last executing test programs: 6.426968s ago: executing program 2 (id=39): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 6.12304998s ago: executing program 1 (id=40): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000180)="f3a6", 0x2, 0x4, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={0x0, 0x2}, 0x8) 5.760797639s ago: executing program 0 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) 5.041486052s ago: executing program 0 (id=44): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='qgroup_meta_convert\x00', r4, 0x0, 0x3}, 0x18) syz_clone3(&(0x7f0000000640)={0x80, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0x0], 0x1}, 0x58) ftruncate(r1, 0xb35) r5 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r6 = dup(r5) write$binfmt_elf64(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd000000c90300000000000040005d3310d10000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000080000000000000009000000000000000700"/120], 0x78) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000440)=@ethtool_rxfh={0x46, 0x0, 0x5, 0x7fc, 0x2, "f30500", 0x80000005}}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xeffffffffffffffd}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)='FR', 0x2}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20ffff0384000000020000000a000d00280000000b000002", @ANYRES32=r9], 0x20, 0x2400e044}, 0x0) 4.772656725s ago: executing program 1 (id=45): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x5d, &(0x7f00000000c0)}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 4.698595418s ago: executing program 4 (id=46): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) 3.397629758s ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x6f5e, 0x402) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000300)=ANY=[]) 3.250072347s ago: executing program 1 (id=49): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3, 0x100, 0x0, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) bind$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 3.214311454s ago: executing program 4 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000200), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffff89d}, 0x18) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 2.878857684s ago: executing program 3 (id=51): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) 2.774730846s ago: executing program 2 (id=52): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) 2.671519561s ago: executing program 4 (id=53): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x0, 0x10}, 0xc) write$P9_RLERRORu(r1, &(0x7f0000000d80)={0x16, 0x7, 0x2, {{0x9, '/dev/loop'}, 0xcb9b}}, 0x16) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ipvlan0\x00', 0x10) 2.536519424s ago: executing program 1 (id=54): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x25, 0xf, 0x4, 0x3, 0xb, 0xac, 0x5, 0x2}) 2.523945736s ago: executing program 3 (id=55): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000180)="f3a6", 0x2, 0x4, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r1, 0x2}, 0x8) 2.367782676s ago: executing program 0 (id=56): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) 2.306706228s ago: executing program 2 (id=57): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x40000000000000) 2.072043975s ago: executing program 4 (id=58): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0, 0x80000000}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000001740)="fc11669f2cb90b5819d4518881635695ae6cc9213b76e5eb966c", 0x1a}, {0x0}], 0x2}, 0x24024051) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0x1}, 0x8) 1.992163187s ago: executing program 1 (id=59): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) 1.883425963s ago: executing program 3 (id=60): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00000001c0)={0xfffffff9, 0x2, {0xffffffffffffffff, 0x3, 0x5, 0x0, 0x8}, 0xd4d}) 1.547547407s ago: executing program 2 (id=61): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.492297283s ago: executing program 1 (id=62): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) 1.468486987s ago: executing program 0 (id=63): r0 = io_uring_setup(0x62ab, &(0x7f0000000100)={0x0, 0x4428, 0x1, 0x1, 0x21e}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)=""/4108, 0x100c}], &(0x7f0000000200), 0x1}, 0x20) 1.394887357s ago: executing program 4 (id=64): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) pipe2$9p(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000c80)="$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") 1.09129672s ago: executing program 0 (id=65): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x890d}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.009651958s ago: executing program 2 (id=66): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x10}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 725.722527ms ago: executing program 3 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 427.386727ms ago: executing program 0 (id=68): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000100)=0x924) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket(0x2, 0x80805, 0x0) setsockopt(r1, 0x84, 0x7d, &(0x7f0000000280)="030002e24c4a694f", 0x8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d78839980700e6669d3c865c6b96e84000050016f37fe8c0295f5c", 0x3d, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 349.928748ms ago: executing program 4 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000380)={r1, 0x9b, "3ad3291bbb4b4f5ed574a9834e83f6c71fe44942253d55b17870b37499a7f2c0274e217126f55cf6d8ecb5b16ffd3d7efa9a6d9ab2ce5615020282924e2b758e244a04906a6c26319bafa20679f357656e9981d6220999f33841d9a9362098ed01ce50b024bdfa67e428b7de6fb6acbbdad743a418421085039a22f546cbb5d45afad2053874bab6080477173b0e9d4db06b74dce12fd20ad97fe3"}, &(0x7f0000000440)=0xa3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r0, r4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x2, 