last executing test programs: 4.42804876s ago: executing program 1 (id=260): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402f, 0x8, 0xff, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.256549087s ago: executing program 1 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002106000d40931000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c61737400"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.924423289s ago: executing program 1 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYBLOB="00f85be7cfce74d008"], 0x50) 3.076154935s ago: executing program 3 (id=269): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0x36, 0x7, 0x4, 0x9, 0x1, 0x80}) tkill(r0, 0x7) 2.987728533s ago: executing program 4 (id=270): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24}, 0x94) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.907050214s ago: executing program 2 (id=271): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100006000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a", 0x65, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 2.806125626s ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3f) 2.679961993s ago: executing program 0 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x18) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 2.638284379s ago: executing program 2 (id=274): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x3c, 0x1, [@m_sample={0x38, 0x3, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x806}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x50}}, 0x4040001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000320000000c00990000000000"], 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x2, 0x4, {{0x29, 0x4, 0x0, 0x7, 0xa4, 0x64, 0x0, 0x2, 0x4, 0x0, @local, @loopback, {[@timestamp_addr={0x44, 0x44, 0x52, 0x1, 0x3, [{@loopback, 0x9}, {@rand_addr=0x64010101, 0x9}, {@local, 0x8}, {@broadcast, 0xc66}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x6d}, {@broadcast, 0x3}, {@loopback, 0x9}, {@remote, 0x2}]}, @lsrr={0x83, 0xb, 0xef, [@dev={0xac, 0x14, 0x14, 0x1f}, @empty]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0x7, 0x73, [@loopback]}, @timestamp={0x44, 0x20, 0xae, 0x0, 0x2, [0x8, 0x200, 0x2452, 0x58, 0x80000000, 0x401, 0x6]}, @timestamp_prespec={0x44, 0x14, 0x79, 0x3, 0xb, [{@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}]}]}}}}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r9, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}, 0x1, 0x10000000}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xb4, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40c5}, 0x20000000) 2.496599677s ago: executing program 1 (id=275): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x402f, 0x8, 0xff, 0x4}]}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.448161503s ago: executing program 4 (id=276): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 2.447898297s ago: executing program 3 (id=277): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.447596446s ago: executing program 0 (id=278): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x7, 0x3}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = syz_pidfd_open(r2, 0x0) setns(r7, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.327111244s ago: executing program 2 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r4}, 0x14) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x14) close_range(r1, 0xffffffffffffffff, 0x0) 2.211510203s ago: executing program 1 (id=280): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)}, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x894b, 0x0) 2.144763321s ago: executing program 4 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.144087392s ago: executing program 3 (id=282): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31, @time={0x3, 0xfffefffd}, 0x0, {0x0, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, 0x0) tkill(r0, 0x7) 1.984696049s ago: executing program 2 (id=283): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000bc0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62000800000500000c0015"], 0x68}}, 0x4004044) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x0) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f0000000040)=0x47) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x2, [@struct={0x0, 0x5, 0x0, 0x4, 0x0, 0xfffffffc, [{0xc, 0x5, 0x6}, {0x5, 0x1, 0x2}, {0x5, 0x2, 0x9}, {0xf, 0x2, 0x87}, {0x0, 0x4, 0x5}]}]}}, 0x0, 0x62}, 0x28) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.971823412s ago: executing program 4 (id=284): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.212145368s ago: executing program 4 (id=285): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) 1.182985317s ago: executing program 0 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) 1.178415781s ago: executing program 1 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x63) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 1.141847777s ago: executing program 3 (id=288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x3f) 776.186776ms ago: executing program 0 (id=289): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x1000000}, 0x20001) 775.837745ms ago: executing program 3 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, &(0x7f0000001300)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0xd}, 