last executing test programs: 1m30.123487877s ago: executing program 1 (id=18): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000001c0)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, 0x10) 1m29.202594918s ago: executing program 1 (id=21): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast1}, 0x2, 0x9800, 0x3, 0x2}}, 0x2e) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.318752756s ago: executing program 1 (id=24): syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x40000000015, 0x5, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0xc048aeca, &(0x7f0000000280)=ANY=[@ANYRES32=r0]) 1m27.19844897s ago: executing program 1 (id=27): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x28, 0x5, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r2, &(0x7f0000000080)=[{&(0x7f0000003400)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000003340)="b0", 0x1}], 0x2) mq_open(&(0x7f00000000c0)=',):\x00', 0x40, 0xf4, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x4}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x34000}], 0x1}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) 1m26.31613176s ago: executing program 2 (id=29): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000240)='\x00', 0x1, 0x4040081, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0xfffffffffffffd71, 0x4101, 0x0, 0x0) 1m25.162348861s ago: executing program 1 (id=30): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100000, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230041) 1m24.799937664s ago: executing program 2 (id=32): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) fanotify_init(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="af", 0x1}], 0x1}}], 0x1, 0x4040005) 1m24.187253063s ago: executing program 1 (id=33): mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x4004, &(0x7f0000000300)='(\xff\xff\xff\x7f\x00\x00\x00\x00b') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, &(0x7f0000000180)=""/170, 0xaa, 0x9, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0xc663, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_clone(0x104080, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 1m23.163366357s ago: executing program 2 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0) 1m21.953302992s ago: executing program 2 (id=38): r0 = openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) 1m20.312581202s ago: executing program 2 (id=41): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, 0x30}}, 0x4000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 1m18.426887225s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x14c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$sndseq(r2, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x0, 0xfd}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"429d3634a885b010f9d00892"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r10 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f2", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r10) 1m8.139901483s ago: executing program 32 (id=33): mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x4004, &(0x7f0000000300)='(\xff\xff\xff\x7f\x00\x00\x00\x00b') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r3, &(0x7f0000000180)=""/170, 0xaa, 0x9, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x4) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0xc663, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_clone(0x104080, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) 1m2.895403317s ago: executing program 33 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x6}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x14c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x40, r6, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) write$sndseq(r2, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x0, 0xfd}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"429d3634a885b010f9d00892"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}], 0x70) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x63c, 0x1, 0x3, 0xd59f83, 0x19f2, 0x3f, 0x7, 0x3, 0x6, 0x2800, 0x2800, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="7400000000010104000000000000000002000005240001801400018008000100e000000108000200000000000c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000100016"], 0x74}}, 0x0) r10 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000240)="f2", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r10) 42.554055112s ago: executing program 0 (id=85): ioprio_set$pid(0x1, 0x0, 0x6000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) shmctl$IPC_RMID(0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x24) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) 37.039348313s ago: executing program 0 (id=90): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) 35.835997431s ago: executing program 0 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x100) ioprio_set$pid(0x3, 0x0, 0x0) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000080)='o', 0x1}], 0x1, 0xe7b, 0x0, 0xe7) 34.623340202s ago: executing program 0 (id=95): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x109) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x84800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010b000000000000000002000000fd"], 0x1c}}, 0x40004040) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="f4", 0x34000}], 0x1, &(0x7f00000001c0)=[@dstaddrv4={0x18, 0x84, 0x7, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @dstaddrv4={0x18, 0x84, 0x7, @dev}], 0x48}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f00000002c0)={0x0, 0x8, 0x5, 0x2, 0x1, [], [0x2, 0x5, 0xfffffff8, 0x8], [0x801, 0x7fff, 0x2, 0x8511], [0x5, 0xfffffffffffffc01, 0xd, 0x401]}) ftruncate(r0, 0x9) 34.596862691s ago: executing program 3 (id=96): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x6) syz_usb_connect(0x4, 0x24, &(0x7f00000010c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 32.695632125s ago: executing program 3 (id=99): ioprio_set$pid(0x3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 30.548528674s ago: executing program 0 (id=100): socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xab, 0xe9, 0x27, 0x10, 0x13b1, 0x42, 0x76fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x2, 0x1, 0xc9, 0x18, 0x2, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) 27.553943694s ago: executing program 0 (id=102): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) open(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000d00000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 25.835479477s ago: executing program 3 (id=104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a30000000001400000011000100"/249], 0xfc}}, 0x0) 24.883584916s ago: executing program 3 (id=106): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0xfffffffffffffc01, 0x0) vmsplice(r3, &(0x7f0000000140)=[{0x0}], 0x1, 0x3) 23.900807288s ago: executing program 3 (id=108): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, "260000001000", 0x0, 0x0, 0x4a, 0x0, 0x0, 0x9, 0xe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 22.391171695s ago: executing program 3 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x807, 0x200020000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f00000000c0)=0x91, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 12.140085354s ago: executing program 34 (id=102): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x3, 0x4, 0x9, 0x6}], 0x10, 0x71, @void, @value}, 0x94) open(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{0x0, 0x1c}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x800, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000d00000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 12.097777061s ago: executing program 5 (id=53): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setattr(0x0, &(0x7f00000003c0)={0x38, 0x0, 0x40, 0x7, 0x81, 0x200, 0x8000000000000000, 0x7291, 0x9, 