last executing test programs: 11.876612526s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='hrtimer_init\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000000000000700000044040001000000004f5d4d01bdd528034dad692128bb90c72f394727a7d2ce46216930826c0d5d2843e33cd50e864fee798fb7902e8437cf10e15e7723a28cf16fed77eb7b9383f43b11934d8896ccb8ea873e9b970bd280ee88ca9bc95ce43fdce777d6ee0310cd83968afb28ff625c1c75d5befe8183b9ca0e0d12c0ce10d4e1c45a126bcbda93763b15b173a1e3e3ecd64cc72ff84b49c2faa2e2a37476180ed4b6f7ce77563c8aadb29e2cb4f36b5d6518912d8b0f7256a3b80bfecb4a91fdb0b55b54798ee425a83484c1d8fdbe3be6d5d98f0eef180fcd04cdb0c2882800000000"], 0x18}}], 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd605d35c200080000fc010000000000000000000000000000fc00000000000000000000000000000000000007"], 0x0) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x0) 11.217729545s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0xa8, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_KEYS={0x88, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xd, 0x4, "8ba74170bc8e93b499"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "a253e76301"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6895e4b411"}, @NL80211_KEY_SEQ={0xa, 0x4, "7cdd380b2f42"}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0213c763bba5e81cd4e2ea807a"}]}]}]}, 0xa8}}, 0x4000) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x0, 0x10, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x20008000) recvmmsg(r5, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003700)={0x6e0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x6c1, 0x0, 0x0, 0x1, [@generic="698116aedb8b20ea7c6c1ea25cebb36cb7516a143ffcbf515d9b35990799d65ed4fa083777eacc95fa2f3717c611e3c6fe1d4b847f38d0dacc9f008b92723a786b2dd3347844e021bcf5efa0a62caef6e04b6b1b9d643540e3a8fae523375efd02993336c03a1a1bf64ef9ed0ad98cc24e76e2b2f4cb4bf0fb02b4ad1c66f8c32e54a0cb9093b9d599e05e779bd684cc7706d2260a8a8c54287555094b6ad08ade2ab84cf88d0ef9342515965597c9eca65e292856ea502b09a749a8f3ea66e51b0d33dec35a77773ef419d59b4c3ca6e89835cffebd2a3886a4e26ba7f4e360d05d6eaad1f680cbdb784160890a3ea391a12000c155b0b50bd74b86937a09d67069c2343877999893989ea493f51f925ac132aab7eec297a3862434e93e1811424687bde6a777c97a8503cff06c411b865f973c2495874293fa612c3260e57c6fc930b693c94681bff0ba128341de4210b22373fba80a6dda5133339b8f435c4b1369d68ab17e15e5f4f0e397e38939f706aacfc602b84e7b6800c0407bf31cde3bad212985b4e73516dcba1abcef724ff9c3f8ebaac7bc51521a2b8b1959c2f199abdfb004a36f34dc1ed8e955ecbbf7e57622ccca111565b06627b5188b7cc860d88e6ecb1a6e09c98bd28d59ff9881879a10c459274f02d802799dc31d22a16d50dc3aa6a209beff95faf7fb3e0efb64abea0107d907e48bdf05ff18f9e25374350fd94c8574626204411980450b26b4d94cc27af25c9fb01ec651cf743389268d34efaccc90cc31417372c8b417661bf7bcc60322ce048935b50b9cc604f502ec4077f684c3491a75e1c316960536739ed057fbaf1f7e51908afa659e47c32760feff1c9286daf9f38f1f4efbfbadb527a8d24a02dbb11b8df87d6d425e33ff3e21b99398b37eb27fc6d22441f23a2abf2d5af960808635a16f2c54345aa0222d3b3ccccc84b240f3c0573a0f390d5db54944e64486182fc1420f4853ef552b1c365de6e507645e9e710041dbd9f2aa13cc59b9bb1670be77a739861c2eec21532ba37d2ec12f604f9e502290952973935b67c6facb7f1409e064c7851c39b4b0a37810000e2df921359dc805a0407d9c8cf92a778f1bac0bf82b806661195a939ca63af13050b985b9138e765dccbef68cf21ae55234ae9de86755288474d4c5c9b246cffe4746eabec04a3f57a61602ae9528ab909b95a1085bcded066ff9a7d648f19343b71df5247f1af8f809f6d117ecc2b4350dfe2eddce37603d4235730e504a147d61b5ea7e64be89c9bdca3b62b741d52caedfdfb227b7a1b1bc6be052f7a07b2071404825b00b96450dc39628e4463aa6d5e6738e4f9b975b4d763440fac2fb297a0812592599814af5fffae33916356070641edfecf45eb9149fcc3c520ea1f02c4d78916429f86b27b01a3ed56b3a8014498bdbb7a9e4822ed452445f0a362fa79decf33651837d02afd67d6e8a2566bf9321d74e2844ce00190c0b5714998159a77e98512a18e7e9b46a57f5ce89f3095232237d30b118ca1c9b30329524a451caa894e3a66424e920bfc7d08c4eb38a274be9d7ba2d93ccdc25dcfa1b9c0ef29fd6ba89a1d914bb484569503a4d33f3d6e347f4f44d811e972ac1c4b85280674e72a0a5824ec65939f1391173191806966bf61a2ac37ecbaa0ab3583b051f4623c1a3c9bdbdd7245a3c384da6c0f97102cb428b4f525a6c6ec1954577cd14a0c97692dd4b964411741f068afd9ead44080190c768f7b54a3421b476d2c9b313f02bf1032ee799e4d3cd2736b28f2726cebca5e69883988e54ec560aa1efedc1070ae316c7e3f1e0e41d972aa4914f5e68dffc3c8941d8a81ee63363539289c55d0522182901377914e566c4122a0a3fd04fb81e6d5805093ce00ed52490b95359f083450dc5da8b5e7702f72d60a3b85baa0d5c69c29dd899c337d7d19a7badac5ce8b2dd5a6e1068681e0671aab8bafe98013af002f36e4fe5eca3426b9dec788ff7d66b511a4015231ddcaa0a862f0536d9f6ce07c39b1f03a47fe071615ef1552c4159826a95ce58a0db04cca0b4e72c1c70b6c32cd1cb318429e1e9771767264b5d83475b503e86ae57f9adda13cea644ca3e89d97a84826f519e7b00622f86654e5031b5808696d8f54cfe7893f3a252a8a4dfa305c426c4c7b1d301686ef36db07ddd905b257dd09d4448c5d335965a7ead2230671424185925ce0c5871c20595bdd437d7a3011f4a99b402eee43cf11677e316d74651377465025757b862b3e117d97fb5247ab67910a5a403df35a82c2a90f4afdea2d70c2d5c0741a54ee15fdfe7c54caf1632c2fd375a0fce83ab11f7ab5b871c73bf33a0f2035f3896e92c52d8eba7d9a6dbbb2d3674f01f9c0c2787831b36db4556b2004e5c51d89a1a805af2f0e35ae6d330ce94fb88aada2ce6"]}]}, 0x6e0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600034000000000060005"], 0xe4}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 10.123516409s ago: executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x17, 0x4c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) unshare(0x60600) socket$unix(0x1, 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 9.444385108s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001ac0)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 8.226963771s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7.987260233s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'wlan0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 7.375646977s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x44040, 0x0, 0x0) 6.362185476s ago: executing program 2: syz_emit_vhci(0x0, 0xf) 5.553246454s ago: executing program 1: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.422102268s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_writepages_result\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 4.845374002s ago: executing program 