last executing test programs: 8.19948738s ago: executing program 4 (id=146): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRES32=r3, @ANYRESOCT=0x0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00474541780ddf23a4be000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_push\x00', r6, 0x0, 0x8000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001200)={[{@init_itable_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffffffffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r12}, 0x18) socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 6.711029438s ago: executing program 4 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {0x0}], 0x2}, 0x0) 6.309759985s ago: executing program 4 (id=155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x437, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x2}}]}, 0xfc, 0x25d, &(0x7f0000000780)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AOiooFwdoLN2SgeyHGICCqciNgod8J5h11iZWOhpaiksgliZ7SUNMFGEayipoiNoMHCYKHiyu4kkGyiibubHXE+H9jMn7x5vzdkvm/CwjABGut0krNJWklmk3SSFLsb3Fl9Tm9vLs6sXkx6vSd+Lgbtqu3KznGnkiwkeTDJSlnkpXZybfmZjV/XHr33zauduz9Yfnpmqie5bXNj/fGt98+/8fG5B659+fWP54ucTXfPeU1eccC+dpHcdBzF/iOKdt0j4CguvPbRN/3c35zkrkH+OylT/fHeunLdSif3v/d3x77901e3TnOswOT1ep3+PXChBzROmaSbopxLUq2X5dxc9T/8t62T5cuXr7w6++Llq5deqHumAialm6w/8umJT04N5f+HVpV/4H+q+lJq/ckLS9/1V7ZadQ8IOA6P/Tm047Zq0b//zz43f1/kHxpH/qG55B+aS/6hcTo7K/IPzSX/0FzyD80l/9Bc8g/NNXL+3/nj+AYFTMXu/AMAzdI7MdJTw5N/EBmYurrnHwAAAAAAAAAAAAAAAAAAYL/FmdWLO5/J9Ng+tMXn7yabD1dN99dvDd5HnFw/+Hnyl2JPj8WRKvyzZ+8Ys4MxfVjz09c3fF9v/S9ur7f+/KVk4fUkZ9rt/ddfsX39je7GQ37feX7MAv9SMbT90FPTrT/s96X6at+T5Nxa8ll//jlz0PxT5pbB8uD5p7v7ZSojeuW3MTsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4KAAD//8b6b0o=") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 5.467707961s ago: executing program 1 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000600)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@noinit_itable}, {@discard}, {@minixdf}, {@nolazytime}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}]}, 0x5, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 4.563147824s ago: executing program 1 (id=162): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRES32=r3, @ANYRESOCT=0x0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00474541780ddf23a4be000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_push\x00', r6, 0x0, 0x8000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001200)={[{@init_itable_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffffffffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r12}, 0x18) socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 4.275011849s ago: executing program 2 (id=164): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x50) 3.459914215s ago: executing program 2 (id=167): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 3.433534277s ago: executing program 0 (id=168): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 3.183346793s ago: executing program 3 (id=169): memfd_create(&(0x7f0000000040)='];\x00\x00\x00\x00\x96\t\xb27\x87Ge@{\xb7\xff]\ah\xd9\xb7\x13W\xb14\xfe\xe7FW\x96\x7f\xe8\xce(Ep\x93\xc9\xdd-\xfc\xf6\xdc\xec9H\x85\xa0\xf2p\x19\xa6\xd3z\x9c\xf0\x16Ax\x18<\x05\b\xa5\x19FN{U\x8b\xb0M5^\x7f+\xc9]E\x1a\x02x\xdc8\xa5|@<\x12\xcc@\xd6\x00\xb9\xf0', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree_skb\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000340)) syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) 2.988082817s ago: executing program 1 (id=170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto$inet(r2, &(0x7f0000000740)="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", 0x776, 0x4, 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 2.759194657s ago: executing program 0 (id=171): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 2.641354465s ago: executing program 2 (id=172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000600)={[{@grpjquota}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@bh}, {@noinit_itable}, {@discard}, {@minixdf}, {@nolazytime}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1ff}}, {@noauto_da_alloc}, {@dioread_nolock}, {@noquota}]}, 0x5, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x0) 2.54583503s ago: executing program 3 (id=173): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 2.29153411s ago: executing program 0 (id=174): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 2.077747411s ago: executing program 4 (id=175): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x8400, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 2.038043114s ago: executing program 3 (id=176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x3fc}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0) 1.723990382s ago: executing program 1 (id=177): statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0) 1.707302101s ago: executing program 2 (id=178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {0x0}], 0x2}, 0x0) 1.382870596s ago: executing program 0 (id=179): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6) 1.268390788s ago: executing program 1 (id=180): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=0x0, @ANYRES64=r4, @ANYRES32=r3, @ANYRESOCT=0x0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00474541780ddf23a4be000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='kvm_dirty_ring_push\x00', r6, 0x0, 0x8000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001200)={[{@init_itable_val}, {@min_batch_time={'min_batch_time', 0x3d, 0x7fffffffffffffff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x2, 0x42f, &(0x7f0000000940)="$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") syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x640ca0b72053fe29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r12}, 0x18) socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 1.26093267s ago: executing program 3 (id=181): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 1.203675912s ago: executing program 2 (id=182): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 1.007681741s ago: executing program 0 (id=183): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r0}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="40971a0e2b1c790f06d193815f2cfdac0c1bf1890c19fc62369c3a30806777f54b92ef319997bdfeba7e9f0e22866912d7a4aa54fb55d71f7e39406ac1f54f26f4502496385be2ac6af59049a64fedf511bd3d5b2bf9f493fbca542559a28ebb3fd66606fa93872e", @ANYBLOB="02000000040000000800000001", @ANYRESHEX=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) close(0xffffffffffffffff) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1.007372123s ago: executing program 4 (id=184): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r3, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[], 0x0) 943.870401ms ago: executing program 3 (id=185): syz_pidfd_open(0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_adjtime(0xffffffd3, 0x0) 400.003152ms ago: executing program 2 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630ac", 0x3a}], 0x1) 267.537796ms ago: executing program 3 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000740)="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", 0x776, 0x4, 0x0, 0x0) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 157.96107ms ago: executing program 0 (id=188): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e70000", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 103.87027ms ago: executing program 1 (id=189): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15) 0s ago: executing program 4 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e206000000", 0x1e}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 156.497847][ T5780] cgroup: Unknown subsys name 'net' [ 156.652490][ T5780] cgroup: Unknown subsys name 'cpuset' [ 156.667699][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.930249][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.069617][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.078482][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.858824][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.867881][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.911326][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.923435][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.934663][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.959162][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.959279][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.975531][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.977432][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.985672][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.998402][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 166.006536][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 166.018077][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 166.028238][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 166.035584][ T5095] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 166.042850][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 166.047654][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.053010][ T5095] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 166.069732][ T5095] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 166.086572][ T5095] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 166.096320][ T5095] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.108123][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 166.121970][ T5095] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 166.132974][ T5095] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.146922][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.039992][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 167.901632][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.909791][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.917542][ T5806] bridge_slave_0: entered allmulticast mode [ 167.926701][ T5806] bridge_slave_0: entered promiscuous mode [ 167.938830][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 168.004636][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 168.048678][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.056269][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.063843][ T5806] bridge_slave_1: entered allmulticast mode [ 168.073121][ T5806] bridge_slave_1: entered promiscuous mode [ 168.115802][ T5811] Bluetooth: hci1: command tx timeout [ 168.175879][ T5811] Bluetooth: hci2: command tx timeout [ 168.181482][ T5811] Bluetooth: hci0: command tx timeout [ 168.187392][ T5811] Bluetooth: hci4: command tx timeout [ 168.193910][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 168.254763][ T5810] Bluetooth: hci3: command tx timeout [ 168.287028][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 168.316544][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.427999][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.683527][ T5806] team0: Port device team_slave_0 added [ 168.723327][ T5806] team0: Port device team_slave_1 added [ 168.897763][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.905013][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.931351][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.072669][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.079967][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.107207][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.169474][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.177114][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.184837][ T5799] bridge_slave_0: entered allmulticast mode [ 169.193878][ T5799] bridge_slave_0: entered promiscuous mode [ 169.247596][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.255157][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.262853][ T5807] bridge_slave_0: entered allmulticast mode [ 169.271956][ T5807] bridge_slave_0: entered promiscuous mode [ 169.290477][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.298120][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.310749][ T5799] bridge_slave_1: entered allmulticast mode [ 169.319763][ T5799] bridge_slave_1: entered promiscuous mode [ 169.387899][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.395356][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.402737][ T5807] bridge_slave_1: entered allmulticast mode [ 169.411487][ T5807] bridge_slave_1: entered promiscuous mode [ 169.471342][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.478787][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.486473][ T5804] bridge_slave_0: entered allmulticast mode [ 169.494839][ T5804] bridge_slave_0: entered promiscuous mode [ 169.687889][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.695509][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.703190][ T5804] bridge_slave_1: entered allmulticast mode [ 169.713084][ T5804] bridge_slave_1: entered promiscuous mode [ 169.722155][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.729742][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.737394][ T5803] bridge_slave_0: entered allmulticast mode [ 169.746389][ T5803] bridge_slave_0: entered promiscuous mode [ 169.795627][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.817044][ T5806] hsr_slave_0: entered promiscuous mode [ 169.826176][ T5806] hsr_slave_1: entered promiscuous mode [ 169.844745][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.856885][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.864460][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.872009][ T5803] bridge_slave_1: entered allmulticast mode [ 169.881137][ T5803] bridge_slave_1: entered promiscuous mode [ 169.927381][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.944994][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.018330][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.155151][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.174687][ T5810] Bluetooth: hci1: command tx timeout [ 170.216234][ T5807] team0: Port device team_slave_0 added [ 170.229036][ T5799] team0: Port device team_slave_0 added [ 170.255077][ T5810] Bluetooth: hci4: command tx timeout [ 170.260889][ T5811] Bluetooth: hci0: command tx timeout [ 170.266588][ T5811] Bluetooth: hci2: command tx timeout [ 170.282938][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.330386][ T5807] team0: Port device team_slave_1 added [ 170.344652][ T5799] team0: Port device team_slave_1 added [ 170.356727][ T5811] Bluetooth: hci3: command tx timeout [ 170.402672][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.527901][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.535172][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.561543][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.606644][ T5804] team0: Port device team_slave_0 added [ 170.657035][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.664376][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.690646][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.732018][ T5804] team0: Port device team_slave_1 added [ 170.740903][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.748273][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.775876][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.803966][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.811616][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.837892][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.875292][ T5803] team0: Port device team_slave_0 added [ 170.892388][ T5803] team0: Port device team_slave_1 added [ 171.082056][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.090004][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.116278][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.259890][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.267101][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.294239][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.347877][ T5807] hsr_slave_0: entered promiscuous mode [ 171.356730][ T5807] hsr_slave_1: entered promiscuous mode [ 171.364313][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 171.370190][ T5807] Cannot create hsr debugfs directory [ 171.385124][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.392226][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.418481][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.481599][ T5799] hsr_slave_0: entered promiscuous mode [ 171.491071][ T5799] hsr_slave_1: entered promiscuous mode [ 171.499581][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 171.505620][ T5799] Cannot create hsr debugfs directory [ 171.550684][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.557972][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.584442][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.808948][ T5804] hsr_slave_0: entered promiscuous mode [ 171.818473][ T5804] hsr_slave_1: entered promiscuous mode [ 171.826709][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 171.832547][ T5804] Cannot create hsr debugfs directory [ 172.006382][ T5803] hsr_slave_0: entered promiscuous mode [ 172.016390][ T5803] hsr_slave_1: entered promiscuous mode [ 172.024904][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 172.030794][ T5803] Cannot create hsr debugfs directory [ 172.259963][ T5811] Bluetooth: hci1: command tx timeout [ 172.342440][ T5811] Bluetooth: hci2: command tx timeout [ 172.347432][ T5095] Bluetooth: hci4: command tx timeout [ 172.348192][ T5811] Bluetooth: hci0: command tx timeout [ 172.368040][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.399329][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.415045][ T5811] Bluetooth: hci3: command tx timeout [ 172.506240][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.585553][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.757815][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.775806][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.840873][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.858912][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.271437][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.291152][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.341318][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.367141][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.559288][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.610409][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.632114][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.700209][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.922776][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.963104][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.993330][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.023593][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.077388][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.088313][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.210617][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.218258][ T3711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.294679][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.302288][ T3711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.338251][ T5811] Bluetooth: hci1: command tx timeout [ 174.424366][ T5811] Bluetooth: hci0: command tx timeout [ 174.429964][ T5811] Bluetooth: hci4: command tx timeout [ 174.434644][ T5810] Bluetooth: hci2: command tx timeout [ 174.460051][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.495343][ T5095] Bluetooth: hci3: command tx timeout [ 174.535612][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.639600][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.754895][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.809314][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.816986][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.887751][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.895296][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.910194][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.917753][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.983968][ T4074] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.991503][ T4074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.146815][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.343825][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.393722][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.477118][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.484685][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.535573][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.543191][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.575151][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.677676][ T3994] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.685272][ T3994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.704556][ T3994] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.712013][ T3994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.989833][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.071597][ T5804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 176.084796][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.423002][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.176709][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.201783][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.500344][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.576305][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.692759][ T5799] veth0_vlan: entered promiscuous mode [ 177.706618][ T5807] veth0_vlan: entered promiscuous mode [ 177.802049][ T5807] veth1_vlan: entered promiscuous mode [ 177.816431][ T5799] veth1_vlan: entered promiscuous mode [ 178.141984][ T5803] veth0_vlan: entered promiscuous mode [ 178.198901][ T5804] veth0_vlan: entered promiscuous mode [ 178.210176][ T5807] veth0_macvtap: entered promiscuous mode [ 178.248651][ T5799] veth0_macvtap: entered promiscuous mode [ 178.294392][ T5807] veth1_macvtap: entered promiscuous mode [ 178.313889][ T5804] veth1_vlan: entered promiscuous mode [ 178.339949][ T5803] veth1_vlan: entered promiscuous mode [ 178.359775][ T5799] veth1_macvtap: entered promiscuous mode [ 178.636885][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.720800][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.729958][ T5804] veth0_macvtap: entered promiscuous mode [ 178.776842][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.829142][ T5804] veth1_macvtap: entered promiscuous mode [ 178.845651][ T5803] veth0_macvtap: entered promiscuous mode [ 178.861906][ T5806] veth0_vlan: entered promiscuous mode [ 178.881649][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.941477][ T4037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.965322][ T5803] veth1_macvtap: entered promiscuous mode [ 178.989048][ T4037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.032616][ T5806] veth1_vlan: entered promiscuous mode [ 179.042090][ T4037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.089989][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.130245][ T4037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.180568][ T4037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.201262][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.239512][ T4037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.266494][ T4037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.308326][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.327420][ T4037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.412482][ T4037] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.436412][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.467667][ T4037] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.480533][ T5806] veth0_macvtap: entered promiscuous mode [ 179.503824][ T4037] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.560797][ T1871] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.575839][ T5806] veth1_macvtap: entered promiscuous mode [ 179.604645][ T4120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.644494][ T4120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.653487][ T4120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.757711][ T4120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.816496][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.905730][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.991418][ T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.048590][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.109101][ T141] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.149612][ T141] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.262336][ T3994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.273199][ T3994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.441791][ T3778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.450278][ T3778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.757577][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.765683][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.905532][ T5799] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 184.996931][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.005071][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.013119][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.022346][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.184343][ T4074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.192359][ T4074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.290585][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.299056][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.552015][ T1871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.561733][ T1871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.589139][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.597618][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.651197][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.659763][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.996249][ T6004] loop2: detected capacity change from 0 to 256 [ 187.037356][ T6004] ======================================================= [ 187.037356][ T6004] WARNING: The mand mount option has been deprecated and [ 187.037356][ T6004] and is ignored by this kernel. Remove the mand [ 187.037356][ T6004] option from the mount to silence this warning. [ 187.037356][ T6004] ======================================================= [ 187.477218][ T6004] FAT-fs (loop2): Directory bread(block 64) failed [ 187.483959][ T6004] FAT-fs (loop2): Directory bread(block 65) failed [ 187.491010][ T6004] FAT-fs (loop2): Directory bread(block 66) failed [ 187.498146][ T6004] FAT-fs (loop2): Directory bread(block 67) failed [ 187.509723][ T6004] FAT-fs (loop2): Directory bread(block 68) failed [ 187.516628][ T6004] FAT-fs (loop2): Directory bread(block 69) failed [ 187.523463][ T6004] FAT-fs (loop2): Directory bread(block 70) failed [ 187.530390][ T6004] FAT-fs (loop2): Directory bread(block 71) failed [ 187.537461][ T6004] FAT-fs (loop2): Directory bread(block 72) failed [ 187.544249][ T6004] FAT-fs (loop2): Directory bread(block 73) failed [ 187.657527][ T6004] syz.2.6: attempt to access beyond end of device [ 187.657527][ T6004] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 187.671756][ T6004] syz.2.6: attempt to access beyond end of device [ 187.671756][ T6004] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 187.715288][ T30] audit: type=1800 audit(1764643259.060:2): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6" name="file0" dev="loop2" ino=1048605 res=0 errno=0 [ 188.232340][ T6016] netlink: 'syz.4.11': attribute type 10 has an invalid length. [ 188.240438][ T6016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11'. [ 188.543939][ T6016] team0: Port device netdevsim1 added [ 189.050547][ T6027] loop1: detected capacity change from 0 to 128 [ 189.581120][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 190.191466][ T6037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 190.400023][ T6040] loop2: detected capacity change from 0 to 1024 [ 190.538786][ T6040] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 190.550368][ T6040] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 190.621150][ T6040] JBD2: no valid journal superblock found [ 190.627331][ T6040] EXT4-fs (loop2): Could not load journal inode [ 191.074517][ T5543] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.206233][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.221230][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.236111][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.289832][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.299614][ T5543] usb 1-1: device descriptor read/64, error -71 [ 191.313214][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.323497][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23'. [ 191.542899][ T5543] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 191.724874][ T5543] usb 1-1: device descriptor read/64, error -71 [ 191.858403][ T5543] usb usb1-port1: attempt power cycle [ 192.297411][ T5543] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 192.337080][ T5543] usb 1-1: device descriptor read/8, error -71 [ 192.511913][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 192.594752][ T5543] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.647325][ T5543] usb 1-1: device descriptor read/8, error -71 [ 192.763473][ T5543] usb usb1-port1: unable to enumerate USB device [ 193.560373][ T6077] loop4: detected capacity change from 0 to 1024 [ 193.586951][ T6077] EXT4-fs: inline encryption not supported [ 193.688450][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.697846][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.707072][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.728425][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.756679][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.765998][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.783636][ T6079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.35'. [ 193.860336][ T6077] netlink: 104 bytes leftover after parsing attributes in process `syz.4.34'. [ 195.239957][ T4074] Bluetooth: hci5: Frame reassembly failed (-84) [ 195.536030][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.862399][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.43'. [ 195.954250][ T6109] tipc: Enabling of bearer rejected, failed to enable media [ 197.294815][ T6095] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 197.301851][ T5095] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 197.309084][ T5810] Bluetooth: hci0: command 0x0c20 tx timeout [ 198.036177][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 198.482037][ T6144] loop4: detected capacity change from 0 to 512 [ 198.546686][ T6144] ext4: Bad value for 'min_batch_time' [ 199.748332][ T3711] Bluetooth: hci5: Frame reassembly failed (-84) [ 201.325949][ T30] audit: type=1326 audit(1764643272.680:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.351040][ T30] audit: type=1326 audit(1764643272.680:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.548731][ T30] audit: type=1326 audit(1764643272.760:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.572388][ T30] audit: type=1326 audit(1764643272.760:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.594899][ T30] audit: type=1326 audit(1764643272.760:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.617244][ T30] audit: type=1326 audit(1764643272.770:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.642230][ T30] audit: type=1326 audit(1764643272.770:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.666439][ T30] audit: type=1326 audit(1764643272.770:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.688855][ T30] audit: type=1326 audit(1764643272.