0xffffff00}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r1, 0xcccccccc}) io_setup(0x4, &(0x7f00000014c0)=0x0) syz_open_procfs(0x0, 0x0) io_getevents(r2, 0x1, 0x0, &(0x7f00000000c0), 0x0) 6.993545381s ago: executing program 6 (id=119): r0 = socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 6.247147875s ago: executing program 35 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x807, 0x200020000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f00000000c0)=0x91, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 6.122655498s ago: executing program 6 (id=121): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0xb, &(0x7f0000000000), 0xe) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) close(r0) 5.27016638s ago: executing program 6 (id=123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000001000000440000002000000000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYBLOB='\x00'/18], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) 4.947454195s ago: executing program 4 (id=124): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000180)=""/90, 0x29, 0x5a, 0x1, 0x7, 0x0, @void, @value}, 0x28) 3.933196425s ago: executing program 4 (id=125): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6}]}) fanotify_init(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="af", 0x1}], 0x1}}], 0x1, 0x4040005) 3.363431974s ago: executing program 6 (id=126): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r4, 0xfffffffffffffc01, 0x0) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x3) 2.579877672s ago: executing program 4 (id=127): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x0) 2.251205626s ago: executing program 6 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x11) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 1.644853227s ago: executing program 4 (id=129): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x4, &(0x7f0000000a00)=@framed={{}, [@exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 612.107153ms ago: executing program 4 (id=130): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) 378.176509ms ago: executing program 6 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) 0s ago: executing program 4 (id=132): socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 189.706511][ T5765] cgroup: Unknown subsys name 'net' [ 189.826743][ T5765] cgroup: Unknown subsys name 'cpuset' [ 189.843679][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.505984][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.512906][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.123316][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 246.713573][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.734298][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.750882][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.759667][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.769154][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.776949][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.786559][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.790685][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.795196][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.802914][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.809365][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.827579][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.836524][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.846099][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.855376][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.869614][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.878146][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.886600][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.889244][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.899954][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.901997][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.913523][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.921089][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.933319][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.942320][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 248.220532][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 248.877095][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 249.000555][ T5788] Bluetooth: hci1: command tx timeout [ 249.006429][ T5788] Bluetooth: hci0: command tx timeout [ 249.012431][ T5788] Bluetooth: hci3: command tx timeout [ 249.018164][ T5788] Bluetooth: hci4: command tx timeout [ 249.056581][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 249.081925][ T5801] Bluetooth: hci2: command tx timeout [ 249.193230][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 249.604323][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.613279][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.621991][ T5793] bridge_slave_0: entered allmulticast mode [ 249.632202][ T5793] bridge_slave_0: entered promiscuous mode [ 249.661862][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.669891][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.678252][ T5793] bridge_slave_1: entered allmulticast mode [ 249.688165][ T5793] bridge_slave_1: entered promiscuous mode [ 249.697925][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 249.950464][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.079732][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.093918][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.102216][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.109940][ T5790] bridge_slave_0: entered allmulticast mode [ 250.120264][ T5790] bridge_slave_0: entered promiscuous mode [ 250.229818][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.237798][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.245703][ T5790] bridge_slave_1: entered allmulticast mode [ 250.255526][ T5790] bridge_slave_1: entered promiscuous mode [ 250.526755][ T5793] team0: Port device team_slave_0 added [ 250.588207][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.596275][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.604217][ T5781] bridge_slave_0: entered allmulticast mode [ 250.614049][ T5781] bridge_slave_0: entered promiscuous mode [ 250.676249][ T5793] team0: Port device team_slave_1 added [ 250.695604][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.707275][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.715189][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.723302][ T5781] bridge_slave_1: entered allmulticast mode [ 250.732818][ T5781] bridge_slave_1: entered promiscuous mode [ 250.745217][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.753152][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.761718][ T5782] bridge_slave_0: entered allmulticast mode [ 250.771975][ T5782] bridge_slave_0: entered promiscuous mode [ 250.790789][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.798514][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.806383][ T5782] bridge_slave_1: entered allmulticast mode [ 250.816229][ T5782] bridge_slave_1: entered promiscuous mode [ 250.880782][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.081459][ T5801] Bluetooth: hci4: command tx timeout [ 251.081641][ T5788] Bluetooth: hci3: command tx timeout [ 251.087034][ T5801] Bluetooth: hci0: command tx timeout [ 251.092805][ T5794] Bluetooth: hci1: command tx timeout [ 251.143905][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.171617][ T5801] Bluetooth: hci2: command tx timeout [ 251.195164][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.202548][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.228882][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.329746][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.339714][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.348013][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.356442][ T5783] bridge_slave_0: entered allmulticast mode [ 251.366262][ T5783] bridge_slave_0: entered promiscuous mode [ 251.389259][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.399362][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.407191][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.415253][ T5783] bridge_slave_1: entered allmulticast mode [ 251.425324][ T5783] bridge_slave_1: entered promiscuous mode [ 251.436774][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.444221][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.470757][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.489429][ T5790] team0: Port device team_slave_0 added [ 251.585487][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.688166][ T5790] team0: Port device team_slave_1 added [ 251.706430][ T5781] team0: Port device team_slave_0 added [ 251.837320][ T5781] team0: Port device team_slave_1 added [ 251.893866][ T5782] team0: Port device team_slave_0 added [ 251.914209][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.931971][ T5782] team0: Port device team_slave_1 added [ 251.949609][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.032467][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.039833][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.066860][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.272742][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.279943][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.307659][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.362308][ T5783] team0: Port device team_slave_0 added [ 252.372323][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.379518][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.406157][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.433577][ T5793] hsr_slave_0: entered promiscuous mode [ 252.446715][ T5793] hsr_slave_1: entered promiscuous mode [ 252.458088][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.465789][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.492564][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.543832][ T5783] team0: Port device team_slave_1 added [ 252.592698][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.600496][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.627825][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.688559][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.695916][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.722884][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.912285][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.919478][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.945974][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.964510][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.971814][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.998683][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.127897][ T5790] hsr_slave_0: entered promiscuous mode [ 253.138460][ T5790] hsr_slave_1: entered promiscuous mode [ 253.150011][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.157998][ T5790] Cannot create hsr debugfs directory [ 253.164879][ T5801] Bluetooth: hci0: command tx timeout [ 253.170709][ T52] Bluetooth: hci3: command tx timeout [ 253.170837][ T52] Bluetooth: hci1: command tx timeout [ 253.176417][ T5788] Bluetooth: hci4: command tx timeout [ 253.240463][ T5788] Bluetooth: hci2: command tx timeout [ 253.421787][ T5781] hsr_slave_0: entered promiscuous mode [ 253.432722][ T5781] hsr_slave_1: entered promiscuous mode [ 253.444757][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.452831][ T5781] Cannot create hsr debugfs directory [ 253.634686][ T5782] hsr_slave_0: entered promiscuous mode [ 253.645620][ T5782] hsr_slave_1: entered promiscuous mode [ 253.654865][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.662872][ T5782] Cannot create hsr debugfs directory [ 253.843238][ T5783] hsr_slave_0: entered promiscuous mode [ 253.854283][ T5783] hsr_slave_1: entered promiscuous mode [ 253.862810][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.870985][ T5783] Cannot create hsr debugfs directory [ 254.727487][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.910968][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.950436][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.045467][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.243254][ T5788] Bluetooth: hci4: command tx timeout [ 255.248940][ T5788] Bluetooth: hci1: command tx timeout [ 255.257251][ T5801] Bluetooth: hci0: command tx timeout [ 255.263405][ T5794] Bluetooth: hci3: command tx timeout [ 255.326284][ T5788] Bluetooth: hci2: command tx timeout [ 255.363121][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.416191][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.462384][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.526975][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.717657][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.785687][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.810488][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.855940][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.906797][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.941525][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.972751][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 256.053563][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 256.392831][ T5783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 256.428545][ T5783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 256.458883][ T5783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 256.527870][ T5783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 256.660592][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.931255][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.036485][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.044181][ T4184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.198364][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.254924][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.263486][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.454414][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.472813][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.623871][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.631694][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.705058][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.766027][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.773906][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.906895][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.914608][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.939220][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.041521][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.049116][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.142234][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.277069][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.433051][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.476065][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.483866][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.621615][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.629322][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.723533][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.926035][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.933731][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.957065][ T3480] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.964857][ T3480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.096859][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.074952][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.483335][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.690493][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.870974][ T5793] veth0_vlan: entered promiscuous mode [ 