 speed is unknown, defaulting to 1000 [ 255.131675][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1272'. [ 255.147498][T10054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1272'. [ 255.760141][T10070] tipc: Enabling of bearer rejected, failed to enable media [ 255.772344][T10070] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1275'. [ 256.336193][T10078] dummy0 speed is unknown, defaulting to 1000 [ 256.956223][T10091] dummy0 speed is unknown, defaulting to 1000 [ 257.175427][T10112] delete_channel: no stack [ 257.207943][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 257.325030][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1283'. [ 257.366834][T10099] dummy0 speed is unknown, defaulting to 1000 [ 257.389797][T10114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1284'. [ 257.413774][T10110] delete_channel: no stack [ 257.743169][T10126] dummy0 speed is unknown, defaulting to 1000 [ 257.814786][ T30] audit: type=1107 audit(1750211775.665:2): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 258.258487][T10146] FAULT_INJECTION: forcing a failure. [ 258.258487][T10146] name failslab, interval 1, probability 0, space 0, times 0 [ 258.309137][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.0.1290 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 258.309168][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.309181][T10146] Call Trace: [ 258.309190][T10146] [ 258.309199][T10146] dump_stack_lvl+0x189/0x250 [ 258.309237][T10146] ? __pfx____ratelimit+0x10/0x10 [ 258.309268][T10146] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.309301][T10146] ? __pfx__printk+0x10/0x10 [ 258.309328][T10146] ? __pfx___might_resched+0x10/0x10 [ 258.309359][T10146] ? fs_reclaim_acquire+0x7d/0x100 [ 258.309389][T10146] should_fail_ex+0x414/0x560 [ 258.309420][T10146] should_failslab+0xa8/0x100 [ 258.309445][T10146] __kmalloc_noprof+0xcb/0x4f0 [ 258.309464][T10146] ? tomoyo_encode+0x28b/0x550 [ 258.309498][T10146] tomoyo_encode+0x28b/0x550 [ 258.309534][T10146] tomoyo_realpath_from_path+0x58d/0x5d0 [ 258.309576][T10146] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 258.309601][T10146] tomoyo_path_number_perm+0x1e8/0x5a0 [ 258.309628][T10146] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.309673][T10146] ? __lock_acquire+0xab9/0xd20 [ 258.309725][T10146] ? __fget_files+0x2a/0x420 [ 258.309751][T10146] ? __fget_files+0x2a/0x420 [ 258.309772][T10146] ? __fget_files+0x3a0/0x420 [ 258.309793][T10146] ? __fget_files+0x2a/0x420 [ 258.309821][T10146] security_file_ioctl+0xcb/0x2d0 [ 258.309847][T10146] __se_sys_ioctl+0x47/0x170 [ 258.309879][T10146] do_syscall_64+0xfa/0x3b0 [ 258.309895][T10146] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.309977][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.309999][T10146] ? clear_bhb_loop+0x60/0xb0 [ 258.310025][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.310046][T10146] RIP: 0033:0x7f77d278e929 [ 258.310064][T10146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.310083][T10146] RSP: 002b:00007f77d357d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.310106][T10146] RAX: ffffffffffffffda RBX: 00007f77d29b6080 RCX: 00007f77d278e929 [ 258.310130][T10146] RDX: 0000200000000300 RSI: 000000008004745a RDI: 0000000000000003 [ 258.310145][T10146] RBP: 00007f77d357d090 R08: 0000000000000000 R09: 0000000000000000 [ 258.310158][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.310170][T10146] R13: 0000000000000001 R14: 00007f77d29b6080 R15: 00007fff29a7cfd8 [ 258.310203][T10146] [ 258.310225][T10146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.829959][T10158] FAULT_INJECTION: forcing a failure. [ 258.829959][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 258.879200][T10158] CPU: 1 UID: 0 PID: 10158 Comm: syz.0.1291 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 258.879232][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.879245][T10158] Call Trace: [ 258.879253][T10158] [ 258.879261][T10158] dump_stack_lvl+0x189/0x250 [ 258.879300][T10158] ? __pfx____ratelimit+0x10/0x10 [ 258.879332][T10158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.879365][T10158] ? __pfx__printk+0x10/0x10 [ 258.879403][T10158] should_fail_ex+0x414/0x560 [ 258.879436][T10158] should_failslab+0xa8/0x100 [ 258.879460][T10158] __kmalloc_cache_noprof+0x70/0x3d0 [ 258.879481][T10158] ? sctp_add_bind_addr+0x8c/0x370 [ 258.879508][T10158] sctp_add_bind_addr+0x8c/0x370 [ 258.879534][T10158] sctp_copy_local_addr_list+0x30b/0x4e0 [ 258.879560][T10158] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 258.879600][T10158] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 258.879628][T10158] ? sctp_v4_is_any+0x35/0x60 [ 258.879650][T10158] ? sctp_copy_one_addr+0x93/0x360 [ 258.879676][T10158] sctp_bind_addr_copy+0xb3/0x3c0 [ 258.879700][T10158] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 258.879737][T10158] sctp_connect_new_asoc+0x2e0/0x690 [ 258.879769][T10158] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 258.879795][T10158] ? __local_bh_enable_ip+0x12d/0x1c0 [ 258.879857][T10158] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 258.879887][T10158] ? security_sctp_bind_connect+0x7e/0x2e0 [ 258.879915][T10158] sctp_sendmsg+0x155c/0x2810 [ 258.879956][T10158] ? __pfx_sctp_sendmsg+0x10/0x10 [ 258.879988][T10158] ? aa_sk_perm+0x81e/0x950 [ 258.880019][T10158] ? __pfx_aa_sk_perm+0x10/0x10 [ 258.880055][T10158] ? sock_rps_record_flow+0x19/0x410 [ 258.880081][T10158] ? inet_sendmsg+0x2f4/0x370 [ 258.880106][T10158] __sock_sendmsg+0x19c/0x270 [ 258.880134][T10158] __sys_sendto+0x3bd/0x520 [ 258.880164][T10158] ? __pfx___sys_sendto+0x10/0x10 [ 258.880189][T10158] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 258.880225][T10158] ? __fget_files+0x3a0/0x420 [ 258.880263][T10158] ? ksys_write+0x22a/0x250 [ 258.880285][T10158] ? __pfx_ksys_write+0x10/0x10 [ 258.880303][T10158] ? rcu_is_watching+0x15/0xb0 [ 258.880343][T10158] __x64_sys_sendto+0xde/0x100 [ 258.880374][T10158] do_syscall_64+0xfa/0x3b0 [ 258.880394][T10158] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.880425][T10158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.880446][T10158] ? clear_bhb_loop+0x60/0xb0 [ 258.880473][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.880495][T10158] RIP: 0033:0x7f77d278e929 [ 258.880513][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.880532][T10158] RSP: 002b:00007f77d359e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.880555][T10158] RAX: ffffffffffffffda RBX: 00007f77d29b5fa0 RCX: 00007f77d278e929 [ 258.880571][T10158] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 258.880585][T10158] RBP: 00007f77d359e090 R08: 0000200000000000 R09: 0000000000000010 [ 258.880598][T10158] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 258.880611][T10158] R13: 0000000000000000 R14: 00007f77d29b5fa0 R15: 00007fff29a7cfd8 [ 258.880643][T10158] [ 259.635726][T10175] syz_tun: refused to change device tx_queue_len [ 259.644562][T10175] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 259.764483][T10180] dummy0 speed is unknown, defaulting to 1000 [ 259.792888][T10181] netlink: 'syz.0.1297': attribute type 1 has an invalid length. [ 259.930866][T10181] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.995477][T10183] bond3: (slave ip6gretap1): making interface the new active one [ 260.004457][T10183] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.066698][T10186] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 260.146992][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1299'. [ 260.253203][T10187] dummy0 speed is unknown, defaulting to 1000 [ 260.270525][T10197] dummy0 speed is unknown, defaulting to 1000 [ 260.538551][T10206] dummy0 speed is unknown, defaulting to 1000 [ 260.805965][T10211] dummy0 speed is unknown, defaulting to 1000 [ 261.219356][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.642170][T10232] dummy0 speed is unknown, defaulting to 1000 [ 261.884385][T10249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 262.002491][T10245] dummy0 speed is unknown, defaulting to 1000 [ 262.208155][T10246] dummy0 speed is unknown, defaulting to 1000 [ 262.749777][T10272] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 262.759545][T10272] netlink: 'syz.0.1317': attribute type 2 has an invalid length. [ 263.245187][T10289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1322'. [ 263.600359][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'. [ 263.810908][T10306] dummy0 speed is unknown, defaulting to 1000 [ 263.967146][T10305] dummy0 speed is unknown, defaulting to 1000 [ 264.180681][T10327] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1331'. [ 264.545034][T10335] dummy0 speed is unknown, defaulting to 1000 [ 