last executing test programs: 6.615311186s ago: executing program 3 (id=381): pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) 5.89837797s ago: executing program 3 (id=386): socket(0x840000000002, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 5.54647643s ago: executing program 3 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4008054) 5.206483589s ago: executing program 3 (id=390): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x1000, 0x0, 0xe4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x0) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) write$P9_RAUTH(r5, &(0x7f0000000240)={0x14, 0x67, 0x2, {0x80, 0x0, 0x8}}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 4.977270244s ago: executing program 0 (id=391): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000040)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="163e6cce65ffff0000000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac5e5c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xffff, 0x57f8, @remote, 0x100002}}}, 0x30) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="74726102003d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=any,nodevmap,k']) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') 4.655490814s ago: executing program 2 (id=394): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) 4.178128257s ago: executing program 3 (id=396): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) gettid() r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="86b5735e05f499476980a4edb2b94ac1e99af59de1bd5450d4f139970394a59b615ed6a48cbe819659966843f0f88240d8e673bb19d346fc987e9713726e2da120b467c8b650390722c5a9ff8fb6e9ee53833212ffa7ec177406e9a689e65df2f32b8e", @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x8001}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.874453325s ago: executing program 0 (id=398): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 3.76214761s ago: executing program 2 (id=399): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000ec0)=[{r0}], 0x1, 0x0) 3.721866925s ago: executing program 4 (id=400): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4008054) 3.158728525s ago: executing program 2 (id=402): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.14532023s ago: executing program 0 (id=403): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x122) 3.104843936s ago: executing program 4 (id=404): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x3d) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.766766593s ago: executing program 2 (id=405): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.653389247s ago: executing program 4 (id=406): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote={0x64}}}, 0x1c, 0x0, 0x0, 0x0, 0x50}}], 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") socket$inet_sctp(0x2, 0x5, 0x84) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000003c0)='\\\xce\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0xfffffe55) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000900)={'vxcan1\x00', 0x0}) splice(r4, &(0x7f0000000b00)=0x1ff, r3, &(0x7f0000000b40)=0x2, 0x0, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x1, 0x0}, 0x8) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001280)=@o_path={&(0x7f0000001240)='./file0\x00', 0x0, 0x18}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de00000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r9}, 0x18) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x3, &(0x7f00000002c0)=0x0) io_submit(r11, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r10, &(0x7f0000000040)="0a00ffff0000", 0x6}]) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x1, 0x2, &(0x7f0000000080)=@raw=[@generic={0x5, 0x1, 0x7, 0x140, 0x100}, @exit], &(0x7f0000001140)='syzkaller\x00', 0x3d, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000011c0)={0x0, 0x3, 0x3, 0xfffffff8}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000001300)=[r8, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x28, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x9}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xceb3, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}, @ldst={0x0, 0x2, 0x3, 0xb, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ldst={0x1, 0x2, 0x3, 0x9, 0x5, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x8, 0xd6, &(0x7f0000000800)=""/214, 0x40f00, 0xa, '\x00', r6, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xd, 0x7, 0x5}, 0x10, r7, r12, 0x3, 0x0, &(0x7f0000000a00)=[{0x2, 0x3, 0x9, 0x8}, {0x5, 0x3, 0x1, 0x2}, {0x1, 0x2, 0xc, 0x2}], 0x10, 0x80000001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) 2.634259771s ago: executing program 1 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e00000000400002800600010000000000340003800c00010000000000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB], 0x80}}, 0x0) 2.294116271s ago: executing program 2 (id=408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) getpeername$inet6(r0, 0x0, &(0x7f0000000040)) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="163e6cce65ffff0000000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac5e5c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xffff, 0x57f8, @remote, 0x100002}}}, 0x30) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="74726102003d66642c7266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=any,nodevmap,k']) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1) chdir(&(0x7f0000000200)='./file0\x00') 2.071544317s ago: executing program 1 (id=409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) 1.864456882s ago: executing program 0 (id=410): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x14, r0, 0x1, 0x120, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004051}, 0x4040) 1.354540583s ago: executing program 1 (id=411): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x405, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x4}, @IFLA_BR_STP_STATE={0x8}]}}}]}, 0x44}}, 0x40044) 1.002189904s ago: executing program 0 (id=412): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(&(0x7f0000000ec0)=[{r0}], 0x1, 0x0) 894.023716ms ago: executing program 4 (id=413): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 886.627433ms ago: executing program 1 (id=414): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4008054) 630.4864ms ago: executing program 3 (id=415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 482.17604ms ago: executing program 4 (id=416): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r3}, 0x3d) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 404.233452ms ago: executing program 1 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) linkat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 358.542192ms ago: executing program 2 (id=418): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0x11, 0x148, 0x138, 0x0, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x2, 0x3f, 0x0, 0x20000000, 0x3, 0x7, 0x40}}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x3, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) 189.909021ms ago: executing program 1 (id=419): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r1, 0x0, 0x0) 114.907526ms ago: executing program 0 (id=420): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd606062"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 4 (id=421): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioperm(0x3, 0x12b, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000090) capset(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 170.839620][ T5774] cgroup: Unknown subsys name 'net' [ 170.982608][ T5774] cgroup: Unknown subsys name 'cpuset' [ 170.997110][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 215.829948][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.070075][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.076910][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.617226][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 219.663728][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 219.673091][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 219.686792][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 219.695005][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.707771][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.717954][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 