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.713334][ T30] audit: type=1326 audit(1764643272.770:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6188 comm="syz.0.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 201.776979][ T5095] Bluetooth: hci0: command 0x0c20 tx timeout [ 201.783593][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 201.790462][ T6165] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 201.802456][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 201.849438][ T6194] bridge0: port 3(gretap0) entered blocking state [ 201.856687][ T6194] bridge0: port 3(gretap0) entered disabled state [ 201.887195][ T6194] gretap0: entered allmulticast mode [ 202.037120][ T6194] gretap0: entered promiscuous mode [ 202.047661][ T6194] bridge0: port 3(gretap0) entered blocking state [ 202.054583][ T6194] bridge0: port 3(gretap0) entered forwarding state [ 202.114339][ T6197] Illegal XDP return value 136069176 on prog (id 40) dev N/A, expect packet loss! [ 202.686795][ T6194] loop2: detected capacity change from 0 to 1024 [ 202.769816][ T6194] EXT4-fs: Ignoring removed orlov option [ 202.897362][ T6194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.501648][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.597085][ T3778] Bluetooth: hci5: Frame reassembly failed (-84) [ 204.908776][ T6235] loop3: detected capacity change from 0 to 1024 [ 204.964750][ T6235] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 204.974900][ T6235] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 204.985062][ T6235] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 205.078392][ T6235] EXT4-fs (loop3): journal inode is deleted [ 205.237925][ T6235] syz_tun: entered allmulticast mode [ 205.284623][ T6234] syz_tun: left allmulticast mode [ 206.269908][ T6260] loop1: detected capacity change from 0 to 1024 [ 206.317802][ T6260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.430025][ T6260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.580816][ T5095] Bluetooth: hci5: command 0x1003 tx timeout [ 206.591464][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 206.646083][ T6231] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 206.657189][ T5810] Bluetooth: hci0: command 0x0c20 tx timeout [ 206.679636][ T30] kauditd_printk_skb: 216 callbacks suppressed [ 206.679706][ T30] audit: type=1800 audit(1764643278.040:229): pid=6260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 207.340768][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.662275][ T6281] syz.1.111 uses obsolete (PF_INET,SOCK_PACKET) [ 207.902452][ T6285] loop0: detected capacity change from 0 to 512 [ 207.951821][ T6285] ext4: Bad value for 'min_batch_time' [ 209.170324][ T6304] loop2: detected capacity change from 0 to 1024 [ 209.181350][ T6304] EXT4-fs: inline encryption not supported [ 209.217857][ T6304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.270191][ T1871] Bluetooth: hci5: Frame reassembly failed (-84) [ 209.977128][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.077334][ T6317] xt_hashlimit: max too large, truncated to 1048576 [ 210.630745][ T6327] program syz.4.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.229908][ T6339] loop4: detected capacity change from 0 to 512 [ 211.277571][ T6339] ext4: Bad value for 'min_batch_time' [ 211.294807][ T5811] Bluetooth: hci5: command 0x1003 tx timeout [ 211.294949][ T6307] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 211.301386][ T5095] Bluetooth: hci0: command 0x0c20 tx timeout [ 211.311248][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.066437][ T6347] loop2: detected capacity change from 0 to 128 [ 212.214624][ T30] audit: type=1800 audit(1764643283.580:230): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name="file2" dev="loop2" ino=1048606 res=0 errno=0 [ 212.226008][ T30] audit: type=1326 audit(1764643283.590:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.226915][ T30] audit: type=1326 audit(1764643283.600:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.255700][ T30] audit: type=1326 audit(1764643283.620:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.255902][ T30] audit: type=1326 audit(1764643283.630:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.260403][ T30] audit: type=1326 audit(1764643283.630:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.260600][ T30] audit: type=1326 audit(1764643283.630:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.262707][ T30] audit: type=1326 audit(1764643283.630:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.262916][ T30] audit: type=1326 audit(1764643283.630:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.269590][ T30] audit: type=1326 audit(1764643283.640:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6346 comm="syz.2.132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f48c1f8f749 code=0x7ffc0000 [ 212.392530][ T6356] xt_hashlimit: max too large, truncated to 1048576 [ 213.066273][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 213.070552][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 213.695959][ T6374] tipc: Enabling of bearer rejected, failed to enable media [ 213.876258][ T141] Bluetooth: hci5: Frame reassembly failed (-84) [ 214.187485][ T6385] loop2: detected