last executing test programs: 10.570565425s ago: executing program 1 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='sys_enter\x00', r3}, 0x18) poll(&(0x7f0000004400), 0x0, 0x1b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) r6 = semget$private(0x0, 0x4000, 0x555) semctl$SEM_STAT_ANY(r6, 0x4, 0x14, &(0x7f0000000340)=""/12) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) r7 = socket(0x10, 0x803, 0x0) recvmmsg(r7, &(0x7f0000000000)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000006c0)=""/154, 0x9a}], 0x4, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x60, &(0x7f0000003700)={0x77359400}) r8 = syz_open_dev$MSR(&(0x7f0000000300), 0x4, 0x0) dup3(r4, r8, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) 8.628702705s ago: executing program 1 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a00", @ANYRES32], 0x44}}, 0x0) 6.980808704s ago: executing program 0 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) 6.586771927s ago: executing program 2 (id=23): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) 6.073293686s ago: executing program 3 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001880)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 5.740153311s ago: executing program 1 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'bridge_slave_1\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'pim6reg0\x00'}}, 0x1e) 5.664125029s ago: executing program 0 (id=26): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = gettid() add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xfffffffc, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0xe01, 0x0) rename(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000002c0)="3e1708737857783257e73b252e184b8d4663775bb699100ca54077c5494f877520fb85af3f2982ad418bad88219c82db4560ce13d08e741c72fb03e0ac92fd68daaf0b4d5b12d83d65640da5a478b984a06a3eeb76818e2af5f488e2fa31898c0f4464067ae47827ad0a74d3971addeb1586cfbd1d789e002ddfa74a51f473fdfdf6f955a3f991fb3e79cc8f0a7a169f2738c7a8c6dfbdc4cd92b0f1e0fa7402f8fd2ffc7412a012a4b76981dbe901add780214b8861d8c9129af9ebe69e545994380058ad724c391751c02635ca", 0xce, 0x80, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0xfffffffa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x4}, 0x80) 5.293236506s ago: executing program 4 (id=27): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x5, 0x8, 0xa5, 0x3}]}}]}}]}, 0x44}}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.292991126s ago: executing program 2 (id=28): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) msgget$private(0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xfffffffd, '.\x00'}}) timer_settime(r0, 0x0, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) 5.229478981s ago: executing program 3 (id=29): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) close(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 4.766788547s ago: executing program 3 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) io_submit(0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 4.681286064s ago: executing program 4 (id=31): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16000000", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000400)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f0000000840)="550c6d32008c9c16ffa4f109b112c6338906", 0x12}], 0x6}, 0x0) 4.556824369s ago: executing program 1 (id=32): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x101, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4, @local, 0xd8}}}, 0x32) close(r2) 4.210198515s ago: executing program 0 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getrusage(0x0, 0x0) 3.645221771s ago: executing program 4 (id=34): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) sendto$inet(r1, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 3.321907404s ago: executing program 1 (id=35): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb1}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) 3.256724136s ago: executing program 2 (id=36): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.553026864s ago: executing program 0 (id=37): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sendto$inet6(r0, &(0x7f0000000180)=')', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x20, @remote, 0x3}, 0x1c) 2.489369782s ago: executing program 1 (id=38): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000280)="e973b82e8c4e9a7d9107beab9900d2edefb8b536b9b846e0bc7c284226abd1e9817534e7fddd150855d2cee90ca50cefe779d6efa9bd0328491f44722d304e3197408445792fc9a9a6b7a89841015a00b3f3cbbbdca4e6296020c1c7d2b9a5f8d77983b53a3dc6911da79cd9e56f05c5d87a0d111dca46749f6bdf46c835f421f0663a35d827b94a63c4f6444b3eec54ab4195baf0d82ff72b833abc26d82c2145821c884be6a4b2b69843257fa9d6dca857b6caeddf692758cfe0fc6b1e95bbef9983ef7d345a70636b911930caaf02f95e2eab7b7933df9fea3939f8d964833c34363d", 0xe4}], 0x1, 0x18000, 0x3) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 2.380260703s ago: executing program 3 (id=39): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0xd}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) 2.276476554s ago: executing program 4 (id=40): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x10000000005, 0x4) syz_io_uring_setup(0x7d59, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x3, 0x3a6}, &(0x7f0000000500), &(0x7f0000000540)) 1.997797234s ago: executing program 2 (id=41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.626286515s ago: executing program 0 (id=42): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x10}, 0xc) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 1.49033143s ago: executing program 3 (id=43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101842, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e000000000000"], 0x878) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0, 0x0) 1.302089063s ago: executing program 2 (id=44): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16000000", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000400)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f0000000840)="550c6d32008c9c16ffa4f109b112c6338906", 0x12}], 0x6}, 0x0) 1.187094743s ago: executing program 4 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x40000) 626.702051ms ago: executing program 0 (id=46): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r7) 545.699768ms ago: executing program 2 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000300), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xfbfffffe, 0x80, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) 317.392421ms