last executing test programs: 2.734035738s ago: executing program 1 (id=214): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eec", 0x70}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf", 0xe5}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a381", 0x2e}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa43", 0xc3}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.518551167s ago: executing program 1 (id=216): lseek(0xffffffffffffffff, 0x10001, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.297305765s ago: executing program 0 (id=220): syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 2.204702004s ago: executing program 4 (id=223): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800300}, 0x20000801) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000080)={0x0, 0x0}) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 2.063096369s ago: executing program 0 (id=224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x1a8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x154, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x68, 0x17, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa6}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.785581775s ago: executing program 0 (id=227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x200000}, &(0x7f0000000240), &(0x7f0000000280)) 1.754615256s ago: executing program 3 (id=228): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.486029103s ago: executing program 3 (id=230): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0xb, 0xffffff24, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x20, 0x0, 0x0, 0x0) 1.478968943s ago: executing program 0 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x4000000000002ab}, 0x18) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.366454394s ago: executing program 1 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) 1.062563931s ago: executing program 2 (id=234): syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 1.006084365s ago: executing program 1 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000903000000000000000000000d008d0f61"], &(0x7f0000000100)=""/223, 0x3e, 0xdf, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x1c, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000000000009500000000000000b7080000000000007b8af8", @ANYRES32, @ANYBLOB="0000000000002000b70500f7ffffff0085000000a5000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x401, 0x93, &(0x7f0000000480)=""/147, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000980)=[{0x1, 0x1}, {0x5, 0x0, 0xf, 0x1}, {0x5, 0x2, 0xe, 0x9}, {0x0, 0x3, 0x0, 0x7}], 0x10, 0x7}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 1.005658587s ago: executing program 0 (id=236): lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), &(0x7f00000001c0)=@v2={0x2000000, [{0x0, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x125) 995.699036ms ago: executing program 3 (id=237): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x57fffffc, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r0, 0x40047438, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047457, 0x0) 838.19087ms ago: executing program 2 (id=238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x1a8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x16c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x154, 0x1, [@m_simple={0xb4, 0x1e, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x68f6, 0x6, 0x2, 0x8, 0x9}}, @TCA_DEF_DATA={0x9, 0x3, '/-@@\x00'}, @TCA_DEF_DATA={0x3d, 0x3, '\x00\x94\xe4\xe2X\xce\xbar\x069\xf3\xff\x8d\x94\x1ao\xa1,\xa4\xc1\xcc\x1e\x9aS>\a\xd2R\x85\v\x80\xea\x1e\xc8W\xea\x99\xacos\x80\x1d\x8b\xd9`Ewb\xa5&iu@\xfd\x8c\xde\x00'}, @TCA_DEF_DATA={0x1e, 0x3, 'cpuacct.usage_percpu_user\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x68, 0x17, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_ZONE={0x6, 0x4, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @local}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa6}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 787.793692ms ago: executing program 0 (id=239): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendto$inet6(r0, &(0x7f00000007c0)="82edb1ea80", 0x5, 0x8004, 0x0, 0x0) shutdown(r0, 0x2) 787.074558ms ago: executing program 3 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 704.435608ms ago: executing program 4 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lgetxattr(0x0, 0x0, 0x0, 0x0) 636.326583ms ago: executing program 2 (id=242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = memfd_secret(0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), 0x0, 0x0, 0x0) 560.448818ms ago: executing program 3 (id=243): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pivot_root(0x0, 0x0) 450.450381ms ago: executing program 4 (id=244): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) getdents64(0xffffffffffffffff, 0x0, 0x0) 450.087163ms ago: executing program 2 (id=245): socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x0) socket$tipc(0x1e, 0x4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 390.052115ms ago: executing program 3 (id=246): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 326.830237ms ago: executing program 2 (id=247): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0xb, 0xffffff24, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x20, 0x0, 