265.341865][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.507760][T10363] xt_hashlimit: size too large, truncated to 1048576 [ 265.526758][T10310] syz.2.1325: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.565622][T10363] xt_hashlimit: max too large, truncated to 1048576 [ 265.569343][T10310] CPU: 1 UID: 0 PID: 10310 Comm: syz.2.1325 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 265.569377][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 265.569394][T10310] Call Trace: [ 265.569405][T10310] [ 265.569416][T10310] dump_stack_lvl+0x189/0x250 [ 265.569469][T10310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.569510][T10310] ? __pfx__printk+0x10/0x10 [ 265.569537][T10310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.569568][T10310] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 265.569598][T10310] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 265.569629][T10310] warn_alloc+0x214/0x310 [ 265.569666][T10310] ? __pfx_warn_alloc+0x10/0x10 [ 265.569706][T10310] ? __get_vm_area_node+0x28f/0x300 [ 265.569733][T10310] ? __do_replace+0xb4/0xaa0 [ 265.569773][T10310] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 265.569800][T10310] ? stack_depot_save_flags+0x40/0x900 [ 265.569862][T10310] ? translate_table+0x1b4d/0x1f90 [ 265.569901][T10310] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.569939][T10310] ? __do_replace+0xb4/0xaa0 [ 265.569977][T10310] vzalloc_noprof+0xb2/0xf0 [ 265.570004][T10310] ? __do_replace+0xb4/0xaa0 [ 265.570044][T10310] __do_replace+0xb4/0xaa0 [ 265.570096][T10310] ? __pfx_translate_table+0x10/0x10 [ 265.570137][T10310] ? __pfx___do_replace+0x10/0x10 [ 265.570184][T10310] ? _copy_from_user+0x94/0xb0 [ 265.570224][T10310] do_arpt_set_ctl+0xa2a/0xf10 [ 265.570265][T10310] ? __mutex_trylock_common+0x153/0x260 [ 265.570295][T10310] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 265.570337][T10310] ? rcu_is_watching+0x15/0xb0 [ 265.570395][T10310] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 265.570422][T10310] ? __pfx___mutex_lock+0x10/0x10 [ 265.570446][T10310] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 265.570466][T10310] ? aa_sk_perm+0x81e/0x950 [ 265.570501][T10310] ? __pfx_aa_sk_perm+0x10/0x10 [ 265.570538][T10310] nf_setsockopt+0x26f/0x290 [ 265.570573][T10310] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 265.570605][T10310] do_sock_setsockopt+0x25a/0x3e0 [ 265.570649][T10310] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 265.570688][T10310] ? __fget_files+0x2a/0x420 [ 265.570725][T10310] __x64_sys_setsockopt+0x18b/0x220 [ 265.570766][T10310] do_syscall_64+0xfa/0x3b0 [ 265.570788][T10310] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.570823][T10310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.570849][T10310] ? clear_bhb_loop+0x60/0xb0 [ 265.570879][T10310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.570902][T10310] RIP: 0033:0x7f926158e929 [ 265.570925][T10310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.570947][T10310] RSP: 002b:00007f926238f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.570973][T10310] RAX: ffffffffffffffda RBX: 00007f92617b6160 RCX: 00007f926158e929 [ 265.570992][T10310] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 265.571007][T10310] RBP: 00007f9261610b39 R08: 0000000000000068 R09: 0000000000000000 [ 265.571022][T10310] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 265.571037][T10310] R13: 0000000000000000 R14: 00007f92617b6160 R15: 00007ffdc41b8278 [ 265.571073][T10310] [ 265.571083][T10310] Mem-Info: [ 265.897786][T10310] active_anon:13129 inactive_anon:0 isolated_anon:0 [ 265.897786][T10310] active_file:1978 inactive_file:39899 isolated_file:0 [ 265.897786][T10310] unevictable:768 dirty:296 writeback:0 [ 265.897786][T10310] slab_reclaimable:10400 slab_unreclaimable:100617 [ 265.897786][T10310] mapped:37634 shmem:7102 pagetables:1359 [ 265.897786][T10310] sec_pagetables:0 bounce:0 [ 265.897786][T10310] kernel_misc_reclaimable:0 [ 265.897786][T10310] free:1308756 free_pcp:15881 free_cma:0 [ 265.957320][T10310] Node 0 active_anon:52516kB inactive_anon:0kB active_file:7912kB inactive_file:159392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150536kB dirty:1180kB writeback:0kB shmem:26872kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14028kB pagetables:5204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.000828][T10310] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 266.098278][T10310] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 266.155160][T10310] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 266.161364][T10310] Node 0 DMA32 free:1320208kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52468kB inactive_anon:0kB active_file:7912kB inactive_file:157584kB unevictable:1536kB writepending:1180kB present:3129332kB managed:2561044kB mlocked:0kB bounce:0kB free_pcp:42196kB local_pcp:23032kB free_cma:0kB [ 266.225029][T10310] lowmem_reserve[]: 0 0 1 1 1 [ 266.233739][T10310] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 266.268606][T10310] lowmem_reserve[]: 0 0 0 0 0 [ 266.273400][T10310] Node 1 Normal free:3899280kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21504kB local_pcp:6880kB free_cma:0kB [ 266.308727][T10310] lowmem_reserve[]: 0 0 0 0 0 [ 266.313646][T10310] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 266.332808][T10310] Node 0 DMA32: 27*4kB (UME) 7*8kB (UME) 566*16kB (UE) 246*32kB (UME) 510*64kB (UME) 316*128kB (UME) 147*256kB (UM) 77*512kB (UME) 31*1024kB (U) 4*2048kB (UM) 272*4096kB (M) = 1321284kB [ 266.352315][T10310] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 266.368066][T10310] Node 1 Normal: 188*4kB (UME) 48*8kB (UME) 48*16kB (UME) 133*32kB (UME) 44*64kB (UME) 11*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3899280kB [ 266.381059][T10340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.387215][T10310] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.427483][T10340] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.459032][T10310] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.469751][T10310] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 266.491459][T10310] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 266.501842][T10310] 48974 total pagecache pages [ 266.506971][T10310] 0 pages in swap cache [ 266.511140][T10310] Free swap = 124996kB [ 266.515593][T10310] Total swap = 124996kB [ 266.519849][T10310] 2097051 pages RAM [ 266.523756][T10310] 0 pages HighMem/MovableOnly [ 266.528964][T10310] 424684 pages reserved [ 266.533227][T10310] 0 pages cma reserved [ 266.907439][T10340] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.938913][T10340] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.965070][T10340] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.974281][T10340] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.179146][T10340] ip6gre1: left allmulticast mode [ 267.203916][T10340] veth3: left promiscuous mode [ 267.513681][T10344] dummy0 speed is unknown, defaulting to 1000 [ 267.923294][T10391] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1344'. [ 268.281730][T10396] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1345'. [ 268.545859][T10388] dummy0 speed is unknown, defaulting to 1000 [ 268.784789][T10403] dummy0 speed is unknown, defaulting to 1000 [ 268.983042][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1350'. [ 269.102746][T10416] dummy0 speed is unknown, defaulting to 1000 [ 269.247487][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 269.441607][T10429] netlink: 'syz.3.1354': attribute type 1 has an invalid length. [ 269.542938][T10433] FAULT_INJECTION: forcing a failure. [ 269.542938][T10433] name failslab, interval 1, probability 0, space 0, times 0 [ 269.574848][T10434] netem: unknown loss type 0 [ 269.580119][T10434] netem: change failed [ 269.585142][T10433] CPU: 0 UID: 0 PID: 10433 Comm: syz.4.1357 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 269.585173][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.585187][T10433] Call Trace: [ 269.585196][T10433] [ 269.585205][T10433] dump_stack_lvl+0x189/0x250 [ 269.585244][T10433] ? __pfx____ratelimit+0x10/0x10 [ 269.585279][T10433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.585313][T10433] ? __pfx__printk+0x10/0x10 [ 269.585354][T10433] should_fail_ex+0x414/0x560 [ 269.585389][T10433] should_failslab+0xa8/0x100 [ 269.585415][T10433] __kmalloc_cache_noprof+0x70/0x3d0 [ 269.585437][T10433] ? sctp_add_bind_addr+0x8c/0x370 [ 269.585466][T10433] sctp_add_bind_addr+0x8c/0x370 [ 269.585495][T10433] sctp_copy_local_addr_list+0x30b/0x4e0 [ 269.585522][T10433] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 269.585545][T10433] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 