last executing test programs: 8.429136857s ago: executing program 4 (id=5): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee656baa48c19bd1b59cb46"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) 6.218846682s ago: executing program 4 (id=10): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x5, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000fe02000000000800180016001400010001000000000100feffff0f0000000f0008000400", @ANYRES32=r8, @ANYBLOB="0600150008000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) read(r0, &(0x7f0000000100)=""/113, 0x71) write$ppp(r0, &(0x7f0000000200)="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", 0x1d0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 6.024491457s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, &(0x7f00000004c0)) 5.823820366s ago: executing program 0 (id=12): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) 5.570341734s ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 5.48447166s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 5.326105677s ago: executing program 2 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 5.019521385s ago: executing program 3 (id=16): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.979305302s ago: executing program 2 (id=17): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x810, 0xffffffffffffffff, 0x5eba6000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c042) getdents64(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) pipe2(0x0, 0x80c80) rt_sigprocmask(0x3, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000), 0x10, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r1, 0x5607, 0x2c) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) set_tid_address(&(0x7f0000000040)) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000080)={0xd, 0x8, 0x2, 0x0, 0x0, 0x1000}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) 4.768278484s ago: executing program 4 (id=18): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.763433225s ago: executing program 0 (id=19): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804) 4.709430098s ago: executing program 1 (id=20): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r2, &(0x7f00000007c0)={0x800, 0x1ed00000000002, 0x9, 0x9a}, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 4.594460811s ago: executing program 3 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 4.288888751s ago: executing program 1 (id=22): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.269734549s ago: executing program 4 (id=23): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xa) pivot_root(&(0x7f0000000580)='./cgroup.cpu/cpuset.cpus\x00', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000000)=0xfe8e, 0x12) 4.008134847s ago: executing program 1 (id=24): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) 3.99392354s ago: executing program 0 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000100f1dbdf2526"], 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) 3.776460125s ago: executing program 2 (id=26): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) sendmsg$nl_route(r8, 0x0, 0x4010) 3.753604946s ago: executing program 1 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r6, {}, {0x1}, {0x4, 0x3d}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x3c}}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0x1}}}, 0x24}}, 0x10) 3.606533584s ago: executing program 0 (id=28): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r0, 0x0, 0x0) 3.563403601s ago: executing program 3 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x14, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 3.331106097s ago: executing program 3 (id=30): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x0) 2.161246307s ago: executing program 3 (id=31): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 940.099722ms ago: executing program 1 (id=32): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r2, &(0x7f00000007c0)={0x800, 0x1ed00000000002, 0x9, 0x9a}, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 445.56717ms ago: executing program 0 (id=33): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 444.699912ms ago: executing program 3 (id=34): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 0s ago: executing program 2 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804) kernel console output (not intermixed with test programs): [ 92.435107][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 98.734199][ T5826] cgroup: Unknown subsys name 'net' [ 98.964905][ T5826] cgroup: Unknown subsys name 'cpuset' [ 99.019784][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.069568][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.082060][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.099610][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.100601][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.104769][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.108920][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.110112][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.110819][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.114193][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.116641][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.117110][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.119692][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.120339][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.131454][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.153527][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.154457][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.201684][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.211575][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.212498][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.213959][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.214896][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.366109][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.368769][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.370750][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.372221][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.373159][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.355994][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 105.366660][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 105.475005][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 105.495460][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 105.781218][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 106.191215][ T5849] Bluetooth: hci1: command tx timeout [ 106.191224][ T5851] Bluetooth: hci0: command tx timeout [ 106.269203][ T5849] Bluetooth: hci3: command tx timeout [ 106.269257][ T5851] Bluetooth: hci2: command tx timeout [ 106.443659][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.443825][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.444415][ T5848] bridge_slave_0: entered allmulticast mode [ 106.447006][ T5848] bridge_slave_0: entered promiscuous mode [ 106.457306][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.457420][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.457598][ T5847] bridge_slave_0: entered allmulticast mode [ 106.500659][ T5847] bridge_slave_0: entered promiscuous mode [ 106.509170][ T5849] Bluetooth: hci4: command tx timeout [ 106.663129][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.663283][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.663856][ T5848] bridge_slave_1: entered allmulticast mode [ 106.666729][ T5848] bridge_slave_1: entered promiscuous mode [ 106.677648][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.677811][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.678076][ T5847] bridge_slave_1: entered allmulticast mode [ 106.697747][ T5847] bridge_slave_1: entered promiscuous mode [ 107.021563][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.022052][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.022658][ T5843] bridge_slave_0: entered allmulticast mode [ 107.025141][ T5843] bridge_slave_0: entered promiscuous mode [ 107.026817][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.026955][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.027187][ T5844] bridge_slave_0: entered allmulticast mode [ 107.031785][ T5844] bridge_slave_0: entered promiscuous mode [ 107.270760][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.270931][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.271123][ T5843] bridge_slave_1: entered allmulticast mode [ 107.274013][ T5843] bridge_slave_1: entered promiscuous mode [ 107.275518][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.275647][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.275783][ T5844] bridge_slave_1: entered allmulticast mode [ 107.277676][ T5844] bridge_slave_1: entered promiscuous mode [ 107.312442][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.330573][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.653124][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.656569][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.656818][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.657272][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.657455][ T5860] bridge_slave_0: entered allmulticast mode [ 107.660989][ T5860] bridge_slave_0: entered promiscuous mode [ 107.960665][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.960816][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.961003][ T5860] bridge_slave_1: entered allmulticast mode [ 107.963968][ T5860] bridge_slave_1: entered promiscuous mode [ 107.970851][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.976947][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.184655][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.187428][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.190582][ T5848] team0: Port device team_slave_0 added [ 108.196476][ T5847] team0: Port device team_slave_0 added [ 108.269437][ T5851] Bluetooth: hci0: command tx timeout [ 108.269541][ T5849] Bluetooth: hci1: command tx timeout [ 108.349097][ T5849] Bluetooth: hci2: command tx timeout [ 108.350079][ T5851] Bluetooth: hci3: command tx timeout [ 108.494981][ T5848] team0: Port device team_slave_1 added [ 108.497826][ T5847] team0: Port device team_slave_1 added [ 108.505096][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.589343][ T5849] Bluetooth: hci4: command tx timeout [ 108.842570][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.093814][ T5843] team0: Port device team_slave_0 added [ 109.096729][ T5844] team0: Port device team_slave_0 added [ 109.344987][ T5843] team0: Port device team_slave_1 added [ 109.347010][ T5844] team0: Port device team_slave_1 added [ 109.348399][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.348410][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.348429][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.355627][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.355647][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.355680][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.590887][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.590904][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.590924][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.592180][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.592206][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.592226][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.594588][ T5860] team0: Port device team_slave_0 added [ 109.890366][ T5860] team0: Port device team_slave_1 added [ 109.892003][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.892017][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.892044][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.894834][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.894851][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.894880][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.131609][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.131626][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.131655][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.133416][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.133430][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.133456][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.350943][ T5849] Bluetooth: hci1: command tx timeout [ 110.350980][ T5849] Bluetooth: hci0: command tx timeout [ 110.429713][ T5851] Bluetooth: hci2: command tx timeout [ 110.429747][ T5851] Bluetooth: hci3: command tx timeout [ 110.521727][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.521744][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.521772][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.669212][ T5849] Bluetooth: hci4: command tx timeout [ 110.702661][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.702680][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.702708][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.723171][ T5848] hsr_slave_0: entered promiscuous mode [ 110.725185][ T5848] hsr_slave_1: entered promiscuous mode [ 110.748381][ T5847] hsr_slave_0: entered promiscuous mode [ 110.762707][ T5847] hsr_slave_1: entered promiscuous mode [ 110.763907][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 110.764058][ T5847] Cannot create hsr debugfs directory [ 111.213265][ T5843] hsr_slave_0: entered promiscuous mode [ 111.214664][ T5843] hsr_slave_1: entered promiscuous mode [ 111.215297][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 111.215324][ T5843] Cannot create hsr debugfs directory [ 111.419689][ T5844] hsr_slave_0: entered promiscuous mode [ 111.421213][ T5844] hsr_slave_1: entered promiscuous mode [ 111.422189][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 111.422214][ T5844] Cannot create hsr debugfs directory [ 111.610618][ T5860] hsr_slave_0: entered promiscuous mode [ 111.611656][ T5860] hsr_slave_1: entered promiscuous mode [ 111.612291][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 111.612314][ T5860] Cannot create hsr debugfs directory [ 112.429421][ T5849] Bluetooth: hci0: command tx timeout [ 112.429456][ T5849] Bluetooth: hci1: command tx timeout [ 112.509345][ T5851] Bluetooth: hci3: command tx timeout [ 112.509381][ T5851] Bluetooth: hci2: command tx timeout [ 112.749343][ T5849] Bluetooth: hci4: command tx timeout [ 