0x0, 0x0) 234.50154ms ago: executing program 4 (id=248): syz_emit_ethernet(0xb6, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xd, "c045d45768dc37efa0fc58"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@empty, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0x0]}]}}}}}}}, 0x0) 151.153834ms ago: executing program 2 (id=249): ioprio_set$pid(0x7, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf79d}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="70020000", @ANYRES16=r8, @ANYBLOB="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"], 0x270}}, 0x2c0c4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000180)={0x2, [0x0, 0x0]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 148.596413ms ago: executing program 4 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) sync_file_range(r2, 0xffffffffffffff00, 0x3ff, 0x5) 137.073203ms ago: executing program 1 (id=251): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50}, {0x6}]}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1}}}}}}, 0x0) 929.782µs ago: executing program 4 (id=252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) accept4(r2, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=253): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f", 0x20}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2", 0xa8}, {&(0x7f0000000e80)="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", 0x167}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 70.507543][ T5816] cgroup: Unknown subsys name 'net' [ 70.654329][ T5816] cgroup: Unknown subsys name 'cpuset' [ 70.663058][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.594575][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.601444][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.050307][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.976593][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.985427][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.993751][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.001980][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.009869][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.027227][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.041329][ T5150] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.050049][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.057938][ T5150] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.076405][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.084473][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.092045][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.092509][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.110886][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.119298][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.120067][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.134510][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.134579][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.148827][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.151744][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.164129][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.164451][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.179544][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.192006][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.201610][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.620437][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 76.848319][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 76.939017][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.946495][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.954404][ T5832] bridge_slave_0: entered allmulticast mode [ 76.961672][ T5832] bridge_slave_0: entered promiscuous mode [ 77.013817][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.021150][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.028430][ T5832] bridge_slave_1: entered allmulticast mode [ 77.037040][ T5832] bridge_slave_1: entered promiscuous mode [ 77.045491][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 77.114963][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.145545][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 77.167015][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.176762][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 77.232879][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.240095][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.247889][ T5841] bridge_slave_0: entered allmulticast mode [ 77.255382][ T5841] bridge_slave_0: entered promiscuous mode [ 77.304495][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.311787][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.318944][ T5841] bridge_slave_1: entered allmulticast mode [ 77.326150][ T5841] bridge_slave_1: entered promiscuous mode [ 77.357684][ T5832] team0: Port device team_slave_0 added [ 77.407011][ T5832] team0: Port device team_slave_1 added [ 77.489917][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.510344][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.517775][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.527937][ T5842] bridge_slave_0: entered allmulticast mode [ 77.535068][ T5842] bridge_slave_0: entered promiscuous mode [ 77.544187][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.551709][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.558946][ T5842] bridge_slave_1: entered allmulticast mode [ 77.567166][ T5842] bridge_slave_1: entered promiscuous mode [ 77.575111][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.582416][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.608542][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.628397][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.664075][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.672063][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.698143][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.753781][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.761258][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.768462][ T5843] bridge_slave_0: entered allmulticast mode [ 77.776051][ T5843] bridge_slave_0: entered promiscuous mode [ 77.797354][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.824146][ T5841] team0: Port device team_slave_0 added [ 77.830890][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.842685][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.849873][ T5843] bridge_slave_1: entered allmulticast mode [ 77.857122][ T5843] bridge_slave_1: entered promiscuous mode [ 77.866622][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.888288][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.895520][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.903047][ T5844] bridge_slave_0: entered allmulticast mode [ 77.910101][ T5844] bridge_slave_0: entered promiscuous mode [ 77.919318][ T5841] team0: Port device team_slave_1 added [ 77.960461][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.969837][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.977156][ T5844] bridge_slave_1: entered allmulticast mode [ 77.986228][ T5844] bridge_slave_1: entered promiscuous mode [ 78.034386][ T5832] hsr_slave_0: entered promiscuous mode [ 78.040934][ T5832] hsr_slave_1: entered promiscuous mode [ 78.071608][ T5840] Bluetooth: hci0: command tx timeout [ 78.084252][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.096443][ T5842] team0: Port device team_slave_0 added [ 78.106305][ T5842] team0: Port device team_slave_1 added [ 78.126867][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.134484][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.151579][ T5840] Bluetooth: hci1: command tx timeout [ 78.164784][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.181223][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.217701][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.227557][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.231378][ T51] Bluetooth: hci4: command tx timeout [ 78.238656][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.240180][ T5828] Bluetooth: hci2: command tx timeout [ 78.270022][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.272744][ T5840] Bluetooth: hci3: command tx timeout [ 78.337209][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.365207][ T5843] team0: Port device team_slave_0 added [ 78.379161][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.386270][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.414110][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.426894][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.434264][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.460457][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.485205][ T5843] team0: Port device team_slave_1 added [ 78.565758][ T5841] hsr_slave_0: entered promiscuous mode [ 78.572147][ T5841] hsr_slave_1: entered promiscuous mode [ 78.578152][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.586255][ T5841] Cannot create hsr debugfs directory [ 78.595143][ T5844] team0: Port device team_slave_0 added [ 78.603875][ T5844] team0: Port device team_slave_1 added [ 78.676686][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.684517][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.710816][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.723913][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.731166][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.757177][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.788032][ T5842] hsr_slave_0: entered promiscuous mode [ 78.795016][ T5842] hsr_slave_1: entered promiscuous mode [ 78.801395][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.808959][ T5842] Cannot create hsr debugfs directory [ 78.827940][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.837134][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.864032][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.935146][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.944723][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.972135][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.059995][ T5843] hsr_slave_0: entered promiscuous mode [ 79.066639][ T5843] hsr_slave_1: entered promiscuous mode [ 79.073168][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.080740][ T5843] Cannot create hsr debugfs directory [ 79.196078][ T5844] hsr_slave_0: entered promiscuous mode [ 79.205157][ T5844] hsr_slave_1: entered promiscuous mode [ 79.211546][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.219148][ T5844] Cannot create hsr debugfs directory [ 