2: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x0, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x1, 0x0, 0x2, 0x3d000}, 0x7f}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) tkill(r0, 0x7) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r3, &(0x7f00000001c0)=""/4068, 0xfe4) 3.932654592s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 3.267357334s ago: executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000004c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socket(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 3.223729245s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_rm_leaf\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x181400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)={0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x2}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) pselect6(0x40, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0xc00f476f769cacbf}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200394}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.98377629s ago: executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r4 = dup2(r1, r0) sendmsg$netlink(r4, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x0) 2.601754576s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001ac0)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) 2.461516634s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x40000) 2.223005517s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x18000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x0, 0x8, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 1.980973129s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x61, 0x11, 0x4}]}, &(0x7f0000001380)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280), 0x68}}, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="811001800000000005009700ffff"], 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r5, 0x40047451, 0x2000000a) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f00000013c0)=0xfffffffd, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r8 = accept4(r1, &(0x7f0000001200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000001280)=0x80, 0x81000) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000012c0)={0x101, {{0x2, 0x4e23, @private=0xa010100}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff020000000000000000000000000001"], 0xfdef) 1.786830159s ago: executing program 1: r0 = socket$inet_icmp(0x2, 0x2, 0x1) unshare(0x28000600) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10) 1.551622364s ago: executing program 2: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xf) 1.408890923s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x8, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x62}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xeb, &(0x7f00000002c0)=""/235}, 0x21) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000101700"/20, @ANYRES32=0x0, @ANYRES8=r0], 0x3c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0x7ff, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x55ebcfb200f1cf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff}}}, 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x14, r6, 0x200}, 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @dev, {[@ssrr={0x89, 0x3}]}}}}}) poll(&(0x7f00000022c0), 0x58, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r9, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000940)={{r7}, "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"}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r12], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.238034431s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_writepages_result\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) 1.060727424s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) 727.527363ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000007c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 483.602574ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x28, 0x2c, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x2, 0x0, '\x00', @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}}, 0x5e) 306.533009ms ago: executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000740)) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040)=0x100, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 142.997245ms ago: executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448de, &(0x7f0000000240)={0x0, 0x0, "957008"}) 23.040381ms ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(0x0, 0x0, 0x11ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x103, 0xd}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000098000000000000002900000037"], 0xb0}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000fb0900020073797a30000000000c00078008001300000000000c000300686173683a697000050005000a0000000500040000000000"], 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 0s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001ac0)='GPL\x00'}, 0x90) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="b8", 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. 2024/06/06 13:38:09 fuzzer started 2024/06/06 13:38:10 dialing manager at 10.128.0.169:30024 [ 163.862312][ T5044] cgroup: Unknown subsys name 'net' [ 164.139654][ T5044] cgroup: Unknown subsys name 'rlimit' 2024/06/06 13:38:57 starting 5 executor processes [ 210.609286][ T5052] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 212.918629][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.928193][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.937632][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.951266][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.962629][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.972123][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.070055][ T4428] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.079616][ T4428] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.089923][ T4428] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.248630][ T4428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.260702][ T4428] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.271670][ T4428] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.309574][ T4428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.335419][ T4428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.350450][ T4428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.378217][ T4428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.393453][ T4428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.406202][ T4428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.594802][ T4428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.640575][ T4428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.661065][ T4428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.706715][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.716061][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.726459][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.727425][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.759673][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.770973][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.772196][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 213.790551][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.800302][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.358700][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 214.737863][ T5073] chnl_net:caif_netlink_parms(): no params data found [ 214.958887][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 215.056605][ T5084] Bluetooth: hci0: command tx timeout [ 215.222439][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.230294][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.238300][ T5069] bridge_slave_0: entered allmulticast mode [ 215.247435][ T5069] bridge_slave_0: entered promiscuous mode [ 215.381179][ T5084] Bluetooth: hci1: command tx timeout [ 215.389201][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.397274][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.405225][ T5069] bridge_slave_1: entered allmulticast mode [ 215.414569][ T5069] bridge_slave_1: entered promiscuous mode [ 215.529781][ T5084] Bluetooth: hci2: command tx timeout [ 215.730852][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.861875][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.872456][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 215.892190][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.900364][ T5073] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.908249][ T5073] bridge_slave_0: entered allmulticast mode [ 215.917338][ T5073] bridge_slave_0: entered promiscuous mode [ 215.927729][ T5084] Bluetooth: hci4: command tx timeout [ 216.035366][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.043058][ T5073] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.053337][ T5073] bridge_slave_1: entered allmulticast mode [ 216.063434][ T5073] bridge_slave_1: entered promiscuous mode [ 216.089027][ T5084] Bluetooth: hci3: command tx timeout [ 216.136197][ T5069] team0: Port device team_slave_0 added [ 216.206757][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 216.249432][ T5069] team0: Port device team_slave_1 added [ 216.312365][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.320488][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.328578][ T5076] bridge_slave_0: entered allmulticast mode [ 216.337750][ T5076] bridge_slave_0: entered promiscuous mode [ 216.405842][ T5073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.501253][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.511717][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.519382][ T5076] bridge_slave_1: entered allmulticast mode [ 216.528403][ T5076] bridge_slave_1: entered promiscuous mode [ 216.546094][ T5073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.561060][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.569785][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.596679][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.746239][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.753513][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.779984][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.803421][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.929827][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.016596][ T5073] team0: Port device team_slave_0 added [ 217.024730][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.032416][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.040742][ T5080] bridge_slave_0: entered allmulticast mode [ 217.049771][ T5080] bridge_slave_0: entered promiscuous mode [ 217.139059][ T5084] Bluetooth: hci0: command tx timeout [ 217.194566][ T5069] hsr_slave_0: entered promiscuous mode [ 217.204721][ T5069] hsr_slave_1: entered promiscuous mode [ 217.229315][ T5073] team0: Port device team_slave_1 added [ 217.238323][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.246274][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.255007][ T5080] bridge_slave_1: entered allmulticast mode [ 217.264318][ T5080] bridge_slave_1: entered promiscuous mode [ 217.361217][ T5076] team0: Port device team_slave_0 added [ 217.443890][ T5084] Bluetooth: hci1: command tx timeout [ 217.524086][ T5076] team0: Port device team_slave_1 added [ 217.580713][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.588216][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.614781][ T5073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.627189][ T5084] Bluetooth: hci2: command tx timeout [ 217.730114][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.761924][ T5073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.770392][ T5073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.797221][ T5073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.817393][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.841842][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.850132][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.858132][ T5082] bridge_slave_0: entered allmulticast mode [ 217.867210][ T5082] bridge_slave_0: entered promiscuous mode [ 218.000181][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.008509][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.015563][ T5084] Bluetooth: hci4: command tx timeout [ 218.016264][ T5082] bridge_slave_1: entered allmulticast mode [ 