last executing test programs: 7.489452453s ago: executing program 0 (id=603): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000200000000"], 0x2c}}, 0x0) 7.03755212s ago: executing program 1 (id=606): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa1cf846912a3acbb, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet(0x2, 0x3, 0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 6.956453264s ago: executing program 0 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, 0x0, &(0x7f0000000240)}, 0x20) 5.687956707s ago: executing program 0 (id=609): add_key$fscrypt_v1(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000004000000040000000100000804000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000034d9"], 0x48) 5.687591349s ago: executing program 3 (id=610): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.543031134s ago: executing program 2 (id=611): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x80000000000000a, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) 5.409826304s ago: executing program 0 (id=612): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 5.4023983s ago: executing program 3 (id=613): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd604292c800300000fe8000000000000000000000140000aaff0200000033000000000000000000012902000000000000bc"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x7, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20008004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @private1}, 0x1c) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.314682338s ago: executing program 1 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1f8, 0x110, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac=@random="3c192477987a"}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x22}, @broadcast, 0x4}}}, {{@arp={@loopback, @private=0xa010102, 0xff, 0xffffff00, 0xd, 0x10, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x8, 0x0, 0x0, 0x8, 0x1, 0x5a, 'macvlan0\x00', 'ipvlan0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x0, 0x0, 0x0, {@mac=@link_local, {[0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x3}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="ff00007cfa5359472e000000008a876400"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r6, &(0x7f0000000740), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 4.923377659s ago: executing program 0 (id=615): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000240)={{0x10, 0x71}, 0x1, 0x81, 0x9, {0x5, 0xe}, 0x9, 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) semtimedop(0x0, 0x0, 0x0, 0xfffffffffffffffd) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x1, 0x0, 0x7) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000001100)=0x8, 0x4) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xa) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 4.059446567s ago: executing program 2 (id=617): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@private2, r1}, 0x14) 3.067619793s ago: executing program 3 (id=618): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x4000004}], 0x1, 0x20008014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 3.034839161s ago: executing program 0 (id=619): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@remote, 0x24, r3}) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 2.986391695s ago: executing program 2 (id=620): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r1) sendmsg$kcm(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000004c0)="5e85ddc444bbe877c9caf70073f086dcb17bd899b136d44a285188fb4b756d063b6624d4814f4d7433859181ea04628f0d623163bc2ecbd4ea0af9eab1420851a8de8adc308e1ff8d497bf6f7ba8658e3f56ac405af5c25c6d5e14b29db5f96ab1a5d3adda66f3dcf612cb36c82f249c35203f3fbc05096ad31cdf8f15a913bef95b9c286e9cbfea645d42f86e87ae2af91141b92e82b9b45dcaec3ece10368da01c00c9a81fa8", 0xa7}, {&(0x7f0000000580)="0a93afaf07b49051765f1dcc5eac730f1a75fb98", 0x14}, {&(0x7f00000007c0)="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", 0xf05}], 0x3}, 0x4010) 2.985887469s ago: executing program 4 (id=621): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000890000/0x18000)=nil, &(0x7f00000008c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b0000"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5600db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a6914da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb1180300"}) 2.839666408s ago: executing program 1 (id=622): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2.689930405s ago: executing program 2 (id=623): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.671672399s ago: executing program 4 (id=624): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xa1cf846912a3acbb, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x80000}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) 2.652608603s ago: executing program 3 (id=625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x51, 0x51, 0xb, [@volatile={0x1, 0x0, 0x0, 0x9, 0x1}, @datasec={0xa, 0x0, 0x0, 0xf, 0x1, [], "9f"}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x1, 0x2}, @func={0x9, 0x0, 0x0, 0xc, 0x3}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, 0x5b, 0x3}, @fwd={0x1}]}, {0x0, [0x2e, 0x71, 0x0, 0x30, 0x0, 0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000000100)=""/144, 0x77, 0x90, 0x0, 0x8001, 0x0, @void, @value}, 0x28) unshare(0x28000600) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @host}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000005c0)={{0x2, 0x4, 0xc4, 0x1, 'syz0\x00'}, 0x2, 0x3, 0xd01, r1, 0x0, 0x1, 'syz0\x00', 0x0}) symlink(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 2.589892861s ago: executing program 1 (id=626): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x44e200, 0x90) mknodat(r0, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ptrace(0x10, 0x0) ptrace(0x10, 0x0) ptrace$setsig(0x4203, 0x0, 0x1000, &(0x7f00000002c0)={0x2d, 0xd5, 0x80}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, 0x0, 0x80000, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40008001}, 0x4000800) sched_setaffinity(0x0, 0x5, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.311374998s ago: executing program 2 (id=627): write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) close(0x3) 726.867708ms ago: executing program 4 (id=628): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x1ff, @loopback, 0xfffff001}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0xfffffffe, @loopback}, 0x1c) 218.265877ms ago: executing program 3 (id=629): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0x400000}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0xe2, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 217.251071ms ago: executing program 4 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 156.668937ms ago: executing program 1 (id=631): setrlimit(0x40000000000008, 0x0) 155.95058ms ago: executing program 4 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='./file0\x00', 0x84000002) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 30.991897ms ago: executing program 4 (id=633): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @TCA_RATE={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000000), &(0x7f00000000c0)=0xc) 11.91658ms ago: executing