79.494506][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.534256][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.577845][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.604358][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.672990][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.689326][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.716059][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.735715][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.799596][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.831716][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.863574][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.874648][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.942346][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.959121][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.969228][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.993405][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.094388][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.108739][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.124094][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.140398][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.151742][ T5840] Bluetooth: hci0: command tx timeout [ 80.183437][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.205758][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.241683][ T5840] Bluetooth: hci1: command tx timeout [ 80.267363][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.301045][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.308990][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.321812][ T5840] Bluetooth: hci3: command tx timeout [ 80.327305][ T51] Bluetooth: hci4: command tx timeout [ 80.331460][ T5828] Bluetooth: hci2: command tx timeout [ 80.355575][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.362738][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.399088][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.409871][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.447368][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.454571][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.490952][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.501756][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.533568][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.557345][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.564567][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.615146][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.630738][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.637946][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.666424][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.673630][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.695058][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.716591][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.731728][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.738895][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.778154][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.785514][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.859413][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.882399][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.905923][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.935298][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.945938][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.018777][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.055523][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.063309][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.074662][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.110627][ T5842] veth0_vlan: entered promiscuous mode [ 81.125297][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.132485][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.164791][ T5842] veth1_vlan: entered promiscuous mode [ 81.177530][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.200577][ T5832] veth0_vlan: entered promiscuous mode [ 81.271553][ T5832] veth1_vlan: entered promiscuous mode [ 81.295435][ T5842] veth0_macvtap: entered promiscuous mode [ 81.306473][ T5841] veth0_vlan: entered promiscuous mode [ 81.337497][ T5842] veth1_macvtap: entered promiscuous mode [ 81.369417][ T5841] veth1_vlan: entered promiscuous mode [ 81.387882][ T5843] veth0_vlan: entered promiscuous mode [ 81.417445][ T5843] veth1_vlan: entered promiscuous mode [ 81.427686][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.457873][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.469684][ T5832] veth0_macvtap: entered promiscuous mode [ 81.505520][ T5832] veth1_macvtap: entered promiscuous mode [ 81.519477][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.530473][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.539406][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.548476][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.577529][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.598465][ T5843] veth0_macvtap: entered promiscuous mode [ 81.616403][ T5841] veth0_macvtap: entered promiscuous mode [ 81.636237][ T5843] veth1_macvtap: entered promiscuous mode [ 81.664666][ T5841] veth1_macvtap: entered promiscuous mode [ 