0x18) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="1d00000045d46afb0bb7dd62876d0400c39aa5ac00000200000000000000155e77529fc6300c2794b8de692abdec7048a1e32596a30b37c5ba7e513e3d09463e7217222ff0a1739784c5d9635128594148b05a348656d5507a72cfac4143a2e138fcaa604cb3abe647ec0e2374f409f469f967099c84ddd803b8851063c71b9392b07ada477c725158dcf9afa55c68d2bf1d81bcd2de5d", @ANYBLOB, @ANYRES32, @ANYBLOB="0100000005001000"/27], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) close(0xffffffffffffffff) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xffc1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfe7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 729.365347ms ago: executing program 2 (id=291): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7a, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 473.715572ms ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="02000000040000000700000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) inotify_init1(0x80800) 288.538158ms ago: executing program 2 (id=293): write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r2, &(0x7f00000004c0)='Ur', 0x2, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 24.12667ms ago: executing program 4 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 0 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 318.888134][ T5840] cgroup: Unknown subsys name 'net' [ 319.025682][ T5840] cgroup: Unknown subsys name 'cpuset' [ 319.035213][ T5840] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 320.705242][ T5840] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 325.201398][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.225854][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.233912][ T5868] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.247516][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 325.259861][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.278072][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 325.294253][ T5872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.298245][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.309119][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.318149][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.319153][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.326035][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.346219][ T5874] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.348915][ T5877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 325.354690][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.368641][ T5874] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.378890][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.379221][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.387149][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.404061][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.418141][ T5877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 325.418294][ T5138] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 325.433495][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.441507][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 325.450303][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.971846][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 326.229663][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 326.320176][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.327448][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.335446][ T5856] bridge_slave_0: entered allmulticast mode [ 326.343174][ T5856] bridge_slave_0: entered promiscuous mode [ 326.352499][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.359926][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.367126][ T5856] bridge_slave_1: entered allmulticast mode [ 326.375274][ T5856] bridge_slave_1: entered promiscuous mode [ 326.432016][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 326.462047][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 326.545528][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.575625][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 326.591108][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.716357][ T5856] team0: Port device team_slave_0 added [ 326.743087][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.750391][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.757567][ T5869] bridge_slave_0: entered allmulticast mode [ 326.765259][ T5869] bridge_slave_0: entered promiscuous mode [ 326.775123][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.782423][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.789770][ T5869] bridge_slave_1: entered allmulticast mode [ 326.797322][ T5869] bridge_slave_1: entered promiscuous mode [ 326.848712][ T5856] team0: Port device team_slave_1 added [ 326.881482][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.888985][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.896469][ T5871] bridge_slave_0: entered allmulticast mode [ 326.904378][ T5871] bridge_slave_0: entered promiscuous mode [ 326.932392][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.942279][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.949849][ T5864] bridge_slave_0: entered allmulticast mode [ 326.957162][ T5864] bridge_slave_0: entered promiscuous mode [ 326.979962][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.987704][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.995404][ T5871] bridge_slave_1: entered allmulticast mode [ 327.002973][ T5871] bridge_slave_1: entered promiscuous mode [ 327.034244][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.041800][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.068100][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.080412][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.087591][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.095335][ T5864] bridge_slave_1: entered allmulticast mode [ 327.102781][ T5864] bridge_slave_1: entered promiscuous mode [ 327.125885][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.139420][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.173194][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.180356][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.206452][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.297152][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.304702][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.312214][ T5861] bridge_slave_0: entered allmulticast mode [ 327.320552][ T5861] bridge_slave_0: entered promiscuous mode [ 327.331124][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.357232][ T5869] team0: Port device team_slave_0 added [ 327.366237][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.382353][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.392265][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.402077][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.409433][ T5861] bridge_slave_1: entered allmulticast mode [ 327.416923][ T5861] bridge_slave_1: entered promiscuous mode [ 327.440426][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.452363][ T5869] team0: Port device team_slave_1 added [ 327.478829][ T5865] Bluetooth: hci0: command tx timeout [ 327.478834][ T51] Bluetooth: hci1: command tx timeout [ 327.489953][ T5859] Bluetooth: hci3: command tx timeout [ 327.559086][ T5859] Bluetooth: hci4: command tx timeout [ 327.564584][ T51] Bluetooth: hci2: command tx timeout [ 327.589417][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.614233][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.621658][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.648432][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.664930][ T5856] hsr_slave_0: entered promiscuous mode [ 327.672306][ T5856] hsr_slave_1: entered promiscuous mode [ 327.682344][ T5871] team0: Port device team_slave_0 added [ 327.692179][ T5871] team0: Port device team_slave_1 added [ 327.700536][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.715286][ T5864] team0: Port device team_slave_0 added [ 327.722449][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.729843][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.755927][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.817128][ T5864] team0: Port device team_slave_1 added [ 327.916301][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.923415][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.950194][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.964893][ T5861] team0: Port device team_slave_0 added [ 327.973742][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.981004][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.007433][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.020623][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.027625][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.054114][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.086508][ T5869] hsr_slave_0: entered promiscuous mode [ 328.093097][ T5869] hsr_slave_1: entered promiscuous mode [ 328.099782][ T5869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.107627][ T5869] Cannot create hsr debugfs directory [ 328.122380][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.129978][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.157188][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.177492][ T5861] team0: Port device team_slave_1 added [ 328.302764][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.310382][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.336588][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.386515][ T5871] hsr_slave_0: entered promiscuous mode [ 328.393326][ T5871] hsr_slave_1: entered promiscuous mode [ 328.400333][ T5871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.408137][ T5871] Cannot create hsr debugfs directory [ 328.414469][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.421689][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.447917][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.507756][ T5864] hsr_slave_0: entered promiscuous mode [ 328.514891][ T5864] hsr_slave_1: entered promiscuous mode [ 328.521387][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.529240][ T5864] Cannot create hsr debugfs directory [ 328.622924][ T5861] hsr_slave_0: entered promiscuous mode [ 328.630151][ T5861] hsr_slave_1: entered promiscuous mode [ 328.640268][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.668203][ T5861] Cannot create hsr debugfs directory [ 329.073274][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.120917][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.174938][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.202926][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.272880][ T5869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 329.294680][ T5869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 329.306844][ T5869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 329.337356][ T5869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 329.431121][ T5871] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.462512][ T5871] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.503432][ T5871] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.514239][ T5871] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.561777][ T5859] Bluetooth: hci3: command tx timeout [ 329.561806][ T5865] Bluetooth: hci0: command tx timeout [ 329.569391][ T51] Bluetooth: hci1: command tx timeout [ 329.611222][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 