219.727159][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.743033][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.751657][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.764243][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.775228][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.801731][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.816442][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.825649][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.833963][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.844260][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.858666][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.867322][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.890932][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.909248][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.917440][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.944925][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.954104][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.966596][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.979530][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.999722][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.033480][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.045810][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.055119][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.099206][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 221.488137][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 221.560847][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 221.825946][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 221.934573][ T5803] Bluetooth: hci0: command tx timeout [ 221.940220][ T5803] Bluetooth: hci1: command tx timeout [ 222.012471][ T5792] Bluetooth: hci2: command tx timeout [ 222.073839][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 222.093157][ T5792] Bluetooth: hci3: command tx timeout [ 222.098140][ T5803] Bluetooth: hci4: command tx timeout [ 222.368772][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.377654][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.385474][ T5790] bridge_slave_0: entered allmulticast mode [ 222.394599][ T5790] bridge_slave_0: entered promiscuous mode [ 222.433869][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.441566][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.450036][ T5790] bridge_slave_1: entered allmulticast mode [ 222.458921][ T5790] bridge_slave_1: entered promiscuous mode [ 222.662035][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.781249][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.791831][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.799752][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.809708][ T5800] bridge_slave_0: entered allmulticast mode [ 222.818545][ T5800] bridge_slave_0: entered promiscuous mode [ 222.916171][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.923966][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.931604][ T5800] bridge_slave_1: entered allmulticast mode [ 222.940643][ T5800] bridge_slave_1: entered promiscuous mode [ 222.953217][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.961011][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.969149][ T5793] bridge_slave_0: entered allmulticast mode [ 222.978059][ T5793] bridge_slave_0: entered promiscuous mode [ 223.106891][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.116419][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.124208][ T5793] bridge_slave_1: entered allmulticast mode [ 223.133575][ T5793] bridge_slave_1: entered promiscuous mode [ 223.175299][ T5790] team0: Port device team_slave_0 added [ 223.292926][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.300594][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.309151][ T5797] bridge_slave_0: entered allmulticast mode [ 223.317462][ T5797] bridge_slave_0: entered promiscuous mode [ 223.334053][ T5790] team0: Port device team_slave_1 added [ 223.350534][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.370912][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.388244][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.423886][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.431563][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.439311][ T5797] bridge_slave_1: entered allmulticast mode [ 223.448256][ T5797] bridge_slave_1: entered promiscuous mode [ 223.621031][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.665914][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.675562][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.684889][ T5807] bridge_slave_0: entered allmulticast mode [ 223.693279][ T5807] bridge_slave_0: entered promiscuous mode [ 223.767048][ T5800] team0: Port device team_slave_0 added [ 223.776705][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.784010][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.810299][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.852794][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.860477][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.868624][ T5807] bridge_slave_1: entered allmulticast mode [ 223.877496][ T5807] bridge_slave_1: entered promiscuous mode [ 223.925221][ T5800] team0: Port device team_slave_1 added [ 223.934249][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.941387][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.969144][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.988798][ T5793] team0: Port device team_slave_0 added [ 224.021313][ T5803] Bluetooth: hci1: command tx timeout [ 224.021362][ T5792] Bluetooth: hci0: command tx timeout [ 224.073757][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.100386][ T5803] Bluetooth: hci2: command tx timeout [ 224.147712][ T5793] team0: Port device team_slave_1 added [ 224.187706][ T5803] Bluetooth: hci3: command tx timeout [ 224.189492][ T5792] Bluetooth: hci4: command tx timeout [ 224.234670][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.246577][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.253959][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.280547][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.360361][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.371742][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.378996][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.405367][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.478942][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.486966][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.514600][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.578015][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.589610][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.598216][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.625807][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.644451][ T5797] team0: Port device team_slave_0 added [ 224.720485][ T5790] hsr_slave_0: entered promiscuous mode [ 224.731229][ T5790] hsr_slave_1: entered promiscuous mode [ 224.813712][ T5797] team0: Port device team_slave_1 added [ 224.915686][ T5807] team0: Port device team_slave_0 added [ 224.998220][ T5793] hsr_slave_0: entered promiscuous mode [ 225.009469][ T5793] hsr_slave_1: entered promiscuous mode [ 225.018301][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.028775][ T5793] Cannot create hsr debugfs directory [ 225.076189][ T5807] team0: Port device team_slave_1 added [ 225.091755][ T5800] hsr_slave_0: entered promiscuous mode [ 225.102705][ T5800] hsr_slave_1: entered promiscuous mode [ 225.110694][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.118603][ T5800] Cannot create hsr debugfs directory [ 225.126848][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.134188][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.160512][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.179789][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.187088][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.213477][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.503152][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.510322][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.536785][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.639381][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.646751][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.673193][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.818865][ T5797] hsr_slave_0: entered promiscuous mode [ 225.828700][ T5797] hsr_slave_1: entered promiscuous mode [ 225.838267][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.846317][ T5797] Cannot create hsr debugfs directory [ 226.092428][ T5792] Bluetooth: hci1: command tx timeout [ 226.098075][ T5792] Bluetooth: hci0: command tx timeout [ 226.172483][ T5803] Bluetooth: hci2: command tx timeout [ 226.223605][ T5807] hsr_slave_0: entered promiscuous mode [ 226.232549][ T5807] hsr_slave_1: entered promiscuous mode [ 226.241365][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.251711][ T5807] Cannot create hsr debugfs directory [ 226.258868][ T5803] Bluetooth: hci3: command tx timeout [ 226.262555][ T5792] Bluetooth: hci4: command tx timeout [ 226.818336][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 226.844190][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 226.936430][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 226.954918][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.090417][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 227.148864][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 227.195721][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 227.228291][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.390344][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.414486][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.449150][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.476237][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.670146][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.763370][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.797950][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.839343][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.866227][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.887769][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.965998][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.025835][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.193136][ T5803] Bluetooth: hci0: command tx timeout [ 228.198795][ T5803] Bluetooth: hci1: command tx timeout [ 228.253957][ T5792] Bluetooth: hci2: command tx timeout [ 228.333305][ T5792] Bluetooth: hci3: command tx timeout [ 228.338941][ T5792] Bluetooth: hci4: command tx timeout [ 228.695413][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.877104][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.900435][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.945721][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.994122][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.001753][ T4950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.061212][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.116290][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.124129][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.220953][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.257299][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.359236][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.366988][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.383930][ T3665] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.391560][ T3665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.460964][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.496985][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.504744][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.553047][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.573844][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.581481][ T4950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.605221][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.612942][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.649799][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.657556][ T4183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.907693][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.148053][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.159785][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.181315][ T5800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.192931][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.250516][ T4093] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.258242][ T4093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.370437][ T4093] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.378177][ T4093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.663555][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.166476][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.217923][ T5793] veth0_vlan: entered promiscuous mode [ 232.263733][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.287044][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.331164][ T5793] veth1_vlan: entered promiscuous mode [ 232.784298][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.799938][ T5793] veth0_macvtap: entered promiscuous mode [ 232.838301][ T5790] veth0_vlan: entered promiscuous mode [ 232.850555][ T5800] veth0_vlan: entered promiscuous mode [ 232.927099][ T5793] veth1_macvtap: entered promiscuous mode [ 232.944529][ T5790] veth1_vlan: entered promiscuous mode [ 233.029897][ T5800] veth1_vlan: entered promiscuous mode [ 233.123505][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.215722][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.302119][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.313813][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.323014][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.332025][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.498496][ T5790] veth0_macvtap: entered promiscuous mode [ 233.531811][ T5797] veth0_vlan: entered promiscuous mode [ 233.552051][ T5800] veth0_macvtap: entered promiscuous mode [ 233.607128][ T5790] veth1_macvtap: entered promiscuous mode [ 233.663478][ T5800] veth1_macvtap: entered promiscuous mode [ 233.711832][ T5797] veth1_vlan: entered promiscuous mode [ 233.824109][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.835507][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.850295][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.897890][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.908790][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.919253][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.930091][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.945303][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.019976][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.030896][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.045953][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.125550][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.134745][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.143957][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.153440][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.197271][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.208450][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.218782][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.229568][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.244630][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.335660][ T5797] veth0_macvtap: entered promiscuous mode [ 234.386825][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.396112][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.405361][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.414548][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.486975][ T5797] veth1_macvtap: entered promiscuous mode [ 234.783410][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.794207][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.804363][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.819199][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.830110][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.840827][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.856126][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.971912][ T5807] veth0_vlan: entered promiscuous mode [ 235.102508][ T5807] veth1_vlan: entered promiscuous mode [ 235.150044][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.162765][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.174461][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.185229][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.195379][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.206174][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.223932][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.527260][ T5797] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.540885][ T5797] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.551501][ T5797] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.560609][ T5797] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.673162][ T5807] veth0_macvtap: entered promiscuous mode [ 235.763793][ T5807] veth1_macvtap: entered promiscuous mode [ 236.051525][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.064140][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.075745][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.088269][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.101044][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.112474][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.124435][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.135169][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.150555][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.431526][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.444376][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.455259][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.466038][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.476119][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.486931][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.497066][ T5807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.507835][ T5807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.523109][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.773506][ T5807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.782671][ T5807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.791694][ T5807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.800850][ T5807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.393719][ T4093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.401810][ T4093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.626497][ T4093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.635224][ T4093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.706854][ T4009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.715087][ T4009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.770590][ T4093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.779817][ T4093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.005682][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 241.027465][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.036796][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.273245][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.284464][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.849783][ T5868] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 241.858809][ T5868] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 241.867617][ T5868] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 241.902435][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.910602][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.014891][ T5868] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 242.240061][ T5000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.248896][ T5000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.159299][ T5984] sd 0:0:1:0: device reset [ 243.384922][ T29] audit: type=1326 audit(1731745493.221:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.407533][ T29] audit: type=1326 audit(1731745493.221:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.429531][ T29] audit: type=1326 audit(1731745493.231:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.454280][ T29] audit: type=1326 audit(1731745493.231:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.477045][ T29] audit: type=1326 audit(1731745493.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.498971][ T29] audit: type=1326 audit(1731745493.241:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.521543][ T29] audit: type=1326 audit(1731745493.241:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.543580][ T29] audit: type=1326 audit(1731745493.241:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.567695][ T29] audit: type=1326 audit(1731745493.241:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.590264][ T29] audit: type=1326 audit(1731745493.241:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5980 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 243.709035][ T5989] loop0: detected capacity change from 0 to 1024 [ 243.734735][ T5989] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.832788][ T5992] loop3: detected capacity change from 0 to 1024 [ 243.851242][ T4009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.863495][ T4009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.944995][ T5992] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.986914][ T5989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.090192][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.116553][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.124710][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.142056][ T5995] IPv4: Oversized IP packet from 127.202.26.0 [ 244.222652][ T5992] process 'syz.3.10' launched './file0/file0' with NULL argv: empty string added [ 244.519725][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.840805][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.053587][ T6004] loop2: detected capacity change from 0 to 128 [ 245.145573][ T6004] ======================================================= [ 245.145573][ T6004] WARNING: The mand mount option has been deprecated and [ 245.145573][ T6004] and is ignored by this kernel. Remove the mand [ 245.145573][ T6004] option from the mount to silence this warning. [ 245.145573][ T6004] ======================================================= [ 247.211967][ T6006] loop0: detected capacity change from 0 to 8192 [ 247.374072][ T6026] loop2: detected capacity change from 0 to 1024 [ 247.415971][ T6026] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.479118][ T6028] loop3: detected capacity change from 0 to 256 [ 247.639171][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.222612][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.401093][ T6069] loop2: detected capacity change from 0 to 1024 [ 250.479884][ T6069] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.591906][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.241252][ T6085] tmpfs: Bad value for 'mpol' [ 251.246094][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.779078][ T6079] loop4: detected capacity change from 0 to 4096 [ 252.021745][ T6079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.174755][ T6101] loop2: detected capacity change from 0 to 128 [ 252.286743][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 252.286817][ T29] audit: type=1800 audit(1731745502.131:42): pid=6101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.45" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 252.409987][ T6079] +}[@ (6079) used greatest stack depth: 5000 bytes left [ 252.944823][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.555005][ T6121] loop4: detected capacity change from 0 to 1024 [ 253.564381][ T6121] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.847980][ T6121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.629764][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.640380][ T6164] loop3: detected capacity change from 0 to 1024 [ 256.695071][ T6164] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.821023][ T6164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.159976][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.864417][ T6201] loop1: detected capacity change from 0 to 512 [ 258.968251][ T6201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.969746][ T29] audit: type=1326 