capacity change from 0 to 512 [ 214.255588][ T6387] loop4: detected capacity change from 0 to 512 [ 214.287315][ T6385] EXT4-fs: Ignoring removed bh option [ 214.319778][ T6387] ext4: Bad value for 'min_batch_time' [ 214.347718][ T6385] EXT4-fs error (device loop2): ext4_iget_extra_inode:5071: inode #15: comm syz.2.147: corrupted in-inode xattr: invalid ea_ino [ 214.393566][ T6385] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.147: couldn't read orphan inode 15 (err -117) [ 214.490413][ T6385] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.860495][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.592444][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 215.625368][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.153'. [ 215.934651][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.936061][ T5095] Bluetooth: hci0: command 0x0c20 tx timeout [ 215.952149][ T6376] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 216.145647][ T6415] Zero length message leads to an empty skb [ 216.631446][ T6417] loop0: detected capacity change from 0 to 2048 [ 216.796394][ T6417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.809769][ T6417] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.931569][ T6425] loop1: detected capacity change from 0 to 512 [ 216.966064][ T6425] EXT4-fs: Ignoring removed bh option [ 217.017552][ T6430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.157: bg 0: block 345: padding at end of block bitmap is not set [ 217.061630][ T6425] EXT4-fs error (device loop1): ext4_iget_extra_inode:5071: inode #15: comm syz.1.160: corrupted in-inode xattr: invalid ea_ino [ 217.079450][ T6425] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 217.096189][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.136174][ T6430] EXT4-fs (loop0): Remounting filesystem read-only [ 217.270928][ T3711] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 217.423309][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.681503][ T5804] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.045064][ T6444] loop1: detected capacity change from 0 to 512 [ 218.054958][ T6444] ext4: Bad value for 'min_batch_time' [ 219.624859][ T6467] loop2: detected capacity change from 0 to 512 [ 219.692103][ T6467] EXT4-fs: Ignoring removed bh option [ 219.773353][ T6467] EXT4-fs error (device loop2): ext4_iget_extra_inode:5071: inode #15: comm syz.2.172: corrupted in-inode xattr: invalid ea_ino [ 219.826872][ T6467] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.172: couldn't read orphan inode 15 (err -117) [ 219.876233][ T6467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.133631][ T5155] udevd[5155]: worker [5983] terminated by signal 33 (Unknown signal 33) [ 220.267022][ T5807] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.304535][ T6475] loop4: detected capacity change from 0 to 1024 [ 220.493150][ T6475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.623846][ T6475] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 220.948007][ T5806] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.009931][ T6495] loop1: detected capacity change from 0 to 512 [ 221.031099][ T6495] ext4: Bad value for 'min_batch_time' [ 221.187712][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 221.187782][ T30] audit: type=1326 audit(1764643292.560:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.224463][ T30] audit: type=1326 audit(1764643292.560:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.454665][ T30] audit: type=1326 audit(1764643292.650:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.477594][ T30] audit: type=1326 audit(1764643292.650:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.500410][ T30] audit: type=1326 audit(1764643292.650:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.527076][ T30] audit: type=1326 audit(1764643292.660:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.551331][ T30] audit: type=1326 audit(1764643292.660:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.575721][ T30] audit: type=1326 audit(1764643292.660:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.598393][ T30] audit: type=1326 audit(1764643292.660:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 221.626292][ T30] audit: type=1326 audit(1764643292.660:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6497 comm="syz.0.183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc65938f749 code=0x7ffc0000 [ 222.044445][ T6514] ===================================================== [ 222.044616][ T6514] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 222.044718][ T6514] batadv_get_vid+0x2d0/0x3b0 [ 222.044809][ T6514] batadv_interface_tx+0x2e5/0x1e60 [ 222.044911][ T6514] dev_hard_start_xmit+0x22f/0xa30 [ 222.045007][ T6514] __dev_queue_xmit+0x3c51/0x5e60 [ 222.045104][ T6514] __bpf_redirect+0x162d/0x1760 [ 222.045205][ T6514] bpf_clone_redirect+0x366/0x530 [ 222.045309][ T6514] ___bpf_prog_run+0x1297/0xeba0 [ 222.045418][ T6514] __bpf_prog_run512+0xc5/0x100 [ 222.045523][ T6514] bpf_test_run+0x496/0xd80 [ 222.045609][ T6514] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 222.045702][ T6514] bpf_prog_test_run+0x5c2/0xa40 [ 222.045813][ T6514] __sys_bpf+0x873/0xeb0 [ 222.045908][ T6514] __x64_sys_bpf+0xa4/0xf0 [ 222.045992][ T6514] x64_sys_call+0x31c3/0x3e70 [ 222.046119][ T6514] do_syscall_64+0xd9/0xfa0 [ 222.046217][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.046332][ T6514] [ 222.046355][ T6514] Uninit was created at: [ 222.046498][ T6514] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 222.046621][ T6514] kmalloc_reserve+0x13c/0x4b0 [ 222.046742][ T6514] pskb_expand_head+0x1fc/0x1610 [ 222.046836][ T6514] skb_ensure_writable+0x44e/0x510 [ 222.046965][ T6514] bpf_clone_redirect+0x1c1/0x530 [ 222.047063][ T6514] ___bpf_prog_run+0x1297/0xeba0 [ 222.047164][ T6514] __bpf_prog_run512+0xc5/0x100 [ 222.047287][ T6514] bpf_test_run+0x496/0xd80 [ 222.047373][ T6514] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 222.047468][ T6514] bpf_prog_test_run+0x5c2/0xa40 [ 222.047576][ T6514] __sys_bpf+0x873/0xeb0 [ 222.047673][ T6514] __x64_sys_bpf+0xa4/0xf0 [ 222.047759][ T6514] x64_sys_call+0x31c3/0x3e70 [ 