0x1, "fa"}, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={r1, 0x2}, 0x8) 159.319005ms ago: executing program 2 (id=70): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendto$inet(r0, &(0x7f0000000180)="f3a6", 0x2, 0x4, &(0x7f00000001c0)={0x2, 0x4e20, @private=0xa010102}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r1, 0x2}, 0x8) 0s ago: executing program 3 (id=71): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) socket$key(0xf, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 157.603663][ T5779] cgroup: Unknown subsys name 'net' [ 157.731073][ T5779] cgroup: Unknown subsys name 'cpuset' [ 157.747129][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 163.122890][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.129499][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.184892][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 168.747383][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.755499][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.764492][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.792627][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.802838][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.810928][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.818826][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.830693][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.844003][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.851919][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.860480][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.865992][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.876382][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.877048][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.913218][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.991148][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.006319][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.015533][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.024803][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.033792][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.049218][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.057607][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.175838][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 169.184905][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.206374][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.242671][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 170.393241][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 170.494987][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 170.948881][ T5096] Bluetooth: hci0: command tx timeout [ 170.954787][ T50] Bluetooth: hci1: command tx timeout [ 170.960501][ T5813] Bluetooth: hci2: command tx timeout [ 171.003869][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 171.066601][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.074632][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.082557][ T5800] bridge_slave_0: entered allmulticast mode [ 171.091808][ T5800] bridge_slave_0: entered promiscuous mode [ 171.125239][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.132794][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.140339][ T5800] bridge_slave_1: entered allmulticast mode [ 171.149595][ T5800] bridge_slave_1: entered promiscuous mode [ 171.281229][ T50] Bluetooth: hci3: command tx timeout [ 171.345709][ T50] Bluetooth: hci4: command tx timeout [ 171.400392][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.536827][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.547158][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.554739][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.562360][ T5799] bridge_slave_0: entered allmulticast mode [ 171.570397][ T5799] bridge_slave_0: entered promiscuous mode [ 171.585006][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 171.605922][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.614909][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.622646][ T5807] bridge_slave_0: entered allmulticast mode [ 171.631607][ T5807] bridge_slave_0: entered promiscuous mode [ 171.691283][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.702284][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.709738][ T5799] bridge_slave_1: entered allmulticast mode [ 171.719392][ T5799] bridge_slave_1: entered promiscuous mode [ 171.728706][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.736330][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.744152][ T5807] bridge_slave_1: entered allmulticast mode [ 171.753430][ T5807] bridge_slave_1: entered promiscuous mode [ 171.929290][ T5800] team0: Port device team_slave_0 added [ 172.004559][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.026160][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.045444][ T5800] team0: Port device team_slave_1 added [ 172.060311][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.108559][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.331661][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.340706][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.348447][ T5810] bridge_slave_0: entered allmulticast mode [ 172.356664][ T5810] bridge_slave_0: entered promiscuous mode [ 172.375472][ T5807] team0: Port device team_slave_0 added [ 172.381609][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.392446][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.400526][ T5810] bridge_slave_1: entered allmulticast mode [ 172.410019][ T5810] bridge_slave_1: entered promiscuous mode [ 172.421988][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.429502][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.455974][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.515022][ T5799] team0: Port device team_slave_0 added [ 172.529944][ T5807] team0: Port device team_slave_1 added [ 172.538374][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.545547][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.572686][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.704284][ T5799] team0: Port device team_slave_1 added [ 172.825010][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.863029][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.870471][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.878542][ T5814] bridge_slave_0: entered allmulticast mode [ 172.886705][ T5814] bridge_slave_0: entered promiscuous mode [ 172.905323][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.912577][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.938818][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.958027][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.022564][ T50] Bluetooth: hci1: command tx timeout [ 173.024584][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.028295][ T5813] Bluetooth: hci2: command tx timeout [ 173.035550][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.040914][ T5096] Bluetooth: hci0: command tx timeout [ 173.048418][ T5814] bridge_slave_1: entered allmulticast mode [ 173.062060][ T5814] bridge_slave_1: entered promiscuous mode [ 173.107729][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.115153][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.141285][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.183166][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.190211][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.216690][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.279910][ T5800] hsr_slave_0: entered promiscuous mode [ 173.288516][ T5800] hsr_slave_1: entered promiscuous mode [ 173.342545][ T50] Bluetooth: hci3: command tx timeout [ 173.353502][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.360593][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.386891][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.432405][ T50] Bluetooth: hci4: command tx timeout [ 173.436785][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.456330][ T5810] team0: Port device team_slave_0 added [ 173.514124][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.530572][ T5810] team0: Port device team_slave_1 added [ 173.746995][ T5814] team0: Port device team_slave_0 added [ 173.790566][ T5807] hsr_slave_0: entered promiscuous mode [ 173.800571][ T5807] hsr_slave_1: entered promiscuous mode [ 173.809087][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 173.815074][ T5807] Cannot create hsr debugfs directory [ 173.871693][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.879073][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.909904][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.929538][ T5814] team0: Port device team_slave_1 added [ 173.937355][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.945604][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.973379][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.157851][ T5799] hsr_slave_0: entered promiscuous mode [ 174.167424][ T5799] hsr_slave_1: entered promiscuous mode [ 174.175304][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 174.181157][ T5799] Cannot create hsr debugfs directory [ 174.270977][ T5810] hsr_slave_0: entered promiscuous mode [ 174.282721][ T5810] hsr_slave_1: entered promiscuous mode [ 174.290899][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 174.297277][ T5810] Cannot create hsr debugfs directory [ 174.330988][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.338360][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.364794][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.430486][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.438541][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 174.464923][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.809193][ T5814] hsr_slave_0: entered promiscuous mode [ 174.819982][ T5814] hsr_slave_1: entered promiscuous mode [ 174.828416][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 174.834486][ T5814] Cannot create hsr debugfs directory [ 175.102647][ T50] Bluetooth: hci1: command tx timeout [ 175.108333][ T5096] Bluetooth: hci0: command tx timeout [ 175.115304][ T50] Bluetooth: hci2: command tx timeout [ 175.169026][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.294162][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.393984][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.422535][ T5096] Bluetooth: hci3: command tx timeout [ 175.502417][ T5096] Bluetooth: hci4: command tx timeout [ 175.520752][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.838999][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 175.882422][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 175.911917][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 175.929416][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 176.107915][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.137011][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.179505][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.203068][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 176.423967][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.450405][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.470446][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.491370][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.659325][ T5814] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.745731][ T5814] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.796579][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.806046][ T5814] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.828580][ T5814] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 177.002864][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.114815][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.122454][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.177898][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.189225][ T5096] Bluetooth: hci0: command tx timeout [ 177.195183][ T5813] Bluetooth: hci2: command tx timeout [ 177.200759][ T50] Bluetooth: hci1: command tx timeout [ 177.254976][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.262504][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.453509][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.484307][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.502964][ T50] Bluetooth: hci3: command tx timeout [ 177.582675][ T50] Bluetooth: hci4: command tx timeout [ 177.606680][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.614173][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.674053][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.703464][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.759311][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.766994][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.790226][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.797606][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.865259][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.897753][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.981551][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.989168][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.019531][ T3875] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.027060][ T3875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.055393][ T3875] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.062891][ T3875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.235232][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.292939][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.635618][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.738022][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.745558][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.881846][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.889415][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.534985][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.989843][ T5800] veth0_vlan: entered promiscuous mode [ 180.036799][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.131229][ T5800] veth1_vlan: entered promiscuous mode [ 180.209018][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.230030][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.477729][ T5800] veth0_macvtap: entered promiscuous mode [ 180.597356][ T5800] veth1_macvtap: entered promiscuous mode [ 180.692418][ T5799] veth0_vlan: entered promiscuous mode [ 180.702069][ T5807] veth0_vlan: entered promiscuous mode [ 180.793436][ T5807] veth1_vlan: entered promiscuous mode [ 180.809400][ T5799] veth1_vlan: entered promiscuous mode [ 180.869567][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.908047][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.941139][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.079014][ T754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.142895][ T5799] veth0_macvtap: entered promiscuous mode [ 181.153505][ T754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.191320][ T754] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.211333][ T5799] veth1_macvtap: entered promiscuous mode [ 181.231512][ T754] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.305233][ T5807] veth0_macvtap: entered promiscuous mode [ 181.400883][ T5807] veth1_macvtap: entered promiscuous mode [ 181.453949][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.557678][ T5814] veth0_vlan: entered promiscuous mode [ 181.596308][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.628872][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.691210][ T5814] veth1_vlan: entered promiscuous mode [ 181.710593][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.763806][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.836875][ T3875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.877424][ T3875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.945182][ T3875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.022737][ T5814] veth0_macvtap: entered promiscuous mode [ 182.074627][ T3875] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.106588][ T3875] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.120686][ T5814] veth1_macvtap: entered promiscuous mode [ 182.162457][ T3875] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.171545][ T3875] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.305290][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.439432][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.548791][ T2199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.609374][ T2199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.686290][ T2199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.721388][ T5810] veth0_vlan: entered promiscuous mode [ 182.742429][ T2199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.806150][ T5810] veth1_vlan: entered promiscuous mode [ 183.089574][ T5810] veth0_macvtap: entered promiscuous mode [ 183.156152][ T5810] veth1_macvtap: entered promiscuous mode [ 