ago: executing program 4 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30, 0x2d]}}}}]}) 0s ago: executing program 3 (id=49): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=@newpolicy={0xe4, 0x13, 0x309, 0x0, 0x0, {{@in=@empty, @in6=@local, 0x0, 0xfffc, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@user_kmaddress={0x2c, 0x13, {@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x0, 0x2}}]}, 0xe4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 198.668401][ T5775] cgroup: Unknown subsys name 'net' [ 198.804469][ T5775] cgroup: Unknown subsys name 'cpuset' [ 198.825464][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.245359][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.252391][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.790227][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 258.999175][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.009368][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.017593][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.029519][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.037830][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.050711][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.059652][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.063116][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.068578][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.082631][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.088127][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.092522][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.099551][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.110506][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.114584][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.125283][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.131944][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.140792][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.143935][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.149725][ T5807] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 259.158884][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.177675][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.182466][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.187149][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.196179][ T5808] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 259.202335][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.208724][ T5808] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 259.215941][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.222444][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.228555][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.716125][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 261.027253][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 261.314062][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 261.342734][ T5804] Bluetooth: hci3: command tx timeout [ 261.348429][ T5804] Bluetooth: hci2: command tx timeout [ 261.354486][ T5804] Bluetooth: hci0: command tx timeout [ 261.385860][ T5089] Bluetooth: hci1: command tx timeout [ 261.391734][ T5089] Bluetooth: hci4: command tx timeout [ 261.602010][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 261.858698][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.866773][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.874865][ T5791] bridge_slave_0: entered allmulticast mode [ 261.884730][ T5791] bridge_slave_0: entered promiscuous mode [ 261.898155][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 261.923831][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.931839][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.939870][ T5791] bridge_slave_1: entered allmulticast mode [ 261.950600][ T5791] bridge_slave_1: entered promiscuous mode [ 262.190450][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.234324][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.642974][ T5791] team0: Port device team_slave_0 added [ 262.651441][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.659231][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.668264][ T5797] bridge_slave_0: entered allmulticast mode [ 262.677830][ T5797] bridge_slave_0: entered promiscuous mode [ 262.747888][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.756009][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.764470][ T5792] bridge_slave_0: entered allmulticast mode [ 262.774327][ T5792] bridge_slave_0: entered promiscuous mode [ 262.801693][ T5791] team0: Port device team_slave_1 added [ 262.810852][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.818891][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.827066][ T5797] bridge_slave_1: entered allmulticast mode [ 262.836579][ T5797] bridge_slave_1: entered promiscuous mode [ 262.850304][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.858384][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.866751][ T5792] bridge_slave_1: entered allmulticast mode [ 262.876406][ T5792] bridge_slave_1: entered promiscuous mode [ 263.310394][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.322626][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.329838][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.356428][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.369192][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.377172][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.382171][ T52] Bluetooth: hci2: command tx timeout [ 263.385152][ T5793] bridge_slave_0: entered allmulticast mode [ 263.389959][ T5089] Bluetooth: hci0: command tx timeout [ 263.399274][ T5793] bridge_slave_0: entered promiscuous mode [ 263.401762][ T52] Bluetooth: hci3: command tx timeout [ 263.435002][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.463737][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.476038][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.481252][ T5804] Bluetooth: hci4: command tx timeout [ 263.483263][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.488618][ T5804] Bluetooth: hci1: command tx timeout [ 263.515270][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.638531][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.658619][ T5797] team0: Port device team_slave_0 added [ 263.668952][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.676974][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.685148][ T5793] bridge_slave_1: entered allmulticast mode [ 263.694542][ T5793] bridge_slave_1: entered