last executing test programs: 1.429784168s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.384757928s ago: executing program 2 (id=6): r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty}}}}}, 0x0) 1.361272108s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x40060, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.318604609s ago: executing program 3 (id=4): unshare(0x2c020400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56a69, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x5}, {0xffff, 0xffff}, {0x2, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 1.231564611s ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0xffff, 0x7, 0x2, 0x0, @private=0xa010103, @loopback}, {0x13, 0xe, 0x0, @empty}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.222930189s ago: executing program 0 (id=10): bind$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x325, &(0x7f0000000140)="$eJzs3ctrG0ccwPGf3pJdVz6UUgqFwYXSUrxYgt56qCk2lApabKtQFwrrWm6F1pKxhEGlVDoEcs05Bx9yDIEQyC2XEHL1JX9BXjdffAjEEOMJ+5C8Wq0lO478IN/PwRrPzG9/sy9ZHq1Wu9/fWK+s1Y03Oi7Hacs3j7effbH46CP3d6XmZ5dyeaWiIvLHf3emHjbGf7v/8YOU7Ez+ubuXf7mTFpHDpX8kqsp1VdVaa7VSqzUidvBquV4xlPrVKpn1iJdAmU67uWKV1JpV29hoKrO6OjG2sVmq15VZbapKqakaNdXYbCrzb7NcVYZhqImxY8f8QZnslqJ9be4mTocHFm/vay179g5KtUVrHenv0+4UEt7joT77iHFJBPb/wL59B0dslCPDedjX8e7+Tw7Z/720Z4SDw8jta/skfn7TPf9bFz0cnLPF35d/ni0U5haUSousX98qbhXdR7f96biUxZKSbC98u3xwdNZrLRH75/xPhbkZ5ZiUr9ZbXnxrq+j+cZhd8+JzkrVfp/jipROfS7kL6I1PyJg/Pi9Z+SQ8Pq+8eIn64pPy9Ze+eEOy8uQvqYklq86z11H8/zmlfvylEMjve1UFAAAAAAAAAMAVY6iuo/n7SPet3oxhpJwrPrrtGbvamR93dOfXZyQrzvsDGQnOz8+osPn9uHx+/CUnAAAAAADgPao3/62YllXaPGNBx0RCmmK3Mj0pdMpN69YkRMQuiFybsmsHpvjUG3Fon7gEapLijSfp7xwLpEiH5kqJXch85+a7u+ANLJhiSEFE2mfdqkMLURHx17gf1rBX3rrX6ZORsKjoqQ6A6WTolk+PfAX9BTlJ585HXU6bIuWsYEZapx5Y5KBT81loHx0ZvhxtWonuYePo6fOqP+qHQadDM3GywR9orQNN0y/c5VoDnjRec+k/AAAAcBX5/nECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX5J3uxNa5b39vk3hfER+4RVxIUu77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOASehsAAP//MmWpqA==") 1.138281933s ago: executing program 0 (id=11): userfaultfd(0x80001) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f00000000c0)='./file1\x00', 0x6000081) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x3, 0xc10, 0x3}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x400000007fffffff}, 0x0, 0x0) 1.138084831s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() preadv2(0xffffffffffffffff, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/33, 0x21}, {&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f0000000100)}], 0x3, 0x4, 0x1, 0x1d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_io_uring_setup(0x47a7, &(0x7f00000002c0)={0x0, 0x10006f55, 0x80, 0x80002, 0x400200}, &(0x7f0000003400), &(0x7f0000000080)) syz_io_uring_setup(0x7674, &(0x7f0000000e40)={0x0, 0x17a1, 0x800, 0x0, 0x26c, 0x0, r3}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x7974, 0x10, 0x0, 0x4}, &(0x7f00000005c0), &(0x7f00000000c0)) io_uring_enter(r3, 0x82, 0xbc7b, 0x1, 0x0, 0xfffffffffffffe60) syz_emit_ethernet(0x3e, 0x0, 0x0) 1.098142104s ago: executing program 3 (id=12): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c672, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x6, 0x2, 0x30}) 388.452788ms ago: executing program 0 (id=13): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fanotify_init(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x41c802, 0x1b1) fanotify_mark(r1, 0x455, 0x8000003, r2, 0x0) fanotify_mark(r1, 0x41, 0x8000038, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 309.439306ms ago: executing program 0 (id=14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r1, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r2}]) 307.985339ms ago: executing program 4 (id=15): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000002c0)=&(0x7f0000000180)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xb333d00c}) r1 = eventfd2(0xdf, 0x80001) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f00000007c0)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 260.189369ms ago: executing program 1 (id=16): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r3, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x20004) getdents64(r2, &(0x7f0000000000)=""/49, 0x31) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x484002, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 259.75138ms ago: executing program 2 (id=17): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c672, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x16, 0x2, 0x0, 0xe4}) 225.286181ms ago: executing program 4 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x100000000}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000000800)=ANY=[], 0x0) 200.354847ms ago: executing program 1 (id=19): process_vm_writev(0x0, 0xfffffffffffffffe, 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/101, 0x20001c34}], 0x100000000000028a, 0x0) 188.31309ms ago: executing program 0 (id=20): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) ppoll(&(0x7f0000000ac0)=[{r0, 0x5001}], 0x1, 0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="b00a082345e0b9a66ad7130c009dee00634284f3b7adb5641f75b96f4f7b3c4e7c", 0x21}], 0x1, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 180.116064ms ago: executing program 4 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x16, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0xd8, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0xac, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x2, 0x200, 0x9, 0x9f4}}, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xffffff4a, 0x4, 0x9, 0xffffff45}}, @TCA_CBS_PARMS={0x18, 0x1, {0xa, '\x00', 0x6, 0xfffffffa, 0x5, 0xff}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x10, 0x8, 0x40}}, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x5f6d, 0x80000000, 0xfffffffe, 0xa}}, @TCA_CBS_PARMS={0x60, 0x1, {0x2, '\x00', 0x4, 0x1008, 0x1, 0x8001}}, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x6, 0xfffffff0, 0x9d5, 0x1}}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x48098}, 0x240001a0) 164.477672ms ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x181) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='efivarfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x20000ab, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) inotify_init1(0x800) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r0, 0x455, 0x40000008, r1, 0x0) 111.566811ms ago: executing program 1 (id=23): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 103.964972ms ago: executing program 3 (id=24): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="ab", 0x1}], 0x1}}], 0x1, 0x1) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 66.54168ms ago: executing program 4 (id=25): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@datasec={0x3, 0x1, 0x0, 0xf, 0x3, [{0x5, 0x400, 0x2}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f00000014c0)=""/2, 0x46, 0x2, 0x1}, 0x28) 32.409304ms ago: executing program 3 (id=26): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r0], 0x2c}}, 0x20008000) 32.200181ms ago: executing program 4 (id=27): setresuid(0xee01, 0xee00, 0x0) r0 = getpid() ioprio_set$pid(0x1, r0, 0x0) 31.291727ms ago: executing program 0 (id=28): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4014, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x1}}, 0x20) writev(r5, &(0x7f0000004600)=[{&(0x7f0000004440)="a7c6", 0x2}], 0x1) 872.604µs ago: executing program 4 (id=29): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f00000006c0)=""/151, 0xffffffffffffffaf, 0x0, 0x0, 0x2}}, 0x48) 0s ago: executing program 2 (id=30): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @empty, 0xa098}, {0xa, 0x4002, 0xfffffffe, @loopback}, 0xffffffffffffffff, 0x40099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 0s ago: executing program 3 (id=33): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x256, &(0x7f00000003c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 30.594909][ T6516] cgroup: Unknown subsys name 'net' [ 30.704155][ T6516] cgroup: Unknown subsys name 'cpuset' [ 30.706186][ T6516] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.862018][ T6516] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 31.995913][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.007733][ T6540] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.008492][ T6542] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.008915][ T6542] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.009086][ T6542] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.009315][ T6542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.009630][ T6542] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.009828][ T6542] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.014208][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.016179][ T6542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.017217][ T6542] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.017526][ T6542] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.017709][ T6542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.021106][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.021342][ T6542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.023834][ T6542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.025335][ T6542] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.030314][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.032499][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.032887][ T6528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.035462][ T6528] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.040508][ T6528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.044955][ T6528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.046461][ T6528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.048876][ T6528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.198391][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 32.209767][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 32.240824][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 32.246901][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 32.282847][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.283115][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.283192][ T6527] bridge_slave_0: entered allmulticast mode [ 32.283707][ T6527] bridge_slave_0: entered promiscuous mode [ 32.284583][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.284603][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.284662][ T6527] bridge_slave_1: entered allmulticast mode [ 32.285032][ T6527] bridge_slave_1: entered promiscuous mode [ 32.303358][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.303470][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.303554][ T6533] bridge_slave_0: entered allmulticast mode [ 32.303980][ T6533] bridge_slave_0: entered promiscuous mode [ 32.309725][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.325523][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.326856][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.328302][ T6530] bridge_slave_0: entered allmulticast mode [ 32.329899][ T6530] bridge_slave_0: entered promiscuous mode [ 32.331658][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.331735][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.331810][ T6533] bridge_slave_1: entered allmulticast mode [ 32.332645][ T6533] bridge_slave_1: entered promiscuous mode [ 32.339875][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.346250][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.347598][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.348931][ T6530] bridge_slave_1: entered allmulticast mode [ 32.350473][ T6530] bridge_slave_1: entered promiscuous mode [ 32.357038][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.358208][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.378814][ T6533] team0: Port device team_slave_0 added [ 32.380682][ T6527] team0: Port device team_slave_0 added [ 32.381868][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.381942][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.382021][ T6536] bridge_slave_0: entered allmulticast mode [ 32.382448][ T6536] bridge_slave_0: entered promiscuous mode [ 32.387475][ T6533] team0: Port device team_slave_1 added [ 32.392748][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.395070][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.395207][ T6536] bridge_slave_1: entered allmulticast mode [ 32.395647][ T6536] bridge_slave_1: entered promiscuous mode [ 32.400820][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.403030][ T6527] team0: Port device team_slave_1 added [ 32.420323][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.427165][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.427189][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.427214][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.430526][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.431378][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.440779][ T6530] team0: Port device team_slave_0 added [ 32.441472][ T6530] team0: Port device team_slave_1 added [ 32.447010][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.447038][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.447054][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.447673][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.447679][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.447691][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.450119][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.450128][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.450141][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.468885][ T6536] team0: Port device team_slave_0 added [ 32.475989][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 32.483588][ T6536] team0: Port device team_slave_1 added [ 32.486973][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.488153][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.492368][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.497501][ T6533] hsr_slave_0: entered promiscuous mode [ 32.497828][ T6533] hsr_slave_1: entered promiscuous mode [ 32.507834][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.507859][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.507875][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.519068][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.519099][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.519114][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.519684][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.519690][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.519703][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.529496][ T6527] hsr_slave_0: entered promiscuous mode [ 32.529752][ T6527] hsr_slave_1: entered promiscuous mode [ 32.529932][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 32.529971][ T6527] Cannot create hsr debugfs directory [ 32.559318][ T6530] hsr_slave_0: entered promiscuous mode [ 32.560669][ T6530] hsr_slave_1: entered promiscuous mode [ 32.561826][ T6530] debugfs: 'hsr0' already exists in 'hsr' [ 32.562881][ T6530] Cannot create hsr debugfs directory [ 32.569060][ T6536] hsr_slave_0: entered promiscuous mode [ 32.570847][ T6536] hsr_slave_1: entered promiscuous mode [ 32.571979][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 32.573171][ T6536] Cannot create hsr debugfs directory [ 32.595532][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.595642][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.595694][ T6526] bridge_slave_0: entered allmulticast mode [ 32.596107][ T6526] bridge_slave_0: entered promiscuous mode [ 32.598537][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.598560][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.598615][ T6526] bridge_slave_1: entered allmulticast mode [ 32.599007][ T6526] bridge_slave_1: entered promiscuous mode [ 32.645010][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.657478][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.668067][ T6526] team0: Port device team_slave_0 added [ 32.678453][ T6526] team0: Port device team_slave_1 added [ 32.695122][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.695147][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.695161][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.709195][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.709224][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.709238][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.736959][ T6526] hsr_slave_0: entered promiscuous mode [ 32.737290][ T6526] hsr_slave_1: entered promiscuous mode [ 32.737483][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 32.737491][ T6526] Cannot create hsr debugfs directory [ 32.754942][ T6533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.758269][ T6533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.762249][ T6533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.766750][ T6533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.791537][ T6527] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.794660][ T6527] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.805216][ T6527] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.807608][ T6527] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.827682][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.827735][ T6533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.827901][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.827926][ T6533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.829676][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.829695][ T6527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.829744][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.829765][ T6527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.843231][ T6530] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.853026][ T6530] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.856705][ T6530] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.859705][ T6530] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.885474][ T6536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.888384][ T6536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.892012][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.897545][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.897589][ T6530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.897665][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.897692][ T6530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.912443][ T6536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.915319][ T6536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.925870][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.927699][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.929293][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.930825][ T2028] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.932694][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.935336][ T2028] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.958141][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.960387][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.969920][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.969967][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.979538][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.979575][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.983935][ T6526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.986618][ T6526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.989264][ T6526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.992015][ T6526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.996308][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.002431][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.010326][ T1395] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.010367][ T1395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.010640][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.010662][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.022313][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.037308][ T6530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.039145][ T6530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.043974][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.044015][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.044392][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.044407][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.069656][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.072452][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.075718][ T6527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.075732][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.100048][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.100104][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.108616][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.108666][ T1998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.120275][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.150776][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.168066][ T1998] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.168117][ T1998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.168882][ T1998] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.168897][ T1998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.176301][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.199292][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.227783][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.229742][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.231336][ T6533] veth0_vlan: entered promiscuous mode [ 33.236691][ T6533] veth1_vlan: entered promiscuous mode [ 33.262404][ T6533] veth0_macvtap: entered promiscuous mode [ 33.266229][ T6527] veth0_vlan: entered promiscuous mode [ 33.267914][ T6527] veth1_vlan: entered promiscuous mode [ 33.270501][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.278734][ T6533] veth1_macvtap: entered promiscuous mode [ 33.280628][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.303743][ T6527] veth0_macvtap: entered promiscuous mode [ 33.315904][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.317210][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.319523][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319958][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319986][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.320006][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326356][ T6527] veth1_macvtap: entered promiscuous mode [ 33.335001][ T6536] veth0_vlan: entered promiscuous mode [ 33.336495][ T6536] veth1_vlan: entered promiscuous mode [ 33.339751][ T6530] veth0_vlan: entered promiscuous mode [ 33.341380][ T6530] veth1_vlan: entered promiscuous mode [ 33.366301][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.372352][ T6530] veth0_macvtap: entered promiscuous mode [ 33.379809][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.381947][ T6530] veth1_macvtap: entered promiscuous mode [ 33.386678][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.399852][ T2028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.399999][ T2028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.400022][ T2028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.400042][ T2028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.421221][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.423457][ T1998] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423764][ T1998] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423824][ T1998] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.423982][ T1998] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.436742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.436778][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.442343][ T6536] veth0_macvtap: entered promiscuous mode [ 33.457832][ T6536] veth1_macvtap: entered promiscuous mode [ 33.484752][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.487537][ T2028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.487566][ T2028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.499927][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.502116][ T2028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.502143][ T2028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.505305][ T6526] veth0_vlan: entered promiscuous mode [ 33.510244][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.510309][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.510337][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.510355][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.516406][ T2028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.516436][ T2028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.520053][ T6526] veth1_vlan: entered promiscuous mode [ 33.536662][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.538742][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.550903][ T6533] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.555834][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.555864][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.632687][ T6526] veth0_macvtap: entered promiscuous mode [ 33.641002][ T6526] veth1_macvtap: entered promiscuous mode [ 33.660455][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.660486][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.667882][ T6648] evm: overlay not supported [ 33.669931][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.680499][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.691094][ T6648] ======================================================= [ 33.691094][ T6648] WARNING: The mand mount option has been deprecated and [ 33.691094][ T6648] and is ignored by this kernel. Remove the mand [ 33.691094][ T6648] option from the mount to silence this warning. [ 33.691094][ T6648] ======================================================= [ 33.709409][ T2028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.709443][ T2028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.709948][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.709980][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.710002][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.710016][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.748212][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.748240][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.759397][ T1998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.762571][ T1998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.593064][ T6129] Bluetooth: hci2: command tx timeout [ 34.593247][ T6129] Bluetooth: hci1: command tx timeout [ 34.593311][ T6129] Bluetooth: hci0: command tx timeout [ 34.593581][ T6129] Bluetooth: hci3: command tx timeout [ 34.593622][ T6129] Bluetooth: hci4: command tx timeout [ 34.866833][ T6689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.21'. [ 34.978382][ T6703] fuse: Bad value for 'fd' [ 35.024071][ T6711] ------------[ cut here ]------------ [ 35.024104][ T6711] verifier bug: not inlined functions bpf_probe_read_kernel#113 is missing func(1) [ 35.026878][ T6711] WARNING: CPU: 0 PID: 6711 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 35.028335][ T6711] Modules linked in: [ 35.028947][ T6711] CPU: 0 UID: 0 PID: 6711 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT [ 35.030260][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 35.031860][ T6711] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 35.033087][ T6711] pc : bpf_check+0x1559c/0x15d8c [ 35.033833][ T6711] lr : bpf_check+0x1559c/0x15d8c [ 35.034579][ T6711] sp : ffff8000a07c7480 [ 35.035231][ T6711] x29: ffff8000a07c7980 x28: dfff800000000000 x27: 0000000000000006 [ 35.036487][ T6711] x26: 1ffff0001325dc12 x25: ffff8000992ee094 x24: ffff0000d7da0008 [ 35.037804][ T6711] x23: ffff8000992ee090 x22: ffff80008b154840 x21: ffff800092e12000 [ 35.039130][ T6711] x20: ffff8000992ee094 x19: 1ffff0001325dc12 x18: 1fffe00033797688 [ 35.040456][ T6711] x17: ffff80008f7de000 x16: ffff80008b0155d8 x15: 0000000000000001 [ 35.041723][ T6711] x14: 1fffe0001bb275c8 x13: 0000000000000000 x12: 0000000000000000 [ 35.042980][ T6711] x11: 0000000000080000 x10: 0000000000000003 x9 : 8a4abb0162441b00 [ 35.044274][ T6711] x8 : 8a4abb0162441b00 x7 : ffff800080490a90 x6 : 0000000000000000 [ 35.045508][ T6711] x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800080483024 [ 35.046787][ T6711] x2 : 0000000000000001 x1 : ffff80008b668440 x0 : 0000000000000001 [ 35.047987][ T6711] Call trace: [ 35.048456][ T6711] bpf_check+0x1559c/0x15d8c (P) [ 35.049201][ T6711] bpf_prog_load+0xec8/0x13fc [ 35.050024][ T6711] __sys_bpf+0x450/0x628 [ 35.050744][ T6711] __arm64_sys_bpf+0x80/0x98 [ 35.051536][ T6711] invoke_syscall+0x98/0x2b8 [ 35.052309][ T6711] el0_svc_common+0x130/0x23c [ 35.053119][ T6711] do_el0_svc+0x48/0x58 [ 35.053795][ T6711] el0_svc+0x5c/0x254 [ 35.054462][ T6711] el0t_64_sync_handler+0x84/0x12c [ 35.055280][ T6711] el0t_64_sync+0x198/0x19c [ 35.056013][ T6711] irq event stamp: 308 [ 35.056634][ T6711] hardirqs last enabled at (307): [] finish_lock_switch+0xb0/0x1c0 [ 35.058177][ T6711] hardirqs last disabled at (308): [] el1_brk64+0x20/0x54 [ 35.059498][ T6711] softirqs last enabled at (164): [] local_bh_enable+0x10/0x34 [ 35.061017][ T6711] softirqs last disabled at (162): [] local_bh_disable+0x10/0x34 [ 35.062493][ T6711] ---[ end trace 0000000000000000 ]--- [ 36.653094][ T6532] Bluetooth: hci4: command tx timeout [ 36.653131][ T6532] Bluetooth: hci3: command tx timeout [ 36.653161][ T6532] Bluetooth: hci0: command tx timeout [ 36.653178][ T6532] Bluetooth: hci1: command tx timeout [ 36.653194][ T6532] Bluetooth: hci2: command tx timeout [ 38.743151][ T6129] Bluetooth: hci2: command tx timeout [ 38.743193][ T6129] Bluetooth: hci1: command tx timeout [ 38.743221][ T6129] Bluetooth: hci0: command tx timeout [ 38.743234][ T6129] Bluetooth: hci3: command tx timeout [ 38.743246][ T6129] Bluetooth: hci4: command tx timeout [ 40.822893][ T6532] Bluetooth: hci4: command tx timeout [ 40.822930][ T6532] Bluetooth: hci3: command tx timeout [ 40.822943][ T6532] Bluetooth: hci0: command tx timeout [ 40.822956][ T6532] Bluetooth: hci1: command tx timeout [ 40.822967][ T6532] Bluetooth: hci2: command tx timeout