183.254169][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.349192][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.451432][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.498682][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.556734][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.615789][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.562447][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.570465][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.597097][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.605418][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.987605][ T5800] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.181382][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.189879][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.296366][ T4400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.304584][ T4400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.494741][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.503247][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.623104][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.631110][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.004096][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.015568][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.378558][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.386912][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.400022][ T5994] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1'. [ 188.562665][ T30] audit: type=1326 audit(1766064676.526:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 188.588294][ T30] audit: type=1326 audit(1766064676.526:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 188.612698][ T30] audit: type=1326 audit(1766064676.526:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 188.635088][ T30] audit: type=1326 audit(1766064676.566:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 188.657559][ T30] audit: type=1326 audit(1766064676.566:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb16098f783 code=0x7ffc0000 [ 188.689670][ T30] audit: type=1326 audit(1766064676.566:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb16098f807 code=0x7ffc0000 [ 188.713617][ T30] audit: type=1326 audit(1766064676.566:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb160946bdd code=0x7ffc0000 [ 188.741303][ T30] audit: type=1326 audit(1766064676.566:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb1609c3e89 code=0x7ffc0000 [ 188.764336][ T30] audit: type=1326 audit(1766064676.596:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb160946357 code=0x7ffc0000 [ 188.786837][ T30] audit: type=1326 audit(1766064676.596:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fb1609463b6 code=0x7ffc0000 [ 189.044354][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.052592][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.076812][ T5988] loop3: detected capacity change from 0 to 512 [ 189.223737][ T5988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 189.278150][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.288834][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.394202][ T5988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.418787][ T5988] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.662628][ T6006] loop1: detected capacity change from 0 to 512 [ 189.771625][ T6011] loop0: detected capacity change from 0 to 512 [ 189.793938][ T6011] ======================================================= [ 189.793938][ T6011] WARNING: The mand mount option has been deprecated and [ 189.793938][ T6011] and is ignored by this kernel. Remove the mand [ 189.793938][ T6011] option from the mount to silence this warning. [ 189.793938][ T6011] ======================================================= [ 190.061974][ T6011] EXT4-fs warning (device loop0): ext4_xattr_inode_get:546: inode #11: comm syz.0.9: ea_inode file size=4 entry size=6 [ 190.076870][ T6011] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 190.091229][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.9: corrupted inode contents [ 190.173207][ T6011] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.9: mark_inode_dirty error [ 190.206148][ T6011] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.9: corrupted inode contents [ 190.314367][ T6011] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.9: mark_inode_dirty error [ 190.448666][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.473813][ T6011] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.9: mark inode dirty (error -117) [ 190.585901][ T6011] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 190.596642][ T6011] EXT4-fs (loop0): 1 orphan inode deleted [ 190.605223][ T6011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.184947][ T6024] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11'. [ 191.449290][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.377125][ T6029] loop0: detected capacity change from 0 to 512 [ 192.638632][ T6029] ------------[ cut here ]------------ [ 192.644855][ T6029] EA inode 11 i_nlink=2 [ 192.644948][ T6029] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x73c/0x800, CPU#1: syz.0.14/6029 [ 192.660448][ T6029] Modules linked in: [ 192.664781][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.0.14 Not tainted syzkaller #0 PREEMPT(none) [ 192.680857][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.693192][ T6029] RIP: 0010:ext4_xattr_inode_update_ref+0x7b6/0x800 [ 192.700100][ T6029] Code: 06 00 00 44 89 b3 70 09 00 00 48 c7 83 80 0c 00 00 00 00 00 00 4d 85 e4 75 38 45 85 ff 75 40 48 8b 7d c0 48 8b 75 d0 8b 55 b0 <67> 48 0f b9 3a e9 b9 fd ff ff 44 89 ef e8 c8 3e 57 ff 45 85 ff 0f [ 192.720263][ T6029] RSP: 0018:ffff888052d1ad88 EFLAGS: 00010246 [ 192.726797][ T6029] RAX: 0000000000000000 