81.699842][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.727543][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.746231][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.769992][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.779085][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.788846][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.882703][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.895804][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.909151][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.936591][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.977208][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.990133][ T5844] veth0_vlan: entered promiscuous mode [ 82.007522][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.019016][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.034981][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.060551][ T5844] veth1_vlan: entered promiscuous mode [ 82.082271][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.092444][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.101615][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.110356][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.183563][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.201962][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210694][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.225591][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.240713][ T5828] Bluetooth: hci0: command tx timeout [ 82.246936][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.279682][ T5844] veth0_macvtap: entered promiscuous mode [ 82.311856][ T5828] Bluetooth: hci1: command tx timeout [ 82.357278][ T5844] veth1_macvtap: entered promiscuous mode [ 82.392121][ T5828] Bluetooth: hci4: command tx timeout [ 82.392387][ T51] Bluetooth: hci3: command tx timeout [ 82.397559][ T5828] Bluetooth: hci2: command tx timeout [ 82.502769][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.521492][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.540869][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.547490][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.560392][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.570839][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.600114][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.610750][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.619624][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.628468][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.655209][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.686296][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.754296][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.793525][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.880463][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.906115][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.988254][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.055669][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.172251][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.180124][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.355382][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.387137][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.503705][ T5939] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 84.317727][ T5828] Bluetooth: hci0: command tx timeout [ 84.393557][ T5828] Bluetooth: hci1: command tx timeout [ 84.472454][ T5828] Bluetooth: hci3: command tx timeout [ 84.477217][ T51] Bluetooth: hci4: command tx timeout [ 84.477899][ T5828] Bluetooth: hci2: command tx timeout [ 84.548120][ T30] audit: type=1326 audit(1750887766.054:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 84.718753][ T30] audit: type=1326 audit(1750887766.084:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 84.792006][ T30] audit: type=1326 audit(1750887766.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 84.878257][ T30] audit: type=1326 audit(1750887766.094:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 84.979655][ T30] audit: type=1326 audit(1750887766.094:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.058048][ T30] audit: type=1326 audit(1750887766.094:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.180258][ T30] audit: type=1326 audit(1750887766.094:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.288210][ T30] audit: type=1326 audit(1750887766.094:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.386789][ T30] audit: type=1326 audit(1750887766.094:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.495998][ T5991] netlink: 'syz.4.28': attribute type 13 has an invalid length. [ 85.511659][ T30] audit: type=1326 audit(1750887766.094:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.1.