329.630025][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 329.638737][ T51] Bluetooth: hci4: command tx timeout [ 329.638751][ T5865] Bluetooth: hci2: command tx timeout [ 329.653416][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 329.665943][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 329.733417][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.816646][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.842771][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.859775][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.867104][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.877744][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.884935][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.933630][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.944450][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.975399][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.010845][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.018882][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.076923][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.084121][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.111686][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.130128][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.137354][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.202841][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.284917][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.339566][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.357578][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.406408][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.413685][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.436173][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.443466][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.477782][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.485034][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.520956][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.528194][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.615443][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.783801][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.841078][ T5856] veth0_vlan: entered promiscuous mode [ 330.886565][ T5856] veth1_vlan: entered promiscuous mode [ 330.912325][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.966180][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.973488][ T5957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.051846][ T5946] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.059097][ T5946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.152324][ T5856] veth0_macvtap: entered promiscuous mode [ 331.181460][ T5856] veth1_macvtap: entered promiscuous mode [ 331.254366][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.294257][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.322306][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.336068][ T5856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.345615][ T5856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.354529][ T5856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.364373][ T5856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.404771][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.421837][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.639319][ T51] Bluetooth: hci0: command tx timeout [ 331.639336][ T5865] Bluetooth: hci1: command tx timeout [ 331.639372][ T5865] Bluetooth: hci3: command tx timeout [ 331.665868][ T5869] veth0_vlan: entered promiscuous mode [ 331.703304][ T5869] veth1_vlan: entered promiscuous mode [ 331.719931][ T5865] Bluetooth: hci4: command tx timeout [ 331.719978][ T5859] Bluetooth: hci2: command tx timeout [ 331.734780][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.760672][ T5861] veth0_vlan: entered promiscuous mode [ 331.766598][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.794338][ T5861] veth1_vlan: entered promiscuous mode [ 331.896964][ T5869] veth0_macvtap: entered promiscuous mode [ 331.920129][ T5946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.934385][ T5946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.961515][ T5869] veth1_macvtap: entered promiscuous mode [ 331.996912][ T5861] veth0_macvtap: entered promiscuous mode [ 332.051674][ T5861] veth1_macvtap: entered promiscuous mode [ 332.084903][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.101792][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 332.107624][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.141300][ T5869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.153341][ T5869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.163261][ T5869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.173165][ T5869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.309658][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.324710][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.349171][ T5978] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 332.351203][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.370852][ T5861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.382778][ T5861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.392053][ T5861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.401178][ T5861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.427524][ T5871] veth0_vlan: entered promiscuous mode [ 332.530317][ T5871] veth1_vlan: entered promiscuous mode [ 332.558966][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.566865][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.716552][ T5871] veth0_macvtap: entered promiscuous mode [ 332.752915][ T5871] veth1_macvtap: entered promiscuous mode [ 332.789654][ T5864] veth0_vlan: entered promiscuous mode [ 332.849254][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.887131][ T5983] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 332.896198][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.897171][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.912784][ T5864] veth1_vlan: entered promiscuous mode [ 332.939392][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.094075][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.143033][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.176708][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.197934][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.224460][ T5864] veth0_macvtap: entered promiscuous mode [ 333.289995][ T5871] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.324235][ T5871] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.347925][ T5871] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.366590][ T5871] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.453688][ T5864] veth1_macvtap: entered promiscuous mode [ 333.553064][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.595568][ T5996] bridge_slave_0: left allmulticast mode [ 333.634952][ T5996] bridge_slave_0: left promiscuous mode [ 333.653438][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.681706][ T5996] bridge_slave_1: left allmulticast mode [ 333.687659][ T5996] bridge_slave_1: left promiscuous mode [ 333.698508][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.719522][ T5859] Bluetooth: hci0: command tx timeout [ 333.719747][ T5865] Bluetooth: hci1: command tx timeout [ 333.725024][ T51] Bluetooth: hci3: command tx timeout [ 333.744952][ T5996] bond0: (slave bond_slave_0): Releasing backup interface [ 333.759746][ T5996] bond0: (slave bond_slave_1): Releasing backup interface [ 333.780013][ T5996] team0: Failed to send options change via netlink (err -105) [ 333.783029][ T5996] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 333.783507][ T5996] team0: Port device team_slave_0 removed [ 333.794616][ T5996] team0: Failed to send options change via netlink (err -105) [ 333.800901][ T51] Bluetooth: hci2: command tx timeout [ 333.800948][ T51] Bluetooth: hci4: command tx timeout [ 333.853995][ T5996] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 333.865145][ T5996] team0: Port device team_slave_1 removed [ 333.872066][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.880820][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.894498][ T5996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.903052][ T5996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.007365][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.066582][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.101932][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.128238][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.157480][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.186107][ T6006] netlink: 'syz.3.12': attribute type 12 has an invalid length. [ 334.287644][ T6007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 334.339457][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.347500][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.360768][ T6007] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 334.519208][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.561006][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.620921][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 334.704761][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.712514][ T6018] 9pnet_fd: Insufficient options for proto=fd [ 334.738974][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.959056][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.966966][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.108196][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 336.937201][ T6037] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.20'. [ 336.984451][ T6038] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 337.443076][ T6055] Zero length message leads to an empty skb [ 337.454070][ T6055] netlink: 'syz.0.1': attribute type 27 has an invalid length. [ 337.488102][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.25'. [ 337.595448][ T6056] hub 6-0:1.0: USB hub found [ 337.629637][ T6056] hub 6-0:1.0: 1 port detected [ 337.676472][ T6049] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1'. [ 337.734719][ T6044] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1'. [ 338.267482][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.275381][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.580645][ T6068] netlink: 104 bytes leftover after parsing attributes in process `syz.4.30'. [ 339.560343][ T6053] infiniband syz!: set active [ 339.565501][ T6053] infiniband syz!: added team_slave_0 [ 339.593245][ T6053] syz!: rxe_create_cq: returned err = -12 [ 339.598557][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.617414][ T6053] infiniband syz!: Couldn't create ib_mad CQ [ 339.625165][ T6053] infiniband syz!: Couldn't open port 1 [ 339.659106][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.699037][ T6053] RDS/IB: syz!: added [ 339.713358][ T6053] smc: adding ib device syz! with port count 1 [ 339.742607][ T6053] smc: ib device syz! port 1 has pnetid [ 339.873537][ T6055] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.907966][ T6055] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.916929][ T6055] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.962512][ T6055] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.132489][ T6088] team0: Port device gretap1 added [ 340.703576][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 340.762119][ T6102] openvswitch: netlink: Flow key attr not present in new flow. [ 340.880690][ T6107] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 340.924956][ T6107] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 340.933656][ T6107] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 340.945322][ T6107] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 340.966198][ T6107] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 343.407569][ T6118] netlink: 'syz.3.49': attribute type 3 has an invalid length. [ 345.602684][ T6150] 9pnet_fd: Insufficient options for proto=fd [ 345.643261][ T6151] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 345.669560][ T6151] netlink: 'syz.1.58': attribute type 2 has an invalid length. [ 345.716783][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 345.802882][ T6153] smc: net device bond0 applied user defined pnetid SYZ2 [ 345.880688][ T6154] smc: net device bond0 erased user defined pnetid SYZ2 [ 346.356485][ T6168] IPv4: Oversized IP packet from 127.202.26.0 [ 346.877802][ T6181] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.073062][ T6181] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.277391][ T6181] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.332669][ T6196] 9pnet_fd: Insufficient options for proto=fd [ 347.467647][ T6198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.81'. [ 347.592177][ T6181] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.780636][ T6181] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.853685][ T6181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.895154][ T6181] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.923210][ T6181] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.189988][ T6217] Invalid ELF header magic: != ELF [ 348.625519][ T6225] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 348.658071][ T6225] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 349.795153][ T6259] kernel profiling enabled (shift: 6) [ 350.828359][ T6289] netlink: 176 bytes leftover after parsing attributes in process `syz.2.117'. [ 351.500115][ T6311] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 351.513642][ T6311] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 351.533231][ T6311] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 351.998009][ T6315] netlink: 'syz.0.126': attribute type 12 has an invalid length. [ 354.268770][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 354.316193][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 354.338955][ T6372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.146'. [ 354.551803][ T6173] Set syz1 is full, maxelem 65536 reached [ 355.174906][ T6397] netlink: 'syz.2.157': attribute type 3 has an invalid length. [ 355.646010][ T6408] netlink: 'syz.0.163': attribute type 13 has an invalid length. [ 355.735545][ T6408] gretap0: refused to change device tx_queue_len [ 355.760554][ T6408] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 355.909929][ T6408] syz.0.163 (6408) used greatest stack depth: 19960 bytes left [ 355.948780][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 356.101184][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 356.155150][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 356.797909][ T30] audit: type=1326 audit(1751636395.850:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 356.873129][ T30] audit: type=1326 audit(1751636395.900:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 356.968572][ T30] audit: type=1326 audit(1751636395.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.075349][ T30] audit: type=1326 audit(1751636395.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.126307][ T6446] netlink: 'syz.2.178': attribute type 3 has an invalid length. [ 357.215332][ T30] audit: type=1326 audit(1751636395.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.329098][ T30] audit: type=1326 audit(1751636395.910:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.425848][ T30] audit: type=1326 audit(1751636395.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.548040][ T30] audit: type=1326 audit(1751636395.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.665586][ T30] audit: type=1326 audit(1751636395.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 357.790141][ T30] audit: type=1326 audit(1751636395.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6437 comm="syz.2.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f826998e929 code=0x7ffc0000 [ 358.050064][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 360.652581][ T6493] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.197'. [ 360.709129][ T6492] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.197'. [ 360.760794][ T6492] netlink: 'syz.3.197': attribute type 27 has an invalid length. [ 361.138424][ T6501] netlink: 'syz.2.200': attribute type 3 has an invalid length. [ 361.551157][ T6492] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.574353][ T6492] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.597946][ T6492] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.611516][ T6492] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.752621][ T6505] bridge_slave_0: default FDB implementation only supports local addresses [ 361.847013][ T6513] netlink: 176 bytes leftover after parsing attributes in process `syz.1.203'. [ 363.100005][ T6545] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.215'. [ 363.148567][ T6541] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.215'. [ 363.201685][ T6545] netlink: 'syz.1.215': attribute type 27 has an invalid length. [ 363.483201][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.491090][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.578645][ T6558] xt_hashlimit: size too large, truncated to 1048576 [ 363.961432][ T6561] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 365.350278][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.406215][ T6545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.438213][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 365.482651][ T6569] No such timeout policy "syz0" [ 365.790121][ T6545] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.848068][ T6545] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.898023][ T6545] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.907089][ T6545] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.042050][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 366.145259][ T6583] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 366.161803][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 366.161822][ T30] audit: type=1326 audit(1751636405.240:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.194090][ T30] audit: type=1326 audit(1751636405.270:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.216903][ T30] audit: type=1326 audit(1751636405.270:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.239259][ T30] audit: type=1326 audit(1751636405.270:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.269086][ T5917] syz1: Port: 1 Link DOWN [ 366.376202][ T30] audit: type=1326 audit(1751636405.270:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.397681][ T30] audit: type=1326 audit(1751636405.270:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6578 comm="syz.4.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6658d8e929 code=0x7ffc0000 [ 366.919833][ T6603] netlink: 'syz.0.242': attribute type 3 has an invalid length. [ 367.077723][ T6609] IPVS: stopping master sync thread 6611 ... [ 367.206549][ T6612] syz.1.245 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 367.336440][ T6619] IPv4: Oversized IP packet from 127.202.26.0 [ 367.678619][ T6629] pim6reg: entered allmulticast mode [ 367.733424][ T6635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 368.641633][ T30] audit: type=1326 audit(1751636407.720:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6666 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf8e929 code=0x7ffc0000 [ 368.695471][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'. [ 368.775923][ T30] audit: type=1326 audit(1751636407.760:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6666 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc20bf8e929 code=0x7ffc0000 [ 368.798747][ T30] audit: type=1326 audit(1751636407.760:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6666 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf8e929 code=0x7ffc0000 [ 368.823783][ T30] audit: type=1326 audit(1751636407.760:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6666 comm="syz.3.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20bf8e929 code=0x7ffc0000 [ 370.270879][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 372.902255][ T36] ================================================================== [ 372.910491][ T36] BUG: KASAN: invalid-free in drain_mem_cache+0x1d8/0x480 [ 372.917639][ T36] Free of addr ffff888044850001 by task kworker/u8:2/36 [ 372.924691][ T36] [ 372.927068][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 372.927093][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.927107][ T36] Workqueue: events_unbound bpf_map_free_deferred [ 372.927145][ T36] Call Trace: [ 372.927158][ T36] [ 372.927167][ T36] dump_stack_lvl+0x189/0x250 [ 372.927197][ T36] ? __virt_addr_valid+0x1c8/0x5c0 [ 372.927215][ T36] ? rcu_is_watching+0x15/0xb0 [ 372.927242][ T36] ? __kasan_check_byte+0x12/0x40 [ 372.927273][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.927301][ T36] ? rcu_is_watching+0x15/0xb0 [ 372.927330][ T36] ? lock_release+0x4b/0x3e0 [ 372.927358][ T36] ? __virt_addr_valid+0x1c8/0x5c0 [ 372.927376][ T36] ? __virt_addr_valid+0x4a5/0x5c0 [ 372.927396][ T36] print_report+0xd2/0x2b0 [ 372.927420][ T36] ? drain_mem_cache+0x1d8/0x480 [ 372.927439][ T36] kasan_report_invalid_free+0xea/0x110 [ 372.927465][ T36] ? drain_mem_cache+0x1d8/0x480 [ 372.927490][ T36] free_large_kmalloc+0x8c/0x200 [ 372.927517][ T36] drain_mem_cache+0x1d8/0x480 [ 372.927538][ T36] bpf_mem_alloc_destroy+0x13d/0x4d0 [ 372.927562][ T36] trie_free+0x132/0x150 [ 372.927585][ T36] bpf_map_free_deferred+0xed/0x110 [ 372.927607][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 372.927636][ T36] process_scheduled_works+0xae1/0x17b0 [ 372.927681][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 372.927720][ T36] worker_thread+0x8a0/0xda0 [ 372.927751][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 372.927782][ T36] ? __kthread_parkme+0x7b/0x200 [ 372.927816][ T36] kthread+0x711/0x8a0 [ 372.927836][ T36] ? __pfx_worker_thread+0x10/0x10 [ 372.927863][ T36] ? __pfx_kthread+0x10/0x10 [ 372.927882][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.927905][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.927930][ T36] ? __pfx_kthread+0x10/0x10 [ 372.927950][ T36] ret_from_fork+0x3fc/0x770 [ 372.927977][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 372.928006][ T36] ? __switch_to_asm+0x39/0x70 [ 372.928023][ T36] ? __switch_to_asm+0x33/0x70 [ 372.928039][ T36] ? __pfx_kthread+0x10/0x10 [ 372.928058][ T36] ret_from_fork_asm+0x1a/0x30 [ 372.928086][ T36] [ 372.928093][ T36] [ 373.148204][ T36] The buggy address belongs to the physical page: [ 373.154628][ T36] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x44850 [ 373.163412][ T36] head: order:4 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 373.171932][ T36] memcg:ffff888027533f82 [ 373.176187][ T36] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 373.183757][ T36] page_type: f8(unknown) [ 373.188011][ T36] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 373.196615][ T36] raw: 0000000000000000 0000000000000000 00000001f8000000 ffff888027533f82 [ 373.205217][ T36] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 373.213905][ T36] head: 0000000000000000 0000000000000000 00000001f8000000 ffff888027533f82 [ 373.222590][ T36] head: 00fff00000000004 ffffea0001121401 00000000ffffffff 00000000ffffffff [ 373.231285][ T36] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000010 [ 373.240002][ T36] page dumped because: kasan: bad access detected [ 373.246474][ T36] page_owner tracks the page as allocated [ 373.252201][ T36] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x442dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_COMP), pid 6731, tgid 6727 (syz.1.287), ts 371750372606, free_ts 371388829185 [ 373.271949][ T36] post_alloc_hook+0x240/0x2a0 [ 373.276747][ T36] get_page_from_freelist+0x21d5/0x22b0 [ 373.282312][ T36] __alloc_frozen_pages_noprof+0x181/0x370 [ 373.288161][ T36] __alloc_pages_noprof+0xa/0x30 [ 373.293127][ T36] ___kmalloc_large_node+0x85/0x210 [ 373.298351][ T36] __kmalloc_large_node_noprof+0x18/0x90 [ 373.304019][ T36] __kmalloc_node_noprof+0x366/0x4e0 [ 373.309346][ T36] alloc_bulk+0x33b/0x530 [ 373.313688][ T36] bpf_mem_alloc_init+0x45c/0xc60 [ 373.318722][ T36] trie_alloc+0x220/0x340 [ 373.323103][ T36] map_create+0x903/0x1150 [ 373.327534][ T36] __sys_bpf+0x67e/0x860 [ 373.331792][ T36] __x64_sys_bpf+0x7c/0x90 [ 373.336224][ T36] do_syscall_64+0xfa/0x3b0 [ 373.340747][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.346652][ T36] page last free pid 5952 tgid 5952 stack trace: [ 373.352985][ T36] __free_frozen_pages+0xc65/0xe60 [ 373.358114][ T36] kasan_depopulate_vmalloc_pte+0x74/0xa0 [ 373.363845][ T36] __apply_to_page_range+0xb8f/0x1380 [ 373.369231][ T36] kasan_release_vmalloc+0xa2/0xd0 [ 373.374354][ T36] purge_vmap_node+0x214/0x8f0 [ 373.379137][ T36] process_scheduled_works+0xae1/0x17b0 [ 373.384702][ T36] worker_thread+0x8a0/0xda0 [ 373.389307][ T36] kthread+0x711/0x8a0 [ 373.393383][ T36] ret_from_fork+0x3fc/0x770 [ 373.397987][ T36] ret_from_fork_asm+0x1a/0x30 [ 373.402766][ T36] [ 373.405119][ T36] Memory state around the buggy address: [ 373.410758][ T36] ffff88804484ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.418827][ T36] ffff88804484ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 373.426915][ T36] >ffff888044850000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.434982][ T36] ^ [ 373.439147][ T36] ffff888044850080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.447233][ T36] ffff888044850100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 373.455304][ T36] ================================================================== [ 373.511657][ T6746] tipc: Enabling of bearer rejected, failed to enable media [ 373.597905][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 373.605220][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 373.617245][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.627344][ T36] Workqueue: events_unbound bpf_map_free_deferred [ 373.633818][ T36] Call Trace: [ 373.637137][ T36] [ 373.640110][ T36] dump_stack_lvl+0x99/0x250 [ 373.644756][ T36] ? __asan_memcpy+0x40/0x70 [ 373.649394][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.654648][ T36] ? __pfx__printk+0x10/0x10 [ 373.659278][ T36] panic+0x2db/0x790 [ 373.663200][ T36] ? __pfx_panic+0x10/0x10 [ 373.667642][ T36] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 373.673576][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.679945][ T36] ? print_memory_metadata+0x314/0x400 [ 373.685434][ T36] check_panic_on_warn+0x89/0xb0 [ 373.691354][ T36] end_report+0x78/0x160 [ 373.695617][ T36] ? drain_mem_cache+0x1d8/0x480 [ 373.700576][ T36] kasan_report_invalid_free+0xfa/0x110 [ 373.706139][ T36] ? drain_mem_cache+0x1d8/0x480 [ 373.711098][ T36] free_large_kmalloc+0x8c/0x200 [ 373.716070][ T36] drain_mem_cache+0x1d8/0x480 [ 373.720870][ T36] bpf_mem_alloc_destroy+0x13d/0x4d0 [ 373.726177][ T36] trie_free+0x132/0x150 [ 373.730439][ T36] bpf_map_free_deferred+0xed/0x110 [ 373.735654][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 373.741398][ T36] process_scheduled_works+0xae1/0x17b0 [ 373.746978][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.752986][ T36] worker_thread+0x8a0/0xda0 [ 373.757600][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.763952][ T36] ? __kthread_parkme+0x7b/0x200 [ 373.768923][ T36] kthread+0x711/0x8a0 [ 373.773109][ T36] ? __pfx_worker_thread+0x10/0x10 [ 373.778256][ T36] ? __pfx_kthread+0x10/0x10 [ 373.782908][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.788167][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.793528][ T36] ? __pfx_kthread+0x10/0x10 [ 373.798157][ T36] ret_from_fork+0x3fc/0x770 [ 373.802804][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 373.807978][ T36] ? __switch_to_asm+0x39/0x70 [ 373.812774][ T36] ? __switch_to_asm+0x33/0x70 [ 373.817640][ T36] ? __pfx_kthread+0x10/0x10 [ 373.822276][ T36] ret_from_fork_asm+0x1a/0x30 [ 373.827104][ T36] [ 373.830498][ T36] Kernel Offset: disabled [ 373.834856][ T36] Rebooting in 86400 seconds..