audit(1731745508.811:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 258.982131][ T6201] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.004931][ T29] audit: type=1326 audit(1731745508.851:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 259.044970][ T29] audit: type=1326 audit(1731745508.891:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=155 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 259.067428][ T29] audit: type=1326 audit(1731745508.891:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 259.152016][ T29] audit: type=1326 audit(1731745508.961:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6204 comm="syz.4.93" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 259.796882][ T6217] loop3: detected capacity change from 0 to 1024 [ 259.819803][ T6217] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.021034][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.070007][ T6217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.237962][ T6225] loop4: detected capacity change from 0 to 164 [ 260.315385][ T6225] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 261.056997][ T29] audit: type=1326 audit(1731745510.891:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 261.083426][ T29] audit: type=1326 audit(1731745510.891:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 261.298043][ T29] audit: type=1326 audit(1731745511.001:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 261.325616][ T29] audit: type=1326 audit(1731745511.001:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 261.347961][ T29] audit: type=1326 audit(1731745511.001:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6232 comm="syz.4.103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 261.400280][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.459911][ T6254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 262.469707][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 263.410628][ T6263] loop1: detected capacity change from 0 to 1024 [ 263.426933][ T6263] EXT4-fs: Ignoring removed mblk_io_submit option [ 263.578981][ T6263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.835464][ T6277] loop3: detected capacity change from 0 to 512 [ 263.898450][ T6277] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 263.949989][ T6277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 263.979603][ T6277] System zones: 1-12 [ 263.999454][ T6277] EXT4-fs (loop3): orphan cleanup on readonly fs [ 264.062826][ T6277] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.122: bg 0: block 361: padding at end of block bitmap is not set [ 264.101411][ T6277] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 264.122595][ T6277] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.122: attempt to clear invalid blocks 33619980 len 1 [ 264.218233][ T6277] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.122: invalid indirect mapped block 1811939328 (level 0) [ 264.318223][ T6277] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.122: invalid indirect mapped block 2 (level 2) [ 264.383690][ T6277] EXT4-fs (loop3): 1 truncate cleaned up [ 264.391465][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 264.434317][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.876789][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 264.876862][ T29] audit: type=1326 audit(1731745514.721:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6276 comm="syz.3.122" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f87579 code=0x0 [ 264.964493][ T6277] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 265.046226][ T29] audit: type=1326 audit(1731745514.881:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 265.073120][ T29] audit: type=1326 audit(1731745514.891:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 265.097025][ T29] audit: type=1326 audit(1731745514.891:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 265.314990][ T6290] loop1: detected capacity change from 0 to 1024 [ 265.326584][ T6290] EXT4-fs: Ignoring removed orlov option [ 265.333245][ T6290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.495280][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.2.128'. [ 265.504715][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 265.554144][ T6290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.565748][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 265.944094][ T6290] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 266.459268][ T6290] team0: Failed to send options change via netlink (err -105) [ 266.467370][ T6290] team0: Port device netdevsim3 added [ 266.478166][ T1818] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 266.871264][ T6310] loop2: detected capacity change from 0 to 1024 [ 266.880921][ T6310] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.095643][ T6315] random: crng reseeded on system resumption [ 267.108968][ T6310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.369438][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.674847][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.543019][ T29] audit: type=1326 audit(1731745519.361:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 269.569777][ T29] audit: type=1326 audit(1731745519.411:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 269.593574][ T29] audit: type=1326 audit(1731745519.411:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 269.616113][ T29] audit: type=1326 audit(1731745519.411:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 269.725941][ T29] audit: type=1326 audit(1731745519.551:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 269.748857][ T29] audit: type=1326 audit(1731745519.551:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz.1.145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 270.116787][ T6347] loop4: detected capacity change from 0 to 1024 [ 270.136319][ T6347] EXT4-fs: Ignoring removed orlov option [ 270.142536][ T6347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.344617][ T6347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.425752][ T6329] loop3: detected capacity change from 0 to 8192 [ 270.454534][ T6347] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 270.549966][ T6347] team0: Failed to send options change via netlink (err -105) [ 270.558141][ T6347] team0: Port device netdevsim3 added [ 270.574126][ T34] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 270.637882][ T6355] netlink: 'syz.4.146': attribute type 10 has an invalid length. [ 270.701230][ T6354] loop1: detected capacity change from 0 to 1024 [ 270.751104][ T6354] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.779477][ T6355] team0: Failed to send options change via netlink (err -105) [ 270.788733][ T6355] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 270.808370][ T6355] team0: Port device netdevsim3 removed [ 270.828757][ T6355] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 270.906549][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.125501][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.835313][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.957322][ T6365] Zero length message leads to an empty skb [ 272.267946][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 272.278945][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 272.851405][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 272.851481][ T29] audit: type=1326 audit(1731745522.691:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 273.092389][ T29] audit: type=1326 audit(1731745522.801:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 273.114683][ T29] audit: type=1326 audit(1731745522.801:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 274.014320][ T6389] loop0: detected capacity change from 0 to 1024 [ 274.023672][ T6389] EXT4-fs: Ignoring removed orlov option [ 274.029662][ T6389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.109250][ T6379] sctp: failed to load transform for md5: -2 [ 274.379073][ T6389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.415914][ T6389] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 274.456479][ T6389] team0: Failed to send options change via netlink (err -105) [ 274.465065][ T6389] team0: Port device netdevsim3 added [ 274.504292][ T3692] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 274.517655][ T6403] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 274.624488][ T6396] loop4: detected capacity change from 0 to 1024 [ 274.649567][ T6396] EXT4-fs: Ignoring removed mblk_io_submit option [ 274.668617][ T6403] team0: Failed to send options change via netlink (err -105) [ 274.677669][ T6403] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 274.698454][ T6403] team0: Port device netdevsim3 removed [ 274.718912][ T6403] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 275.205297][ T6387] loop3: detected capacity change from 0 to 8192 [ 275.394289][ T6396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.572693][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.394445][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.739067][ T6426] ªªªªªª: renamed from vlan0 (while UP) [ 278.216395][ T6444] loop2: detected capacity change from 0 to 1024 [ 278.274969][ T6444] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.615814][ T6454] netlink: 256 bytes leftover after parsing attributes in process `syz.1.185'. [ 278.653062][ T6444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.165490][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.876293][ T6468] loop4: detected capacity change from 0 to 2048 [ 280.333091][ T6468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.578330][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.585092][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.654475][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.428923][ T6496] netlink: 32 bytes leftover after parsing attributes in process `syz.2.205'. [ 281.871266][ T6502] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 281.880004][ T6502] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 281.888963][ T6502] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 281.977754][ T6500] loop4: detected capacity change from 0 to 1024 [ 281.989296][ T6500] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.048993][ T6500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.090207][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.188302][ T6527] loop1: detected capacity change from 0 to 256 [ 283.198506][ T6527] vfat: Unknown parameter 'utf8èBðhortname' [ 283.996037][ T6529] loop3: detected capacity change from 0 to 1024 [ 284.076868][ T6536] syz.1.215[6536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.077283][ T6536] syz.1.215[6536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.105310][ T6536] syz.1.215[6536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.265421][ T6529] EXT4-fs: Ignoring removed orlov option [ 284.291381][ T6529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.839957][ T6546] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 285.019753][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.061181][ T6529] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 285.096102][ T6529] team0: Failed to send options change via netlink (err -105) [ 285.103949][ T6529] team0: Port device netdevsim3 added [ 285.118729][ T6550] netlink: 'syz.3.217': attribute type 10 has an invalid length. [ 285.160266][ T6550] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 285.489190][ T6550] team0: Failed to send options change via netlink (err -105) [ 285.498307][ T6550] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 285.509905][ T6550] team0: Port device netdevsim3 removed [ 285.531764][ T6550] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 286.885720][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.951227][ T6559] loop0: detected capacity change from 0 to 1024 [ 287.102662][ T6559] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.554176][ T6559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.007551][ T6587] netlink: 20 bytes leftover after parsing attributes in process `syz.3.235'. [ 288.227032][ T6587] loop3: detected capacity change from 0 to 1024 [ 288.258540][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.546713][ T6591] capability: warning: `syz.4.239' uses 32-bit capabilities (legacy support in use) [ 288.694571][ T6587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.826866][ T6596] loop1: detected capacity change from 0 to 512 [ 288.852936][ T6596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 288.856400][ T29] audit: type=1800 audit(1731745538.701:77): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 288.866318][ T6596] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 288.928950][ T6596] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 289.052870][ T29] audit: type=1326 audit(1731745538.851:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 289.074788][ T29] audit: type=1326 audit(1731745538.861:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 289.096674][ T29] audit: type=1326 audit(1731745538.861:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 289.097248][ T6597] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 289.148759][ T6596] EXT4-fs (loop1): 1 truncate cleaned up [ 289.156547][ T6596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.421211][ T6593] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 289.656296][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.715815][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.944324][ T6611] loop0: detected capacity change from 0 to 512 [ 289.983603][ T29] audit: type=1326 audit(1731745539.701:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.006751][ T29] audit: type=1326 audit(1731745539.721:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.029915][ T29] audit: type=1326 audit(1731745539.721:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.057153][ T29] audit: type=1326 audit(1731745539.731:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.081983][ T29] audit: type=1326 audit(1731745539.731:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.106148][ T29] audit: type=1326 audit(1731745539.731:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.0.246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 290.501836][ T6611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.890731][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.715167][ T6639] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 292.715137][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 294.875414][ T6684] 9pnet_fd: Insufficient options for proto=fd [ 295.656518][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 295.656593][ T29] audit: type=1326 audit(1731745545.501:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.690185][ T29] audit: type=1326 audit(1731745545.501:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=448 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.714045][ T29] audit: type=1326 audit(1731745545.501:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.736631][ T29] audit: type=1326 audit(1731745545.501:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.759078][ T29] audit: type=1326 audit(1731745545.501:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.785735][ T29] audit: type=1326 audit(1731745545.511:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.809606][ T29] audit: type=1326 audit(1731745545.511:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.832035][ T29] audit: type=1326 audit(1731745545.511:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.861696][ T29] audit: type=1326 audit(1731745545.531:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 295.890770][ T29] audit: type=1326 audit(1731745545.581:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6697 comm="syz.0.