last executing test programs: 34.121312792s ago: executing program 4 (id=109): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000ac0)="f4000900862b3325fe80000000000000dc8b850f2323fcb11e7155c7b5d0f3a3508466cc00007aec2a9c", 0x2a}], 0x1}, 0x4008000) 29.300816563s ago: executing program 4 (id=115): syz_clone(0xc0024500, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, 0x0, 0x20048100) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 24.425822083s ago: executing program 4 (id=126): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0x8}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xe, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x0, 0x0, 0xff05, 0x2, 0xd, 0x7, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r13}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x1}, 0xfffffffffffffec9) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") 20.962198644s ago: executing program 2 (id=134): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x1}, 0x10) close(r0) 19.719167786s ago: executing program 2 (id=136): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@updpolicy={0x1bc, 0x13, 0x1, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@multicast1, 0x4d6, 0x33}, 0xa, @in=@broadcast, 0x3501, 0x3, 0x3, 0x2, 0x4, 0x9, 0x9}, {{@in=@empty, 0x4d4, 0x32}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x1, 0x59, 0x5, 0x8}, {{@in=@empty, 0x4d6, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3503, 0x1, 0x2, 0x1, 0xa, 0x800, 0xfb82}, {{@in6=@mcast1, 0x4d3, 0x32}, 0x0, @in6=@mcast2, 0x3504, 0x2, 0x0, 0x6, 0x8320, 0x1, 0x8001}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 19.135298253s ago: executing program 3 (id=138): mlock2(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) dup3(r0, r1, 0x0) 19.130051943s ago: executing program 1 (id=139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x34, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 18.471459838s ago: executing program 2 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x202) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000141, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee00, r4) getgid() newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x25) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 16.094511122s ago: executing program 4 (id=141): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 15.850421415s ago: executing program 1 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x25, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 15.624241757s ago: executing program 3 (id=143): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000040)='nr0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 15.579621238s ago: executing program 0 (id=144): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstatfs(0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = dup(r0) write$UHID_INPUT(r6, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0x9, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r9, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xe7, 0x24, 0x6b, 0x40, 0x67b, 0x331a, 0x9d94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x1, 0x65, 0x9a, 0x3, 0x0, [], [{{0x9, 0x5, 0x85, 0x12, 0x400, 0x3, 0xfe, 0x7}}]}}]}}]}}, 0x0) 15.105728968s ago: executing program 1 (id=145): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.530818008s ago: executing program 0 (id=146): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 10.985959971s ago: executing program 3 (id=147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x441, 0x104) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) pwrite64(r0, 0x0, 0x0, 0xe7c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xfffffffb) 10.764529376s ago: executing program 1 (id=148): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}], [{@dont_appraise}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mkdir(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, &(0x7f0000000100), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3000000000000009500050800"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 9.410136318s ago: executing program 0 (id=149): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 7.416871621s ago: executing program 3 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x6e0, 0x0, 0x83b}]}) 7.416310521s ago: executing program 4 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r6 = dup(r5) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) unshare(0x62040200) 7.306381691s ago: executing program 2 (id=152): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 6.163361649s ago: executing program 0 (id=153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, 0x0, 0xa0800, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'}) 4.685466028s ago: executing program 1 (id=154): mlock2(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) dup3(r0, r1, 0x0) 3.210369479s ago: executing program 2 (id=155): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000400), 0x800002, 0x800) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffffc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x2}, 0x20) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) io_setup(0x2004, &(0x7f0000000680)) 2.623391322s ago: executing program 4 (id=156): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r1}, 0x10) mlockall(0x7) 2.507356357s ago: executing program 3 (id=157): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 2.27364872s ago: executing program 1 (id=158): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) setresuid(0xee00, 0xee00, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000240)={0x3, 0x7, @status={[0x7, 0x8000000000000000, 0x1, 0x4, 0x4, 0x7]}, [0x1, 0x1, 0xffff, 0xf30f, 0x3, 0x3, 0xe8, 0x9, 0x2, 0x7ff, 0x7, 0xbbb, 0xfffffffffffffff0, 0x6, 0x1ff, 0x3, 0x3, 0xaac, 0x10001, 0x4, 0xff, 0x6, 0x4000000005, 0x4, 0x0, 0x8000000000000001, 0x2, 0x84f, 0x6, 0xa50, 0x80000001, 0x80000000, 0x6, 0x100000000, 0x5874, 0x4, 0xc, 0x0, 0x0, 0xab99, 0x4, 0x0, 0x7, 0x4, 0xe245, 0x3ff, 0x6, 0x4, 0xf000000000000000, 0xffffffffffffffff, 0x0, 0x8, 0x445, 0x6, 0xffffffffffffffff, 0x0, 0x9, 0xf, 0xe, 0xac, 0x3, 0x6, 0x5, 0x5]}) 888.312909ms ago: executing program 0 (id=159): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 721.110333ms ago: executing program 3 (id=160): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1e1, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 65.064102ms ago: executing program 2 (id=161): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000340)={0x3, 0x0, [{0xd, 0x1, 0x5, 0x4, 0x2, 0x3, 0x5}, {0xd, 0x9, 0x4, 0x4, 0x6, 0x5, 0x96}, {0x7, 0x81, 0x4, 0x3, 0x0, 0x2, 0x1c00}]}) 0s ago: executing program 0 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x8b0, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x884, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 366.852325][ T5816] cgroup: Unknown subsys name 'net' [ 367.039134][ T5816] cgroup: Unknown subsys name 'cpuset' [ 367.057583][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 372.611460][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 378.290172][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 378.303115][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.311145][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 378.322129][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 378.330382][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.340157][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.345061][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 378.353217][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.361172][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 378.364036][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 378.374319][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 378.385558][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 378.391148][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 378.398500][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 378.408142][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 378.419214][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 378.428554][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 378.435205][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 378.439845][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 378.446898][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 378.461012][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 378.472478][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 378.482289][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 378.513962][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 378.533930][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 379.631465][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 380.119046][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 380.274082][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 380.460050][ T5839] Bluetooth: hci0: command tx timeout [ 380.539735][ T5839] Bluetooth: hci2: command tx timeout [ 380.540331][ T5848] Bluetooth: hci3: command tx timeout [ 380.545957][ T5846] Bluetooth: hci1: command tx timeout [ 380.557303][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 380.579945][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.587828][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.602246][ T5834] bridge_slave_0: entered allmulticast mode [ 380.611676][ T5834] bridge_slave_0: entered promiscuous mode [ 380.624037][ T5846] Bluetooth: hci4: command tx timeout [ 380.635813][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.645418][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.653330][ T5834] bridge_slave_1: entered allmulticast mode [ 380.662640][ T5834] bridge_slave_1: entered promiscuous mode [ 380.742662][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 380.857758][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.944931][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.239070][ T5834] team0: Port device team_slave_0 added [ 381.342908][ T5834] team0: Port device team_slave_1 added [ 381.410291][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.417828][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.427138][ T5835] bridge_slave_0: entered allmulticast mode [ 381.436352][ T5835] bridge_slave_0: entered promiscuous mode [ 381.492304][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.500005][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.507677][ T5833] bridge_slave_0: entered allmulticast mode [ 381.517580][ T5833] bridge_slave_0: entered promiscuous mode [ 381.528930][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.537291][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.545548][ T5835] bridge_slave_1: entered allmulticast mode [ 381.554837][ T5835] bridge_slave_1: entered promiscuous mode [ 381.566156][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.579134][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.586997][ T5833] bridge_slave_1: entered allmulticast mode [ 381.596332][ T5833] bridge_slave_1: entered promiscuous mode [ 381.754153][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.762719][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.789774][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.907465][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.915171][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 381.944054][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.989122][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.010476][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.039969][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.047743][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.055728][ T5832] bridge_slave_0: entered allmulticast mode [ 382.064113][ T5832] bridge_slave_0: entered promiscuous mode [ 382.078774][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.086945][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.095129][ T5841] bridge_slave_0: entered allmulticast mode [ 382.105192][ T5841] bridge_slave_0: entered promiscuous mode [ 382.123464][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.133221][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.140995][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.148523][ T5841] bridge_slave_1: entered allmulticast mode [ 382.160630][ T5841] bridge_slave_1: entered promiscuous mode [ 382.207263][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.214764][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.222435][ T5832] bridge_slave_1: entered allmulticast mode [ 382.230938][ T5832] bridge_slave_1: entered promiscuous mode [ 382.246501][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.455324][ T5833] team0: Port device team_slave_0 added [ 382.468045][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.486693][ T5833] team0: Port device team_slave_1 added [ 382.501383][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.539854][ T5846] Bluetooth: hci0: command tx timeout [ 382.545174][ T5835] team0: Port device team_slave_0 added [ 382.629730][ T5846] Bluetooth: hci1: command tx timeout [ 382.635447][ T5839] Bluetooth: hci2: command tx timeout [ 382.635846][ T5848] Bluetooth: hci3: command tx timeout [ 382.658088][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.675963][ T5835] team0: Port device team_slave_1 added [ 382.694737][ T5834] hsr_slave_0: entered promiscuous mode [ 382.703305][ T5834] hsr_slave_1: entered promiscuous mode [ 382.712792][ T5848] Bluetooth: hci4: command tx timeout [ 382.786690][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.861067][ T5841] team0: Port device team_slave_0 added [ 382.868973][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.876197][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.903980][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.949826][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.957096][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.985113][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.002885][ T5841] team0: Port device team_slave_1 added [ 383.010940][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.018600][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.046951][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.116312][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.123869][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.150440][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.206305][ T5832] team0: Port device team_slave_0 added [ 383.270630][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.277713][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.304676][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.324954][ T5832] team0: Port device team_slave_1 added [ 383.397034][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.404740][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.431302][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.668836][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.676163][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.703122][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.717287][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.724538][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.751951][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.774978][ T5835] hsr_slave_0: entered promiscuous mode [ 383.784194][ T5835] hsr_slave_1: entered promiscuous mode [ 383.792590][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 383.798574][ T5835] Cannot create hsr debugfs directory [ 383.815477][ T5833] hsr_slave_0: entered promiscuous mode [ 383.824223][ T5833] hsr_slave_1: entered promiscuous mode [ 383.832656][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 383.838512][ T5833] Cannot create hsr debugfs directory [ 384.053131][ T5841] hsr_slave_0: entered promiscuous mode [ 384.064958][ T5841] hsr_slave_1: entered promiscuous mode [ 384.073354][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 384.079244][ T5841] Cannot create hsr debugfs directory [ 384.206203][ T5832] hsr_slave_0: entered promiscuous mode [ 384.214778][ T5832] hsr_slave_1: entered promiscuous mode [ 384.223155][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 384.228974][ T5832] Cannot create hsr debugfs directory [ 384.619540][ T5848] Bluetooth: hci0: command tx timeout [ 384.701142][ T5848] Bluetooth: hci3: command tx timeout [ 384.706716][ T5848] Bluetooth: hci2: command tx timeout [ 384.713093][ T5848] Bluetooth: hci1: command tx timeout [ 384.780016][ T5848] Bluetooth: hci4: command tx timeout [ 385.145786][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.196337][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.249039][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.282522][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.314460][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 385.406387][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 385.474927][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 385.512324][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 385.543833][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 385.573196][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 385.636439][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.667150][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.735416][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.819011][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.917604][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 385.965495][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.022495][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 386.054165][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 386.083069][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 386.112485][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 386.396013][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.553752][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.665767][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.673283][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.710347][ T5848] Bluetooth: hci0: command tx timeout [ 386.778493][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.780099][ T5848] Bluetooth: hci2: command tx timeout [ 386.785969][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.791362][ T5839] Bluetooth: hci3: command tx timeout [ 386.805203][ T5839] Bluetooth: hci1: command tx timeout [ 386.861320][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.870078][ T5848] Bluetooth: hci4: command tx timeout [ 386.936179][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.006170][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.056885][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.064521][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.099214][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.118267][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.126064][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.256672][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.427421][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.502440][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.670449][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.692185][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.699732][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.715659][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.723205][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.751611][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.759144][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.775495][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.783039][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.893394][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.904255][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.061802][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.069243][ T3971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.089742][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.097164][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.056284][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.146926][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.578409][ T5832] veth0_vlan: entered promiscuous mode [ 389.615822][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.708604][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.718041][ T5832] veth1_vlan: entered promiscuous mode [ 389.993912][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.026071][ T5832] veth0_macvtap: entered promiscuous mode [ 390.092556][ T5832] veth1_macvtap: entered promiscuous mode [ 390.211838][ T5833] veth0_vlan: entered promiscuous mode [ 390.316530][ T5835] veth0_vlan: entered promiscuous mode [ 390.337613][ T5833] veth1_vlan: entered promiscuous mode [ 390.355868][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.393961][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.460932][ T5881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.511548][ T5903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.560626][ T5903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.575276][ T5835] veth1_vlan: entered promiscuous mode [ 390.599867][ T5903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.725757][ T5841] veth0_vlan: entered promiscuous mode [ 390.770474][ T5833] veth0_macvtap: entered promiscuous mode [ 390.864213][ T5841] veth1_vlan: entered promiscuous mode [ 390.918858][ T5833] veth1_macvtap: entered promiscuous mode [ 390.982123][ T5835] veth0_macvtap: entered promiscuous mode [ 391.057723][ T5835] veth1_macvtap: entered promiscuous mode [ 391.121452][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.213388][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.240672][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.306154][ T5841] veth0_macvtap: entered promiscuous mode [ 391.334017][ T5900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.361240][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.378252][ T5841] veth1_macvtap: entered promiscuous mode [ 391.405110][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.457023][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.502170][ T5881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.546023][ T5834] veth0_vlan: entered promiscuous mode [ 391.556401][ T5881] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.614486][ T5881] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.644585][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.672701][ T5881] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.701794][ T5834] veth1_vlan: entered promiscuous mode [ 391.715390][ T5881] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.737984][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.910358][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.952813][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.000387][ T5903] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.041729][ T5903] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.105444][ T5834] veth0_macvtap: entered promiscuous mode [ 392.161915][ T5834] veth1_macvtap: entered promiscuous mode [ 392.288443][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.364083][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.451649][ T5881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.500957][ T5903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.528358][ T5903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.573463][ T5903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.705397][ T5866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.714199][ T5866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.891892][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.902249][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.218899][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 396.754819][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.765280][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.951194][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.959188][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.022207][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.030488][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.270308][ T5903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.278296][ T5903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.393121][ T5900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.401812][ T5900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.713876][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.722319][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.808372][ T6032] loop3: detected capacity change from 0 to 512 [ 397.839069][ T5881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.848244][ T5881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.884996][ T6032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 397.946715][ T6032] System zones: 1-12 [ 397.983328][ T6032] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.4: Directory hole found for htree index block 0 [ 398.091196][ T6032] EXT4-fs (loop3): Remounting filesystem read-only [ 398.097917][ T6032] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 398.218996][ T5888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.227184][ T5888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.229925][ T6032] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 398.245138][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.479822][ T6040] loop1: detected capacity change from 0 to 16 [ 398.576363][ T6040] erofs (device loop1): mounted with root inode @ nid 36. [ 398.885685][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.293538][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9'. [ 399.554534][ T6052] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9'. [ 399.590392][ T6052] Zero length message leads to an empty skb [ 400.079524][ T6060] loop1: detected capacity change from 0 to 1024 [ 400.096061][ T6057] loop2: detected capacity change from 0 to 1024 [ 400.155590][ T6063] loop3: detected capacity change from 0 to 256 [ 400.236910][ T6057] hfsplus: invalid file type 0120411 for inode 2 [ 400.243878][ T6057] hfsplus: failed to load root directory [ 400.292342][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.404337][ T6063] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 400.695542][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.816737][ T6071] loop0: detected capacity change from 0 to 1024 [ 400.893563][ T6071] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 400.938335][ T6071] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 401.057444][ T6071] EXT4-fs (loop0): orphan cleanup on readonly fs [ 401.064930][ T6071] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.13: Freeing blocks not in datazone - block = 0, count = 4096 [ 401.180112][ T6071] EXT4-fs (loop0): 1 orphan inode deleted [ 401.224480][ T6071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 401.515206][ T6083] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 401.643150][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.224558][ T6091] loop0: detected capacity change from 0 to 512 [ 402.418097][ T6091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 402.622685][ T6091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 402.635927][ T6091] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.203056][ T30] audit: type=1800 audit(1766933220.223:2): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.20" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 403.476470][ T6103] loop4: detected capacity change from 0 to 2048 [ 403.753022][ T6103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.966243][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 404.414344][ T6106] loop2: detected capacity change from 0 to 2048 [ 404.490309][ T6106] ext4: Unknown parameter 'pcr' [ 408.308851][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 408.322987][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.37'. [ 408.333859][ T6145] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 408.501405][ T6146] bridge0: entered promiscuous mode [ 408.515240][ T6146] bridge0: port 3(macvtap1) entered blocking state [ 408.527760][ T6146] bridge0: port 3(macvtap1) entered disabled state [ 408.535169][ T6146] macvtap1: entered allmulticast mode [ 408.540914][ T6146] bridge0: entered allmulticast mode [ 408.548699][ T6146] macvtap1: left allmulticast mode [ 408.554204][ T6146] bridge0: left allmulticast mode [ 408.609646][ T6146] bridge0: left promiscuous mode [ 408.707393][ T6151] tipc: Failed to remove unknown binding: 66,0,0/0:3951296852/3951296853 [ 408.753304][ T6151] tipc: Failed to remove unknown binding: 66,0,0/0:3951296852/3951296853 [ 408.812480][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.819680][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.140887][ T6154] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.41'. [ 409.631213][ T6162] sock: sock_set_timeout: `syz.4.45' (pid 6162) tries to set negative timeout [ 409.717688][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 410.598850][ T6177] loop3: detected capacity change from 0 to 256 [ 410.626882][ T6177] exfat: Unknown parameter 'L(\r7.]H!{ٻ TD}"' [ 410.802783][ T6181] 9p: Bad value for 'rfdno' [ 411.660223][ T6186] loop2: detected capacity change from 0 to 32768 [ 411.700872][ T6186] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.56 (6186) [ 411.729029][ T6186] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.739743][ T6186] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 411.759676][ T6190] tipc: Failed to remove unknown binding: 66,0,0/0:1020292278/1020292279 [ 411.862219][ T6204] tipc: Failed to remove unknown binding: 66,0,0/0:1020292278/1020292279 [ 411.976174][ T6186] BTRFS info (device loop2): rebuilding free space tree [ 412.059206][ T6186] BTRFS info (device loop2): disabling free space tree [ 412.067171][ T6186] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 412.077294][ T6186] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 412.100214][ T6186] BTRFS info (device loop2): force clearing of disk cache [ 412.114708][ T6186] BTRFS info (device loop2): force zlib compression, level 3 [ 412.125972][ T6208] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 412.220695][ T6186] netlink: 'syz.2.56': attribute type 21 has an invalid length. [ 412.240003][ T6186] netlink: 128 bytes leftover after parsing attributes in process `syz.2.56'. [ 412.249196][ T6186] netlink: 3 bytes leftover after parsing attributes in process `syz.2.56'. [ 412.467895][ T6210] tipc: Failed to remove unknown binding: 66,0,0/0:2627810934/2627810935 [ 412.495794][ T5835] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 412.531709][ T6214] tipc: Failed to remove unknown binding: 66,0,0/0:2627810934/2627810935 [ 412.856206][ T6217] loop1: detected capacity change from 0 to 2048 [ 413.023845][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.235050][ T6221] netlink: 'syz.2.63': attribute type 21 has an invalid length. [ 413.243367][ T6221] netlink: 128 bytes leftover after parsing attributes in process `syz.2.63'. [ 413.252911][ T6221] netlink: 3 bytes leftover after parsing attributes in process `syz.2.63'. [ 413.613616][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.684023][ T6232] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 414.374503][ T6246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 415.141304][ T6255] loop2: detected capacity change from 0 to 16 [ 415.222640][ T6243] loop3: detected capacity change from 0 to 4096 [ 415.286790][ T6243] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 415.949598][ T6259] loop0: detected capacity change from 0 to 256 [ 416.021975][ T6259] exfat: Deprecated parameter 'utf8' [ 416.027472][ T6259] exfat: Deprecated parameter 'utf8' [ 416.033803][ T6259] exfat: Deprecated parameter 'utf8' [ 416.225027][ T5162] udevd[5162]: worker [6001] terminated by signal 33 (Unknown signal 33) [ 416.253499][ T6259] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 416.275281][ T5162] udevd[5162]: worker [6001] failed while handling '/devices/virtual/block/loop0' [ 417.285107][ T6276] loop4: detected capacity change from 0 to 2048 [ 417.390785][ T6276] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.934221][ T6283] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.441636][ T6311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 421.720723][ T6312] loop1: detected capacity change from 0 to 2048 [ 421.981270][ T6312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.348286][ T6332] loop0: detected capacity change from 0 to 512 [ 424.357429][ T6332] ======================================================= [ 424.357429][ T6332] WARNING: The mand mount option has been deprecated and [ 424.357429][ T6332] and is ignored by this kernel. Remove the mand [ 424.357429][ T6332] option from the mount to silence this warning. [ 424.357429][ T6332] ======================================================= [ 424.444545][ T6332] EXT4-fs (loop0): Test dummy encryption mode enabled [ 424.458990][ T6332] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 424.518825][ T6332] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 424.527243][ T6332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 424.536453][ T6332] EXT4-fs (loop0): orphan cleanup on readonly fs [ 424.548194][ T6332] EXT4-fs error (device loop0): __ext4_iget:5426: inode #11: block 783: comm syz.0.108: invalid block [ 424.564243][ T6332] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.108: couldn't read orphan inode 11 (err -117) [ 424.583516][ T6332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 430.507208][ T6361] loop1: detected capacity change from 0 to 2048 [ 430.572800][ T6361] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.121534][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 432.535730][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.545174][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.675528][ T6380] tipc: Failed to remove unknown binding: 66,0,0/0:809480085/809480086 [ 432.767843][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.798862][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.061789][ T6021] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.104938][ T6021] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.170134][ T6021] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.204343][ T6021] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.585664][ T6393] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 434.892201][ T6399] loop2: detected capacity change from 0 to 2048 [ 435.000849][ T6399] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 435.535606][ T6404] loop4: detected capacity change from 0 to 128 [ 436.394285][ T6404] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.408726][ T6404] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.359469][ T6415] tipc: Failed to remove unknown binding: 66,0,0/0:1504482162/1504482163 [ 442.726337][ T5834] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 446.967496][ T6442] process 'syz.3.143' launched './file0' with NULL argv: empty string added [ 447.061884][ T6442] Invalid argument reading file caps for ./file0 [ 447.599695][ T6451] tipc: Failed to remove unknown binding: 66,0,0/0:3021822887/3021822888 [ 447.702877][ T6451] tipc: Failed to remove unknown binding: 66,0,0/0:3021822887/3021822888 [ 451.945297][ T6470] tmpfs: Unknown parameter 'dont_appraise' [ 456.754243][ T6490] tipc: Failed to remove unknown binding: 66,0,0/0:999347212/999347213 [ 456.822381][ T6492] tipc: Failed to remove unknown binding: 66,0,0/0:999347212/999347213 [ 458.440573][ T6503] loop3: detected capacity change from 0 to 16 [ 458.522743][ T6503] erofs (device loop3): mounted with root inode @ nid 36. [ 458.680936][ T6503] ===================================================== [ 458.688321][ T6503] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 458.695908][ T6503] eth_type_trans+0x6a2/0x9b0 [ 458.700903][ T6503] __dev_forward_skb2+0x4b1/0x950 [ 458.706089][ T6503] dev_forward_skb_nomtu+0x3b/0xe0 [ 458.711586][ T6503] __bpf_redirect+0x14d6/0x1760 [ 458.716687][ T6503] bpf_clone_redirect+0x4b5/0x6d0 [ 458.722322][ T6503] ___bpf_prog_run+0x1297/0xeba0 [ 458.727596][ T6503] __bpf_prog_run512+0xc5/0x100 [ 458.733176][ T6503] bpf_test_run+0x496/0xe00 [ 458.737850][ T6503] bpf_prog_test_run_skb+0x2377/0x3200 [ 458.743742][ T6503] bpf_prog_test_run+0x5bb/0x9f0 [ 458.749013][ T6503] __sys_bpf+0x873/0xeb0 [ 458.753625][ T6503] __x64_sys_bpf+0xa4/0xf0 [ 458.758422][ T6503] x64_sys_call+0x31c3/0x3e70 [ 458.763678][ T6503] do_syscall_64+0xd3/0xf80 [ 458.768436][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.775333][ T6503] [ 458.778239][ T6503] Uninit was created at: [ 458.783033][ T6503] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 458.789231][ T6503] kmalloc_reserve+0x13c/0x4b0 [ 458.794290][ T6503] pskb_expand_head+0x1fc/0x15d0 [ 458.799754][ T6503] skb_ensure_writable+0x44e/0x510 [ 458.805222][ T6503] bpf_clone_redirect+0x310/0x6d0 [ 458.810755][ T6503] ___bpf_prog_run+0x1297/0xeba0 [ 458.815993][ T6503] __bpf_prog_run512+0xc5/0x100 [ 458.821168][ T6503] bpf_test_run+0x496/0xe00 [ 458.825942][ T6503] bpf_prog_test_run_skb+0x2377/0x3200 [ 458.831802][ T6503] bpf_prog_test_run+0x5bb/0x9f0 [ 458.837072][ T6503] __sys_bpf+0x873/0xeb0 [ 458.841575][ T6503] __x64_sys_bpf+0xa4/0xf0 [ 458.846208][ T6503] x64_sys_call+0x31c3/0x3e70 [ 458.851195][ T6503] do_syscall_64+0xd3/0xf80 [ 458.855868][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.862063][ T6503] [ 458.864499][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.3.160 Not tainted syzkaller #0 PREEMPT(none) [ 458.874110][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.884625][ T6503] ===================================================== [ 458.891855][ T6503] Disabling lock debugging due to kernel taint [ 458.898246][ T6503] Kernel panic - not syncing: kmsan.panic set ... [ 458.904816][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.3.160 Tainted: G B syzkaller #0 PREEMPT(none) [ 458.915894][ T6503] Tainted: [B]=BAD_PAGE [ 458.920223][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.930503][ T6503] Call Trace: [ 458.933952][ T6503] [ 458.936948][ T6503] __dump_stack+0x26/0x30 [ 458.941421][ T6503] dump_stack_lvl+0x50/0x1c0 [ 458.946142][ T6503] ? dump_stack+0x12/0x25 [ 458.950610][ T6503] dump_stack+0x1e/0x25 [ 458.954897][ T6503] vpanic+0x435/0xd30 [ 458.959125][ T6503] panic+0x15d/0x160 [ 458.963296][ T6503] kmsan_report+0x31c/0x320 [ 458.968087][ T6503] ? __msan_warning+0x1b/0x30 [ 458.972924][ T6503] ? eth_type_trans+0x6a2/0x9b0 [ 458.978391][ T6503] ? __dev_forward_skb2+0x4b1/0x950 [ 458.983746][ T6503] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 458.989200][ T6503] ? __bpf_redirect+0x14d6/0x1760 [ 458.994400][ T6503] ? bpf_clone_redirect+0x4b5/0x6d0 [ 458.999795][ T6503] ? ___bpf_prog_run+0x1297/0xeba0 [ 459.005063][ T6503] ? __bpf_prog_run512+0xc5/0x100 [ 459.010232][ T6503] ? bpf_test_run+0x496/0xe00 [ 459.015077][ T6503] ? bpf_prog_test_run_skb+0x2377/0x3200 [ 459.020905][ T6503] ? bpf_prog_test_run+0x5bb/0x9f0 [ 459.026197][ T6503] ? __sys_bpf+0x873/0xeb0 [ 459.031015][ T6503] ? __x64_sys_bpf+0xa4/0xf0 [ 459.035880][ T6503] ? x64_sys_call+0x31c3/0x3e70 [ 459.040913][ T6503] ? do_syscall_64+0xd3/0xf80 [ 459.045772][ T6503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.052040][ T6503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.058057][ T6503] ? should_fail_ex+0x45/0x8a0 [ 459.063011][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.068303][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.073780][ T6503] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 459.080291][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.085565][ T6503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.091536][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.096939][ T6503] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 459.103648][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.109158][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.114448][ T6503] __msan_warning+0x1b/0x30 [ 459.119100][ T6503] eth_type_trans+0x6a2/0x9b0 [ 459.123968][ T6503] __dev_forward_skb2+0x4b1/0x950 [ 459.129116][ T6503] ? pskb_expand_head+0x1254/0x15d0 [ 459.134490][ T6503] dev_forward_skb_nomtu+0x3b/0xe0 [ 459.139745][ T6503] __bpf_redirect+0x14d6/0x1760 [ 459.144853][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.150220][ T6503] bpf_clone_redirect+0x4b5/0x6d0 [ 459.155625][ T6503] ___bpf_prog_run+0x1297/0xeba0 [ 459.160728][ T6503] __bpf_prog_run512+0xc5/0x100 [ 459.165745][ T6503] ? kmsan_internal_poison_memory+0x78/0x90 [ 459.171797][ T6503] ? kmsan_internal_poison_memory+0x4a/0x90 [ 459.177831][ T6503] ? kmsan_slab_alloc+0xde/0x160 [ 459.182913][ T6503] ? kmem_cache_alloc_noprof+0x970/0x1750 [ 459.188808][ T6503] ? slab_build_skb+0x5c/0x5a0 [ 459.193786][ T6503] ? bpf_prog_test_run_skb+0x751/0x3200 [ 459.199610][ T6503] ? bpf_prog_test_run+0x5bb/0x9f0 [ 459.204875][ T6503] ? __sys_bpf+0x873/0xeb0 [ 459.209503][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.214791][ T6503] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 459.221281][ T6503] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 459.227515][ T6503] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 459.233485][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.238755][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.244038][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.249315][ T6503] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 459.255796][ T6503] ? kmsan_get_metadata+0x150/0x160 [ 459.261156][ T6503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.267131][ T6503] ? __pfx___bpf_prog_run512+0x10/0x10 [ 459.272773][ T6503] ? __pfx___bpf_prog_run512+0x10/0x10 [ 459.278355][ T6503] bpf_test_run+0x496/0xe00 [ 459.283147][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.288535][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.293815][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.299084][ T6503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.305173][ T6503] ? bpf_test_run+0x2f7/0xe00 [ 459.310083][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.315400][ T6503] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 459.321571][ T6503] bpf_prog_test_run_skb+0x2377/0x3200 [ 459.327293][ T6503] ? kmsan_get_metadata+0xfb/0x160 [ 459.332590][ T6503] ? __rcu_read_unlock+0x6d/0xd0 [ 459.337754][ T6503] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 459.343744][ T6503] bpf_prog_test_run+0x5bb/0x9f0 [ 459.348848][ T6503] __sys_bpf+0x873/0xeb0 [ 459.353344][ T6503] __x64_sys_bpf+0xa4/0xf0 [ 459.357937][ T6503] x64_sys_call+0x31c3/0x3e70 [ 459.362770][ T6503] do_syscall_64+0xd3/0xf80 [ 459.367421][ T6503] ? clear_bhb_loop+0x40/0x90 [ 459.372225][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.378253][ T6503] RIP: 0033:0x7fa769b8f749 [ 459.382939][ T6503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.402694][ T6503] RSP: 002b:00007fa76aac9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.411257][ T6503] RAX: ffffffffffffffda RBX: 00007fa769de6090 RCX: 00007fa769b8f749 [ 459.419367][ T6503] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 459.427466][ T6503] RBP: 00007fa769c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.435580][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.444270][ T6503] R13: 00007fa769de6128 R14: 00007fa769de6090 R15: 00007ffc764c7968 [ 459.452467][ T6503] [ 459.456022][ T6503] Kernel Offset: disabled [ 459.460525][ T6503] Rebooting in 86400 seconds..