RBX: ffff88804f0b4e10 RCX: 00000000005bacde [ 192.735307][ T6029] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff9273d140 [ 192.743861][ T6029] RBP: ffff888052d1ae10 R08: ffffea000000000f R09: 0000000000000000 [ 192.752021][ T6029] R10: ffff88805251acd0 R11: 00000000abcd0100 R12: 0000000000000000 [ 192.760436][ T6029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.774962][ T6029] FS: 00007f43ac2426c0(0000) GS:ffff8881aadf9000(0000) knlGS:0000000000000000 [ 192.786067][ T6029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.793260][ T6029] CR2: 00007fd48714df98 CR3: 0000000050b46000 CR4: 00000000003526f0 [ 192.801452][ T6029] Call Trace: [ 192.805179][ T6029] [ 192.808264][ T6029] ext4_xattr_set_entry+0x1169/0x3440 [ 192.814247][ T6029] ext4_xattr_ibody_set+0x437/0xa40 [ 192.819704][ T6029] ext4_expand_extra_isize_ea+0x2ea9/0x3bb0 [ 192.826245][ T6029] __ext4_expand_extra_isize+0x571/0x6f0 [ 192.832401][ T6029] __ext4_mark_inode_dirty+0x654/0x970 [ 192.838122][ T6029] ext4_evict_inode+0x167b/0x23d0 [ 192.843717][ T6029] ? __pfx_ext4_evict_inode+0x10/0x10 [ 192.849315][ T6029] evict+0x6a9/0xca0 [ 192.854119][ T6029] ? kmsan_get_metadata+0xfb/0x160 [ 192.859485][ T6029] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 192.866354][ T6029] iput+0xc6f/0x1070 [ 192.877129][ T6029] ext4_process_orphan+0x49a/0x520 [ 192.884502][ T6029] ext4_orphan_cleanup+0x10a6/0x1e30 [ 192.890061][ T6029] ext4_fill_super+0xa5d3/0xae50 [ 192.895569][ T6029] ? kmsan_get_metadata+0xfb/0x160 [ 192.900933][ T6029] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 192.907382][ T6029] ? sb_set_blocksize+0x24e/0x390 [ 192.912888][ T6029] get_tree_bdev_flags+0x6e6/0x920 [ 192.918251][ T6029] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.924042][ T6029] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.929580][ T6029] ? __pfx_ext4_get_tree+0x10/0x10 [ 192.935154][ T6029] get_tree_bdev+0x38/0x50 [ 192.946966][ T6029] ext4_get_tree+0x35/0x40 [ 192.954771][ T6029] vfs_get_tree+0xb3/0x5c0 [ 192.959443][ T6029] do_new_mount+0x879/0x1700 [ 192.964596][ T6029] ? kmsan_get_metadata+0xfb/0x160 [ 192.970004][ T6029] path_mount+0x749/0x1fb0 [ 192.979739][ T6029] ? user_path_at+0x241/0x3e0 [ 192.986561][ T6029] __se_sys_mount+0x6f7/0x7e0 [ 192.991510][ T6029] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 192.997839][ T6029] ? kmsan_get_metadata+0xfb/0x160 [ 193.003462][ T6029] __x64_sys_mount+0xe4/0x150 [ 193.008414][ T6029] x64_sys_call+0x38cb/0x3e70 [ 193.013535][ T6029] do_syscall_64+0xd9/0xf80 [ 193.018369][ T6029] ? clear_bhb_loop+0x40/0x90 [ 193.023582][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.029696][ T6029] RIP: 0033:0x7f43ab390eea [ 193.034742][ T6029] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.054948][ T6029] RSP: 002b:00007f43ac241e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.063893][ T6029] RAX: ffffffffffffffda RBX: 00007f43ac241ef0 RCX: 00007f43ab390eea [ 193.072047][ T6029] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f43ac241eb0 [ 193.085334][ T6029] RBP: 0000200000000180 R08: 00007f43ac241ef0 R09: 0000000000800700 [ 193.095695][ T6029] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 193.105406][ T6029] R13: 00007f43ac241eb0 R14: 000000000000046f R15: 000000000000002c [ 193.114740][ T6029] [ 193.117906][ T6029] ---[ end trace 0000000000000000 ]--- [ 193.124377][ T6029] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.14: iget: bad extra_isize 90 (inode size 256) [ 193.263216][ T6029] EXT4-fs (loop0): Remounting filesystem read-only [ 193.270486][ T6029] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 193.283826][ T6029] EXT4-fs (loop0): 1 orphan inode deleted [ 193.291608][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.525721][ T6029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.214961][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 196.215032][ T30] audit: type=1326 audit(1766064684.176:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.482964][ T30] audit: type=1326 audit(1766064684.226:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.505647][ T30] audit: type=1326 audit(1766064684.286:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.528381][ T30] audit: type=1326 audit(1766064684.296:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.551032][ T30] audit: type=1326 audit(1766064684.316:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.576068][ T30] audit: type=1326 audit(1766064684.356:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.600280][ T30] audit: type=1326 audit(1766064684.356:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 196.622775][ T30] audit: type=1326 audit(1766064684.356:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6060 comm="syz.2.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb16098f749 code=0x7ffc0000 [ 197.035776][ T6066] syz.0.28 uses obsolete (PF_INET,SOCK_PACKET) [ 197.987874][ T6077] netlink: 172 bytes leftover after parsing attributes in process `syz.0.32'. [ 198.000577][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32'. [ 198.259083][ T6079] loop1: detected capacity change from 0 to 512 [ 198.332535][ T6079] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 198.465509][ T6079] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 198.564183][ T6079] EXT4-fs (loop1): Remounting filesystem read-only [ 198.571460][ T6079] EXT4-fs (loop1): 1 truncate cleaned up [ 198.579458][ T6079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.591641][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.023118][ T30] audit: type=1326 audit(1766064688.996:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.045832][ T30] audit: type=1326 