261.013899][ T5793] veth1_vlan: entered promiscuous mode [ 261.224289][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.235352][ T5790] veth0_vlan: entered promiscuous mode [ 261.320014][ T5781] veth0_vlan: entered promiscuous mode [ 261.456614][ T5793] veth0_macvtap: entered promiscuous mode [ 261.471745][ T5790] veth1_vlan: entered promiscuous mode [ 261.505377][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.528882][ T5781] veth1_vlan: entered promiscuous mode [ 261.566048][ T5793] veth1_macvtap: entered promiscuous mode [ 261.930921][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.943950][ T5782] veth0_vlan: entered promiscuous mode [ 261.980221][ T5781] veth0_macvtap: entered promiscuous mode [ 262.039551][ T5790] veth0_macvtap: entered promiscuous mode [ 262.095589][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.143308][ T5781] veth1_macvtap: entered promiscuous mode [ 262.156274][ T5790] veth1_macvtap: entered promiscuous mode [ 262.182183][ T5793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.191421][ T5793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.200844][ T5793] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.210244][ T5793] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.247966][ T5782] veth1_vlan: entered promiscuous mode [ 262.391223][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.404000][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.419341][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.497744][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.508842][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.521312][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.533940][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.549754][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.578079][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.589412][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.605479][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.659675][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.671533][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.681897][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.692711][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.708186][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.764004][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.773268][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.782681][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.791944][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.861523][ T5782] veth0_macvtap: entered promiscuous mode [ 262.891104][ T5781] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.901997][ T5781] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.911456][ T5781] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.920827][ T5781] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.965718][ T5782] veth1_macvtap: entered promiscuous mode [ 263.183652][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.194543][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.204847][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.215725][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.226006][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.237269][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.253675][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.413853][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.424814][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.435127][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.446031][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.456495][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.467591][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.483389][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.718228][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.729241][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.739664][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.749040][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.198166][ T5783] veth0_vlan: entered promiscuous mode [ 264.384354][ T5783] veth1_vlan: entered promiscuous mode [ 264.852710][ T5783] veth0_macvtap: entered promiscuous mode [ 264.985236][ T5783] veth1_macvtap: entered promiscuous mode [ 265.207971][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.218956][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.229578][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.242913][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.254479][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.265366][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.275858][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.286778][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.302156][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.458391][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.471074][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.482762][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.494389][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.505328][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.516309][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.529799][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.540792][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.556222][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.850582][ T5783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.859681][ T5783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.870327][ T5783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.879389][ T5783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.025672][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.035681][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.440525][ T4184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.448691][ T4184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.587427][ T4326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.598442][ T4326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.678596][ T4095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.687052][ T4095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.745942][ T4136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.754232][ T4136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.966772][ T4095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.975583][ T4095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.384079][ T4069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.392498][ T4069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.534979][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 270.718811][ T5070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.727860][ T5070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.432495][ T5971] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 271.517936][ T5971] program syz.2.