269.585573][T10433] ? sctp_v4_is_any+0x35/0x60 [ 269.585595][T10433] ? sctp_copy_one_addr+0x93/0x360 [ 269.585623][T10433] sctp_bind_addr_copy+0xb3/0x3c0 [ 269.585647][T10433] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 269.585684][T10433] sctp_connect_new_asoc+0x2e0/0x690 [ 269.585717][T10433] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 269.585742][T10433] ? __local_bh_enable_ip+0x12d/0x1c0 [ 269.585783][T10433] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 269.585813][T10433] ? security_sctp_bind_connect+0x7e/0x2e0 [ 269.585842][T10433] sctp_sendmsg+0x155c/0x2810 [ 269.585885][T10433] ? __pfx_sctp_sendmsg+0x10/0x10 [ 269.585916][T10433] ? aa_sk_perm+0x81e/0x950 [ 269.585956][T10433] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.585986][T10433] ? sock_rps_record_flow+0x19/0x410 [ 269.586011][T10433] ? inet_sendmsg+0x2f4/0x370 [ 269.586038][T10433] __sock_sendmsg+0x19c/0x270 [ 269.586065][T10433] __sys_sendto+0x3bd/0x520 [ 269.586098][T10433] ? __pfx___sys_sendto+0x10/0x10 [ 269.586122][T10433] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 269.586159][T10433] ? __fget_files+0x3a0/0x420 [ 269.586198][T10433] ? ksys_write+0x22a/0x250 [ 269.586221][T10433] ? __pfx_ksys_write+0x10/0x10 [ 269.586239][T10433] ? rcu_is_watching+0x15/0xb0 [ 269.586279][T10433] __x64_sys_sendto+0xde/0x100 [ 269.586311][T10433] do_syscall_64+0xfa/0x3b0 [ 269.586330][T10433] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.586363][T10433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.586384][T10433] ? clear_bhb_loop+0x60/0xb0 [ 269.586412][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.586434][T10433] RIP: 0033:0x7fe1eb98e929 [ 269.586452][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.586471][T10433] RSP: 002b:00007fe1ec790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.586495][T10433] RAX: ffffffffffffffda RBX: 00007fe1ebbb5fa0 RCX: 00007fe1eb98e929 [ 269.586511][T10433] RDX: 0000000000034000 RSI: 0000200000000500 RDI: 0000000000000006 [ 269.586524][T10433] RBP: 00007fe1ec790090 R08: 0000200000000000 R09: 0000000000000010 [ 269.586539][T10433] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000002 [ 269.586552][T10433] R13: 0000000000000000 R14: 00007fe1ebbb5fa0 R15: 00007fffb8f69fc8 [ 269.586587][T10433] [ 269.906217][T10429] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1354'. [ 270.532691][T10450] vlan3: entered promiscuous mode [ 270.550138][T10450] bridge0: entered promiscuous mode [ 270.566016][T10450] vlan3: entered allmulticast mode [ 270.579056][T10450] bridge0: entered allmulticast mode [ 270.608859][T10458] siw: device registration error -23 [ 270.652086][T10452] dummy0 speed is unknown, defaulting to 1000 [ 271.186011][T10462] dummy0 speed is unknown, defaulting to 1000 [ 271.704252][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.713803][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.721689][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.730907][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.741648][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.781984][T10469] dummy0 speed is unknown, defaulting to 1000 [ 271.920350][T10469] chnl_net:caif_netlink_parms(): no params data found [ 272.001835][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.009427][T10469] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.016723][T10469] bridge_slave_0: entered allmulticast mode [ 272.024038][T10469] bridge_slave_0: entered promiscuous mode [ 272.032801][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.040322][T10469] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.047652][T10469] bridge_slave_1: entered allmulticast mode [ 272.054986][T10469] bridge_slave_1: entered promiscuous mode [ 272.091109][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.103100][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.142288][T10469] team0: Port device team_slave_0 added [ 272.150951][T10469] team0: Port device team_slave_1 added [ 272.183844][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.191036][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.217406][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.230457][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.237562][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.264466][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.316051][T10469] hsr_slave_0: entered promiscuous mode [ 272.323351][T10469] hsr_slave_1: entered promiscuous mode [ 272.330168][T10469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.338094][T10469] Cannot create hsr debugfs directory [ 272.510450][T10469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 272.528486][T10469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 272.539219][T10469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 272.549715][T10469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 272.580947][T10469] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.588123][T10469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.595630][T10469] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.602775][T10469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.657050][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.668801][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.693526][T10469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.714612][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.734261][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.741482][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.756647][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.763764][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.971944][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.209819][T10469] veth0_vlan: entered promiscuous mode [ 273.230499][T10469] veth1_vlan: entered promiscuous mode [ 273.262921][T10469] veth0_macvtap: entered promiscuous mode [ 273.272543][T10469] veth1_macvtap: entered promiscuous mode [ 273.292869][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.310611][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.324247][T10469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.333189][T10469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.343351][T10469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.352703][T10469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.421319][ T3005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.438659][ T3005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.469508][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.477594][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.208395][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.579620][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.589262][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.597881][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.607154][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.615681][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 275.658216][T10494] dummy0 speed is unknown, defaulting to 1000 [ 275.811618][T10494] chnl_net:caif_netlink_parms(): no params data found [ 275.893625][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.901037][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.908355][T10494] bridge_slave_0: entered allmulticast mode [ 275.916644][T10494] bridge_slave_0: entered promiscuous mode [ 275.924505][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.931819][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.940712][T10494] bridge_slave_1: entered allmulticast mode [ 275.948191][T10494] bridge_slave_1: entered promiscuous mode [ 275.986921][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.000117][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.042894][T10494] team0: Port device team_slave_0 added [ 276.051006][T10494] team0: Port device team_slave_1 added [ 276.084453][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.091693][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.118635][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.131860][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.138906][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.165454][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.219903][T10494] hsr_slave_0: entered promiscuous mode [ 276.226582][T10494] hsr_slave_1: entered promiscuous mode [ 276.232845][T10494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.240585][T10494] Cannot create hsr debugfs directory [ 276.835435][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.920748][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.982106][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.124384][ T37] bridge_slave_1: left allmulticast mode [ 277.130655][ T37] bridge_slave_1: left promiscuous mode [ 277.138592][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.150834][ T37] bridge_slave_0: left allmulticast mode [ 277.156880][ T37] bridge_slave_0: left promiscuous mode [ 277.162621][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.479515][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.492306][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.502776][ T37] bond0 (unregistering): Released all slaves [ 277.695130][ T5844] Bluetooth: hci4: command tx timeout [ 277.973270][ T37] hsr_slave_0: left promiscuous mode [ 277.988863][ T37] hsr_slave_1: left promiscuous mode [ 277.995960][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.003477][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.012443][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.020203][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.053398][ T37] veth1_macvtap: left promiscuous mode [ 278.059379][ T37] veth0_macvtap: left promiscuous mode [ 278.065559][ T37] veth1_vlan: left promiscuous mode [ 278.071105][ T37] veth0_vlan: left promiscuous mode [ 278.536404][ T37] team0 (unregistering): Port device team_slave_1 removed [ 278.573543][ T37] team0 (unregistering): Port device team_slave_0 removed [ 278.964728][T10494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 278.979134][T10494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 278.994498][T10494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.007895][T10494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.201633][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.254643][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.286565][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.293769][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.331970][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.339152][ T9541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.672469][T10494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.776994][ T5844] Bluetooth: hci4: command tx timeout [ 279.933158][T10494] veth0_vlan: entered promiscuous mode [ 279.949545][T10494] veth1_vlan: entered promiscuous mode [ 279.979740][T10494] veth0_macvtap: entered promiscuous mode [ 279.989770][T10494] veth1_macvtap: entered promiscuous mode [ 280.009214][T10494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.027504][T10494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.040970][T10494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.052090][T10494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.061004][T10494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.070646][T10494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.138675][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.153457][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.183964][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.193015][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.345238][ T37] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.722862][ T5156] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.732692][ T5156] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.740940][ T5156] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.749562][ T5156] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.758158][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.798963][T10546] dummy0 speed is unknown, defaulting to 1000 [ 281.952962][T10546] chnl_net:caif_netlink_parms(): no params data found [ 282.043221][T10546] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.050597][T10546] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.058409][T10546] bridge_slave_0: entered allmulticast mode [ 282.067308][T10546] bridge_slave_0: entered promiscuous mode [ 282.075604][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.082754][T10546] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.090431][T10546] bridge_slave_1: entered allmulticast mode [ 282.099785][T10546] bridge_slave_1: entered promiscuous mode [ 282.137284][T10546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.150483][T10546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.196007][T10546] team0: Port device team_slave_0 added [ 282.206617][T10546] team0: Port device team_slave_1 added [ 282.239258][T10546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.246433][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.273083][T10546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.286382][T10546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.293437][T10546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.319615][T10546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.372826][T10546] hsr_slave_0: entered promiscuous mode [ 282.379884][T10546] hsr_slave_1: entered promiscuous mode [ 282.386455][T10546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.394035][T10546] Cannot create hsr debugfs directory [ 282.414698][ T37] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.758245][ T37] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.822673][ T37] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.972338][ T37] bridge_slave_1: left allmulticast mode [ 282.979600][ T37] bridge_slave_1: left promiscuous mode [ 282.986118][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.996812][ T37] bridge_slave_0: left allmulticast mode [ 283.002488][ T37] bridge_slave_0: left promiscuous mode [ 283.009501][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.313241][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.324305][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.335905][ T37] bond0 (unregistering): Released all slaves [ 283.695661][ T37] hsr_slave_0: left promiscuous mode [ 283.701809][ T37] hsr_slave_1: left promiscuous mode [ 283.708133][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.715778][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.724094][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.731754][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.762293][ T37] veth1_macvtap: left promiscuous mode [ 283.767980][ T37] veth0_macvtap: left promiscuous mode [ 283.773680][ T37] veth1_vlan: left promiscuous mode [ 283.780441][ T37] veth0_vlan: left promiscuous mode [ 283.855561][ T5156] Bluetooth: hci4: command tx timeout [ 284.337794][ T37] team0 (unregistering): Port device team_slave_1 removed [ 284.378773][ T37] team0 (unregistering): Port device team_slave_0 removed [ 284.859890][T10546] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.878498][T10546] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.898513][T10546] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.940860][T10546] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 285.097833][T10546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.143198][T10546] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.162140][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.169369][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.192461][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.199689][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.508779][T10546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.752871][T10546] veth0_vlan: entered promiscuous mode [ 285.768927][T10546] veth1_vlan: entered promiscuous mode [ 285.798902][T10546] veth0_macvtap: entered promiscuous mode [ 285.809277][T10546] veth1_macvtap: entered promiscuous mode [ 285.828988][T10546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.849268][T10546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.861325][T10546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.872655][T10546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.881695][T10546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.890479][T10546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.936259][ T5156] Bluetooth: hci4: command tx timeout [ 285.970658][ T9541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.984470][ T9541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.013500][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.022851][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.103105][ T3005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.895341][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.903517][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.912528][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.921569][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.932393][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.969115][T10598] dummy0 speed is unknown, defaulting to 1000 [ 288.125907][T10598] chnl_net:caif_netlink_parms(): no params data found [ 288.211692][T10598] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.219022][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.226762][T10598] bridge_slave_0: entered allmulticast mode [ 288.234087][T10598] bridge_slave_0: entered promiscuous mode [ 288.242753][T10598] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.250002][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.257743][T10598] bridge_slave_1: entered allmulticast mode [ 288.265341][T10598] bridge_slave_1: entered promiscuous mode [ 288.300779][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.313092][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.356026][T10598] team0: Port device team_slave_0 added [ 288.376483][ T3005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.396901][T10598] team0: Port device team_slave_1 added [ 288.433414][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.440660][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.468422][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.481149][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.488435][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.514786][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.565492][T10598] hsr_slave_0: entered promiscuous mode [ 288.571943][T10598] hsr_slave_1: entered promiscuous mode [ 288.579225][T10598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.587007][T10598] Cannot create hsr debugfs directory [ 288.800591][ T3005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.871536][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.026929][ T3005] bridge_slave_1: left allmulticast mode [ 289.032644][ T3005] bridge_slave_1: left promiscuous mode [ 289.039969][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.051089][ T3005] bridge_slave_0: left allmulticast mode [ 289.057280][ T3005] bridge_slave_0: left promiscuous mode [ 289.064081][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.396382][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.410202][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.420511][ T3005] bond0 (unregistering): Released all slaves [ 289.769151][ T3005] hsr_slave_0: left promiscuous mode [ 289.790330][ T3005] hsr_slave_1: left promiscuous mode [ 289.796665][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.805999][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.818983][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.828172][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.864775][ T3005] veth1_macvtap: left promiscuous mode [ 289.877916][ T3005] veth0_macvtap: left promiscuous mode [ 289.883620][ T3005] veth1_vlan: left promiscuous mode [ 289.892590][ T3005] veth0_vlan: left promiscuous mode [ 290.021060][ T5156] Bluetooth: hci4: command tx timeout [ 290.447533][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 290.492811][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 291.016899][T10598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.040745][T10598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.067910][T10598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.101247][T10598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.291111][T10598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.322617][T10598] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.353447][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.360725][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.377012][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.384206][ T9547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.632914][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.872664][T10598] veth0_vlan: entered promiscuous mode [ 291.884324][T10598] veth1_vlan: entered promiscuous mode [ 291.921442][T10598] veth0_macvtap: entered promiscuous mode [ 291.931076][T10598] veth1_macvtap: entered promiscuous mode [ 291.957313][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.974617][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.990946][T10598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.000205][T10598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.009779][T10598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.018837][T10598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.088837][ T9528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.098534][ T5156] Bluetooth: hci4: command tx timeout [ 292.109723][ T9528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.138888][ T9547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.147636][ T9547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.550118][ T3005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.431066][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.440421][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.449315][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.457959][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.468191][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.511859][T10650] dummy0 speed is unknown, defaulting to 1000 [ 294.661383][T10650] chnl_net:caif_netlink_parms(): no params data found [ 294.764351][ T3005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.780468][T10650] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.788133][T10650] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.795740][T10650] bridge_slave_0: entered allmulticast mode [ 294.803851][T10650] bridge_slave_0: entered promiscuous mode [ 294.811960][T10650] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.819481][T10650] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.826969][T10650] bridge_slave_1: entered allmulticast mode [ 294.834220][T10650] bridge_slave_1: entered promiscuous mode [ 294.868280][T10650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.881268][T10650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.924033][T10650] team0: Port device team_slave_0 added [ 294.934821][T10650] team0: Port device team_slave_1 added [ 294.968393][T10650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.975825][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.003211][T10650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.017561][T10650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.024534][T10650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.051157][T10650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.122186][ T3005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.145056][T10650] hsr_slave_0: entered promiscuous mode [ 295.151491][T10650] hsr_slave_1: entered promiscuous mode [ 295.158417][T10650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.166122][T10650] Cannot create hsr debugfs directory [ 295.224599][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.394668][ T3005] bridge_slave_1: left allmulticast mode [ 295.408768][ T3005] bridge_slave_1: left promiscuous mode [ 295.415532][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.425848][ T3005] bridge_slave_0: left allmulticast mode [ 295.431525][ T3005] bridge_slave_0: left promiscuous mode [ 295.437438][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.715892][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.730266][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.740681][ T3005] bond0 (unregistering): Released all slaves [ 296.089082][ T3005] hsr_slave_0: left promiscuous mode [ 296.100596][ T3005] hsr_slave_1: left promiscuous mode [ 296.108745][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.122020][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.130510][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.138712][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.167194][ T3005] veth1_macvtap: left promiscuous mode [ 296.172790][ T3005] veth0_macvtap: left promiscuous mode [ 296.178996][ T3005] veth1_vlan: left promiscuous mode [ 296.184369][ T3005] veth0_vlan: left promiscuous mode [ 296.495624][ T5156] Bluetooth: hci4: command tx timeout [ 296.731762][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 296.775477][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 297.283608][T10650] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.309284][T10650] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.347002][T10650] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.370776][T10650] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.519961][T10650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.558257][T10650] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.580393][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.587626][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.602186][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.609404][ T9547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.952343][T10650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.198805][T10650] veth0_vlan: entered