audit(1766064688.996:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.073931][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 201.153908][ T6102] loop4: detected capacity change from 0 to 128 [ 201.231075][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 201.231142][ T30] audit: type=1326 audit(1766064689.206:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.273395][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 201.286873][ T5884] usb 3-1: config 0 has no interfaces? [ 201.292954][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 201.302578][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.349179][ T5884] usb 3-1: config 0 descriptor?? [ 201.364257][ T6109] sctp: [Deprecated]: syz.1.40 (pid 6109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.364257][ T6109] Use struct sctp_sack_info instead [ 201.388707][ T30] audit: type=1326 audit(1766064689.266:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.411671][ T30] audit: type=1326 audit(1766064689.296:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.433900][ T6102] syz.4.41: attempt to access beyond end of device [ 201.433900][ T6102] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 201.448159][ T30] audit: type=1326 audit(1766064689.296:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.470668][ T30] audit: type=1800 audit(1766064689.296:44): pid=6102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.41" name="bus" dev="loop4" ino=1048606 res=0 errno=0 [ 201.496608][ T30] audit: type=1326 audit(1766064689.306:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.520470][ T30] audit: type=1326 audit(1766064689.306:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.547358][ T30] audit: type=1326 audit(1766064689.306:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.573277][ T30] audit: type=1326 audit(1766064689.316:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.595928][ T30] audit: type=1326 audit(1766064689.316:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6103 comm="syz.3.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0d2f8f749 code=0x7ffc0000 [ 201.663556][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.171519][ T796] usb 3-1: USB disconnect, device number 2 [ 203.261197][ T6128] process 'syz.0.44' launched '/dev/fd/8' with NULL argv: empty string added [ 203.498451][ T6131] program syz.3.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 203.788079][ T6135] binfmt_misc: register: failed to install interpreter file ./file0 [ 204.494421][ T6146] sctp: [Deprecated]: syz.3.55 (pid 6146) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.494421][ T6146] Use struct sctp_sack_info instead [ 205.590279][ T6168] loop4: detected capacity change from 0 to 512 [ 205.682714][ T796] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.703468][ T6168] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.813558][ T6168] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 205.862841][ T796] usb 2-1: Using ep0 maxpacket: 16 [ 205.913158][ T796] usb 2-1: config 0 has no interfaces? [ 205.919024][ T796] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 205.928610][ T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.936572][ T6168] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.64: bg 0: block 248: padding at end of block bitmap is not set [ 205.972558][ T6168] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.64: Failed to acquire dquot type 1 [ 206.055158][ T796] usb 2-1: config 0 descriptor?? [ 206.056675][ T6168] EXT4-fs (loop4): 1 truncate cleaned up [ 206.068211][ T6168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 206.306779][ T6177] openvswitch: netlink: Message has 8 unknown bytes. [ 206.426680][ T5810] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 207.021941][ T6185] sctp: [Deprecated]: syz.2.70 (pid 6185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.021941][ T6185] Use struct sctp_sack_info instead [ 207.049426][ T6186] ===================================================== [ 207.056951][ T6186] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 207.064375][ T6186] eth_type_trans+0x6a2/0x9b0 [ 207.069326][ T6186] __dev_forward_skb2+0x4b1/0x950 [ 207.074668][ T6186] dev_forward_skb_nomtu+0x3b/0xe0 [ 207.079936][ T6186] __bpf_redirect+0x14d6/0x1760 [ 207.085107][ T6186] bpf_clone_redirect+0x4b5/0x6d0 [ 207.090325][ T6186] ___bpf_prog_run+0x1297/0xeba0 [ 207.095566][ T6186] __bpf_prog_run512+0xc5/0x100 [ 207.100652][ T6186] bpf_test_run+0x496/0xe00 [ 207.105554][ T6186] bpf_prog_test_run_skb+0x2377/0x3200 [ 207.111200][ T6186] bpf_prog_test_run+0x5c2/0xa40 [ 207.116476][ T6186] __sys_bpf+0x873/0xeb0 [ 207.120854][ T6186] __x64_sys_bpf+0xa4/0xf0 [ 207.125666][ T6186] x64_sys_call+0x31c3/0x3e70 [ 207.130541][ T6186] do_syscall_64+0xd9/0xf80 [ 207.135373][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.141425][ T6186] [ 207.144009][ T6186] Uninit was created at: [ 207.148475][ T6186] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 207.154842][ T6186] kmalloc_reserve+0x13c/0x4b0 [ 207.159758][ T6186] pskb_expand_head+0x1fc/0x15d0 [ 207.165016][ T6186] skb_ensure_writable+0x44e/0x510 [ 207.170291][ T6186] bpf_clone_redirect+0x310/0x6d0 [ 207.175686][ T6186] ___bpf_prog_run+0x1297/0xeba0 [ 207.180768][ T6186] __bpf_prog_run512+0xc5/0x100 [ 207.185989][ T6186] bpf_test_run+0x496/0xe00 [ 207.190678][ T6186] bpf_prog_test_run_skb+0x2377/0x3200 [ 207.196467][ T6186] bpf_prog_test_run+0x5c2/0xa40 [ 207.201562][ T6186] __sys_bpf+0x873/0xeb0 [ 207.206155][ T6186] __x64_sys_bpf+0xa4/0xf0 [ 207.210748][ T6186] x64_sys_call+0x31c3/0x3e70 [ 207.215735][ T6186] do_syscall_64+0xd9/0xf80 [ 207.220405][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.226644][ T6186] [ 207.229067][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.3.71 