promiscuous mode [ 263.774647][ T5797] team0: Port device team_slave_1 added [ 263.965830][ T5792] team0: Port device team_slave_0 added [ 263.987037][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.108125][ T5792] team0: Port device team_slave_1 added [ 264.118085][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.125468][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.152045][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.177493][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.227344][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.235371][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.243497][ T5800] bridge_slave_0: entered allmulticast mode [ 264.252438][ T5800] bridge_slave_0: entered promiscuous mode [ 264.341529][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.348761][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.376578][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.423720][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.431710][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.439492][ T5800] bridge_slave_1: entered allmulticast mode [ 264.449166][ T5800] bridge_slave_1: entered promiscuous mode [ 264.472079][ T5791] hsr_slave_0: entered promiscuous mode [ 264.482328][ T5791] hsr_slave_1: entered promiscuous mode [ 264.541845][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.549074][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.575560][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.596011][ T5793] team0: Port device team_slave_0 added [ 264.606041][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.613363][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.641449][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.771093][ T5793] team0: Port device team_slave_1 added [ 264.970657][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.983134][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.990357][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.016884][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.113634][ T5797] hsr_slave_0: entered promiscuous mode [ 265.125435][ T5797] hsr_slave_1: entered promiscuous mode [ 265.134367][ T5797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.143860][ T5797] Cannot create hsr debugfs directory [ 265.160579][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.174837][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.182155][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.208530][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.482457][ T52] Bluetooth: hci3: command tx timeout [ 265.488157][ T52] Bluetooth: hci0: command tx timeout [ 265.494862][ T52] Bluetooth: hci2: command tx timeout [ 265.509127][ T5792] hsr_slave_0: entered promiscuous mode [ 265.519107][ T5792] hsr_slave_1: entered promiscuous mode [ 265.528801][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.536777][ T5792] Cannot create hsr debugfs directory [ 265.543929][ T5804] Bluetooth: hci1: command tx timeout [ 265.549687][ T52] Bluetooth: hci4: command tx timeout [ 265.602200][ T5800] team0: Port device team_slave_0 added [ 265.724734][ T5800] team0: Port device team_slave_1 added [ 266.000386][ T5793] hsr_slave_0: entered promiscuous mode [ 266.010465][ T5793] hsr_slave_1: entered promiscuous mode [ 266.020333][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.028261][ T5793] Cannot create hsr debugfs directory [ 266.086044][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.093431][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.120062][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.202840][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.210066][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.236704][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.757414][ T5800] hsr_slave_0: entered promiscuous mode [ 266.767301][ T5800] hsr_slave_1: entered promiscuous mode [ 266.777194][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.785319][ T5800] Cannot create hsr debugfs directory [ 267.049941][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.096332][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.188174][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.244303][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.458428][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.544343][ T5804] Bluetooth: hci2: command tx timeout [ 267.550063][ T5804] Bluetooth: hci0: command tx timeout [ 267.573428][ T52] Bluetooth: hci3: command tx timeout [ 267.581992][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.641610][ T52] Bluetooth: hci1: command tx timeout [ 267.647343][ T5089] Bluetooth: hci4: command tx timeout [ 267.684236][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 267.734803][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.767471][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 267.878123][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 267.955682][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 268.025414][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.054630][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 268.138187][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.189957][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.227775][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.459133][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 268.497357][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 268.527101][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 268.567659][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.317542][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.460172][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.502834][ T2967] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.510602][ T2967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.625833][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.633665][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.743324][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.798279][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.965789][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.052850][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.074706][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.201622][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.209532][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.228118][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.235982][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.313489][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.335819][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.343670][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.366923][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.374743][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.587765][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.595621][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.617903][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.625705][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.995123][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.120843][ T5797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.164998][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.287766][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.379010][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.386887][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.540737][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.548605][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.813661][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.359829][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.550743][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.600395][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.188697][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.200729][ T5797] veth0_vlan: entered promiscuous mode [ 274.257043][ T5792] veth0_vlan: entered promiscuous mode [ 274.316772][ T5793] veth0_vlan: entered promiscuous mode [ 274.405858][ T5792] veth1_vlan: entered promiscuous mode [ 274.420599][ T5797] veth1_vlan: entered promiscuous mode [ 274.530342][ T5793] veth1_vlan: entered promiscuous mode [ 274.913680][ T5792] veth0_macvtap: entered promiscuous mode [ 274.958259][ T5797] veth0_macvtap: entered promiscuous mode [ 274.995251][ T5800] veth0_vlan: entered promiscuous mode [ 275.010351][ T5792] veth1_macvtap: entered promiscuous mode [ 275.082753][ T5793] veth0_macvtap: entered promiscuous mode [ 275.128221][ T5797] veth1_macvtap: entered promiscuous mode [ 275.166345][ T5800] veth1_vlan: entered promiscuous mode [ 275.196747][ T5793] veth1_macvtap: entered promiscuous mode [ 275.350661][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.451396][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.463516][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.479364][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.516945][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.579685][ T5800] veth0_macvtap: entered promiscuous mode [ 275.596717][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.607611][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.617860][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.629433][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.647927][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.684909][ T5797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.697041][ T5797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.716463][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.744064][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.753368][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.762609][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.771869][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.857897][ T5800] veth1_macvtap: entered promiscuous mode [ 275.882891][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.893725][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.903918][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.914684][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.930314][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.953854][ T5797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.963097][ T5797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.972301][ T5797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.981534][ T5797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.112985][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.122361][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.131787][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.141097][ T5793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.370173][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.381649][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.391884][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.402646][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.412829][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.424373][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.441249][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.492631][ T5791] veth0_vlan: entered promiscuous mode [ 276.606462][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.617845][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.629474][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.642237][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.652741][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.667874][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.687806][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.708348][ T5791] veth1_vlan: entered promiscuous mode [ 276.750767][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.760195][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.769576][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.780388][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.281984][ T5791] veth0_macvtap: entered promiscuous mode [ 277.339219][ T5791] veth1_macvtap: entered promiscuous mode [ 277.558859][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.570391][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.582926][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.595362][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.607670][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.618595][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.629664][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.641188][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.657181][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.885556][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.897139][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.907464][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.918350][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.928792][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.939680][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.950095][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.963390][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.979575][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.247184][ T5791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.258243][ T5791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.270224][ T5791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.282017][ T5791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.500829][ T3557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.509130][ T3557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.777239][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.786454][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.851578][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.859709][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.916572][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.925584][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.120645][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.129145][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.171324][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.179451][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.358283][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 284.401831][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.409960][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.458216][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.466803][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.136249][ T5977] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3976 [ 285.736286][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.744646][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.491346][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.499795][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.721481][ T29] audit: type=1326 audit(1731556299.699:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.756842][ T6003] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 287.842562][ T29] audit: type=1326 audit(1731556299.749:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.872485][ T29] audit: type=1326 audit(1731556299.769:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.896950][ T29] audit: type=1326 audit(1731556299.769:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.919151][ T29] audit: type=1326 audit(1731556299.769:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.941351][ T29] audit: type=1326 audit(1731556299.779:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.963731][ T29] audit: type=1326 audit(1731556299.799:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 287.994430][ T29] audit: type=1326 audit(1731556299.799:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 288.018955][ T29] audit: type=1326 audit(1731556299.819:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 288.041466][ T29] audit: type=1326 audit(1731556299.829:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5999 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=40000003 syscall=248 compat=1 ip=0xf7f22579 code=0x7ffc0000 [ 289.978460][ T6014] loop3: detected capacity change from 0 to 2048 [ 290.113938][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.452379][ T6024] bond1: entered promiscuous mode [ 290.457706][ T6024] bond1: entered allmulticast mode [ 290.464954][ T6024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 290.620830][ T6024] bond1 (unregistering): Released all slaves [ 290.770126][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.776966][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.817945][ T5797] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.335888][ T6033] syz.4.21[6033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.336383][ T6033] syz.4.21[6033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.749819][ T6033] syz.4.21[6033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.847784][ T6047] Zero length message leads to an empty skb [ 293.304578][ T6052] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 293.313474][ T6052] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 293.322870][ T6052] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 294.678622][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 294.678704][ T29] audit: type=1326 audit(1731556306.679:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 294.707947][ T29] audit: type=1326 audit(1731556306.689:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=77 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 294.739482][ T29] audit: type=1326 audit(1731556306.689:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 294.762019][ T29] audit: type=1326 audit(1731556306.689:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6059 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62579 code=0x7ffc0000 [ 295.133779][ T29] audit: type=1326 audit(1731556307.129:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 295.159938][ T29] audit: type=1326 audit(1731556307.139:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 295.183106][ T29] audit: type=1326 audit(1731556307.139:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=438 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 295.229254][ T29] audit: type=1326 audit(1731556307.209:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 295.262855][ T29] audit: type=1326 audit(1731556307.209:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6067 comm="syz.2.36" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f65579 code=0x7ffc0000 [ 295.608360][ T6072] serio: Serial port ptm0 [ 296.916338][ T6086] process 'syz.3.43' launched './file1' with NULL argv: empty string added [ 297.178892][ T6077] loop1: detected capacity change from 0 to 4096 [ 297.378523][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.773150][ T6095] ===================================================== [ 297.780750][ T6095] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 297.790770][ T6095] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 297.799697][ T6095] ____sys_sendmsg+0x222/0xb60 [ 297.805535][ T6095] __sys_sendmsg_sock+0x42/0x60 [ 297.810734][ T6095] io_sendmsg+0x36a/0xe30 [ 297.815497][ T6095] io_issue_sqe+0x383/0x22c0 [ 297.820372][ T6095] io_submit_sqes+0x125c/0x2f30 [ 297.825650][ T6095] __se_sys_io_uring_enter+0x406/0x41c0 [ 297.831670][ T6095] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 297.837590][ T6095] ia32_sys_call+0x2d8f/0x40d0 [ 297.842741][ T6095] __do_fast_syscall_32+0xb0/0x110 [ 