218.029494][ T5082] bridge_slave_1: entered promiscuous mode [ 218.042212][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.049481][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.075790][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.165223][ T5084] Bluetooth: hci3: command tx timeout [ 218.202785][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.210065][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.236783][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.353127][ T5080] team0: Port device team_slave_0 added [ 218.428123][ T5073] hsr_slave_0: entered promiscuous mode [ 218.437372][ T5073] hsr_slave_1: entered promiscuous mode [ 218.445751][ T5073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.453484][ T5073] Cannot create hsr debugfs directory [ 218.479289][ T5080] team0: Port device team_slave_1 added [ 218.507182][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.612994][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.779536][ T5076] hsr_slave_0: entered promiscuous mode [ 218.790263][ T5076] hsr_slave_1: entered promiscuous mode [ 218.800079][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.810100][ T5076] Cannot create hsr debugfs directory [ 218.824918][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.832082][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.858511][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.934035][ T5082] team0: Port device team_slave_0 added [ 218.972976][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.980357][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.007297][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.084928][ T5082] team0: Port device team_slave_1 added [ 219.146626][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.153385][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.224414][ T5084] Bluetooth: hci0: command tx timeout [ 219.286957][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.295529][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.322391][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.350269][ T5069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.370251][ T5069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.404422][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.411593][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.438148][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.539054][ T5084] Bluetooth: hci1: command tx timeout [ 219.582799][ T5069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.666195][ T5080] hsr_slave_0: entered promiscuous mode [ 219.677583][ T5080] hsr_slave_1: entered promiscuous mode [ 219.687695][ T5084] Bluetooth: hci2: command tx timeout [ 219.691181][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.701218][ T5080] Cannot create hsr debugfs directory [ 219.708030][ T5069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.940029][ T5082] hsr_slave_0: entered promiscuous mode [ 219.955274][ T5082] hsr_slave_1: entered promiscuous mode [ 219.963224][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.971355][ T5082] Cannot create hsr debugfs directory [ 220.113185][ T5084] Bluetooth: hci4: command tx timeout [ 220.244153][ T5084] Bluetooth: hci3: command tx timeout [ 220.281708][ T5073] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.381808][ T5073] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.487150][ T5073] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.565145][ T5073] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.808687][ T5076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.842619][ T5076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.957953][ T5076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.036860][ T5076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.262141][ T5080] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.284010][ T5084] Bluetooth: hci0: command tx timeout [ 221.323452][ T5080] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.357354][ T5080] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.443514][ T5080] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.613257][ T5084] Bluetooth: hci1: command tx timeout [ 221.764237][ T5084] Bluetooth: hci2: command tx timeout [ 221.801766][ T5082] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.833231][ T5082] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.861987][ T5082] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.905698][ T5082] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.992177][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.153796][ T5073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.176824][ T5084] Bluetooth: hci4: command tx timeout [ 222.266082][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.322661][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.330296][ T5109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.342291][ T5084] Bluetooth: hci3: command tx timeout [ 222.383300][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.391232][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.554179][ T5073] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.624498][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.698415][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.706270][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.803632][ T5069] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.856254][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.864081][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.916898][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.051186][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.148480][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.156317][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.171823][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.179707][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.392967][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.612296][ T5121] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.620066][ T5121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.644114][ T5121] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.651833][ T5121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.760245][ T5076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.015338][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.103163][ T5080] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.117731][ T5080] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.311901][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.433390][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.441209][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.556233][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.564129][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.980874][ T5069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.586750][ T5069] veth0_vlan: entered promiscuous mode [ 225.630733][ T5073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.732649][ T5069] veth1_vlan: entered promiscuous mode [ 226.009912][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.143262][ T5069] veth0_macvtap: entered promiscuous mode [ 226.256202][ T5069] veth1_macvtap: entered promiscuous mode [ 226.266388][ T5073] veth0_vlan: entered promiscuous mode [ 226.420357][ T5073] veth1_vlan: entered promiscuous mode [ 226.458150][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.498176][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.591725][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.624223][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.666785][ T5069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.676112][ T5069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.685408][ T5069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.695731][ T5069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.960197][ T5073] veth0_macvtap: entered promiscuous mode [ 227.048013][ T5073] veth1_macvtap: entered promiscuous mode [ 227.206330][ T5080] veth0_vlan: entered promiscuous mode [ 227.271886][ T5082] veth0_vlan: entered promiscuous mode [ 227.326961][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.339628][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.356763][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.374066][ T5080] veth1_vlan: entered promiscuous mode [ 227.458705][ T5082] veth1_vlan: entered promiscuous mode [ 227.562859][ T5073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.574265][ T5073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.591862][ T5073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.737216][ T5073] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.746443][ T5073] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.755716][ T5073] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.768377][ T5073] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.807572][ T5080] veth0_macvtap: entered promiscuous mode [ 227.863334][ T5080] veth1_macvtap: entered promiscuous mode [ 227.976118][ T5082] veth0_macvtap: entered promiscuous mode [ 228.094916][ T5082] veth1_macvtap: entered promiscuous mode [ 228.144277][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.155153][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.166689][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.177563][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.192752][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.345379][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.357723][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.368813][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.379553][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.389951][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.400799][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.416381][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.471290][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.483555][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.497926][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.511244][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.526443][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.633004][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.644885][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.656953][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.668802][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.678894][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.689636][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.705038][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.752772][ T5080] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.762233][ T5080] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.771525][ T5080] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.780736][ T5080] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.938825][ T5082] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.948322][ T5082] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.957684][ T5082] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.966924][ T5082] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.105311][ T5076] veth0_vlan: entered promiscuous mode [ 229.265898][ T5076] veth1_vlan: entered promiscuous mode [ 229.706495][ T5076] veth0_macvtap: entered promiscuous mode [ 229.840664][ T5076] veth1_macvtap: entered promiscuous mode [ 230.138524][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.151276][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.162202][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.172989][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.183116][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.193921][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.204201][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.214964][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.230217][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.566364][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.577304][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.587594][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.598412][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.608652][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.619397][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.629604][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.641968][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.660049][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.799005][ T5076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.813255][ T5076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.823984][ T5076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.832999][ T5076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.045217][ T2457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.053370][ T2457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.284061][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.292129][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.795402][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.803487][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.990978][ T5236] input: syz0 as /devices/virtual/input/input5 [ 235.088500][ T2457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.098072][ T2457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.172662][ T29] audit: type=1326 audit(1717681162.324:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.196944][ T29] audit: type=1326 audit(1717681162.324:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.221374][ T29] audit: type=1326 audit(1717681162.324:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.245788][ T29] audit: type=1326 audit(1717681162.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.270540][ T29] audit: type=1326 audit(1717681162.344:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.367613][ T29] audit: type=1326 audit(1717681162.504:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.391128][ T29] audit: type=1326 audit(1717681162.504:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.526513][ T29] audit: type=1326 audit(1717681162.644:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f05cd07bc0c code=0x7ffc0000 [ 235.549797][ T29] audit: type=1326 audit(1717681162.644:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.574038][ T29] audit: type=1326 audit(1717681162.644:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5235 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05cd07cf69 code=0x7ffc0000 [ 235.991435][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.999657][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.026870][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.035782][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.291885][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.300303][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.372133][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.380572][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.549657][ T2421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.558289][ T2421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.814765][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.822971][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.654206][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 237.742568][ T5260] loop0: detected capacity change from 0 to 1764 [ 237.749485][ T5260] ======================================================= [ 237.749485][ T5260] WARNING: The mand mount option has been deprecated and [ 237.749485][ T5260] and is ignored by this kernel. Remove the mand [ 237.749485][ T5260] option from the mount to silence this warning. [ 237.749485][ T5260] ======================================================= [ 237.927108][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 238.102683][ T25] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 238.102833][ T25] usb 4-1: config 0 has no interface number 0 [ 238.276035][ T25] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 238.276205][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.276338][ T25] usb 4-1: Product: syz [ 238.276442][ T25] usb 4-1: Manufacturer: syz [ 238.276549][ T25] usb 4-1: SerialNumber: syz [ 238.299970][ T25] usb 4-1: config 0 descriptor?? [ 238.380706][ T25] sierra 4-1:0.153: Sierra USB modem converter detected [ 238.653243][ T5270] loop0: detected capacity change from 0 to 256 [ 238.683123][ T25] usb 4-1: USB disconnect, device number 2 [ 238.684226][ T25] sierra 4-1:0.153: device disconnected [ 239.792324][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 239.800282][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 239.920198][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 240.756659][ T5294] syz-executor.1 (pid 5294) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 240.798061][ T5296] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.913939][ C1] hrtimer: interrupt took 310569 ns [ 241.316577][ T5304] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 241.539486][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 241.784428][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 241.928998][ T10] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 241.937748][ T10] usb 4-1: config 0 has no interface number 0 [ 242.184882][ T10] usb 4-1: New USB device found, idVendor=1199, idProduct=0025, bcdDevice=1e.64 [ 242.195885][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.204918][ T10] usb 4-1: Product: syz [ 242.209277][ T10] usb 4-1: Manufacturer: syz [ 242.214138][ T10] usb 4-1: SerialNumber: syz [ 242.287927][ T10] usb 4-1: config 0 descriptor?? [ 242.376397][ T4484] udevd[4484]: worker [5316] terminated by signal 33 (Unknown signal 33) [ 242.414659][ T4484] udevd[4484]: worker [5316] failed while handling '/devices/virtual/block/loop3' [ 242.474233][ T10] sierra 4-1:0.153: Sierra USB modem converter detected [ 242.535651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 242.638047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 242.844027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 242.910900][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.619130][ T5324] process 'syz-executor.4' launched './file0' with NULL argv: empty string added [ 244.097023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 244.274061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.376825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.584168][ T5084] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 244.592751][ T5084] Bluetooth: hci2: Injecting HCI hardware error event [ 