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643c38e929 code=0x7ffc0000 [ 85.811173][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.819741][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.842267][ T5987] netlink: 68 bytes leftover after parsing attributes in process `syz.2.26'. [ 86.188875][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.202385][ T6006] capability: warning: `syz.2.33' uses deprecated v2 capabilities in a way that may be insecure [ 86.253030][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.518388][ T5991] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.542220][ T5991] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.566651][ T5991] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.587048][ T5991] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.673568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.962480][ T978] cfg80211: failed to load regulatory.db [ 86.981214][ T6026] Zero length message leads to an empty skb [ 87.186296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.297097][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.333915][ T6015] cgroup: fork rejected by pids controller in /syz2 [ 87.392629][ T6087] hub 1-0:1.0: USB hub found [ 87.397918][ T6087] hub 1-0:1.0: 1 port detected [ 87.544695][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 87.560024][ T6040] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.594632][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d40c00: rx timeout, send abort [ 87.635387][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'. [ 87.817570][ T6113] rdma_op ffff8880589731f0 conn xmit_rdma 0000000000000000 [ 88.095049][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d40800: rx timeout, send abort [ 88.103903][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d40c00: abort rx timeout. Force session deactivation [ 88.406643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.446171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.460416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.479223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.490591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.603362][ C0] vcan0: j1939_tp_rxtimer: 0xffff888034d40800: abort rx timeout. Force session deactivation [ 89.031477][ T6149] hub 1-0:1.0: USB hub found [ 89.051846][ T6149] hub 1-0:1.0: 1 port detected [ 89.219707][ T6153] vlan2: entered allmulticast mode [ 89.242482][ T6153] vlan1: entered allmulticast mode [ 89.279966][ T6153] veth0_vlan: entered allmulticast mode [ 89.573725][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 89.680234][ T6171] 8021q: adding VLAN 0 to HW filter on device team1 [ 89.815177][ T6174] syzkaller0: entered allmulticast mode [ 89.863144][ T6174] syzkaller0 (unregistering): left allmulticast mode [ 91.758299][ T6229] loop9: detected capacity change from 0 to 7 [ 91.784802][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.811298][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.827439][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.880958][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.893654][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.907440][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.918260][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.949522][ T6229] ldm_validate_partition_table(): Disk read failed. [ 91.966892][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.983988][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 91.993956][ T6229] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.002212][ T6229] Dev loop9: unable to read RDB block 0 [ 92.008295][ T6229] loop9: unable to read partition table [ 92.014896][ T6229] loop9: partition table beyond EOD, truncated [ 92.025820][ T6229] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 92.025820][ T6229] ) failed (rc=-5) [ 92.216518][ T6240] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 93.121904][ T6261] hub 1-0:1.0: USB hub found [ 93.143943][ T6261] hub 1-0:1.0: 1 port detected [ 93.749194][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 94.137361][ T6289] mmap: syz.4.125 (6289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.279222][ T6293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.127'. [ 94.691309][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.131'. [ 94.901487][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 95.973907][ T6340] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.500389][ T6351] hub 1-0:1.0: USB hub found [ 96.505480][ T6351] hub 1-0:1.0: 1 port detected [ 97.905011][ T6389] hub 1-0:1.0: USB hub found [ 97.918329][ T6389] hub 1-0:1.0: 1 port detected [ 98.691694][ T6412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 99.292816][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'. [ 100.846082][ T6492] netlink: 'syz.3.217': attribute type 5 has an invalid length. [ 100.890012][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 101.351467][ T6505] hub 1-0:1.0: USB hub found [ 101.375997][ T6505] hub 1-0:1.0: 1 port detected [ 101.586870][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 101.586886][ T30] audit: type=1326 audit(1750887783.094:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 101.697252][ T30] audit: type=1326 audit(1750887783.094:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 101.821101][ T30] audit: type=1326 audit(1750887783.134:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 101.929181][ T30] audit: type=1326 audit(1750887783.134:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 101.990968][ T30] audit: type=1326 audit(1750887783.134:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.051227][ T30] audit: type=1326 audit(1750887783.154:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.075943][ T30] audit: type=1326 audit(1750887783.154:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.098414][ T30] audit: type=1326 audit(1750887783.154:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.125631][ T30] audit: type=1326 