promiscuous mode [ 298.211927][T10650] veth1_vlan: entered promiscuous mode [ 298.240941][T10650] veth0_macvtap: entered promiscuous mode [ 298.251570][T10650] veth1_macvtap: entered promiscuous mode [ 298.273309][T10650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.288292][T10650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.301225][T10650] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.310018][T10650] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.320020][T10650] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.328810][T10650] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.400517][ T9541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.418237][ T9541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.447416][ T9547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.455914][ T9547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.597229][ T3005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.566998][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.575734][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.584399][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.593672][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.602646][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.642559][T10702] dummy0 speed is unknown, defaulting to 1000 [ 300.796167][T10702] chnl_net:caif_netlink_parms(): no params data found [ 300.880180][ T3005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.910604][T10702] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.917908][T10702] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.927759][T10702] bridge_slave_0: entered allmulticast mode [ 300.935769][T10702] bridge_slave_0: entered promiscuous mode [ 300.944333][T10702] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.951899][T10702] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.959304][T10702] bridge_slave_1: entered allmulticast mode [ 300.967398][T10702] bridge_slave_1: entered promiscuous mode [ 301.005149][T10702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.017812][T10702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.056722][T10702] team0: Port device team_slave_0 added [ 301.065978][T10702] team0: Port device team_slave_1 added [ 301.100056][T10702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.107316][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.133517][T10702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.147030][T10702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.154009][T10702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.180546][T10702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.233574][T10702] hsr_slave_0: entered promiscuous mode [ 301.240126][T10702] hsr_slave_1: entered promiscuous mode [ 301.247334][T10702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.255492][T10702] Cannot create hsr debugfs directory [ 301.492355][ T3005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.562362][ T3005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.748254][ T3005] bridge_slave_1: left allmulticast mode [ 301.753977][ T3005] bridge_slave_1: left promiscuous mode [ 301.761156][ T3005] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.773751][ T3005] bridge_slave_0: left allmulticast mode [ 301.785120][ T3005] bridge_slave_0: left promiscuous mode [ 301.791033][ T3005] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.286102][ T3005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.302809][ T3005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.313695][ T3005] bond0 (unregistering): Released all slaves [ 302.662771][ T5156] Bluetooth: hci4: command tx timeout [ 302.679547][ T3005] hsr_slave_0: left promiscuous mode [ 302.688508][ T3005] hsr_slave_1: left promiscuous mode [ 302.694402][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.702908][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.711550][ T3005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.719269][ T3005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.743486][ T3005] veth1_macvtap: left promiscuous mode [ 302.749184][ T3005] veth0_macvtap: left promiscuous mode [ 302.754817][ T3005] veth1_vlan: left promiscuous mode [ 302.760244][ T3005] veth0_vlan: left promiscuous mode [ 303.163795][ T3005] team0 (unregistering): Port device team_slave_1 removed [ 303.209201][ T3005] team0 (unregistering): Port device team_slave_0 removed [ 303.603279][T10702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 303.625816][T10702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 303.639353][T10702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 303.670293][T10702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.851158][T10702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.887981][T10702] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.910612][ T9547] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.917818][ T9547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.951260][ T9547] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.958668][ T9547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.253738][T10702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.656312][T10702] veth0_vlan: entered promiscuous mode [ 304.673115][T10702] veth1_vlan: entered promiscuous mode [ 304.722616][T10702] veth0_macvtap: entered promiscuous mode [ 304.735737][ T5156] Bluetooth: hci4: command tx timeout [ 304.749447][T10702] veth1_macvtap: entered promiscuous mode [ 304.770664][T10702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.785984][T10702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.798398][T10702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.808349][T10702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.817522][T10702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.826671][T10702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.933399][ T9528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.955362][ T9528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.992573][ T9541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.002642][ T9541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.193181][ T9541] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.119789][ T9541] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.291373][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 307.301363][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 307.310820][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 307.319355][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 307.329972][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 307.371265][T10768] dummy0 speed is unknown, defaulting to 1000 [ 307.503929][ T9541] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.565815][T10768] chnl_net:caif_netlink_parms(): no params data found [ 307.595528][ T9541] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.691966][T10768] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.702541][T10768] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.710576][T10768] bridge_slave_0: entered allmulticast mode [ 307.718553][T10768] bridge_slave_0: entered promiscuous mode [ 307.727115][T10768] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.735290][T10768] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.743933][T10768] bridge_slave_1: entered allmulticast mode [ 307.752381][T10768] bridge_slave_1: entered promiscuous mode [ 307.817814][T10768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.834266][T10768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.910964][T10768] team0: Port device team_slave_0 added [ 307.920119][ T9541] bridge_slave_1: left allmulticast mode [ 307.926037][ T9541] bridge_slave_1: left promiscuous mode [ 307.931760][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.942894][ T9541] bridge_slave_0: left allmulticast mode [ 307.949066][ T9541] bridge_slave_0: left promiscuous mode [ 307.954781][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.264717][ T9541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.277344][ T9541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.288185][ T9541] bond0 (unregistering): Released all slaves [ 308.305685][T10768] team0: Port device team_slave_1 added [ 308.369516][T10768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.377723][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.404840][T10768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.419265][T10768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.427447][T10768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.453777][T10768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.541326][T10768] hsr_slave_0: entered promiscuous mode [ 308.549030][T10768] hsr_slave_1: entered promiscuous mode [ 308.555642][T10768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.563236][T10768] Cannot create hsr debugfs directory [ 308.728949][ T9541] hsr_slave_0: left promiscuous mode [ 308.743840][ T9541] hsr_slave_1: left promiscuous mode [ 308.751622][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.759720][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.768243][ T9541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.775994][ T9541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.803245][ T9541] veth1_macvtap: left promiscuous mode [ 308.809123][ T9541] veth0_macvtap: left promiscuous mode [ 308.815546][ T9541] veth1_vlan: left promiscuous mode [ 308.820917][ T9541] veth0_vlan: left promiscuous mode [ 309.377471][ T5156] Bluetooth: hci4: command tx timeout [ 309.443936][ T9541] team0 (unregistering): Port device team_slave_1 removed [ 309.482663][ T9541] team0 (unregistering): Port device team_slave_0 removed [ 310.398081][T10768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.413911][T10768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 310.430890][T10768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 310.449009][T10768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 310.583887][T10768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.615532][T10768] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.629276][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.636466][ T9541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.656508][ T9542] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.663678][ T9542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.984778][T10768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.400090][T10768] veth0_vlan: entered promiscuous mode [ 311.420103][T10768] veth1_vlan: entered promiscuous mode [ 311.455646][ T5156] Bluetooth: hci4: command tx timeout [ 311.461234][T10768] veth0_macvtap: entered promiscuous mode [ 311.489701][T10768] veth1_macvtap: entered promiscuous mode [ 311.512647][T10768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.534863][T10768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.562533][T10768] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.572390][T10768] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.582183][T10768] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.591288][T10768] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.707519][ T9547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.731037][ T9547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.769964][ T9541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.786353][ T9541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.783571][ T9547] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.695605][ T31] INFO: task udevd:5898 blocked for more than 143 seconds. [ 313.702932][ T31] Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 [ 313.711161][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.720160][ T31] task:udevd state:D stack:22568 pid:5898 tgid:5898 ppid:5206 task_flags:0x400140 flags:0x00004002 [ 313.732371][ T31] Call Trace: [ 313.735953][ T31] [ 313.741242][ T31] __schedule+0x16f5/0x4d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 313.746166][ T31] ? blk_mq_flush_plug_list+0x41f/0x550 [ 313.751768][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 313.757749][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 313.763702][ T31] ? schedule+0x165/0x360 [ 313.773007][ T31] ? __lock_acquire+0xab9/0xd20 [ 313.779568][ T31] ? __pfx___schedule+0x10/0x10 [ 313.784500][ T31] ? schedule+0x91/0x360 [ 313.793899][ T31] schedule+0x165/0x360 [ 313.798550][ T31] schedule_timeout+0x12b/0x270 [ 313.803455][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 313.813857][ T31] ? __pfx_process_timeout+0x10/0x10 [ 313.819633][ T31] ? prepare_to_wait_event+0x437/0x480 [ 313.830135][ T31] nbd_queue_rq+0x662/0xf10 [ 313.834719][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 313.840316][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 313.857616][ T31] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 313.863240][ T31] ? sbitmap_find_bit+0x3ff/0x490 [ 313.873279][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 313.879717][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 313.890403][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 313.941932][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 313.960402][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 314.009827][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 314.032355][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 314.050441][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 314.075089][ T31] blk_mq_dispatch_list+0xd0c/0xe00 [ 314.080474][ T31] ? blk_mq_dispatch_list+0x220/0xe00 [ 314.124981][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 314.130793][ T31] ? __pfx_update_io_ticks+0x10/0x10 [ 314.159723][ T31] blk_mq_flush_plug_list+0x469/0x550 [ 314.184982][ T31] ? trace_block_plug+0x7a/0x1f0 [ 314.190016][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 314.215098][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 314.221086][ T31] ? blk_mq_submit_bio+0xbd3/0x22d0 [ 314.255094][ T31] __blk_flush_plug+0x3d3/0x4b0 [ 314.260138][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 314.294993][ T31] __submit_bio+0x2d3/0x5a0 [ 314.299589][ T31] ? ktime_get+0x3e/0x1f0 [ 314.303946][ T31] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 314.335334][ T31] ? __pfx___submit_bio+0x10/0x10 [ 314.340493][ T31] ? blk_cgroup_bio_start+0x59d/0x640 [ 314.364951][ T31] ? bio_associate_blkg+0x6d/0x230 [ 314.370252][ T31] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 314.398937][ T31] ? bio_associate_blkg+0x6d/0x230 [ 314.404144][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 314.435135][ T31] ? submit_bio_noacct+0xd65/0x1a70 [ 314.440451][ T31] block_read_full_folio+0x7b7/0x830 [ 314.464975][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 314.470426][ T31] filemap_read_folio+0x114/0x380 [ 314.515035][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 314.520576][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 314.545014][ T31] do_read_cache_folio+0x350/0x590 [ 314.550222][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 314.570868][ T31] read_part_sector+0xb6/0x2b0 [ 314.583433][ T31] adfspart_check_ICS+0xa4/0xa50 [ 314.589713][ T31] ? snprintf+0xda/0x120 [ 314.594013][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 314.604013][ T31] bdev_disk_changed+0x75f/0x14b0 [ 314.610260][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 314.620030][ T31] ? wait_on_inode+0xc0/0x230 [ 314.624786][ T31] blkdev_get_whole+0x380/0x510 [ 314.631141][ T31] bdev_open+0x31e/0xd30 [ 314.639537][ T31] blkdev_open+0x3a8/0x510 [ 314.644014][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 314.649470][ T31] do_dentry_open+0xdf0/0x1970 [ 314.654290][ T31] vfs_open+0x3b/0x340 [ 314.659202][ T31] ? path_openat+0x2ecd/0x3830 [ 314.664355][ T31] path_openat+0x2ee5/0x3830 [ 314.669736][ T31] ? arch_stack_walk+0xfc/0x150 [ 314.674671][ T31] ? __pfx_path_openat+0x10/0x10 [ 314.679826][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.686031][ T31] do_filp_open+0x1fa/0x410 [ 314.690570][ T31] ? __lock_acquire+0xab9/0xd20 [ 314.695548][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 314.700649][ T31] ? _raw_spin_unlock+0x28/0x50 [ 314.705569][ T31] ? alloc_fd+0x64c/0x6c0 [ 314.709940][ T31] do_sys_openat2+0x121/0x1c0 [ 314.714627][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 314.720243][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.725543][ T31] ? rcu_is_watching+0x15/0xb0 [ 314.730346][ T31] __x64_sys_openat+0x138/0x170 [ 314.735386][ T31] do_syscall_64+0xfa/0x3b0 [ 314.740014][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.746147][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 314.752305][ T31] ? clear_bhb_loop+0x60/0xb0 [ 314.757143][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.763064][ T31] RIP: 0033:0x7f6c343c8407 [ 314.767801][ T31] RSP: 002b:00007ffe416544a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 314.776704][ T31] RAX: ffffffffffffffda RBX: 00007f6c33d9b880 RCX: 00007f6c343c8407 [ 314.784705][ T31] RDX: 00000000000a0800 RSI: 0000557335992e10 RDI: ffffffffffffff9c [ 314.792817][ T31] RBP: 0000557335983910 R08: 0000000000000000 R09: 0000000000000000 [ 314.800904][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005573359a7c70 [ 314.809064][ T31] R13: 000055733599b3e0 R14: 0000000000000000 R15: 00005573359a7c70 [ 314.817242][ T31] [ 314.821858][ T31] [ 314.821858][ T31] Showing all locks held in the system: [ 314.836238][ T31] 1 lock held by khungtaskd/31: [ 314.841140][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 314.851388][ T31] 2 locks held by kworker/u8:3/37: [ 314.891497][ T31] #0: ffff8880b863b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 314.903671][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 314.915425][ T31] 2 locks held by getty/5599: [ 314.920129][ T31] #0: ffff88814c9650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 314.930113][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 314.944704][ T31] 1 lock held by syz-executor/5835: [ 314.950025][ T31] #0: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 314.963826][ T31] 5 locks held by syz-executor/5836: [ 314.969298][ T31] #0: ffff8880334e4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 314.985666][ T31] #1: ffff8880334e4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 314.999277][ T31] #2: ffffffff8f678768 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 315.010269][ T31] #3: ffff8880272b6b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 315.023646][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 315.035546][ T31] 3 locks held by syz-executor/5837: [ 315.040868][ T31] #0: ffff888033138d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 315.059627][ T31] #1: ffff888033138078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 315.073729][ T31] #2: ffffffff8f678768 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 315.088634][ T31] 1 lock held by syz-executor/5838: [ 315.093892][ T31] 3 locks held by udevd/5898: [ 315.099097][ T31] #0: ffff88802536b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 315.108661][ T31] #1: ffff88802038bf90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 315.118536][ T31] #2: ffff888025827178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 315.127622][ T31] 3 locks held by udevd/7162: [ 315.132319][ T31] #0: ffff88802535c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 315.141612][ T31] #1: ffff8880252cc590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 315.151201][ T31] #2: ffff888025890178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 315.160254][ T31] 3 locks held by udevd/8259: [ 315.165038][ T31] #0: ffff888025868358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 315.174644][ T31] #1: ffff8880252cca90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 315.184344][ T31] #2: ffff8880258d51f8 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc8/0xf10 [ 315.193370][ T31] 3 locks held by kworker/u8:29/9541: [ 315.198898][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 315.210713][ T31] #1: ffffc9000c4afbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 315.221925][ T31] #2: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 315.231064][ T31] 7 locks held by kworker/u8:35/9547: [ 315.236566][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 315.247590][ T31] #1: ffffc9001c8b7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 315.258221][ T31] #2: ffffffff8f505090 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 315.267723][ T31] #3: ffff88802a94c0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 315.278248][ T31] #4: ffff88802a94f250 (&devlink->lock_key#12){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 315.289363][ T31] #5: ffffffff8f511c88 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 315.298538][ T31] #6: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 315.309565][ T31] 2 locks held by kworker/0:10/9794: [ 315.314865][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 315.326095][ T31] #1: ffffc90003c9fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 315.337142][ T31] [ 315.339510][ T31] ============================================= [ 315.339510][ T31] [ 315.353484][ T31] NMI backtrace for cpu 1 [ 315.353504][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 315.353530][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.353543][ T31] Call Trace: [ 315.353552][ T31] [ 315.353561][ T31] dump_stack_lvl+0x189/0x250 [ 315.353598][ T31] ? __wake_up_klogd+0xd9/0x110 [ 315.353626][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.353660][ T31] ? __pfx__printk+0x10/0x10 [ 315.353697][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 315.353729][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 315.353755][ T31] ? _printk+0xcf/0x120 [ 315.353783][ T31] ? __pfx__printk+0x10/0x10 [ 315.353809][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 315.353841][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 315.353877][ T31] watchdog+0xfee/0x1030 [ 315.353909][ T31] ? watchdog+0x1de/0x1030 [ 315.353947][ T31] kthread+0x70e/0x8a0 [ 315.353975][ T31] ? __pfx_watchdog+0x10/0x10 [ 315.354003][ T31] ? __pfx_kthread+0x10/0x10 [ 315.354029][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.354065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.354094][ T31] ? __pfx_kthread+0x10/0x10 [ 315.354120][ T31] ret_from_fork+0x3fc/0x770 [ 315.354153][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 315.354191][ T31] ? __switch_to_asm+0x39/0x70 [ 315.354211][ T31] ? __switch_to_asm+0x33/0x70 [ 315.354231][ T31] ? __pfx_kthread+0x10/0x10 [ 315.354257][ T31] ret_from_fork_asm+0x1a/0x30 [ 315.354296][ T31] [ 315.354304][ T31] Sending NMI from CPU 1 to CPUs 0: [ 315.514713][ C0] NMI backtrace for cpu 0 [ 315.514731][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 315.514753][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.514764][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 315.514798][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 35 22 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 315.514815][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 315.514832][ C0] RAX: 700fb064daef7f00 RBX: ffffffff81976058 RCX: 700fb064daef7f00 [ 315.514846][ C0] RDX: 0000000000000001 RSI: ffffffff8d982a42 RDI: ffffffff8be28300 [ 315.514859][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 315.514872][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa10ef0 [ 315.514890][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 315.514903][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 315.514919][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 315.514931][ C0] CR2: 00007f77d34e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 315.514947][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 315.514958][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 315.514969][ C0] Call Trace: [ 315.514976][ C0] [ 315.514982][ C0] default_idle+0x13/0x20 [ 315.515002][ C0] default_idle_call+0x74/0xb0 [ 315.515027][ C0] do_idle+0x1e8/0x510 [ 315.515043][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 315.515063][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.515089][ C0] ? __pfx_do_idle+0x10/0x10 [ 315.515110][ C0] ? do_idle+0x5/0x510 [ 315.515125][ C0] cpu_startup_entry+0x44/0x60 [ 315.515141][ C0] rest_init+0x2de/0x300 [ 315.515159][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 315.515185][ C0] start_kernel+0x47d/0x500 [ 315.515203][ C0] x86_64_start_reservations+0x24/0x30 [ 315.515226][ C0] x86_64_start_kernel+0x143/0x1c0 [ 315.515248][ C0] common_startup_64+0x13e/0x147 [ 315.515276][ C0] [ 315.515821][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 315.515841][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00305-gd74520f39cdb #0 PREEMPT(full) [ 315.515873][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.515889][ T31] Call Trace: [ 315.515900][ T31] [ 315.515911][ T31] dump_stack_lvl+0x99/0x250 [ 315.515954][ T31] ? __asan_memcpy+0x40/0x70 [ 315.515990][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.516029][ T31] ? __pfx__printk+0x10/0x10 [ 315.516073][ T31] panic+0x2db/0x790 [ 315.516118][ T31] ? __pfx_panic+0x10/0x10 [ 315.516155][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 315.516201][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 315.516236][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 315.516279][ T31] watchdog+0x102d/0x1030 [ 315.516321][ T31] ? watchdog+0x1de/0x1030 [ 315.516365][ T31] kthread+0x70e/0x8a0 [ 315.516399][ T31] ? __pfx_watchdog+0x10/0x10 [ 315.516431][ T31] ? __pfx_kthread+0x10/0x10 [ 315.516463][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 315.516498][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.516534][ T31] ? __pfx_kthread+0x10/0x10 [ 315.516563][ T31] ret_from_fork+0x3fc/0x770 [ 315.516602][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 315.516646][ T31] ? __switch_to_asm+0x39/0x70 [ 315.516671][ T31] ? __switch_to_asm+0x33/0x70 [ 315.516697][ T31] ? __pfx_kthread+0x10/0x10 [ 315.516726][ T31] ret_from_fork_asm+0x1a/0x30 [ 315.516779][ T31] [ 315.876912][ T31] Kernel Offset: disabled [ 315.881240][ T31] Rebooting in 86400 seconds..