Tainted: G W syzkaller #0 PREEMPT(none) [ 207.240056][ T6186] Tainted: [W]=WARN [ 207.244054][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.254377][ T6186] ===================================================== [ 207.261394][ T6186] Disabling lock debugging due to kernel taint [ 207.267857][ T6186] Kernel panic - not syncing: kmsan.panic set ... [ 207.274397][ T6186] CPU: 1 UID: 0 PID: 6186 Comm: syz.3.71 Tainted: G B W syzkaller #0 PREEMPT(none) [ 207.285254][ T6186] Tainted: [B]=BAD_PAGE, [W]=WARN [ 207.290359][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.300528][ T6186] Call Trace: [ 207.303895][ T6186] [ 207.306919][ T6186] __dump_stack+0x26/0x30 [ 207.311417][ T6186] dump_stack_lvl+0x53/0x270 [ 207.316174][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.322192][ T6186] dump_stack+0x1e/0x25 [ 207.326515][ T6186] vpanic+0x435/0xd30 [ 207.330672][ T6186] panic+0x15d/0x160 [ 207.334764][ T6186] kmsan_report+0x31c/0x320 [ 207.339449][ T6186] ? __msan_warning+0x1b/0x30 [ 207.344387][ T6186] ? eth_type_trans+0x6a2/0x9b0 [ 207.349420][ T6186] ? __dev_forward_skb2+0x4b1/0x950 [ 207.354770][ T6186] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 207.360230][ T6186] ? __bpf_redirect+0x14d6/0x1760 [ 207.365434][ T6186] ? bpf_clone_redirect+0x4b5/0x6d0 [ 207.370814][ T6186] ? ___bpf_prog_run+0x1297/0xeba0 [ 207.376073][ T6186] ? __bpf_prog_run512+0xc5/0x100 [ 207.381252][ T6186] ? bpf_test_run+0x496/0xe00 [ 207.386101][ T6186] ? bpf_prog_test_run_skb+0x2377/0x3200 [ 207.391926][ T6186] ? bpf_prog_test_run+0x5c2/0xa40 [ 207.397193][ T6186] ? __sys_bpf+0x873/0xeb0 [ 207.401747][ T6186] ? __x64_sys_bpf+0xa4/0xf0 [ 207.406526][ T6186] ? x64_sys_call+0x31c3/0x3e70 [ 207.411660][ T6186] ? do_syscall_64+0xd9/0xf80 [ 207.416515][ T6186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.422749][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.428778][ T6186] ? should_fail_ex+0x45/0x8a0 [ 207.433712][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.439008][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.444413][ T6186] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 207.450992][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.456886][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.462864][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.468144][ T6186] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 207.474629][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.479903][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.485203][ T6186] __msan_warning+0x1b/0x30 [ 207.489853][ T6186] eth_type_trans+0x6a2/0x9b0 [ 207.494739][ T6186] __dev_forward_skb2+0x4b1/0x950 [ 207.499921][ T6186] ? pskb_expand_head+0x1254/0x15d0 [ 207.505301][ T6186] dev_forward_skb_nomtu+0x3b/0xe0 [ 207.510557][ T6186] __bpf_redirect+0x14d6/0x1760 [ 207.515580][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.521156][ T6186] bpf_clone_redirect+0x4b5/0x6d0 [ 207.526437][ T6186] ___bpf_prog_run+0x1297/0xeba0 [ 207.531591][ T6186] __bpf_prog_run512+0xc5/0x100 [ 207.536600][ T6186] ? kmsan_internal_poison_memory+0x78/0x90 [ 207.542650][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.547927][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.553906][ T6186] ? __local_bh_enable_ip+0x11/0xb0 [ 207.559239][ T6186] ? filter_irq_stacks+0x49/0x190 [ 207.564451][ T6186] ? stack_depot_save_flags+0x35/0x790 [ 207.570051][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.575346][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.580619][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.585903][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.591184][ T6186] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 207.597669][ T6186] ? kmsan_get_metadata+0x150/0x160 [ 207.603036][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.609018][ T6186] ? __pfx___bpf_prog_run512+0x10/0x10 [ 207.614620][ T6186] ? __pfx___bpf_prog_run512+0x10/0x10 [ 207.620211][ T6186] bpf_test_run+0x496/0xe00 [ 207.624870][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.630148][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.635417][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.640691][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.646682][ T6186] ? bpf_test_run+0x2f7/0xe00 [ 207.652081][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.657395][ T6186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 207.663381][ T6186] bpf_prog_test_run_skb+0x2377/0x3200 [ 207.669021][ T6186] ? kmsan_get_metadata+0xfb/0x160 [ 207.674314][ T6186] ? __rcu_read_unlock+0x6d/0xd0 [ 207.679431][ T6186] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 207.685400][ T6186] bpf_prog_test_run+0x5c2/0xa40 [ 207.690483][ T6186] __sys_bpf+0x873/0xeb0 [ 207.694878][ T6186] __x64_sys_bpf+0xa4/0xf0 [ 207.699464][ T6186] x64_sys_call+0x31c3/0x3e70 [ 207.704305][ T6186] do_syscall_64+0xd9/0xf80 [ 207.708971][ T6186] ? clear_bhb_loop+0x40/0x90 [ 207.713797][ T6186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.719846][ T6186] RIP: 0033:0x7fe0d2f8f749 [ 207.724371][ T6186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.744113][ T6186] RSP: 002b:00007fe0d3d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 207.752663][ T6186] RAX: ffffffffffffffda RBX: 00007fe0d31e5fa0 RCX: 00007fe0d2f8f749 [ 207.760741][ T6186] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 207.768803][ T6186] RBP: 00007fe0d3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 207.776876][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.784943][ T6186] R13: 00007fe0d31e6038 R14: 00007fe0d31e5fa0 R15: 00007ffc7b7c3ca8 [ 207.793055][ T6186] [ 207.796636][ T6186] Kernel Offset: disabled [ 207.801009][ T6186] Rebooting in 86400 seconds..