audit(1750887783.154:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.180668][ T30] audit: type=1326 audit(1750887783.154:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0478e929 code=0x7ffc0000 [ 102.554721][ T6539] netlink: 'syz.3.240': attribute type 5 has an invalid length. [ 102.576133][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 103.165418][ T6559] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 103.238970][ T6559] team0: Port device dummy0 added [ 103.282218][ T6559] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 103.314774][ T6559] [ 103.317245][ T6559] ====================================================== [ 103.324278][ T6559] WARNING: possible circular locking dependency detected [ 103.331426][ T6559] 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 Not tainted [ 103.338554][ T6559] ------------------------------------------------------ [ 103.345589][ T6559] syz.2.249/6559 is trying to acquire lock: [ 103.351500][ T6559] ffff888079c68e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20 [ 103.361463][ T6559] [ 103.361463][ T6559] but task is already holding lock: [ 103.368908][ T6559] ffff888031846d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 103.378582][ T6559] [ 103.378582][ T6559] which lock already depends on the new lock. [ 103.378582][ T6559] [ 103.388975][ T6559] [ 103.388975][ T6559] the existing dependency chain (in reverse order) is: [ 103.398065][ T6559] [ 103.398065][ T6559] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 103.406496][ T6559] lock_acquire+0x120/0x360 [ 103.411729][ T6559] __mutex_lock+0x182/0xe80 [ 103.416772][ T6559] dev_set_mtu+0x10e/0x260 [ 103.421734][ T6559] team_add_slave+0x8b8/0x2840 [ 103.427083][ T6559] do_set_master+0x530/0x6d0 [ 103.432383][ T6559] do_setlink+0xcf0/0x41c0 [ 103.437343][ T6559] rtnl_newlink+0x160b/0x1c70 [ 103.443086][ T6559] rtnetlink_rcv_msg+0x7cc/0xb70 [ 103.449002][ T6559] netlink_rcv_skb+0x208/0x470 [ 103.454570][ T6559] netlink_unicast+0x75b/0x8d0 [ 103.460045][ T6559] netlink_sendmsg+0x805/0xb30 [ 103.465573][ T6559] __sock_sendmsg+0x219/0x270 [ 103.470813][ T6559] ____sys_sendmsg+0x505/0x830 [ 103.476137][ T6559] ___sys_sendmsg+0x21f/0x2a0 [ 103.481349][ T6559] __x64_sys_sendmsg+0x19b/0x260 [ 103.486827][ T6559] do_syscall_64+0xfa/0x3b0 [ 103.491861][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.498468][ T6559] [ 103.498468][ T6559] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 103.506658][ T6559] validate_chain+0xb9b/0x2140 [ 103.511965][ T6559] __lock_acquire+0xab9/0xd20 [ 103.517198][ T6559] lock_acquire+0x120/0x360 [ 103.522498][ T6559] __mutex_lock+0x182/0xe80 [ 103.527646][ T6559] team_device_event+0x182/0xa20 [ 103.533643][ T6559] notifier_call_chain+0x1b3/0x3e0 [ 103.539316][ T6559] __dev_notify_flags+0x18d/0x2e0 [ 103.544868][ T6559] netif_change_flags+0xe8/0x1a0 [ 103.550322][ T6559] do_setlink+0xc55/0x41c0 [ 103.555264][ T6559] rtnl_newlink+0x160b/0x1c70 [ 103.560458][ T6559] rtnetlink_rcv_msg+0x7cc/0xb70 [ 103.565912][ T6559] netlink_rcv_skb+0x208/0x470 [ 103.571191][ T6559] netlink_unicast+0x75b/0x8d0 [ 103.576469][ T6559] netlink_sendmsg+0x805/0xb30 [ 103.581753][ T6559] __sock_sendmsg+0x219/0x270 [ 103.586948][ T6559] ____sys_sendmsg+0x505/0x830 [ 103.592226][ T6559] ___sys_sendmsg+0x21f/0x2a0 [ 103.597494][ T6559] __x64_sys_sendmsg+0x19b/0x260 [ 103.602950][ T6559] do_syscall_64+0xfa/0x3b0 [ 103.607973][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.614379][ T6559] [ 103.614379][ T6559] other info that might help us debug this: [ 103.614379][ T6559] [ 103.624689][ T6559] Possible unsafe locking scenario: [ 103.624689][ T6559] [ 103.632587][ T6559] CPU0 CPU1 [ 103.637960][ T6559] ---- ---- [ 103.643411][ T6559] lock(&dev_instance_lock_key#3); [ 103.648624][ T6559] lock(team->team_lock_key#3); [ 103.656089][ T6559] lock(&dev_instance_lock_key#3); [ 103.663814][ T6559] lock(team->team_lock_key#3); [ 103.668858][ T6559] [ 103.668858][ T6559] *** DEADLOCK *** [ 103.668858][ T6559] [ 103.677108][ T6559] 2 locks held by syz.2.249/6559: [ 103.682133][ T6559] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 103.691214][ T6559] #1: ffff888031846d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0 [ 103.701324][ T6559] [ 103.701324][ T6559] stack backtrace: [ 103.707498][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.2.249 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) [ 103.707522][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.707543][ T6559] Call Trace: [ 103.707553][ T6559] [ 103.707560][ T6559] dump_stack_lvl+0x189/0x250 [ 103.707588][ T6559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.707609][ T6559] ? __pfx__printk+0x10/0x10 [ 103.707624][ T6559] ? print_lock_name+0xde/0x100 [ 103.707637][ T6559] print_circular_bug+0x2ee/0x310 [ 103.707652][ T6559] check_noncircular+0x134/0x160 [ 103.707666][ T6559] validate_chain+0xb9b/0x2140 [ 103.707681][ T6559] ? __lock_acquire+0xab9/0xd20 [ 103.707702][ T6559] __lock_acquire+0xab9/0xd20 [ 103.707734][ T6559] ? team_device_event+0x182/0xa20 [ 103.707750][ T6559] lock_acquire+0x120/0x360 [ 103.707765][ T6559] ? team_device_event+0x182/0xa20 [ 103.707781][ T6559] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 103.707801][ T6559] __mutex_lock+0x182/0xe80 [ 103.707819][ T6559] ? team_device_event+0x182/0xa20 [ 103.707835][ T6559] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 