program 2 (id=634): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 999.414µs ago: executing program 1 (id=635): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xa284fb9bd5e6bb6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc6, 0x0, 0x8, 0x0, 0x0}}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, &(0x7f0000000000), 0x0}, 0x20) 0s ago: executing program 3 (id=636): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xfe}, 0x18, &(0x7f00000001c0)={&(0x7f0000000180)="0092fd6ec8", 0x5}, 0x1, 0x0, 0x0, 0x30048005}, 0x886) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 56.611159][ T5807] cgroup: Unknown subsys name 'net' [ 56.749958][ T5807] cgroup: Unknown subsys name 'cpuset' [ 56.757700][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.033624][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.234358][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.243439][ T5821] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.254061][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.262875][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.273125][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.281345][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.289062][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.289527][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.298435][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.309475][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.318421][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.319539][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.334194][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.342255][ T5829] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.347083][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.350101][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.372808][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.380167][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.388437][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.395500][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.395510][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.402651][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.419381][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.429222][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.437264][ T5835] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.444460][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.452275][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.461125][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.476693][ T5835] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.484137][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.831734][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 60.870770][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 60.947753][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 61.000013][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 61.082068][ T5861] modprobe (5861) used greatest stack depth: 17744 bytes left [ 61.110329][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.117653][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.125083][ T5825] bridge_slave_0: entered allmulticast mode [ 61.134335][ T5825] bridge_slave_0: entered promiscuous mode [ 61.157761][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.164935][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.174171][ T5818] bridge_slave_0: entered allmulticast mode [ 61.181448][ T5818] bridge_slave_0: entered promiscuous mode [ 61.188804][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.195856][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.203657][ T5818] bridge_slave_1: entered allmulticast mode [ 61.210284][ T5818] bridge_slave_1: entered promiscuous mode [ 61.233666][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.240934][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.248816][ T5825] bridge_slave_1: entered allmulticast mode [ 61.255375][ T5825] bridge_slave_1: entered promiscuous mode [ 61.271974][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.279177][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.286295][ T5822] bridge_slave_0: entered allmulticast mode [ 61.293121][ T5822] bridge_slave_0: entered promiscuous mode [ 61.300731][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 61.312033][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.342532][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.350553][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.358221][ T5822] bridge_slave_1: entered allmulticast mode [ 61.364798][ T5822] bridge_slave_1: entered promiscuous mode [ 61.377986][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.438857][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.457531][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.491580][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.511304][ T5818] team0: Port device team_slave_0 added [ 61.521821][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.531501][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.538927][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.546081][ T5824] bridge_slave_0: entered allmulticast mode [ 61.552914][ T5824] bridge_slave_0: entered promiscuous mode [ 61.560940][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.568183][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.575358][ T5824] bridge_slave_1: entered allmulticast mode [ 61.582732][ T5824] bridge_slave_1: entered promiscuous mode [ 61.614796][ T5822] team0: Port device team_slave_0 added [ 61.624186][ T5818] team0: Port device team_slave_1 added [ 61.673654][ T5822] team0: Port device team_slave_1 added [ 61.705094][ T5825] team0: Port device team_slave_0 added [ 61.713195][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.725401][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.754543][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.761782][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.789464][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.803455][ T5825] team0: Port device team_slave_1 added [ 61.833804][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.840854][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.867098][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.890735][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.897763][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.923968][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.963643][ T5824] team0: Port device team_slave_0 added [ 61.976348][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.983506][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.009809][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.047100][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.054147][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.080612][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.093229][ T5824] team0: Port device team_slave_1 added [ 62.105816][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.113051][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.120332][ T5823] bridge_slave_0: entered allmulticast mode [ 62.127122][ T5823] bridge_slave_0: entered promiscuous mode [ 62.145710][ T5822] hsr_slave_0: entered promiscuous mode [ 62.152204][ T5822] hsr_slave_1: entered promiscuous mode [ 62.159889][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.166904][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.193148][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.213699][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.220955][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.228196][ T5823] bridge_slave_1: entered allmulticast mode [ 62.234768][ T5823] bridge_slave_1: entered promiscuous mode [ 62.254245][ T5818] hsr_slave_0: entered promiscuous mode [ 62.260746][ T5818] hsr_slave_1: entered promiscuous mode [ 62.268505][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.276328][ T5818] Cannot create hsr debugfs directory [ 62.296867][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.303865][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.330065][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.393371][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.400720][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.427998][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.440838][ T5833] Bluetooth: hci4: command tx timeout [ 62.447515][ T5835] Bluetooth: hci0: command tx timeout [ 62.457613][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.492035][ T5824] hsr_slave_0: entered promiscuous mode [ 62.497539][ T5835] Bluetooth: hci3: command tx timeout [ 62.497888][ T5833] Bluetooth: hci1: command tx timeout [ 62.510259][ T5824] hsr_slave_1: entered promiscuous mode [ 62.516339][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.524269][ T5824] Cannot create hsr debugfs directory [ 62.531292][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.572356][ T5825] hsr_slave_0: entered promiscuous mode [ 62.579784][ T5825] hsr_slave_1: entered promiscuous mode [ 62.585830][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.586580][ T5833] Bluetooth: hci2: command tx timeout [ 62.593532][ T5825] Cannot create hsr debugfs directory [ 62.632234][ T5823] team0: Port device team_slave_0 added [ 62.655823][ T5823] team0: Port device team_slave_1 added [ 62.731963][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.739784][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.766155][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.802882][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.810037][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.837050][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.914898][ T5823] hsr_slave_0: entered promiscuous mode [ 62.921586][ T5823] hsr_slave_1: entered promiscuous mode [ 62.928126][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.935697][ T5823] Cannot create hsr debugfs directory [ 63.045317][ T5822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.058494][ T5822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.093876][ T5822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.121353][ T5822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.167909][ T5818] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.177346][ T5818] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.206991][ T5818] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.232441][ T5818] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.269695][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.290979][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.301339][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.333403][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.383555][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.411430][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.441483][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.455384][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.512358][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.537854][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.544704][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.554278][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.570434][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.629890][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.653829][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.663345][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.692005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.699440][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.714966][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.731760][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.738936][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.763668][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.770827][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.793611][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.800782][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.815603][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.832043][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.850279][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.857475][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.905616][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.912801][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.978630][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.051211][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.058389][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.073220][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.090419][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.104709][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.111894][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.140696][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.192075][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.199279][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.243216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.250437][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.305440][ T5824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.322742][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.364652][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.425275][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.454772][ T5823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.471435][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.497382][ T5833] Bluetooth: hci0: command tx timeout [ 64.497451][ T5835] Bluetooth: hci4: command tx timeout [ 64.571793][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.577392][ T5835] Bluetooth: hci3: command tx timeout [ 64.580121][ T5833] Bluetooth: hci1: command tx timeout [ 64.659103][ T5833] Bluetooth: hci2: command tx timeout [ 64.711278][ T5818] veth0_vlan: entered promiscuous mode [ 64.727771][ T5825] veth0_vlan: entered promiscuous mode [ 64.764887][ T5818] veth1_vlan: entered promiscuous mode [ 64.805225][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.828887][ T5825] veth1_vlan: entered promiscuous mode [ 64.891660][ T5818] veth0_macvtap: entered promiscuous mode [ 64.900595][ T5824] veth0_vlan: entered promiscuous mode [ 64.908188][ T5818] veth1_macvtap: entered promiscuous mode [ 64.935576][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.946360][ T5825] veth0_macvtap: entered promiscuous