244.600571][ T5084] Bluetooth: hci2: hardware error 0x00 [ 244.613000][ T10] usb 4-1: USB disconnect, device number 3 [ 244.620064][ T10] sierra 4-1:0.153: device disconnected [ 245.693377][ T5334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.700926][ T5334] IPv6: NLM_F_CREATE should be set when creating new route [ 246.205015][ T5071] Bluetooth: hci3: unexpected subevent 0x0c length: 11 > 5 [ 246.664880][ T5084] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 246.899760][ T5339] net_ratelimit: 44 callbacks suppressed [ 246.899836][ T5339] sctp: failed to load transform for md5: -2 [ 247.590647][ T5360] loop7: detected capacity change from 0 to 16384 [ 247.960600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.984795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 249.084031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 249.135819][ T5359] loop4: detected capacity change from 0 to 8192 [ 249.320897][ T5359] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.394396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 249.567552][ T5377] EXT4-fs: error -4 creating inode table initialization thread [ 249.575643][ T5377] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 250.208990][ T5383] vlan0: entered promiscuous mode [ 250.219807][ T5383] vlan0: entered allmulticast mode [ 250.238843][ T5383] veth0_vlan: entered allmulticast mode [ 250.260759][ T5383] team0: Port device vlan0 added [ 250.300147][ T5084] Bluetooth: hci3: unexpected subevent 0x0c length: 11 > 5 [ 251.094819][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 251.097323][ T5389] Zero length message leads to an empty skb [ 251.826902][ T5399] usb usb8: usbfs: process 5399 (syz-executor.4) did not claim interface 0 before use [ 252.658932][ T5404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.667675][ T5401] loop1: detected capacity change from 0 to 4096 [ 252.693657][ T5405] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.780609][ T5404] Dead loop on virtual device ip6_vti0, fix it urgently! [ 252.780956][ T5401] NILFS (loop1): invalid segment: Checksum error in segment payload [ 252.796376][ T5401] NILFS (loop1): trying rollback from an earlier position [ 252.858882][ T5401] NILFS (loop1): recovery complete [ 252.918693][ T5407] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.456414][ T5412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 253.761671][ T5417] loop4: detected capacity change from 0 to 8 [ 253.879131][ T5417] cramfs: Unknown parameter 'â@C3žˆ™‰fnFO¼¨Nþg¾' [ 255.455600][ T5421] loop3: detected capacity change from 0 to 4096 [ 255.567173][ T5421] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 255.688387][ T5084] Bluetooth: hci3: unexpected subevent 0x0c length: 11 > 5 [ 255.961649][ T5430] netlink: 212884 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.397142][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 256.397218][ T29] audit: type=1800 audit(1717681183.384:14): pid=5421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 259.683325][ T29] audit: type=1800 audit(1717681186.794:15): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1965 res=0 errno=0 [ 260.797057][ T5084] Bluetooth: hci3: unexpected subevent 0x0c length: 11 > 5 [ 262.382640][ T5485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.283080][ T29] audit: type=1800 audit(1717681190.384:16): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1960 res=0 errno=0 [ 264.250390][ T5501] syz-executor.2 (5501): drop_caches: 2 [ 265.089134][ T5511] random: crng reseeded on system resumption [ 266.364705][ T5530] serio: Serial port ptm0 [ 266.776042][ T5531] loop4: detected capacity change from 0 to 1024 [ 266.890733][ T5531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.026334][ T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.749348][ T43] usb 4-1: New USB device found, idVendor=0a5c, idProduct=6422, bcdDevice=e3.71 [ 268.759136][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.771376][ T43] usb 4-1: Product: syz [ 268.776338][ T43] usb 4-1: Manufacturer: syz [ 268.781248][ T43] usb 4-1: SerialNumber: syz [ 268.879169][ T43] usb 4-1: config 0 descriptor?? [ 268.967865][ T43] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 268.981225][ T43] ftdi_sio ttyUSB0: unknown device type: 0xe371 [ 269.184892][ T43] usb 4-1: USB disconnect, device number 4 [ 269.196676][ T43] ftdi_sio 4-1:0.0: device disconnected [ 269.621794][ T5076] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.430382][ T5568] serio: Serial port ptm0 [ 271.855022][ T5582] random: crng reseeded on system resumption [ 272.291148][ T5587] syz-executor.2 (5587) used greatest stack depth: 5232 bytes left [ 273.204694][ T5602] serio: Serial port ptm0 [ 273.622468][ T5605] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.180593][ T5627] ip6t_rpfilter: unknown options [ 275.826714][ T5643] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 276.177966][ T5648] serio: Serial port ptm0 [ 277.487784][ T5667] random: crng reseeded on system resumption [ 278.024431][ T5679] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.034327][ T5679] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.044254][ T5679] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.158475][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.172301][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.181486][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.289661][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.299494][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.480201][ T5684] loop2: detected capacity change from 0 to 256 [ 278.721521][ T5684] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 280.665378][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.672350][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.802550][ T5700] serio: Serial port ptm0 [ 287.452299][ T5746] dccp_invalid_packet: P.Data Offset(0) too small [ 287.651715][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.916456][ T5753] bridge_slave_1: left allmulticast mode [ 287.922385][ T5753] bridge_slave_1: left promiscuous mode [ 287.929436][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.993908][ T5753] bridge2: port 1(bridge_slave_1) entered