297.847907][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 297.848074][ T6095] do_fast_syscall_32+0x38/0x80 [ 297.864343][ T6095] do_SYSENTER_32+0x1f/0x30 [ 297.869128][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.876376][ T6095] [ 297.878821][ T6095] Uninit was stored to memory at: [ 297.884300][ T6095] io_sendmsg+0x691/0xe30 [ 297.888881][ T6095] io_issue_sqe+0x383/0x22c0 [ 297.894170][ T6095] io_submit_sqes+0x125c/0x2f30 [ 297.899288][ T6095] __se_sys_io_uring_enter+0x406/0x41c0 [ 297.907804][ T6095] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 297.914508][ T6095] ia32_sys_call+0x2d8f/0x40d0 [ 297.919547][ T6095] __do_fast_syscall_32+0xb0/0x110 [ 297.925181][ T6095] do_fast_syscall_32+0x38/0x80 [ 297.930311][ T6095] do_SYSENTER_32+0x1f/0x30 [ 297.935216][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.941964][ T6095] [ 297.944424][ T6095] Uninit was created at: [ 297.948969][ T6095] __alloc_pages_noprof+0x9a7/0xe00 [ 297.954607][ T6095] alloc_pages_mpol_noprof+0x299/0x990 [ 297.960398][ T6095] alloc_pages_noprof+0x1bf/0x1e0 [ 297.965762][ T6095] allocate_slab+0x320/0x12e0 [ 297.970670][ T6095] ___slab_alloc+0x12ef/0x35e0 [ 297.975837][ T6095] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 297.982319][ T6095] __io_alloc_req_refill+0x84/0x560 [ 297.987781][ T6095] io_submit_sqes+0x172f/0x2f30 [ 297.993014][ T6095] __se_sys_io_uring_enter+0x406/0x41c0 [ 297.998841][ T6095] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 298.007012][ T6095] ia32_sys_call+0x2d8f/0x40d0 [ 298.012787][ T6095] __do_fast_syscall_32+0xb0/0x110 [ 298.018225][ T6095] do_fast_syscall_32+0x38/0x80 [ 298.023519][ T6095] do_SYSENTER_32+0x1f/0x30 [ 298.028301][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.035077][ T6095] [ 298.037592][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.2.47 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 298.049079][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 298.059446][ T6095] ===================================================== [ 298.066657][ T6095] Disabling lock debugging due to kernel taint [ 298.073172][ T6095] Kernel panic - not syncing: kmsan.panic set ... [ 298.079762][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.2.47 Tainted: G B 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0 [ 298.091978][ T6095] Tainted: [B]=BAD_PAGE [ 298.096291][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 298.106539][ T6095] Call Trace: [ 298.109965][ T6095] [ 298.113037][ T6095] dump_stack_lvl+0x216/0x2d0 [ 298.117994][ T6095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 298.124016][ T6095] dump_stack+0x1e/0x30 [ 298.128423][ T6095] panic+0x4e2/0xcf0 [ 298.132554][ T6095] ? kmsan_get_metadata+0x111/0x1c0 [ 298.137951][ T6095] kmsan_report+0x2c7/0x2d0 [ 298.142644][ T6095] ? kmsan_get_metadata+0x110/0x1c0 [ 298.148033][ T6095] ? __msan_warning+0x95/0x120 [ 298.153028][ T6095] ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 298.159802][ T6095] ? ____sys_sendmsg+0x222/0xb60 [ 298.164965][ T6095] ? __sys_sendmsg_sock+0x42/0x60 [ 298.170226][ T6095] ? io_sendmsg+0x36a/0xe30 [ 298.174958][ T6095] ? io_issue_sqe+0x383/0x22c0 [ 298.179937][ T6095] ? io_submit_sqes+0x125c/0x2f30 [ 298.185201][ T6095] ? __se_sys_io_uring_enter+0x406/0x41c0 [ 298.191168][ T6095] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 298.197227][ T6095] ? ia32_sys_call+0x2d8f/0x40d0 [ 298.202431][ T6095] ? __do_fast_syscall_32+0xb0/0x110 [ 298.208408][ T6095] ? do_fast_syscall_32+0x38/0x80 [ 298.213704][ T6095] ? do_SYSENTER_32+0x1f/0x30 [ 298.218645][ T6095] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.225401][ T6095] ? kernel_text_address+0x129/0x1b0 [ 298.230897][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.236299][ T6095] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 298.242883][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.248271][ T6095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 298.254282][ T6095] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 298.260314][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.265704][ T6095] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 298.272304][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.277691][ T6095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 298.283694][ T6095] __msan_warning+0x95/0x120 [ 298.288508][ T6095] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 298.295095][ T6095] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 298.301129][ T6095] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 298.307712][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.313116][ T6095] ____sys_sendmsg+0x222/0xb60 [ 298.318146][ T6095] ? __fget_files+0x4f5/0x5c0 [ 298.323078][ T6095] ? kmsan_get_metadata+0x110/0x1c0 [ 298.328538][ T6095] ? kmsan_get_metadata+0x111/0x1c0 [ 298.333930][ T6095] __sys_sendmsg_sock+0x42/0x60 [ 298.339016][ T6095] io_sendmsg+0x36a/0xe30 [ 298.343706][ T6095] ? __pfx_io_sendmsg+0x10/0x10 [ 298.348825][ T6095] io_issue_sqe+0x383/0x22c0 [ 298.353689][ T6095] io_submit_sqes+0x125c/0x2f30 [ 298.358831][ T6095] __se_sys_io_uring_enter+0x406/0x41c0 [ 298.364644][ T6095] ? futex_wait+0x2bf/0x360 [ 298.369401][ T6095] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 298.375984][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.381378][ T6095] ? do_futex+0x341/0x4a0 [ 298.385912][ T6095] ? kmsan_get_metadata+0x13e/0x1c0 [ 298.391303][ T6095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 298.397324][ T6095] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 298.403235][ T6095] ia32_sys_call+0x2d8f/0x40d0 [ 298.408238][ T6095] __do_fast_syscall_32+0xb0/0x110 [ 298.413608][ T6095] ? irqentry_exit+0x16/0x60 [ 298.418456][ T6095] do_fast_syscall_32+0x38/0x80 [ 298.423579][ T6095] do_SYSENTER_32+0x1f/0x30 [ 298.428324][ T6095] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.434906][ T6095] RIP: 0023:0xf7f65579 [ 298.439136][ T6095] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 298.459059][ T6095] RSP: 002b:00000000f56e655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 298.467697][ T6095] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000000047f9 [ 298.475847][ T6095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.483969][ T6095] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 298.492097][ T6095] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.500310][ T6095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.508456][ T6095] [ 298.511988][ T6095] Kernel Offset: disabled [ 298.516402][ T6095] Rebooting in 86400 seconds..