222.047885][ T6514] do_syscall_64+0xd9/0xfa0 [ 222.047981][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.048086][ T6514] [ 222.048149][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.0.188 Not tainted syzkaller #0 PREEMPT(none) [ 222.048258][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.048327][ T6514] ===================================================== [ 222.048363][ T6514] Disabling lock debugging due to kernel taint [ 222.048404][ T6514] Kernel panic - not syncing: kmsan.panic set ... [ 222.048470][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.0.188 Tainted: G B syzkaller #0 PREEMPT(none) [ 222.048596][ T6514] Tainted: [B]=BAD_PAGE [ 222.048634][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.048699][ T6514] Call Trace: [ 222.048740][ T6514] [ 222.048775][ T6514] __dump_stack+0x26/0x30 [ 222.048895][ T6514] dump_stack_lvl+0x53/0x270 [ 222.049014][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.049149][ T6514] dump_stack+0x1e/0x25 [ 222.049260][ T6514] vpanic+0x435/0xd30 [ 222.049406][ T6514] panic+0x15d/0x160 [ 222.049572][ T6514] kmsan_report+0x31c/0x320 [ 222.049693][ T6514] ? __msan_warning+0x1b/0x30 [ 222.049793][ T6514] ? batadv_get_vid+0x2d0/0x3b0 [ 222.049890][ T6514] ? batadv_interface_tx+0x2e5/0x1e60 [ 222.049992][ T6514] ? dev_hard_start_xmit+0x22f/0xa30 [ 222.050088][ T6514] ? __dev_queue_xmit+0x3c51/0x5e60 [ 222.050188][ T6514] ? __bpf_redirect+0x162d/0x1760 [ 222.050295][ T6514] ? bpf_clone_redirect+0x366/0x530 [ 222.050400][ T6514] ? ___bpf_prog_run+0x1297/0xeba0 [ 222.050507][ T6514] ? __bpf_prog_run512+0xc5/0x100 [ 222.050619][ T6514] ? bpf_test_run+0x496/0xd80 [ 222.050711][ T6514] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 222.050812][ T6514] ? bpf_prog_test_run+0x5c2/0xa40 [ 222.050928][ T6514] ? __sys_bpf+0x873/0xeb0 [ 222.051025][ T6514] ? __x64_sys_bpf+0xa4/0xf0 [ 222.051115][ T6514] ? x64_sys_call+0x31c3/0x3e70 [ 222.051243][ T6514] ? do_syscall_64+0xd9/0xfa0 [ 222.051349][ T6514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.051467][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.051591][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.051726][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.051850][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.051984][ T6514] ? batadv_interface_tx+0x41/0x1e60 [ 222.052087][ T6514] ? filter_irq_stacks+0x49/0x190 [ 222.052252][ T6514] ? stack_depot_save_flags+0x35/0x7b0 [ 222.052388][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.052519][ T6514] __msan_warning+0x1b/0x30 [ 222.052622][ T6514] batadv_get_vid+0x2d0/0x3b0 [ 222.052721][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.052858][ T6514] batadv_interface_tx+0x2e5/0x1e60 [ 222.052982][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.053118][ T6514] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 222.053236][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.053365][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.053495][ T6514] ? __pfx_batadv_interface_tx+0x10/0x10 [ 222.053607][ T6514] dev_hard_start_xmit+0x22f/0xa30 [ 222.053739][ T6514] __dev_queue_xmit+0x3c51/0x5e60 [ 222.053847][ T6514] ? skb_release_data+0xa12/0xac0 [ 222.053945][ T6514] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 222.054067][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.054182][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.054311][ T6514] ? __dev_queue_xmit+0x30c/0x5e60 [ 222.054447][ T6514] __bpf_redirect+0x162d/0x1760 [ 222.054562][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.054697][ T6514] bpf_clone_redirect+0x366/0x530 [ 222.054831][ T6514] ___bpf_prog_run+0x1297/0xeba0 [ 222.054983][ T6514] __bpf_prog_run512+0xc5/0x100 [ 222.055116][ T6514] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 222.055238][ T6514] ? kmsan_internal_poison_memory+0x78/0x90 [ 222.055353][ T6514] ? kmsan_internal_poison_memory+0x4a/0x90 [ 222.055460][ T6514] ? kmsan_slab_alloc+0xde/0x160 [ 222.055563][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.055686][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.055822][ T6514] ? bpf_test_run+0x21/0xd80 [ 222.055913][ T6514] ? filter_irq_stacks+0x49/0x190 [ 222.056084][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.056202][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.056329][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.056452][ T6514] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 222.056569][ T6514] ? kmsan_get_metadata+0x150/0x160 [ 222.056693][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.056819][ T6514] ? __pfx___bpf_prog_run512+0x10/0x10 [ 222.056939][ T6514] ? __pfx___bpf_prog_run512+0x10/0x10 [ 222.057057][ T6514] bpf_test_run+0x496/0xd80 [ 222.057148][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.057271][ T6514] ? kmsan_get_metadata+0xfb/0x160 [ 222.057418][ T6514] ? bpf_test_run+0x2f7/0xd80 [ 222.057538][ T6514] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.057675][ T6514] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 222.057822][ T6514] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 222.057929][ T6514] bpf_prog_test_run+0x5c2/0xa40 [ 222.058068][ T6514] __sys_bpf+0x873/0xeb0 [ 222.058217][ T6514] __x64_sys_bpf+0xa4/0xf0 [ 222.058330][ T6514] x64_sys_call+0x31c3/0x3e70 [ 222.058466][ T6514] do_syscall_64+0xd9/0xfa0 [ 222.058565][ T6514] ? irqentry_exit+0x16/0x60 [ 222.058659][ T6514] ? clear_bhb_loop+0x40/0x90 [ 222.058775][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.058885][ T6514] RIP: 0033:0x7fc65938f749 [ 222.058967][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.059063][ T6514] RSP: 002b:00007fc65a186038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.059159][ T6514] RAX: ffffffffffffffda RBX: 00007fc6595e5fa0 RCX: 00007fc65938f749 [ 222.059237][ T6514] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 222.059308][ T6514] RBP: 00007fc659413f91 R08: 0000000000000000 R09: 0000000000000000 [ 222.059372][ T6514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.059434][ T6514] R13: 00007fc6595e6038 R14: 00007fc6595e5fa0 R15: 00007ffc3f9b76a8 [ 222.059541][ T6514] [ 222.059960][ T6514] Kernel Offset: disabled