blocking state [ 288.011497][ T5753] bridge2: port 1(bridge_slave_1) entered disabled state [ 288.022201][ T5753] bridge_slave_1: entered allmulticast mode [ 288.031413][ T5753] bridge_slave_1: entered promiscuous mode [ 288.042463][ T5753] bridge2: port 1(bridge_slave_1) entered blocking state [ 288.050316][ T5753] bridge2: port 1(bridge_slave_1) entered forwarding state [ 288.801249][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.812147][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.029117][ T5772] ===================================================== [ 289.036445][ T5772] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 289.043825][ T5772] __bpf_strtoull+0x245/0x5b0 [ 289.048697][ T5772] bpf_strtol+0x7c/0x270 [ 289.053144][ T5772] ___bpf_prog_run+0x13fe/0xe0f0 [ 289.058379][ T5772] __bpf_prog_run96+0xb5/0xe0 [ 289.063325][ T5772] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 289.069162][ T5772] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 289.074868][ T5772] bpf_prog_test_run+0x6b7/0xad0 [ 289.079995][ T5772] __sys_bpf+0x6aa/0xd90 [ 289.084530][ T5772] __x64_sys_bpf+0xa0/0xe0 [ 289.089123][ T5772] x64_sys_call+0x96b/0x3b50 [ 289.094010][ T5772] do_syscall_64+0xcf/0x1e0 [ 289.098757][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.105061][ T5772] [ 289.107474][ T5772] Local variable stack created at: [ 289.112681][ T5772] __bpf_prog_run96+0x45/0xe0 [ 289.117740][ T5772] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 289.123440][ T5772] [ 289.125965][ T5772] CPU: 1 PID: 5772 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 289.136257][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 289.146572][ T5772] ===================================================== [ 289.153813][ T5772] Disabling lock debugging due to kernel taint [ 289.160078][ T5772] Kernel panic - not syncing: kmsan.panic set ... [ 289.166630][ T5772] CPU: 1 PID: 5772 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 289.178292][ T5772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 289.188507][ T5772] Call Trace: [ 289.191902][ T5772] [ 289.194930][ T5772] dump_stack_lvl+0x216/0x2d0 [ 289.199807][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.205796][ T5772] dump_stack+0x1e/0x30 [ 289.210132][ T5772] panic+0x4e2/0xcd0 [ 289.214210][ T5772] ? kmsan_get_metadata+0xf1/0x1d0 [ 289.219504][ T5772] kmsan_report+0x2d5/0x2e0 [ 289.224202][ T5772] ? __msan_warning+0x95/0x120 [ 289.229118][ T5772] ? __bpf_strtoull+0x245/0x5b0 [ 289.234143][ T5772] ? bpf_strtol+0x7c/0x270 [ 289.238759][ T5772] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 289.244048][ T5772] ? __bpf_prog_run96+0xb5/0xe0 [ 289.249067][ T5772] ? bpf_test_run_xdp_live+0x10a9/0x2f70 [ 289.254918][ T5772] ? bpf_prog_test_run_xdp+0xf02/0x1a40 [ 289.260679][ T5772] ? bpf_prog_test_run+0x6b7/0xad0 [ 289.265996][ T5772] ? __sys_bpf+0x6aa/0xd90 [ 289.270658][ T5772] ? __x64_sys_bpf+0xa0/0xe0 [ 289.275582][ T5772] ? x64_sys_call+0x96b/0x3b50 [ 289.280530][ T5772] ? do_syscall_64+0xcf/0x1e0 [ 289.285398][ T5772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.291839][ T5772] ? stack_depot_save+0x12/0x20 [ 289.296843][ T5772] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 289.302857][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.308217][ T5772] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 289.314757][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.320116][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.326099][ T5772] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 289.332101][ T5772] ? stack_depot_save_flags+0x66d/0x6e0 [ 289.337842][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.343222][ T5772] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 289.349695][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.355071][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.361052][ T5772] __msan_warning+0x95/0x120 [ 289.365793][ T5772] __bpf_strtoull+0x245/0x5b0 [ 289.370663][ T5772] ? bpf_strtol+0x5c/0x270 [ 289.375267][ T5772] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 289.380564][ T5772] bpf_strtol+0x7c/0x270 [ 289.384990][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.390975][ T5772] ___bpf_prog_run+0x13fe/0xe0f0 [ 289.396086][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.401469][ T5772] __bpf_prog_run96+0xb5/0xe0 [ 289.406348][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.412334][ T5772] ? __pfx___bpf_prog_run96+0x10/0x10 [ 289.417887][ T5772] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 289.423566][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.428967][ T5772] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 289.435068][ T5772] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 289.441351][ T5772] ? bpf_test_run_xdp_live+0x7ed/0x2f70 [ 289.447109][ T5772] ? _copy_from_user+0x10c/0x160 [ 289.452252][ T5772] ? kmsan_get_metadata+0x146/0x1d0 [ 289.457614][ T5772] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 289.463598][ T5772] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 289.469212][ T5772] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 289.475223][ T5772] bpf_prog_test_run+0x6b7/0xad0 [ 289.480352][ T5772] __sys_bpf+0x6aa/0xd90 [ 289.484793][ T5772] __x64_sys_bpf+0xa0/0xe0 [ 289.489374][ T5772] x64_sys_call+0x96b/0x3b50 [ 289.494163][ T5772] do_syscall_64+0xcf/0x1e0 [ 289.498854][ T5772] ? clear_bhb_loop+0x25/0x80 [ 289.503722][ T5772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.509825][ T5772] RIP: 0033:0x7f05cd07cf69 [ 289.514371][ T5772] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 289.534190][ T5772] RSP: 002b:00007f05cde990c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.542806][ T5772] RAX: ffffffffffffffda RBX: 00007f05cd1b4050 RCX: 00007f05cd07cf69 [ 289.550929][ T5772] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 289.559035][ T5772] RBP: 00007f05cd0da6fe R08: 0000000000000000 R09: 0000000000000000 [ 289.567137][ T5772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.575340][ T5772] R13: 000000000000006e R14: 00007f05cd1b4050 R15: 00007ffc43eac058 [ 289.583473][ T5772] [ 289.586810][ T5772] Kernel Offset: disabled [ 289.591193][ T5772] Rebooting in 86400 seconds..