103.707850][ T6559] ? team_device_event+0x182/0xa20 [ 103.707864][ T6559] ? __pfx___mutex_lock+0x10/0x10 [ 103.707881][ T6559] ? __timer_delete_sync+0x218/0x2d0 [ 103.707901][ T6559] team_device_event+0x182/0xa20 [ 103.707916][ T6559] notifier_call_chain+0x1b3/0x3e0 [ 103.707938][ T6559] __dev_notify_flags+0x18d/0x2e0 [ 103.707955][ T6559] ? __pfx___dev_notify_flags+0x10/0x10 [ 103.707969][ T6559] ? __dev_change_flags+0x4cc/0x6d0 [ 103.707985][ T6559] ? __pfx___dev_change_flags+0x10/0x10 [ 103.708000][ T6559] ? __pfx_console_unlock+0x10/0x10 [ 103.708013][ T6559] ? irq_work_queue+0xbc/0x140 [ 103.708030][ T6559] netif_change_flags+0xe8/0x1a0 [ 103.708046][ T6559] do_setlink+0xc55/0x41c0 [ 103.708065][ T6559] ? __pfx_do_setlink+0x10/0x10 [ 103.708078][ T6559] ? _printk+0xcf/0x120 [ 103.708090][ T6559] ? __pfx____ratelimit+0x10/0x10 [ 103.708111][ T6559] ? __lock_acquire+0xab9/0xd20 [ 103.708130][ T6559] ? __mutex_trylock_common+0x153/0x260 [ 103.708143][ T6559] ? __pfx___mutex_trylock_common+0x10/0x10 [ 103.708157][ T6559] ? rcu_is_watching+0x15/0xb0 [ 103.708176][ T6559] ? trace_contention_end+0x39/0x120 [ 103.708188][ T6559] ? __mutex_lock+0x330/0xe80 [ 103.708207][ T6559] ? __pfx_aa_get_newest_label+0x10/0x10 [ 103.708224][ T6559] ? rtnl_newlink+0x8db/0x1c70 [ 103.708236][ T6559] ? rcu_is_watching+0x15/0xb0 [ 103.708255][ T6559] ? __pfx___mutex_lock+0x10/0x10 [ 103.708276][ T6559] ? ns_capable+0x8a/0xf0 [ 103.708294][ T6559] ? rtnl_link_get_net_capable+0x16a/0x350 [ 103.708309][ T6559] rtnl_newlink+0x160b/0x1c70 [ 103.708321][ T6559] ? netlink_sendmsg+0x805/0xb30 [ 103.708339][ T6559] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.708357][ T6559] ? kasan_quarantine_put+0xdd/0x220 [ 103.708376][ T6559] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.708396][ T6559] ? nlmon_xmit+0xb0/0x100 [ 103.708412][ T6559] ? kmem_cache_free+0x18f/0x400 [ 103.708427][ T6559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 103.708445][ T6559] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.708462][ T6559] ? __local_bh_enable_ip+0x12d/0x1c0 [ 103.708480][ T6559] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 103.708499][ T6559] ? __dev_queue_xmit+0x27e/0x3a70 [ 103.708519][ T6559] ? __lock_acquire+0xab9/0xd20 [ 103.708542][ T6559] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.708554][ T6559] rtnetlink_rcv_msg+0x7cc/0xb70 [ 103.708568][ T6559] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 103.708580][ T6559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.708592][ T6559] ? ref_tracker_free+0x63a/0x7d0 [ 103.708608][ T6559] ? __copy_skb_header+0xa7/0x550 [ 103.708624][ T6559] ? __pfx_ref_tracker_free+0x10/0x10 [ 103.708639][ T6559] ? __skb_clone+0x63/0x7a0 [ 103.708656][ T6559] netlink_rcv_skb+0x208/0x470 [ 103.708670][ T6559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.708683][ T6559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.708701][ T6559] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.708714][ T6559] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.708734][ T6559] netlink_unicast+0x75b/0x8d0 [ 103.708749][ T6559] netlink_sendmsg+0x805/0xb30 [ 103.708766][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.708780][ T6559] ? aa_sock_msg_perm+0x94/0x160 [ 103.708796][ T6559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.708811][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.708825][ T6559] __sock_sendmsg+0x219/0x270 [ 103.708845][ T6559] ____sys_sendmsg+0x505/0x830 [ 103.708862][ T6559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.708879][ T6559] ? import_iovec+0x74/0xa0 [ 103.708893][ T6559] ___sys_sendmsg+0x21f/0x2a0 [ 103.708909][ T6559] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.708934][ T6559] ? __fget_files+0x2a/0x420 [ 103.708947][ T6559] ? __fget_files+0x3a0/0x420 [ 103.708963][ T6559] __x64_sys_sendmsg+0x19b/0x260 [ 103.708979][ T6559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.708997][ T6559] ? rcu_is_watching+0x15/0xb0 [ 103.709016][ T6559] ? do_syscall_64+0xbe/0x3b0 [ 103.709028][ T6559] do_syscall_64+0xfa/0x3b0 [ 103.709038][ T6559] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.709055][ T6559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.709068][ T6559] ? clear_bhb_loop+0x60/0xb0 [ 103.709082][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.709095][ T6559] RIP: 0033:0x7f2ff958e929 [ 103.709117][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.709129][ T6559] RSP: 002b:00007f2ffa3ec038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.709144][ T6559] RAX: ffffffffffffffda RBX: 00007f2ff97b5fa0 RCX: 00007f2ff958e929 [ 103.709153][ T6559] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 103.709162][ T6559] RBP: 00007f2ff9610b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.709170][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.709177][ T6559] R13: 0000000000000000 R14: 00007f2ff97b5fa0 R15: 00007f2ff98dfa28 [ 103.709191][ T6559] [ 104.321558][ T6559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.364778][ T6559] team0: Failed to send options change via netlink (err -105) [ 104.374686][ T6559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 104.389520][ T6559] team0: Port device dummy0 removed [ 104.400247][ T6559] bond0: (slave dummy0): Enslaving as an active interface with an up link