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 297.164312][ T6713] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.288' sets config #1 [ 298.466647][ T6730] 9pnet_fd: Insufficient options for proto=fd [ 299.474825][ T6716] loop1: detected capacity change from 0 to 8192 [ 300.928095][ T6756] 9pnet_fd: Insufficient options for proto=fd [ 302.260402][ T6777] loop0: detected capacity change from 0 to 164 [ 302.327930][ T6777] syz.0.315: attempt to access beyond end of device [ 302.327930][ T6777] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 302.347114][ T6777] syz.0.315: attempt to access beyond end of device [ 302.347114][ T6777] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 302.427223][ T29] audit: type=1800 audit(1731745552.211:129): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.315" name="file0" dev="loop0" ino=1862 res=0 errno=0 [ 302.528252][ T29] audit: type=1326 audit(1731745552.371:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.553698][ T29] audit: type=1326 audit(1731745552.371:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.577073][ T29] audit: type=1326 audit(1731745552.371:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.599539][ T29] audit: type=1326 audit(1731745552.431:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.902963][ T29] audit: type=1326 audit(1731745552.491:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.925469][ T29] audit: type=1326 audit(1731745552.491:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.951119][ T29] audit: type=1326 audit(1731745552.491:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.974589][ T29] audit: type=1326 audit(1731745552.511:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 302.996806][ T29] audit: type=1326 audit(1731745552.511:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.0.315" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 303.316330][ T6787] loop3: detected capacity change from 0 to 1024 [ 303.385098][ T6787] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.521416][ T6790] loop4: detected capacity change from 0 to 512 [ 303.547865][ T6787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.801820][ T6778] loop2: detected capacity change from 0 to 8192 [ 303.873680][ T6790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.887246][ T6790] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.207539][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.385461][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.623853][ T6827] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 306.779241][ T6830] loop2: detected capacity change from 0 to 1024 [ 306.795107][ T6830] EXT4-fs: Ignoring removed orlov option [ 306.801112][ T6830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.080849][ T6830] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.230913][ T6830] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 307.431755][ T6830] team0: Failed to send options change via netlink (err -105) [ 307.439641][ T6830] team0: Port device netdevsim3 added [ 307.703235][ T6842] netlink: 'syz.2.336': attribute type 10 has an invalid length. [ 307.804742][ T6842] team0: Port device netdevsim3 removed [ 307.823658][ T6842] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 307.939427][ T6850] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 308.214205][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.639086][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'. [ 309.278598][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 309.278681][ T29] audit: type=1326 audit(1731745559.121:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 309.406801][ T29] audit: type=1326 audit(1731745559.181:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 309.428680][ T29] audit: type=1326 audit(1731745559.191:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 309.450594][ T29] audit: type=1326 audit(1731745559.191:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 310.296584][ T6870] team0 (unregistering): Port device team_slave_0 removed [ 310.335919][ T6870] team0 (unregistering): Port device team_slave_1 removed [ 311.385325][ T6880] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 311.474464][ T6880] bond0: (slave netdevsim3): Releasing backup interface [ 311.530325][ T6880] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 311.540803][ T6880] team0: Failed to send options change via netlink (err -105) [ 311.552652][ T6880] team0: Port device netdevsim3 added [ 311.592046][ T6885] netlink: 'syz.0.355': attribute type 10 has an invalid length. [ 311.736295][ T6885] team0: Failed to send options change via netlink (err -105) [ 311.745900][ T6885] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 311.762416][ T6885] team0: Port device netdevsim3 removed [ 311.786699][ T6885] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 311.908916][ T29] audit: type=1326 audit(1731745561.751:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 311.931409][ T29] audit: type=1326 audit(1731745561.751:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 311.953953][ T29] audit: type=1326 audit(1731745561.751:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 311.980689][ T29] audit: type=1326 audit(1731745561.761:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.4.361" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 313.609277][ T6909] loop4: detected capacity change from 0 to 1024 [ 313.649784][ T6909] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 313.787417][ T6909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.963509][ T6909] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.602106][ T6919] loop3: detected capacity change from 0 to 1024 [ 314.634499][ T29] audit: type=1326 audit(1731745564.471:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 314.685053][ T6919] EXT4-fs: Ignoring removed orlov option [ 314.691177][ T6919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 314.732707][ T29] audit: type=1326 audit(1731745564.501:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6916 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 315.060687][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.305108][ T6919] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 315.394676][ T6919] bond0: (slave netdevsim3): Releasing backup interface [ 315.494348][ T6919] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 315.504469][ T6919] team0: Failed to send options change via netlink (err -105) [ 315.512383][ T6919] team0: Port device netdevsim3 added [ 315.585519][ T6932] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 315.651955][ T6932] team0: Port device netdevsim3 removed [ 315.672059][ T6932] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 315.806969][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.907739][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.379'. [ 316.742531][ T29] audit: type=1326 audit(1731745566.521:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 316.765054][ T29] audit: type=1326 audit(1731745566.521:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 316.791808][ T29] audit: type=1326 audit(1731745566.531:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 316.815641][ T29] audit: type=1326 audit(1731745566.531:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x7ffc0000 [ 317.734671][ T6965] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 317.875051][ T6965] bond0: (slave netdevsim3): Releasing backup interface [ 317.930020][ T6965] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 317.940736][ T6965] team0: Failed to send options change via netlink (err -105) [ 317.948603][ T6965] team0: Port device netdevsim3 added [ 317.958892][ T6968] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 318.050875][ T6968] team0: Failed to send options change via netlink (err -105) [ 318.060176][ T6968] team0: Failed to send port change of device netdevsim3 via netlink (err -105) [ 318.071523][ T6968] team0: Port device netdevsim3 removed [ 318.091074][ T6968] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 318.133429][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 318.881603][ T29] audit: type=1326 audit(1731745568.721:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 318.952499][ T29] audit: type=1326 audit(1731745568.761:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 318.974788][ T29] audit: type=1326 audit(1731745568.781:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=81 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 318.996706][ T29] audit: type=1326 audit(1731745568.781:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63579 code=0x7ffc0000 [ 319.271539][ T6991] pim6reg1: entered promiscuous mode [ 319.277473][ T6991] pim6reg1: entered allmulticast mode [ 320.131947][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 320.387517][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 320.387594][ T29] audit: type=1326 audit(1731745570.231:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.416736][ T29] audit: type=1326 audit(1731745570.231:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.431431][ T7001] loop4: detected capacity change from 0 to 2048 [ 320.464884][ T7007] loop2: detected capacity change from 0 to 1024 [ 320.489072][ T7007] EXT4-fs: Ignoring removed orlov option [ 320.495656][ T7007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 320.546936][ T7001] Alternate GPT is invalid, using primary GPT. [ 320.554471][ T7001] loop4: p1 p2 p3 [ 320.573083][ T29] audit: type=1326 audit(1731745570.381:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.595612][ T29] audit: type=1326 audit(1731745570.381:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.618031][ T29] audit: type=1326 audit(1731745570.381:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.640846][ T29] audit: type=1326 audit(1731745570.411:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.668999][ T29] audit: type=1326 audit(1731745570.411:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.691491][ T29] audit: type=1326 audit(1731745570.421:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=313 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.715660][ T29] audit: type=1326 audit(1731745570.421:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.738253][ T29] audit: type=1326 audit(1731745570.441:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.4.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 320.924491][ T7007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.194645][ T7007] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 321.333305][ T7007] bond0: (slave netdevsim3): Releasing backup interface [ 321.397576][ T7016] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 321.417786][ T7016] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 322.184473][ T5797] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.457409][ T7035] ===================================================== [ 322.464806][ T7035] BUG: KMSAN: uninit-value in __netif_receive_skb_core+0x555/0x6c90 [ 322.473232][ T7035] __netif_receive_skb_core+0x555/0x6c90 [ 322.479088][ T7035] __netif_receive_skb_list_core+0x31e/0x1670 [ 322.485512][ T7035] netif_receive_skb_list_internal+0x1085/0x1700 [ 322.492075][ T7035] netif_receive_skb_list+0x5a/0x460 [ 322.497736][ T7035] bpf_test_run_xdp_live+0x2e72/0x3470 [ 322.503600][ T7035] bpf_prog_test_run_xdp+0xf1d/0x1ae0 [ 322.509200][ T7035] bpf_prog_test_run+0x5e5/0xa30 [ 322.514525][ T7035] __sys_bpf+0x6aa/0xd90 [ 322.518972][ T7035] __ia32_sys_bpf+0xa0/0xe0 [ 322.523801][ T7035] ia32_sys_call+0x30fe/0x40d0 [ 322.528779][ T7035] __do_fast_syscall_32+0xb0/0x110 [ 322.534173][ T7035] do_fast_syscall_32+0x38/0x80 [ 322.539188][ T7035] do_SYSENTER_32+0x1f/0x30 [ 322.543962][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.550524][ T7035] [ 322.553063][ T7035] Uninit was stored to memory at: [ 322.558364][ T7035] __xdp_build_skb_from_frame+0x8d7/0x9e0 [ 322.564422][ T7035] bpf_test_run_xdp_live+0x2a4a/0x3470 [ 322.570141][ T7035] bpf_prog_test_run_xdp+0xf1d/0x1ae0 [ 322.575881][ T7035] bpf_prog_test_run+0x5e5/0xa30 [ 322.581062][ T7035] __sys_bpf+0x6aa/0xd90 [ 322.585633][ T7035] __ia32_sys_bpf+0xa0/0xe0 [ 322.590337][ T7035] ia32_sys_call+0x30fe/0x40d0 [ 322.595441][ T7035] __do_fast_syscall_32+0xb0/0x110 [ 322.600734][ T7035] do_fast_syscall_32+0x38/0x80 [ 322.605869][ T7035] do_SYSENTER_32+0x1f/0x30 [ 322.610540][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.617210][ T7035] [ 322.619644][ T7035] Local variable reuse.i created at: [ 322.625155][ T7035] mas_wr_store_entry+0x11f7/0x8b30 [ 322.630565][ T7035] mas_store_prealloc+0x15ab/0x19a0 [ 322.636103][ T7035] [ 322.638556][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.0.420 Not tainted 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 322.649450][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 322.659766][ T7035] ===================================================== [ 322.666920][ T7035] Disabling lock debugging due to kernel taint [ 322.673311][ T7035] Kernel panic - not syncing: kmsan.panic set ... [ 322.679858][ T7035] CPU: 0 UID: 0 PID: 7035 Comm: syz.0.420 Tainted: G B 6.12.0-rc7-syzkaller-00187-gf868cd251776 #0 [ 322.692131][ T7035] Tainted: [B]=BAD_PAGE [ 322.696387][ T7035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 322.706584][ T7035] Call Trace: [ 322.709972][ T7035] [ 322.713025][ T7035] dump_stack_lvl+0x216/0x2d0 [ 322.717923][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.723921][ T7035] dump_stack+0x1e/0x30 [ 322.728284][ T7035] panic+0x4e2/0xcf0 [ 322.732374][ T7035] ? kmsan_get_metadata+0xa1/0x1c0 [ 322.737661][ T7035] kmsan_report+0x2c7/0x2d0 [ 322.742327][ T7035] ? __msan_warning+0x95/0x120 [ 322.747281][ T7035] ? __netif_receive_skb_core+0x555/0x6c90 [ 322.753310][ T7035] ? __netif_receive_skb_list_core+0x31e/0x1670 [ 322.759776][ T7035] ? netif_receive_skb_list_internal+0x1085/0x1700 [ 322.766497][ T7035] ? netif_receive_skb_list+0x5a/0x460 [ 322.772162][ T7035] ? bpf_test_run_xdp_live+0x2e72/0x3470 [ 322.778025][ T7035] ? bpf_prog_test_run_xdp+0xf1d/0x1ae0 [ 322.783783][ T7035] ? bpf_prog_test_run+0x5e5/0xa30 [ 322.789110][ T7035] ? __sys_bpf+0x6aa/0xd90 [ 322.793732][ T7035] ? __ia32_sys_bpf+0xa0/0xe0 [ 322.798600][ T7035] ? ia32_sys_call+0x30fe/0x40d0 [ 322.803743][ T7035] ? __do_fast_syscall_32+0xb0/0x110 [ 322.809192][ T7035] ? do_fast_syscall_32+0x38/0x80 [ 322.814380][ T7035] ? do_SYSENTER_32+0x1f/0x30 [ 322.819211][ T7035] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.825936][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.831305][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.837283][ T7035] ? __netif_receive_skb_core+0x61/0x6c90 [ 322.843214][ T7035] ? filter_irq_stacks+0x60/0x1a0 [ 322.848461][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.853817][ T7035] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 322.860364][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.865716][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.871688][ T7035] __msan_warning+0x95/0x120 [ 322.876467][ T7035] __netif_receive_skb_core+0x555/0x6c90 [ 322.882307][ T7035] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 322.888842][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.894220][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.900230][ T7035] __netif_receive_skb_list_core+0x31e/0x1670 [ 322.906506][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.912510][ T7035] netif_receive_skb_list_internal+0x1085/0x1700 [ 322.919083][ T7035] netif_receive_skb_list+0x5a/0x460 [ 322.924579][ T7035] bpf_test_run_xdp_live+0x2e72/0x3470 [ 322.930285][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.935669][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.941642][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.947001][ T7035] ? bpf_test_run_xdp_live+0x722/0x3470 [ 322.952764][ T7035] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 322.958877][ T7035] ? _copy_from_user+0xce/0x110 [ 322.963925][ T7035] ? kmsan_get_metadata+0x13e/0x1c0 [ 322.969287][ T7035] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 322.975266][ T7035] bpf_prog_test_run_xdp+0xf1d/0x1ae0 [ 322.980873][ T7035] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 322.986893][ T7035] bpf_prog_test_run+0x5e5/0xa30 [ 322.992047][ T7035] __sys_bpf+0x6aa/0xd90 [ 322.996507][ T7035] __ia32_sys_bpf+0xa0/0xe0 [ 323.001193][ T7035] ia32_sys_call+0x30fe/0x40d0 [ 323.006167][ T7035] __do_fast_syscall_32+0xb0/0x110 [ 323.011567][ T7035] ? irqentry_exit+0x16/0x60 [ 323.016364][ T7035] do_fast_syscall_32+0x38/0x80 [ 323.021380][ T7035] do_SYSENTER_32+0x1f/0x30 [ 323.026041][ T7035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.032594][ T7035] RIP: 0023:0xf7f63579 [ 323.036795][ T7035] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.056591][ T7035] RSP: 002b:00000000f56e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 323.065177][ T7035] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 323.073291][ T7035] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.081390][ T7035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.089489][ T7035] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.097589][ T7035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.105707][ T7035] [ 323.109001][ T7035] Kernel Offset: disabled [ 323.113384][ T7035] Rebooting in 86400 seconds..