113.303774][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.360115][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.393323][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.436402][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.590473][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.634104][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.685758][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.738584][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.911230][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.977992][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.017398][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.062015][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.265526][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.313153][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.378013][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.448825][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.632366][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.674232][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.725598][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.766034][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.805170][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.888880][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.948463][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.949273][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.986947][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.018735][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.018845][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.126717][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.174375][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.212137][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.212445][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.290679][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.290844][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.365760][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.396316][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.427106][ T3835] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.427261][ T3835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.535483][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.536679][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.655823][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.733913][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.735462][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.765016][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.804342][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.805041][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.944779][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.016504][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.016766][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.097730][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.103205][ T3835] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.103379][ T3835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.655993][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.948873][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.997765][ T5843] veth0_vlan: entered promiscuous mode [ 117.087012][ T5843] veth1_vlan: entered promiscuous mode [ 117.118156][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.239464][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.247228][ T5847] veth0_vlan: entered promiscuous mode [ 117.275680][ T5844] veth0_vlan: entered promiscuous mode [ 117.321434][ T5847] veth1_vlan: entered promiscuous mode [ 117.326120][ T5843] veth0_macvtap: entered promiscuous mode [ 117.354047][ T5844] veth1_vlan: entered promiscuous mode [ 117.377830][ T5843] veth1_macvtap: entered promiscuous mode [ 117.453130][ T5860] veth0_vlan: entered promiscuous mode [ 117.525619][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.563082][ T5860] veth1_vlan: entered promiscuous mode [ 117.582966][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.616659][ T5848] veth0_vlan: entered promiscuous mode [ 117.634648][ T5847] veth0_macvtap: entered promiscuous mode [ 117.662806][ T5844] veth0_macvtap: entered promiscuous mode [ 117.664740][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.686681][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.690886][ T5847] veth1_macvtap: entered promiscuous mode [ 117.701340][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.730614][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.731410][ T5844] veth1_macvtap: entered promiscuous mode [ 117.742169][ T5848] veth1_vlan: entered promiscuous mode [ 117.946448][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.021926][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.025689][ T5860] veth0_macvtap: entered promiscuous mode [ 118.046400][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.084835][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.086250][ T5860] veth1_macvtap: entered promiscuous mode [ 118.125669][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.165637][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.198724][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.218055][ T64] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.228302][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.230337][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.230369][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.274661][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.304082][ T5848] veth0_macvtap: entered promiscuous mode [ 118.306887][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.332642][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.398463][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.445009][ T5848] veth1_macvtap: entered promiscuous mode [ 118.525838][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.611411][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.611435][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.749469][ T3835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.783818][ T3835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.797787][ T3835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.835871][ T3835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.863457][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.898667][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.898690][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.004346][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.103481][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.103506][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.233040][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.313384][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.317035][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.317057][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.360287][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.386983][ T4142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.537361][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.537384][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.791651][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.791674][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.442777][ T3835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.442802][ T3835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.620801][ T3835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.620823][ T3835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.177112][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 122.225180][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.225203][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.677855][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18'. [ 124.747695][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 124.939508][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27'. [ 125.145598][ T6051] netlink: 'syz.2.26': attribute type 4 has an invalid length. [ 125.145621][ T6051] netlink: 17 bytes leftover after parsing attributes in process `syz.2.26'. [ 125.956576][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.256467][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.956748][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.165472][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.200504][ C1] ------------[ cut here ]------------ [ 128.200528][ C1] WARNING: CPU: 1 PID: 29 at ./include/linux/seqlock.h:221 est_timer+0x6dc/0x9f0 [ 128.200577][ C1] Modules linked in: [ 128.200626][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.200651][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.200668][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 128.200693][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 128.200712][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 128.200731][ C1] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801cab9dc0 [ 128.200747][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 128.200761][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 128.200776][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 128.200792][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801cf0ee68 [ 128.200806][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 128.200825][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.200841][ C1] CR2: 00007ff66f706850 CR3: 0000000031706000 CR4: 00000000003526f0 [ 128.200861][ C1] Call Trace: [ 128.200870][ C1] [ 128.200897][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.200930][ C1] call_timer_fn+0x17b/0x5f0 [ 128.200960][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.200978][ C1] ? call_timer_fn+0xbe/0x5f0 [ 128.201001][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 128.201038][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.201064][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.201086][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.201113][ C1] __run_timer_base+0x648/0x970 [ 128.201153][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 128.201200][ C1] run_timer_softirq+0xb7/0x180 [ 128.201226][ C1] handle_softirqs+0x22c/0x710 [ 128.201266][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 128.201306][ C1] run_ktimerd+0xcf/0x190 [ 128.201337][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 128.201363][ C1] ? schedule+0x91/0x360 [ 128.201395][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 128.201416][ C1] smpboot_thread_fn+0x542/0xa60 [ 128.201447][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 128.201478][ C1] kthread+0x711/0x8a0 [ 128.201507][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.201529][ C1] ? __pfx_kthread+0x10/0x10 [ 128.201561][ C1] ? __pfx_kthread+0x10/0x10 [ 128.201589][ C1] ret_from_fork+0x3f9/0x770 [ 128.201616][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 128.201645][ C1] ? __switch_to_asm+0x39/0x70 [ 128.201663][ C1] ? __switch_to_asm+0x33/0x70 [ 128.201680][ C1] ? __pfx_kthread+0x10/0x10 [ 128.201708][ C1] ret_from_fork_asm+0x1a/0x30 [ 128.201741][ C1] [ 128.201750][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.201764][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.201784][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.201794][ C1] Call Trace: [ 128.201801][ C1] [ 128.201809][ C1] dump_stack_lvl+0x99/0x250 [ 128.201836][ C1] ? __asan_memcpy+0x40/0x70 [ 128.201856][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.201885][ C1] ? __pfx__printk+0x10/0x10 [ 128.201920][ C1] vpanic+0x281/0x750 [ 128.201948][ C1] ? __pfx__printk+0x10/0x10 [ 128.201969][ C1] ? __pfx_vpanic+0x10/0x10 [ 128.201997][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 128.202036][ C1] panic+0xb9/0xc0 [ 128.202064][ C1] ? __pfx_panic+0x10/0x10 [ 128.202110][ C1] __warn+0x31b/0x4b0 [ 128.202141][ C1] ? est_timer+0x6dc/0x9f0 [ 128.202164][ C1] ? est_timer+0x6dc/0x9f0 [ 128.202182][ C1] report_bug+0x2be/0x4f0 [ 128.202204][ C1] ? est_timer+0x6dc/0x9f0 [ 128.202224][ C1] ? est_timer+0x6dc/0x9f0 [ 128.202242][ C1] ? est_timer+0x6de/0x9f0 [ 128.202262][ C1] handle_bug+0x84/0x160 [ 128.202292][ C1] exc_invalid_op+0x1a/0x50 [ 128.202318][ C1] asm_exc_invalid_op+0x1a/0x20 [ 128.202335][ C1] RIP: 0010:est_timer+0x6dc/0x9f0 [ 128.202356][ C1] Code: ff c7 42 80 3c 23 00 74 08 4c 89 f7 e8 bd 2c 41 f9 4d 89 3e 42 80 3c 23 00 0f 85 54 ff ff ff e9 57 ff ff ff e8 d5 f4 e1 f8 90 <0f> 0b 90 e9 63 fd ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 65 fa ff ff [ 128.202373][ C1] RSP: 0018:ffffc90000a3f7a0 EFLAGS: 00010246 [ 128.202391][ C1] RAX: ffffffff88dc677b RBX: 0000000000000001 RCX: ffff88801cab9dc0 [ 128.202406][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 128.202419][ C1] RBP: ffffc90000a3f8b0 R08: 0000000000000000 R09: 0000000000000100 [ 128.202441][ C1] R10: dffffc0000000000 R11: fffff52000147f0a R12: 0000000000000005 [ 128.202456][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88801cf0ee68 [ 128.202479][ C1] ? est_timer+0x6db/0x9f0 [ 128.202526][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.202560][ C1] call_timer_fn+0x17b/0x5f0 [ 128.202588][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.202611][ C1] ? call_timer_fn+0xbe/0x5f0 [ 128.202640][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 128.202680][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 128.202710][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.202737][ C1] ? __pfx_est_timer+0x10/0x10 [ 128.202764][ C1] __run_timer_base+0x648/0x970 [ 128.202811][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 128.202860][ C1] run_timer_softirq+0xb7/0x180 [ 128.202889][ C1] handle_softirqs+0x22c/0x710 [ 128.202931][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 128.202975][ C1] run_ktimerd+0xcf/0x190 [ 128.203007][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 128.203036][ C1] ? schedule+0x91/0x360 [ 128.203074][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 128.203101][ C1] smpboot_thread_fn+0x542/0xa60 [ 128.203132][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 128.203173][ C1] kthread+0x711/0x8a0 [ 128.203213][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 128.203242][ C1] ? __pfx_kthread+0x10/0x10 [ 128.203284][ C1] ? __pfx_kthread+0x10/0x10 [ 128.203320][ C1] ret_from_fork+0x3f9/0x770 [ 128.203353][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 128.203392][ C1] ? __switch_to_asm+0x39/0x70 [ 128.203414][ C1] ? __switch_to_asm+0x33/0x70 [ 128.203442][ C1] ? __pfx_kthread+0x10/0x10 [ 128.203478][ C1] ret_from_fork_asm+0x1a/0x30 [ 128.203511][ C1] [ 128.204201][ C1] Kernel Offset: disabled