last executing test programs: 2m15.910672781s ago: executing program 1 (id=2): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m14.750306991s ago: executing program 1 (id=12): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xacd6a4e1331a88dc, 0x0) r0 = socket(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x3}, 0x10) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$inet_sctp(0x2, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x6, 0x1, 0xb512, 0x101, 0xe7}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x1, 0x6, 0x200, 0x101, 0x1, 0x8, 0x400, 0x5, r4}, &(0x7f00000003c0)=0x20) writev(r3, &(0x7f0000000480)=[{&(0x7f00000002c0)="94", 0x9a44}, {0x0}], 0x2) shutdown(0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000"], 0xfc}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000100)='./file0\x00', 0x59) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x82) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000900, 0x0, &(0x7f0000000400)) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x2}, 0x10) socket(0x1e, 0x4, 0x0) 2m10.228351521s ago: executing program 1 (id=16): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0xd, 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 2m4.603304338s ago: executing program 4 (id=23): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) unshare(0x40020000) fsopen(0x0, 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 1m57.913279423s ago: executing program 4 (id=26): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m56.266941826s ago: executing program 4 (id=31): setresuid(0xee01, 0xee00, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) 1m55.935648678s ago: executing program 4 (id=33): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc1) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a32, 0xc000, 0x7, 0x337}) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, 0x0, 0x4046855) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m55.330856154s ago: executing program 4 (id=36): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) unshare(0x40020000) fsopen(0x0, 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 1m54.853484322s ago: executing program 32 (id=16): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0xd, 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000003a00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000001800)="04", 0x1}], 0x1}}], 0x2, 0x44801) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) 1m51.977221819s ago: executing program 4 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000780)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000380)}) 1m36.304719418s ago: executing program 33 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000780)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000000380)}) 18.1114869s ago: executing program 3 (id=135): syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) 15.280841263s ago: executing program 2 (id=139): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) write$UHID_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x100, 0x200, 0x2a9cb173, 0x4, 0x5}}, 0x120) r2 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000300)=@multiplanar_overlay={0x3d, 0x2, 0x4, 0x4, 0x4, {0x77359400}, {0x3, 0x0, 0x4, 0x41, 0x9, 0x5, '\x00\x00A\x00'}, 0x9, 0x3, {&(0x7f0000000080)=[{0x6, 0x1, {0x6}, 0x5}, {0x3, 0x5, {0x3}, 0xfffffffa}]}, 0x1}) ioctl$IOCTL_START_ACCEL_DEV(0xffffffffffffffff, 0x40096102, &(0x7f0000000740)={{&(0x7f00000006c0)={'Accelerator1\x00', {&(0x7f00000004c0)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingNumResponses\x00'}, {0x7fffffff}}}}}, 0x4}) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x8, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0x7, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r7 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x475c, 0x4) bind$inet(r2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x0, 0x0) fanotify_init(0x40, 0x1000) r8 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x97ff}, 0xc) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) 15.225419382s ago: executing program 3 (id=140): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @void}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 14.763095144s ago: executing program 0 (id=141): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x2, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0xffffffff, 0x3, 0x100f5, 0x10009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x4, 0xfffff76d, 0x300000, 0x10, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x2, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa8, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x5, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x80000040, 0x9, 0x5b, 0x5], [0x6, 0x1e, 0x3, 0x4ef4, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x39ca, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x80, 0x4, 0x100, 0x89b, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xd65, 0x1, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde], [0x401, 0xc584, 0xffff, 0x8cd4, 0x7, 0x20, 0xb, 0x4, 0x8, 0x10, 0x7, 0x44c, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x401000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x6807, 0x80000001, 0x4, 0x7b, 0x10000005, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x4a, 0x2, 0x3, 0x4, 0x20007, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x44, 0x3, 0x6, 0x100fffd, 0x2005, 0x2000007, 0x4, 0xea, 0x9, 0x80000001, 0x2, 0xd9, 0x0, 0x807ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x20000800, 0x9, 0x1000, 0x7f, 0x5, 0x3fb6, 0x4, 0x8e8, 0x6348, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1800, 0x3b, 0xffffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3e, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x801, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0xbf3a, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) unshare(0x40020000) fsopen(0x0, 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 12.329166544s ago: executing program 3 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) dup(0xffffffffffffffff) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f00000002c0)) syz_clone(0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.04458178s ago: executing program 0 (id=143): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket(0x15, 0x1, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_io_uring_setup(0x3c05, &(0x7f0000000280)={0x0, 0x98bf, 0x0, 0x1, 0xad}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x24, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) sched_getparam(r2, &(0x7f0000000200)) process_madvise(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="82", 0x1}], 0x1, 0x0, 0x0) fsopen(0x0, 0x0) writev(r3, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 10.506435296s ago: executing program 2 (id=144): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, 0x0, &(0x7f0000000180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) io_submit(0x0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000}]) 8.333713248s ago: executing program 2 (id=145): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = dup(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) io_submit(0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001100), 0x106, 0x6}}, 0x20) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$mixer(0xffffff9c, 0x0, 0x2000, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x102b}}, 0x2000) 7.283314676s ago: executing program 0 (id=146): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0xfff, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x34}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) 5.139432127s ago: executing program 2 (id=147): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000540)=0x1) 3.764639083s ago: executing program 3 (id=148): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000100)={0x401, 0x2, 0x0, 'queue1\x00', 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r5, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x5, 0x7, 0x5, 0x80010000109e93, 0x8, 0x400000, 0x3, 0x0, 0x2, 0x7fffffffffffffff, 0xc1, 0x4, 0x1000000006, 0x3, 0xd7, 0xfffffffffffffffc], 0xd5d5c004}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.570969671s ago: executing program 0 (id=149): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x11, 0x0, 0x4000800}, 0x800) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x24400, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000240)=0xb690105) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) write$tun(r2, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) fchdir(r4) chdir(&(0x7f0000000080)='./file0\x00') 3.490040357s ago: executing program 2 (id=150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r0, 0x4) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}}, 0x0) 2.821669233s ago: executing program 2 (id=151): ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x2, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x1, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0xffffffff, 0x3, 0x100f5, 0x10009, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x2004, 0x3, 0x4, 0xf252, 0x4, 0xfffff76d, 0x300000, 0x10, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x2, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xa8, 0x4, 0x2, 0x0, 0x8, 0xc5, 0x1, 0x199f, 0x5, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x80000040, 0x9, 0x5b, 0x5], [0x6, 0x1e, 0x3, 0x4ef4, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x39ca, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x80, 0x4, 0x100, 0x89b, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0xd65, 0x1, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0xb, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0xbde], [0x401, 0xc584, 0xffff, 0x8cd4, 0x7, 0x20, 0xb, 0x4, 0x8, 0x10, 0x7, 0x44c, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x401000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe57, 0x6807, 0x80000001, 0x4, 0x7b, 0x10000005, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x4a, 0x2, 0x3, 0x4, 0x20007, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x44, 0x3, 0x6, 0x100fffd, 0x2005, 0x2000007, 0x4, 0xea, 0x9, 0x80000001, 0x2, 0xd9, 0x0, 0x807ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x20000800, 0x9, 0x1000, 0x7f, 0x5, 0x3fb6, 0x4, 0x8e8, 0x6348, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1800, 0x3b, 0xffffffff, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3e, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x801, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0xbf3a, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x132, 0x6]}, 0x45c) unshare(0x40020000) fsopen(0x0, 0x1) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 2.732117583s ago: executing program 0 (id=152): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x22080) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, 0x0) socket(0x9, 0x6, 0x26) syz_open_dev$tty1(0xc, 0x4, 0x1) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.673372269s ago: executing program 3 (id=153): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_procfs$userns(0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000002500)}, 0xffff1d1f}], 0x1, 0x100, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) bind$nfc_llcp(r3, &(0x7f0000000100)={0x27, 0x0, 0xffffffff, 0x3, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x58) getsockname(r3, 0x0, &(0x7f0000000080)) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2db02cbd7000fddbdf25090000000500130000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010) 221.364255ms ago: executing program 0 (id=154): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 0s ago: executing program 3 (id=155): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) write(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x184}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r3, 0x0) shutdown(r3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r4, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x14, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x48040) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x39000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 160.405224][ T5565] cgroup: Unknown subsys name 'net' [ 160.544573][ T5565] cgroup: Unknown subsys name 'cpuset' [ 160.559033][ T5565] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 166.012252][ T5565] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 170.251177][ T5586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.261830][ T5586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.272127][ T5586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.287121][ T5586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.299704][ T5586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.389025][ T5591] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.399784][ T5591] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.410858][ T5596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.423349][ T5596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.438150][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.449363][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.459064][ T5596] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.459765][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.469881][ T5596] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.482991][ T5598] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.491433][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.495258][ T5596] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.505901][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.514170][ T5598] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.517384][ T5596] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.553523][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.563352][ T4877] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.582962][ T4877] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.597791][ T4877] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.614347][ T4877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.379784][ T48] Bluetooth: hci0: command tx timeout [ 172.550569][ T48] Bluetooth: hci3: command tx timeout [ 172.617911][ T48] Bluetooth: hci2: command tx timeout [ 172.623595][ T4877] Bluetooth: hci1: command tx timeout [ 172.697777][ T48] Bluetooth: hci4: command tx timeout [ 174.457024][ T48] Bluetooth: hci0: command tx timeout [ 174.594037][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.604202][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.616972][ T48] Bluetooth: hci3: command tx timeout [ 174.637342][ T5583] bridge_slave_0: entered allmulticast mode [ 174.676764][ T5583] bridge_slave_0: entered promiscuous mode [ 174.698024][ T48] Bluetooth: hci2: command tx timeout [ 174.703730][ T4877] Bluetooth: hci1: command tx timeout [ 174.763466][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.773271][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.781158][ T4877] Bluetooth: hci4: command tx timeout [ 174.789683][ T5583] bridge_slave_1: entered allmulticast mode [ 174.799170][ T5583] bridge_slave_1: entered promiscuous mode [ 174.957798][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.968488][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.977645][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.987449][ T5589] bridge_slave_0: entered allmulticast mode [ 174.998578][ T5589] bridge_slave_0: entered promiscuous mode [ 175.044619][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.058090][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.065815][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.074322][ T5589] bridge_slave_1: entered allmulticast mode [ 175.089139][ T5589] bridge_slave_1: entered promiscuous mode [ 175.104833][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.112957][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.121698][ T5587] bridge_slave_0: entered allmulticast mode [ 175.132055][ T5587] bridge_slave_0: entered promiscuous mode [ 175.277081][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.284543][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.292737][ T5587] bridge_slave_1: entered allmulticast mode [ 175.300992][ T5587] bridge_slave_1: entered promiscuous mode [ 175.342092][ T5583] team0: Port device team_slave_0 added [ 175.378868][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.412186][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.420058][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.427762][ T5595] bridge_slave_0: entered allmulticast mode [ 175.435956][ T5595] bridge_slave_0: entered promiscuous mode [ 175.452527][ T5583] team0: Port device team_slave_1 added [ 175.488641][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.519761][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.527751][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.535151][ T5595] bridge_slave_1: entered allmulticast mode [ 175.544064][ T5595] bridge_slave_1: entered promiscuous mode [ 175.575074][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.582940][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.590845][ T5594] bridge_slave_0: entered allmulticast mode [ 175.599493][ T5594] bridge_slave_0: entered promiscuous mode [ 175.639603][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.696659][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.704539][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.735087][ T5594] bridge_slave_1: entered allmulticast mode [ 175.745887][ T5594] bridge_slave_1: entered promiscuous mode [ 175.800013][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.834626][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.842097][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.868484][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.909886][ T5589] team0: Port device team_slave_0 added [ 175.948274][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.959746][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.967315][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.993624][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.037447][ T5589] team0: Port device team_slave_1 added [ 176.072331][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.106795][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.143628][ T5587] team0: Port device team_slave_0 added [ 176.181520][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.242807][ T5587] team0: Port device team_slave_1 added [ 176.280749][ T5595] team0: Port device team_slave_0 added [ 176.312839][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.320479][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.346979][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.410482][ T5595] team0: Port device team_slave_1 added [ 176.422528][ T5594] team0: Port device team_slave_0 added [ 176.431641][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.439099][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.465398][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.536494][ T4877] Bluetooth: hci0: command tx timeout [ 176.569802][ T5594] team0: Port device team_slave_1 added [ 176.592201][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.599421][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.626066][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.651319][ T5583] hsr_slave_0: entered promiscuous mode [ 176.659464][ T5583] hsr_slave_1: entered promiscuous mode [ 176.697806][ T4877] Bluetooth: hci3: command tx timeout [ 176.721104][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.728346][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.754553][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.769920][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.777560][ T4877] Bluetooth: hci1: command tx timeout [ 176.777777][ T48] Bluetooth: hci2: command tx timeout [ 176.783703][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.814995][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.855510][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.862826][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.867886][ T48] Bluetooth: hci4: command tx timeout [ 176.889069][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.918376][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.925424][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.951729][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.985207][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.992643][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.018926][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.137062][ T5589] hsr_slave_0: entered promiscuous mode [ 177.145233][ T5589] hsr_slave_1: entered promiscuous mode [ 177.153670][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 177.159751][ T5589] Cannot create hsr debugfs directory [ 177.373456][ T5587] hsr_slave_0: entered promiscuous mode [ 177.384129][ T5587] hsr_slave_1: entered promiscuous mode [ 177.392795][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 177.398955][ T5587] Cannot create hsr debugfs directory [ 177.522276][ T5594] hsr_slave_0: entered promiscuous mode [ 177.532944][ T5594] hsr_slave_1: entered promiscuous mode [ 177.542990][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 177.550564][ T5594] Cannot create hsr debugfs directory [ 177.586012][ T5595] hsr_slave_0: entered promiscuous mode [ 177.594468][ T5595] hsr_slave_1: entered promiscuous mode [ 177.602994][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 177.608914][ T5595] Cannot create hsr debugfs directory [ 178.616552][ T48] Bluetooth: hci0: command tx timeout [ 178.702801][ T5583] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.727298][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.740947][ T5583] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.756944][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.766950][ T5583] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.776479][ T48] Bluetooth: hci3: command tx timeout [ 178.787863][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.811396][ T5583] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.829786][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.856620][ T48] Bluetooth: hci1: command tx timeout [ 178.856960][ T4877] Bluetooth: hci2: command tx timeout [ 178.936645][ T4877] Bluetooth: hci4: command tx timeout [ 178.942927][ T5589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 