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.528148][ T5866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 271.764634][ T5866] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 271.777671][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.787439][ T5866] usb 4-1: Product: syz [ 271.792071][ T5866] usb 4-1: Manufacturer: syz [ 271.796944][ T5866] usb 4-1: SerialNumber: syz [ 271.913245][ T5866] usb 4-1: config 0 descriptor?? [ 271.962900][ T5866] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 002 [ 272.456823][ T5978] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 272.602912][ T5983] input: syz0 as /devices/virtual/input/input6 [ 272.631028][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.639391][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.723658][ T5866] (null): failure reading functionality [ 272.752398][ T5866] i2c i2c-1: failure reading functionality [ 272.802566][ T5866] i2c i2c-1: connected i2c-tiny-usb device [ 272.876478][ T5866] usb 4-1: USB disconnect, device number 2 [ 273.115228][ T4069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.124680][ T4069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.221477][ T5866] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 274.320480][ T5997] Zero length message leads to an empty skb [ 274.491785][ T5866] usb 2-1: config 0 has no interfaces? [ 274.511826][ T5866] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 274.521614][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.530818][ T5866] usb 2-1: Product: syz [ 274.539852][ T5866] usb 2-1: Manufacturer: syz [ 274.546365][ T5866] usb 2-1: SerialNumber: syz [ 274.703847][ T5866] usb 2-1: config 0 descriptor?? [ 274.978080][ T1917] usb 2-1: USB disconnect, device number 2 [ 279.066489][ T30] audit: type=1326 audit(1747140958.938:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.2.17" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 279.990572][ T5866] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 280.220607][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 280.253572][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.265927][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.280723][ T5866] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 280.291669][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.463323][ T5866] usb 1-1: config 0 descriptor?? [ 280.824008][ T6034] @: renamed from vlan0 (while UP) [ 280.949716][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 281.028490][ T5866] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 281.183634][ T5866] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -32). [ 281.274834][ T5866] usb 1-1: USB disconnect, device number 2 [ 284.534254][ T30] audit: type=1326 audit(1747140964.378:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6057 comm="syz.2.32" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x0 [ 285.173594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 285.290894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 285.553094][ T4069] Bluetooth: hci5: Frame reassembly failed (-84) [ 286.260666][ T5866] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 286.452654][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 286.553082][ T5866] usb 1-1: config 0 has no interfaces? [ 286.568957][ T5866] usb 1-1: config 0 has no interfaces? [ 286.591883][ T5866] usb 1-1: config 0 has no interfaces? [ 286.605890][ T5866] usb 1-1: config 0 has no interfaces? [ 286.612469][ T5866] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 286.626352][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.717607][ T5866] usb 1-1: config 0 descriptor?? [ 287.085487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 287.133275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 287.213475][ T1917] usb 1-1: USB disconnect, device number 3 [ 287.571063][ T5788] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 287.641368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 287.851527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 287.852036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 288.718038][ T1917] IPVS: starting estimator thread 0... [ 288.814800][ T6094] IPVS: using max 192 ests per chain, 9600 per kthread [ 290.802189][ T6101] netlink: 124 bytes leftover after parsing attributes in process `syz.2.43'. [ 290.811890][ T6101] netlink: 56 bytes leftover after parsing attributes in process `syz.2.43'. [ 290.924157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 290.945538][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.952689][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.031848][ T6101] dlm: Unknown command passed to DLM device : 0 [ 291.031848][ T6101] [ 292.560230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 293.072521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 293.607979][ T30] audit: type=1326 audit(1747140973.428:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.3.46" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x0 [ 302.066081][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.091834][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.109190][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.125742][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.143120][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.988957][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 304.211673][ T5801] Bluetooth: hci5: command tx timeout [ 305.009114][ T6145] warning: `syz.4.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.701746][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.709287][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.717130][ T6129] bridge_slave_0: entered allmulticast mode [ 305.726528][ T6129] bridge_slave_0: entered promiscuous mode [ 305.746928][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.757157][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.774530][ T6129] bridge_slave_1: entered allmulticast mode [ 305.785308][ T6129] bridge_slave_1: entered promiscuous mode [ 306.290305][ T5801] Bluetooth: hci5: command tx timeout [ 306.299643][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.435224][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.049070][ T6129] team0: Port device team_slave_0 added [ 307.141723][ T6129] team0: Port device team_slave_1 added [ 307.464408][ T1917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 307.600776][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.608066][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.638895][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.730364][ T1917] usb 4-1: Using ep0 maxpacket: 16 [ 307.755826][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 307.763482][ T1917] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 307.765883][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 307.772050][ T1917] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 307.790341][ T1917] usb 4-1: config 0 has no interface number 0 [ 307.842441][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 307.858235][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 307.878990][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.959477][ T1917] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 307.969115][ T1917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.977447][ T1917] usb 4-1: Product: syz [ 307.981846][ T1917] usb 4-1: Manufacturer: syz [ 307.986610][ T1917] usb 4-1: SerialNumber: syz [ 308.171470][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.178689][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.205218][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.206461][ T1917] usb 4-1: config 0 descriptor?? [ 308.480349][ T9] usb 4-1: USB disconnect, device number 3 [ 308.493347][ T5788] Bluetooth: hci5: command tx timeout [ 309.244590][ T6129] hsr_slave_0: entered promiscuous mode [ 309.261403][ T6129] hsr_slave_1: entered promiscuous mode [ 309.269680][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.278665][ T6129] Cannot create hsr debugfs directory [ 309.997546][ T5788] Bluetooth: hci6: command tx timeout [ 310.530831][ T5788] Bluetooth: hci5: command tx timeout [ 310.818166][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 312.051236][ T5788] Bluetooth: hci6: command tx timeout [ 312.437063][ T6129] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.537435][ T6129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 312.665728][ T6129] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.813528][ T6129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 313.665919][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.675018][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.682952][ T6155] bridge_slave_0: entered allmulticast mode [ 313.691974][ T6155] bridge_slave_0: entered promiscuous mode [ 313.874224][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.881992][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.889649][ T6155] bridge_slave_1: entered allmulticast mode [ 313.898782][ T6155] bridge_slave_1: entered promiscuous mode [ 314.121755][ T5788] Bluetooth: hci6: command tx timeout [ 314.327777][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.534737][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.135108][ T6155] team0: Port device team_slave_0 added [ 315.266297][ T6155] team0: Port device team_slave_1 added [ 315.317902][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.742142][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.749720][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.776887][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.001169][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.014403][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.044261][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.125585][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.244048][ T5788] Bluetooth: hci6: command tx timeout [ 316.255035][ T6194] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 316.293208][ T1917] IPVS: starting estimator thread 0... [ 316.405981][ T6196] IPVS: using max 192 ests per chain, 9600 per kthread [ 316.734372][ T6155] hsr_slave_0: entered promiscuous mode [ 316.746296][ T6155] hsr_slave_1: entered promiscuous mode [ 316.755701][ T6155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.763687][ T6155] Cannot create hsr debugfs directory [ 316.811898][ T3480] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.819582][ T3480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.913549][ T5070] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.921277][ T5070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.870626][ T1917] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 319.201420][ T1917] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 319.211370][ T1917] usb 5-1: config 0 has no interface number 0 [ 319.217939][ T1917] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.230685][ T1917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 319.244468][ T1917] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 319.257612][ T1917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 319.269468][ T1917] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 319.280798][ T1917] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 319.299298][ T1917] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 319.310770][ T1917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.772819][ T1917] usb 5-1: config 0 descriptor?? [ 320.781980][ T6204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.789816][ T6204] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.832122][ T1917] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 322.348800][ T6155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 322.512112][ T1917] usb 5-1: USB disconnect, device number 2 [ 322.543197][ T1917] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 322.634873][ T6155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 322.862126][ T6155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.106970][ T6155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.868884][ T3921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.103499][ T3921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.379196][ T3921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.699337][ T3921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.822521][ T5788] Bluetooth: hci4: Malformed LE Event: 0x0d [ 324.957848][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.703210][ T3921] bridge_slave_1: left allmulticast mode [ 325.709248][ T3921] bridge_slave_1: left promiscuous mode [ 325.718434][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.896223][ T3921] bridge_slave_0: left allmulticast mode [ 325.902691][ T3921] bridge_slave_0: left promiscuous mode [ 325.909462][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.014069][ T3921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.063367][ T3921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.156243][ T3921] bond0 (unregistering): Released all slaves [ 328.355019][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.656199][ T3921] hsr_slave_0: left promiscuous mode [ 328.674373][ T3921] hsr_slave_1: left promiscuous mode [ 328.693500][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.701928][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.884165][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.892311][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.131752][ T3921] veth1_macvtap: left promiscuous mode [ 329.137878][ T3921] veth0_macvtap: left promiscuous mode [ 329.144620][ T3921] veth1_vlan: left promiscuous mode [ 329.151895][ T3921] veth0_vlan: left promiscuous mode [ 330.283216][ T3921] team0 (unregistering): Port device team_slave_1 removed [ 330.562579][ T3921] team0 (unregistering): Port device team_slave_0 removed [ 331.486801][ T6155] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.626524][ T4095] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.634330][ T4095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.837753][ T4095] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.845868][ T4095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.849484][ T3921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.138136][ T3921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.422147][ T3921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.605752][ T3921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.746734][ T6129] veth0_vlan: entered promiscuous mode [ 334.245016][ T6129] veth1_vlan: entered promiscuous mode [ 334.382028][ T3921] bridge_slave_1: left allmulticast mode [ 334.387987][ T3921] bridge_slave_1: left promiscuous mode [ 334.395714][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.581395][ T3921] bridge_slave_0: left allmulticast mode [ 334.587388][ T3921] bridge_slave_0: left promiscuous mode [ 334.594781][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.740689][ T5788] Bluetooth: hci4: adv larger than maximum supported [ 334.740813][ T5788] Bluetooth: hci4: Malformed LE Event: 0x0d [ 336.722908][ T3921] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.773490][ T3921] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.742868][ T3921] bond0 (unregistering): Released all slaves [ 338.955088][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.121183][ T5837] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 339.143218][ T3921] hsr_slave_0: left promiscuous mode [ 339.179710][ T3921] hsr_slave_1: left promiscuous mode [ 339.188507][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.196661][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.231422][ T3921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.239357][ T3921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.285720][ T3921] veth1_macvtap: left promiscuous mode [ 339.290567][ T6321] syz.4.101 uses obsolete (PF_INET,SOCK_PACKET) [ 339.292099][ T3921] veth0_macvtap: left promiscuous mode [ 339.305931][ T3921] veth1_vlan: left promiscuous mode [ 339.311778][ T3921] veth0_vlan: left promiscuous mode [ 339.398521][ T5837] usb 1-1: Using ep0 maxpacket: 16 [ 339.459720][ T5837] usb 1-1: config 4 has an invalid interface number: 9 but max is 0 [ 339.469060][ T5837] usb 1-1: config 4 has no interface number 0 [ 339.475866][ T5837] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 339.486394][ T5837] usb 1-1: config 4 interface 9 has no altsetting 0 [ 339.870841][ T5837] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 339.881640][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.890241][ T5837] usb 1-1: Product: syz [ 339.894682][ T5837] usb 1-1: Manufacturer: syz [ 339.899639][ T5837] usb 1-1: SerialNumber: syz [ 339.989146][ T6316] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 340.267994][ T5837] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 340.268820][ T4069] usb 1-1: Failed to submit usb control message: -71 [ 340.288131][ T4069] usb 1-1: unable to send the bmi data to the device: -71 [ 340.291196][ T5837] usb 1-1: USB disconnect, device number 4 [ 340.296866][ T4069] usb 1-1: unable to get target info from device [ 340.308278][ T4069] usb 1-1: could not get target info (-71) [ 340.314844][ T4069] usb 1-1: could not probe fw (-71) [ 340.332845][ T3921] team0 (unregistering): Port device team_slave_1 removed [ 340.369785][ T3921] team0 (unregistering): Port device team_slave_0 removed [ 340.701943][ T6129] veth0_macvtap: entered promiscuous mode [ 341.069593][ T6129] veth1_macvtap: entered promiscuous mode [ 341.279631][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.291560][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.305063][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.319874][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.330217][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.341167][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.356967][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.757223][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.768461][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.781360][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.792737][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.803878][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.817837][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.834252][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.075390][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 342.243747][ T6129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.253119][ T6129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.262353][ T6129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.271524][ T6129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.632224][ T6155] veth0_vlan: entered promiscuous mode [ 343.721888][ T5144] udevd[5144]: worker [6160] terminated by signal 33 (Unknown signal 33) [ 343.778446][ T5144] udevd[5144]: worker [6160] failed while handling '/devices/virtual/block/loop4' [ 343.797737][ T6155] veth1_vlan: entered promiscuous mode [ 344.305538][ T6155] veth0_macvtap: entered promiscuous mode [ 344.435486][ T6155] veth1_macvtap: entered promiscuous mode [ 344.756446][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.768487][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.779650][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.795606][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.812270][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.823676][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.835080][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.846538][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.861726][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.386033][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.400764][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.411836][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.422811][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.433044][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.443766][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.454080][ T6155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.464860][ T6155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.479035][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.887314][ T6155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.897992][ T6155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.910720][ T6155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.919686][ T6155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.383001][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.389736][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.469174][ T5070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.477455][ T5070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.270637][ T4069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.279965][ T4069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.274094][ T4069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.282656][ T4069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.681196][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.689415][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.194394][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 358.223694][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 358.303153][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 358.472767][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 358.485192][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 358.649762][ T30] audit: type=1326 audit(1747141038.518:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz.6.58" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 360.604819][ T5788] Bluetooth: hci1: command tx timeout [ 362.003246][ T6441] chnl_net:caif_netlink_parms(): no params data found [ 362.260818][ T6472] delete_channel: no stack [ 362.693000][ T5788] Bluetooth: hci1: command tx timeout [ 363.015011][ T6479] netlink: 'syz.4.122': attribute type 29 has an invalid length. [ 363.099554][ T6479] netlink: 'syz.4.122': attribute type 29 has an invalid length. [ 363.242579][ T6482] netlink: 'syz.4.122': attribute type 29 has an invalid length. [ 363.337178][ T6483] netlink: 'syz.4.122': attribute type 29 has an invalid length. [ 364.217549][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.232744][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.249074][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.297994][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.313885][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.762122][ T5788] Bluetooth: hci1: command tx timeout [ 365.140587][ T30] audit: type=1326 audit(1747141044.998:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.125" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x0 [ 366.228863][ T6441] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.236725][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.244872][ T6441] bridge_slave_0: entered allmulticast mode [ 366.254696][ T6441] bridge_slave_0: entered promiscuous mode [ 366.496562][ T5788] Bluetooth: hci3: command tx timeout [ 366.840522][ T5801] Bluetooth: hci1: command tx timeout [ 366.938521][ T6441] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.946466][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.954551][ T6441] bridge_slave_1: entered allmulticast mode [ 366.964875][ T6441] bridge_slave_1: entered promiscuous mode [ 367.321278][ T6486] chnl_net:caif_netlink_parms(): no params data found [ 368.523326][ T52] Bluetooth: hci3: command tx timeout [ 368.617218][ T6441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.783150][ T6441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.238619][ T6441] team0: Port device team_slave_0 added [ 369.339178][ T6441] team0: Port device team_slave_1 added [ 369.803848][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 369.803921][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 369.850660][ T6441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.860488][ T6441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.894467][ T6441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.986427][ T6522] ===================================================== [ 369.994133][ T6522] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 370.001903][ T6522] batadv_get_vid+0x2d0/0x3b0 [ 370.006943][ T6522] batadv_interface_tx+0x2e9/0x1e60 [ 370.012806][ T6522] dev_hard_start_xmit+0x299/0xa30 [ 370.018315][ T6522] __dev_queue_xmit+0x3cb4/0x5e20 [ 370.024012][ T6522] __bpf_redirect+0x162d/0x1760 [ 370.029185][ T6522] bpf_clone_redirect+0x366/0x530 [ 370.034704][ T6522] ___bpf_prog_run+0x1294/0xeba0 [ 370.040144][ T6522] __bpf_prog_run512+0xc5/0x100 [ 370.045441][ T6522] bpf_test_run+0x547/0xd20 [ 370.050701][ T6522] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 370.056459][ T6522] bpf_prog_test_run+0x5b7/0xa30 [ 370.061801][ T6522] __sys_bpf+0x6ca/0xe60 [ 370.066453][ T6522] __ia32_sys_bpf+0xa4/0xf0 [ 370.071804][ T6522] ia32_sys_call+0x2544/0x42c0 [ 370.076839][ T6522] __do_fast_syscall_32+0xb0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 370.082527][ T6522] do_fast_syscall_32+0x38/0x80 [ 370.087670][ T6522] do_SYSENTER_32+0x1f/0x30 [ 370.092626][ T6522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.099235][ T6522] [ 370.101991][ T6522] Uninit was created at: [ 370.106659][ T6522] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 370.112947][ T6522] kmalloc_reserve+0x13c/0x4b0 [ 370.117994][ T6522] pskb_expand_head+0x207/0x1c90 [ 370.123821][ T6522] skb_ensure_writable+0x4c9/0x590 [ 370.129504][ T6522] bpf_clone_redirect+0x1c1/0x530 [ 370.135353][ T6522] ___bpf_prog_run+0x1294/0xeba0 [ 370.141305][ T6522] __bpf_prog_run512+0xc5/0x100 [ 370.146431][ T6522] bpf_test_run+0x547/0xd20 [ 370.151502][ T6522] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 370.157303][ T6522] bpf_prog_test_run+0x5b7/0xa30 [ 370.162729][ T6522] __sys_bpf+0x6ca/0xe60 [ 370.167303][ T6522] __ia32_sys_bpf+0xa4/0xf0 [ 370.172356][ T6522] ia32_sys_call+0x2544/0x42c0 [ 370.177429][ T6522] __do_fast_syscall_32+0xb0/0x110 [ 370.183168][ T6522] do_fast_syscall_32+0x38/0x80 [ 370.188392][ T6522] do_SYSENTER_32+0x1f/0x30 [ 370.193671][ T6522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.200539][ T6522] [ 370.203068][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.4.132 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 370.217050][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.227740][ T6522] ===================================================== [ 370.235134][ T6522] Disabling lock debugging due to kernel taint [ 370.242837][ T6522] Kernel panic - not syncing: kmsan.panic set ... [ 370.249909][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.4.132 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 370.264376][ T6522] Tainted: [B]=BAD_PAGE [ 370.268805][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 370.279088][ T6522] Call Trace: [ 370.282631][ T6522] [ 370.285712][ T6522] __dump_stack+0x26/0x30 [ 370.290840][ T6522] dump_stack_lvl+0x53/0x270 [ 370.295791][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.301892][ T6522] dump_stack+0x1e/0x25 [ 370.306307][ T6522] panic+0x4bd/0xd50 [ 370.310507][ T6522] kmsan_report+0x29d/0x2a0 [ 370.315443][ T6522] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 370.321950][ T6522] ? __msan_warning+0x96/0x120 [ 370.327052][ T6522] ? batadv_get_vid+0x2d0/0x3b0 [ 370.332206][ T6522] ? batadv_interface_tx+0x2e9/0x1e60 [ 370.337797][ T6522] ? dev_hard_start_xmit+0x299/0xa30 [ 370.343393][ T6522] ? __dev_queue_xmit+0x3cb4/0x5e20 [ 370.348904][ T6522] ? __bpf_redirect+0x162d/0x1760 [ 370.354339][ T6522] ? bpf_clone_redirect+0x366/0x530 [ 370.359862][ T6522] ? ___bpf_prog_run+0x1294/0xeba0 [ 370.365341][ T6522] ? __bpf_prog_run512+0xc5/0x100 [ 370.371516][ T6522] ? bpf_test_run+0x547/0xd20 [ 370.376593][ T6522] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 370.382548][ T6522] ? bpf_prog_test_run+0x5b7/0xa30 [ 370.387918][ T6522] ? __sys_bpf+0x6ca/0xe60 [ 370.392618][ T6522] ? __ia32_sys_bpf+0xa4/0xf0 [ 370.397547][ T6522] ? ia32_sys_call+0x2544/0x42c0 [ 370.402830][ T6522] ? __do_fast_syscall_32+0xb0/0x110 [ 370.408506][ T6522] ? do_fast_syscall_32+0x38/0x80 [ 370.413936][ T6522] ? do_SYSENTER_32+0x1f/0x30 [ 370.418913][ T6522] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.425706][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.431193][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.436682][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.442170][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.448269][ T6522] ? batadv_interface_tx+0x41/0x1e60 [ 370.453791][ T6522] ? filter_irq_stacks+0x49/0x190 [ 370.459069][ T6522] ? stack_depot_save_flags+0x35/0x7c0 [ 370.464822][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.470349][ T6522] __msan_warning+0x96/0x120 [ 370.475319][ T6522] batadv_get_vid+0x2d0/0x3b0 [ 370.480316][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.486410][ T6522] batadv_interface_tx+0x2e9/0x1e60 [ 370.491874][ T6522] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 370.498496][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.504008][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.510196][ T6522] ? __pfx_batadv_interface_tx+0x10/0x10 [ 370.516082][ T6522] dev_hard_start_xmit+0x299/0xa30 [ 370.521547][ T6522] __dev_queue_xmit+0x3cb4/0x5e20 [ 370.526874][ T6522] ? skb_release_data+0xeee/0x1110 [ 370.532385][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.537873][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.543963][ T6522] ? __dev_queue_xmit+0x30c/0x5e20 [ 370.549413][ T6522] __bpf_redirect+0x162d/0x1760 [ 370.554523][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.560249][ T6522] bpf_clone_redirect+0x366/0x530 [ 370.565649][ T6522] ___bpf_prog_run+0x1294/0xeba0 [ 370.570843][ T6522] __bpf_prog_run512+0xc5/0x100 [ 370.576008][ T6522] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 370.583248][ T6522] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 370.589897][ T6522] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 370.596170][ T6522] ? kmsan_slab_alloc+0xde/0x160 [ 370.601429][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.607405][ T6522] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 370.613975][ T6522] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 370.620330][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.626394][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.632448][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.637868][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.643285][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.648710][ T6522] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 370.655284][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.661409][ T6522] ? __pfx___bpf_prog_run512+0x10/0x10 [ 370.667259][ T6522] ? __pfx___bpf_prog_run512+0x10/0x10 [ 370.673199][ T6522] bpf_test_run+0x547/0xd20 [ 370.677932][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.683352][ T6522] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 370.689905][ T6522] ? kmsan_get_metadata+0x105/0x1b0 [ 370.695411][ T6522] ? bpf_test_run+0x39e/0xd20 [ 370.700457][ T6522] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 370.706529][ T6522] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 370.712279][ T6522] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 370.718355][ T6522] bpf_prog_test_run+0x5b7/0xa30 [ 370.723553][ T6522] __sys_bpf+0x6ca/0xe60 [ 370.728051][ T6522] __ia32_sys_bpf+0xa4/0xf0 [ 370.732752][ T6522] ia32_sys_call+0x2544/0x42c0 [ 370.737702][ T6522] __do_fast_syscall_32+0xb0/0x110 [ 370.743046][ T6522] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 370.749168][ T6522] do_fast_syscall_32+0x38/0x80 [ 370.754477][ T6522] do_SYSENTER_32+0x1f/0x30 [ 370.759287][ T6522] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.765978][ T6522] RIP: 0023:0xf7fa1539 [ 370.770343][ T6522] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 370.790386][ T6522] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 370.799253][ T6522] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 370.807500][ T6522] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.815813][ T6522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.824098][ T6522] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 370.832798][ T6522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.841260][ T6522] [ 370.844733][ T6522] Kernel Offset: disabled [ 370.849182][ T6522] Rebooting in 86400 seconds..