178.966617][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.976017][ T5589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 178.992739][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.002428][ T5589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.020163][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.030097][ T5589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.046505][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.221622][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.247747][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.259133][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.278825][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.297244][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.314998][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.339910][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.358313][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.623288][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.641462][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.653020][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.671464][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.681414][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.701948][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.722536][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.744902][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.978597][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.999950][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.011923][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.028468][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.045829][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.065281][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.094664][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.113264][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.294037][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.441389][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.520735][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.545810][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.608151][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.645922][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.653316][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.716233][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.723606][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.757150][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.764626][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.781988][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.861419][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.868814][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.882493][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.889899][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.959989][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.967366][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.079711][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.287371][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.338447][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.402825][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.410177][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.443518][ T5587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.554343][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.562138][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.714078][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.843160][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.850710][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.965345][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.972930][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.564651][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.661079][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.743834][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.490845][ T5583] veth0_vlan: entered promiscuous mode [ 185.514169][ T5587] veth0_vlan: entered promiscuous mode [ 185.642321][ T5583] veth1_vlan: entered promiscuous mode [ 185.734291][ T5587] veth1_vlan: entered promiscuous mode [ 185.785395][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.855148][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.129655][ T5583] veth0_macvtap: entered promiscuous mode [ 186.200590][ T5587] veth0_macvtap: entered promiscuous mode [ 186.233047][ T5583] veth1_macvtap: entered promiscuous mode [ 186.294518][ T5587] veth1_macvtap: entered promiscuous mode [ 186.438301][ T5595] veth0_vlan: entered promiscuous mode [ 186.467335][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.540625][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.581404][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.594078][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.616048][ T5594] veth0_vlan: entered promiscuous mode [ 186.653320][ T5595] veth1_vlan: entered promiscuous mode [ 186.711540][ T5589] veth0_vlan: entered promiscuous mode [ 186.740834][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.750226][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.773172][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.790773][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.830980][ T5594] veth1_vlan: entered promiscuous mode [ 186.863102][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.883105][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.927539][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.941836][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.998662][ T5589] veth1_vlan: entered promiscuous mode [ 187.190383][ T5595] veth0_macvtap: entered promiscuous mode [ 187.302194][ T5595] veth1_macvtap: entered promiscuous mode [ 187.455063][ T5594] veth0_macvtap: entered promiscuous mode [ 187.561519][ T5594] veth1_macvtap: entered promiscuous mode [ 187.608064][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.755899][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.782945][ T5589] veth0_macvtap: entered promiscuous mode [ 187.861061][ T5589] veth1_macvtap: entered promiscuous mode [ 187.935656][ T1160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.968691][ T1160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.018550][ T1160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.040384][ T1160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.082391][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.190294][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.333524][ T460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.371953][ T460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.425851][ T460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.462077][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.548086][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.682914][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.818502][ T34] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.839805][ T34] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.879803][ T34] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.900566][ T34] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.495531][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.538021][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.761661][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.795313][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.192865][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.215047][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.295624][ T5583] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.427686][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.476334][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.836878][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.868907][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.164970][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.188288][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.330492][ T5859] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 197.503538][ T5861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.714978][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.758274][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.066810][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.095676][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.271168][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.329565][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.567387][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.244912][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.093875][ T5879] hfs: can't find a HFS filesystem on dev nullb0 [ 201.907324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 203.518637][ T5900] random: crng reseeded on system resumption [ 204.978195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 205.827240][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.851012][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.609354][ T5912] process 'syz.2.17' launched '/dev/fd/3' with NULL argv: empty string added [ 207.576465][ T807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 207.770746][ T5919] serio: Serial port ptm0 [ 207.777937][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 207.828172][ T807] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.888979][ T807] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 207.916763][ T807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 207.940338][ T807] usb 4-1: Product: syz [ 207.960397][ T807] usb 4-1: Manufacturer: syz [ 207.972017][ T807] usb 4-1: SerialNumber: syz [ 208.016589][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 208.040012][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 208.063961][ T24] usb 1-1: config 12 has an invalid interface number: 102 but max is 0 [ 208.073397][ T24] usb 1-1: config 12 has no interface number 0 [ 208.082286][ T24] usb 1-1: config 12 interface 102 has no altsetting 0 [ 208.110636][ T24] usb 1-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=55.52 [ 208.130838][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.165408][ T24] usb 1-1: Product: syz [ 208.177690][ T24] usb 1-1: Manufacturer: syz [ 208.195293][ T24] usb 1-1: SerialNumber: syz [ 208.283058][ T807] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 208.541557][ T807] usb 4-1: USB disconnect, device number 2 [ 208.603847][ T24] mos7840 1-1:12.102: required endpoints missing [ 208.659932][ T807] usblp0: removed [ 208.700975][ T24] usb 1-1: USB disconnect, device number 2 [ 209.301512][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 214.149181][ T5938] hfs: can't find a HFS filesystem on dev nullb0 [ 215.629244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 218.900161][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 219.370966][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 219.945132][ T5977] hfs: can't find a HFS filesystem on dev nullb0 [ 220.748982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.158325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.355187][ T11] usb 3-1: config 0 interface 0 has no altsetting 0 [ 221.467089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 221.568689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 221.696995][ T11] usb 3-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 221.951555][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.648849][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 225.218270][ T11] usb 3-1: config 0 descriptor?? [ 225.370010][ T11] usb 3-1: can't set config #0, error -71 [ 225.869185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 226.392856][ T11] usb 3-1: USB disconnect, device number 2 [ 226.687090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 227.549521][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 227.561420][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 227.575896][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 227.620442][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 227.641734][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.807077][ T48] Bluetooth: hci5: command tx timeout [ 231.647472][ T29] audit: type=1326 audit(1779916487.578:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6002 comm="syz.0.46" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f351fd9ce59 code=0x0 [ 231.832694][ T48] Bluetooth: hci5: command tx timeout [ 233.213579][ T6020] hfs: can't find a HFS filesystem on dev nullb0 [ 233.898508][ T48] Bluetooth: hci5: command tx timeout [ 235.979525][ T48] Bluetooth: hci5: command tx timeout [ 238.794997][ T4877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 238.817454][ T4877] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 238.828028][ T4877] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 238.858876][ T4877] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 238.879267][ T4877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 239.081348][ T5882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.945384][ T4877] Bluetooth: hci3: command tx timeout [ 242.195864][ T5882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.058952][ T5882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.159113][ T4877] Bluetooth: hci3: command tx timeout [ 243.596877][ T5882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.292577][ T6076] hfs: can't find a HFS filesystem on dev nullb0 [ 245.368263][ T4877] Bluetooth: hci3: command tx timeout [ 247.417004][ T4877] Bluetooth: hci3: command tx timeout [ 249.194859][ T5882] bridge_slave_1: left allmulticast mode [ 249.226392][ T5882] bridge_slave_1: left promiscuous mode [ 249.293914][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.368003][ T5882] bridge_slave_0: left allmulticast mode [ 249.386929][ T5882] bridge_slave_0: left promiscuous mode [ 249.393535][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.357872][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.488392][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.603647][ T5882] bond0 (unregistering): Released all slaves [ 257.072308][ T6116] team0: entered allmulticast mode [ 257.143852][ T6116] team_slave_0: entered allmulticast mode [ 257.213224][ T6116] team_slave_1: entered allmulticast mode [ 258.602980][ T5882] hsr_slave_0: left promiscuous mode [ 258.626942][ T5882] hsr_slave_1: left promiscuous mode [ 258.653580][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.673796][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.698919][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.706867][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.841926][ T5882] veth1_macvtap: left promiscuous mode [ 258.861828][ T5882] veth0_macvtap: left promiscuous mode [ 258.880694][ T5882] veth1_vlan: left promiscuous mode [ 258.906777][ T5882] veth0_vlan: left promiscuous mode [ 261.044682][ T6155] hfs: can't find a HFS filesystem on dev nullb0 [ 262.044287][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 262.184877][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 263.295647][ T5232] 8021q: adding VLAN 0 to HW filter on device eth1 [ 263.782086][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.789921][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.843379][ T5993] bridge_slave_0: entered allmulticast mode [ 263.925030][ T5993] bridge_slave_0: entered promiscuous mode [ 264.676806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 264.678830][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.750696][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.793280][ T5993] bridge_slave_1: entered allmulticast mode [ 264.848045][ T5993] bridge_slave_1: entered promiscuous mode [ 265.222442][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.284667][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.433384][ T5882] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.886781][ T5882] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.300808][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.307542][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.796984][ T5993] team0: Port device team_slave_0 added [ 266.912532][ T6191] warning: `syz.3.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 266.998471][ T5993] team0: Port device team_slave_1 added [ 267.590940][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.642119][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.787963][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.113909][ T5882] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.251171][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.341521][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.470061][ T6201] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 268.476818][ T6201] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 268.480899][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.562636][ T6201] vhci_hcd vhci_hcd.0: Device attached [ 269.368083][ T6203] vhci_hcd: cannot find a urb of seqnum 1818570752 max seqnum 0 [ 270.347486][ T5686] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 270.474113][ T5780] vhci_hcd vhci_hcd.0: stop threads [ 270.959009][ T5780] vhci_hcd vhci_hcd.0: release socket [ 271.032604][ T5780] vhci_hcd vhci_hcd.0: disconnect device [ 271.216724][ T5882] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.910754][ T5993] hsr_slave_0: entered promiscuous mode [ 271.964787][ T5993] hsr_slave_1: entered promiscuous mode [ 271.991002][ T5993] debugfs: 'hsr0' already exists in 'hsr' [ 272.022733][ T5993] Cannot create hsr debugfs directory [ 273.213575][ T6237] 9pnet_virtio: no channels available for device syz [ 274.679976][ T5882] bridge_slave_1: left allmulticast mode [ 274.699242][ T5882] bridge_slave_1: left promiscuous mode [ 274.730947][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.808392][ T5882] bridge_slave_0: left allmulticast mode [ 274.853210][ T5882] bridge_slave_0: left promiscuous mode [ 274.881494][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.006434][ T5686] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 276.795737][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.888837][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.953655][ T5882] bond0 (unregistering): Released all slaves [ 277.292005][ T5232] 8021q: adding VLAN 0 to HW filter on device eth2 [ 278.517320][ T5682] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 279.471672][ T6255] overlayfs: failed to resolve './file0': -2 [ 280.347738][ T5682] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 280.375733][ T5682] usb 3-1: config 1 has no interface number 0 [ 280.392028][ T5682] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 281.356458][ T5682] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 281.369854][ T5682] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.617480][ T5682] usb 3-1: string descriptor 0 read error: -71 [ 281.636910][ T5682] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 281.648786][ T5682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.708655][ T5682] usb 3-1: can't set config #1, error -71 [ 281.778429][ T5682] usb 3-1: USB disconnect, device number 3 [ 281.799382][ T5882] hsr_slave_0: left promiscuous mode [ 281.871194][ T5882] hsr_slave_1: left promiscuous mode [ 281.947966][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.970700][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.008964][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.011430][ T6268] tmpfs: Unknown parameter 'grpquota_b' [ 282.043151][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.158890][ T5882] veth1_macvtap: left promiscuous mode [ 282.201490][ T5882] veth0_macvtap: left promiscuous mode [ 282.239334][ T5882] veth1_vlan: left promiscuous mode [ 282.266010][ T5882] veth0_vlan: left promiscuous mode [ 282.362073][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.375003][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.412535][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.438692][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.466446][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.786909][ T6281] hfs: can't find a HFS filesystem on dev nullb0 [ 284.537490][ T48] Bluetooth: hci2: command tx timeout [ 285.509633][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 285.698162][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 286.109556][ T6291] 9pnet_virtio: no channels available for device syz [ 286.626600][ T48] Bluetooth: hci2: command tx timeout [ 288.700384][ T48] Bluetooth: hci2: command tx timeout [ 288.769009][ T6298] overlayfs: failed to resolve './file0': -2 [ 291.791428][ T48] Bluetooth: hci2: command tx timeout [ 293.397995][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.496012][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.522309][ T6043] bridge_slave_0: entered allmulticast mode [ 293.571691][ T6043] bridge_slave_0: entered promiscuous mode [ 293.629113][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.668653][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.699368][ T6043] bridge_slave_1: entered allmulticast mode [ 293.746788][ T6043] bridge_slave_1: entered promiscuous mode [ 293.912658][ T5596] Bluetooth: hci0: command 0x0406 tx timeout [ 293.919517][ T5596] Bluetooth: hci1: command 0x0406 tx timeout [ 293.927734][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 294.175439][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.289975][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.562899][ T6043] team0: Port device team_slave_0 added [ 294.590338][ T5882] bridge_slave_1: left allmulticast mode [ 294.608390][ T5882] bridge_slave_1: left promiscuous mode [ 294.627196][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.665889][ T5882] bridge_slave_0: left allmulticast mode [ 294.684663][ T5882] bridge_slave_0: left promiscuous mode [ 294.699461][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.065231][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.121979][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.159078][ T5882] bond0 (unregistering): Released all slaves [ 295.224393][ T6043] team0: Port device team_slave_1 added [ 295.721689][ T5882] hsr_slave_0: left promiscuous mode [ 295.768348][ T5882] hsr_slave_1: left promiscuous mode [ 295.802725][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.852544][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.613857][ T5882] team0 (unregistering): Port device team_slave_1 removed [ 296.682980][ T5882] team0 (unregistering): Port device team_slave_0 removed [ 297.489399][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.533541][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.686559][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.792565][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.855747][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.980017][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.216754][ T5597] Bluetooth: hci1: command 0x0406 tx timeout [ 298.382852][ T5232] 8021q: adding VLAN 0 to HW filter on device eth3 [ 299.315912][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.344290][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.356710][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.378351][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.396907][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.521842][ T6356] overlayfs: failed to resolve './file0': -2 [ 301.496587][ T5597] Bluetooth: hci5: command tx timeout [ 302.069825][ T5686] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 302.327009][ T5686] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 302.372132][ T460] bridge_slave_1: left allmulticast mode [ 302.392324][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.424269][ T460] bridge_slave_1: left promiscuous mode [ 302.464290][ T460] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.484908][ T5686] usb 4-1: config 0 descriptor?? [ 302.555664][ T460] bridge_slave_0: left allmulticast mode [ 302.624746][ T460] bridge_slave_0: left promiscuous mode [ 302.633396][ T460] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.589448][ T5597] Bluetooth: hci5: command tx timeout [ 303.980970][ T6381] hfs: can't find a HFS filesystem on dev nullb0 [ 304.950988][ T460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.059419][ T460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.115784][ T460] bond0 (unregistering): Released all slaves [ 305.727081][ T5597] Bluetooth: hci5: command tx timeout [ 306.287764][ T460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.289045][ T5686] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 306.344965][ T5686] [drm:udl_init] *ERROR* Selecting channel failed [ 306.397365][ T460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.496448][ T5686] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 306.530950][ T5686] [drm] Initialized udl on minor 2 [ 306.545794][ T5686] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.584830][ T5686] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 306.592734][ T5685] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.649859][ T5685] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 306.664491][ T460] team0 (unregistering): Port device team_slave_1 removed [ 306.689328][ T5686] usb 4-1: USB disconnect, device number 3 [ 306.753177][ T5685] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 306.889400][ T460] team0 (unregistering): Port device team_slave_0 removed [ 307.488270][ T6402] 9pnet_virtio: no channels available for device syz [ 307.736871][ T5597] Bluetooth: hci5: command tx timeout [ 314.538669][ T5232] 8021q: adding VLAN 0 to HW filter on device eth4 [ 316.288416][ T5682] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.170291][ T6271] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.197596][ T6271] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.229541][ T5682] usb 4-1: Using ep0 maxpacket: 8 [ 317.242737][ T6271] bridge_slave_0: entered allmulticast mode [ 317.267926][ T5682] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 317.294946][ T6271] bridge_slave_0: entered promiscuous mode [ 317.315986][ T5682] usb 4-1: config 179 has no interface number 0 [ 317.348342][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 317.368804][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.379877][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.392672][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 317.405129][ T6271] bridge_slave_1: entered allmulticast mode [ 317.414530][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 317.437444][ T6271] bridge_slave_1: entered promiscuous mode [ 317.457861][ T5682] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 317.476532][ T5682] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 317.493327][ T5682] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 317.503334][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.547237][ T6429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.629582][ T5682] xpad 4-1:179.65: probe with driver xpad failed with error -5 [ 317.836293][ T5682] usb 4-1: USB disconnect, device number 4 [ 317.918227][ T6271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.011290][ T6271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.732274][ T6271] team0: Port device team_slave_0 added [ 319.127335][ T6271] team0: Port device team_slave_1 added [ 320.058026][ T6460] hfs: can't find a HFS filesystem on dev nullb0 [ 321.735054][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.783823][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.896264][ T6271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.024203][ T6271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.074080][ T6271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.165138][ T6271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.299864][ T6271] hsr_slave_0: entered promiscuous mode [ 323.358307][ T6271] hsr_slave_1: entered promiscuous mode [ 323.399297][ T6271] debugfs: 'hsr0' already exists in 'hsr' [ 323.434764][ T6271] Cannot create hsr debugfs directory [ 325.620218][ T5232] 8021q: adding VLAN 0 to HW filter on device eth6 [ 326.882765][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.906367][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.032062][ T6345] bridge_slave_0: entered allmulticast mode [ 327.250678][ T6345] bridge_slave_0: entered promiscuous mode [ 327.702782][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.712957][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.441237][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.475599][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.540550][ T6345] bridge_slave_1: entered allmulticast mode [ 328.705687][ T6345] bridge_slave_1: entered promiscuous mode [ 330.250565][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.424855][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.969355][ T6345] team0: Port device team_slave_0 added [ 331.121951][ T6345] team0: Port device team_slave_1 added [ 331.392919][ T6518] mmap: syz.0.152 (6518) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.711626][ T6271] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.788852][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.985449][ T6271] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 332.103228][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.152679][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.202121][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.346761][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.424506][ T6271] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 332.527223][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.540864][ T6271] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.610413][ T6271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.116240][ T6531] hfs: can't find a HFS filesystem on dev nullb0 [ 333.484663][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.496683][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.524103][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.135890][ T6536] Zero length message leads to an empty skb [ 334.210583][ T6535] ===================================================== [ 334.218014][ T6535] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 334.225450][ T6535] batadv_get_vid+0x2ce/0x3b0 [ 334.230445][ T6535] batadv_interface_tx+0x2e8/0x1dc0 [ 334.235914][ T6535] dev_hard_start_xmit+0x22f/0xa80 [ 334.241382][ T6535] __dev_queue_xmit+0x2990/0x5a00 [ 334.246693][ T6535] __bpf_redirect+0x162e/0x1760 [ 334.251712][ T6535] bpf_clone_redirect+0x4a6/0x6c0 [ 334.256994][ T6535] ___bpf_prog_run+0x13e8/0xeab0 [ 334.262222][ T6535] __bpf_prog_run32+0xc2/0xf0 [ 334.267169][ T6535] bpf_test_run+0x846/0xdf0 [ 334.271794][ T6535] bpf_prog_test_run_skb+0x2988/0x35f0 [ 334.277483][ T6535] bpf_prog_test_run+0x5bb/0x9f0 [ 334.282597][ T6535] __sys_bpf+0x925/0xee0 [ 334.287071][ T6535] __x64_sys_bpf+0xa4/0xf0 [ 334.291633][ T6535] x64_sys_call+0x13d0/0x3ea0 [ 334.296548][ T6535] do_syscall_64+0x15d/0x3c0 [ 334.301307][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.307419][ T6535] [ 334.309842][ T6535] Uninit was created at: [ 334.314376][ T6535] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 334.320643][ T6535] pskb_expand_head+0x2f3/0x1a40 [ 334.325753][ T6535] skb_ensure_writable+0x44e/0x510 [ 334.331157][ T6535] bpf_clone_redirect+0x301/0x6c0 [ 334.336447][ T6535] ___bpf_prog_run+0x13e8/0xeab0 [ 334.341549][ T6535] __bpf_prog_run32+0xc2/0xf0 [ 334.346470][ T6535] bpf_test_run+0x846/0xdf0 [ 334.351093][ T6535] bpf_prog_test_run_skb+0x2988/0x35f0 [ 334.356939][ T6535] bpf_prog_test_run+0x5bb/0x9f0 [ 334.362052][ T6535] __sys_bpf+0x925/0xee0 [ 334.366547][ T6535] __x64_sys_bpf+0xa4/0xf0 [ 334.371116][ T6535] x64_sys_call+0x13d0/0x3ea0 [ 334.375951][ T6535] do_syscall_64+0x15d/0x3c0 [ 334.380804][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.387032][ T6535] [ 334.389480][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.0.154 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 334.400510][ T6535] Tainted: [L]=SOFTLOCKUP [ 334.404916][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.415175][ T6535] ===================================================== [ 334.422372][ T6535] Disabling lock debugging due to kernel taint [ 334.428695][ T6535] Kernel panic - not syncing: kmsan.panic set ... [ 334.435222][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: syz.0.154 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 334.446162][ T6535] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 334.451782][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.461986][ T6535] Call Trace: [ 334.465342][ T6535] [ 334.468349][ T6535] __dump_stack+0x26/0x30 [ 334.472843][ T6535] dump_stack_lvl+0x50/0x1c0 [ 334.477591][ T6535] ? dump_stack+0x12/0x25 [ 334.482065][ T6535] dump_stack+0x1e/0x25 [ 334.486363][ T6535] vpanic+0x7b4/0x1430 [ 334.490635][ T6535] panic+0x15d/0x160 [ 334.494751][ T6535] kmsan_report+0x31a/0x320 [ 334.499467][ T6535] ? __msan_warning+0x1b/0x30 [ 334.504316][ T6535] ? batadv_get_vid+0x2ce/0x3b0 [ 334.509338][ T6535] ? batadv_interface_tx+0x2e8/0x1dc0 [ 334.514907][ T6535] ? dev_hard_start_xmit+0x22f/0xa80 [ 334.520361][ T6535] ? __dev_queue_xmit+0x2990/0x5a00 [ 334.525717][ T6535] ? __bpf_redirect+0x162e/0x1760 [ 334.530919][ T6535] ? bpf_clone_redirect+0x4a6/0x6c0 [ 334.536284][ T6535] ? ___bpf_prog_run+0x13e8/0xeab0 [ 334.541557][ T6535] ? __bpf_prog_run32+0xc2/0xf0 [ 334.546559][ T6535] ? bpf_test_run+0x846/0xdf0 [ 334.551358][ T6535] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 334.557112][ T6535] ? bpf_prog_test_run+0x5bb/0x9f0 [ 334.562403][ T6535] ? __sys_bpf+0x925/0xee0 [ 334.566976][ T6535] ? __x64_sys_bpf+0xa4/0xf0 [ 334.571709][ T6535] ? x64_sys_call+0x13d0/0x3ea0 [ 334.576718][ T6535] ? do_syscall_64+0x15d/0x3c0 [ 334.581658][ T6535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.587882][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.593165][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.598442][ T6535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.604435][ T6535] ? batadv_interface_tx+0x1/0x1dc0 [ 334.609798][ T6535] ? filter_irq_stacks+0x49/0x190 [ 334.614968][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.620276][ T6535] __msan_warning+0x1b/0x30 [ 334.624938][ T6535] batadv_get_vid+0x2ce/0x3b0 [ 334.629769][ T6535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.635762][ T6535] batadv_interface_tx+0x2e8/0x1dc0 [ 334.641140][ T6535] ? kmsan_report+0x320/0x320 [ 334.645980][ T6535] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 334.652571][ T6535] ? __pfx_batadv_interface_tx+0x10/0x10 [ 334.658367][ T6535] dev_hard_start_xmit+0x22f/0xa80 [ 334.663667][ T6535] __dev_queue_xmit+0x2990/0x5a00 [ 334.668879][ T6535] ? skb_release_data+0x1071/0x1120 [ 334.674235][ T6535] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 334.680644][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.685916][ T6535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.691901][ T6535] ? __dev_queue_xmit+0x2d4/0x5a00 [ 334.697166][ T6535] ? pskb_expand_head+0x164b/0x1a40 [ 334.702564][ T6535] __bpf_redirect+0x162e/0x1760 [ 334.707586][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.712886][ T6535] bpf_clone_redirect+0x4a6/0x6c0 [ 334.718108][ T6535] ___bpf_prog_run+0x13e8/0xeab0 [ 334.723246][ T6535] __bpf_prog_run32+0xc2/0xf0 [ 334.728091][ T6535] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 334.734605][ T6535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.740580][ T6535] ? __pfx___bpf_prog_run32+0x10/0x10 [ 334.746121][ T6535] ? __pfx___bpf_prog_run32+0x10/0x10 [ 334.751658][ T6535] bpf_test_run+0x846/0xdf0 [ 334.756291][ T6535] ? csum_partial+0x424/0x480 [ 334.761140][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.766433][ T6535] ? bpf_test_run+0x2f4/0xdf0 [ 334.771271][ T6535] bpf_prog_test_run_skb+0x2988/0x35f0 [ 334.776861][ T6535] ? futex_unqueue+0x22d/0x2c0 [ 334.781794][ T6535] ? kmsan_get_metadata+0xf1/0x160 [ 334.787080][ T6535] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 334.793080][ T6535] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 334.799595][ T6535] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.805528][ T6535] bpf_prog_test_run+0x5bb/0x9f0 [ 334.810661][ T6535] __sys_bpf+0x925/0xee0 [ 334.815102][ T6535] __x64_sys_bpf+0xa4/0xf0 [ 334.819682][ T6535] x64_sys_call+0x13d0/0x3ea0 [ 334.824533][ T6535] do_syscall_64+0x15d/0x3c0 [ 334.829297][ T6535] ? clear_bhb_loop+0x50/0xa0 [ 334.834118][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.840158][ T6535] RIP: 0033:0x7f351fd9ce59 [ 334.844677][ T6535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.864418][ T6535] RSP: 002b:00007f3520d05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.872977][ T6535] RAX: ffffffffffffffda RBX: 00007f3520015fa0 RCX: 00007f351fd9ce59 [ 334.881051][ T6535] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 334.889114][ T6535] RBP: 00007f351fe32d6f R08: 0000000000000000 R09: 0000000000000000 [ 334.897177][ T6535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 334.905235][ T6535] R13: 00007f3520016038 R14: 00007f3520015fa0 R15: 00007ffc7f6c3408 [ 334.913347][ T6535] [ 334.916737][ T6535] Kernel Offset: disabled [ 334.921105][ T6535] Rebooting in 86400 seconds..