mode [ 64.954764][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.989402][ T5825] veth1_macvtap: entered promiscuous mode [ 65.003029][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.017396][ T5824] veth1_vlan: entered promiscuous mode [ 65.040701][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.049849][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.060662][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.070102][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.097306][ T5822] veth0_vlan: entered promiscuous mode [ 65.129905][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.141740][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.157314][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.188961][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.200083][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.211683][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.233888][ T5823] veth0_vlan: entered promiscuous mode [ 65.253687][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.263770][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.272853][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.281592][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.294335][ T5824] veth0_macvtap: entered promiscuous mode [ 65.304154][ T5822] veth1_vlan: entered promiscuous mode [ 65.322871][ T5824] veth1_macvtap: entered promiscuous mode [ 65.337278][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.345547][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.345922][ T5823] veth1_vlan: entered promiscuous mode [ 65.392358][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.405525][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.416154][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.427533][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.439656][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.463075][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.477264][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.486186][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.501074][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.513381][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.529757][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.542200][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.553296][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.562811][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.571909][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.581010][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642563][ T5822] veth0_macvtap: entered promiscuous mode [ 65.667768][ T5823] veth0_macvtap: entered promiscuous mode [ 65.679107][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.696211][ T5823] veth1_macvtap: entered promiscuous mode [ 65.711575][ T5822] veth1_macvtap: entered promiscuous mode [ 65.745956][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.769711][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.838070][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.853159][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.866624][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.877493][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.887714][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.899138][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.910785][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.951015][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.959392][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.974304][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.982646][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.997645][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.011414][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.036089][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.047862][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.065223][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.077282][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.094890][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.120200][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.132929][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.143472][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.154291][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.164410][ T5823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.180190][ T5823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.191644][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.229387][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.239859][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.249178][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.259053][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.310886][ T1333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.318851][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.329467][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.340552][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.345210][ T1333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.351584][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.368959][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.379719][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.389737][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.400416][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.411816][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.460647][ T5822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.502199][ T5822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.523198][ T5822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.545023][ T5822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.578391][ T5833] Bluetooth: hci4: command tx timeout [ 66.578406][ T5835] Bluetooth: hci0: command tx timeout [ 66.615568][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.644065][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.660879][ T5835] Bluetooth: hci3: command tx timeout [ 66.660936][ T5833] Bluetooth: hci1: command tx timeout [ 66.683343][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.685685][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 66.696740][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.737135][ T5833] Bluetooth: hci2: command tx timeout [ 66.804221][ T5915] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 66.814661][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.835295][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.934296][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.934321][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.955925][ T5918] xt_hashlimit: max too large, truncated to 1048576 [ 66.959379][ T5918] Cannot find set identified by id 0 to match [ 67.092890][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.108177][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.234779][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.270698][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.310126][ T29] audit: type=1326 audit(1733260557.040:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 67.331265][ C1] vkms_vblank_simulate: vblank timer overrun [ 67.390391][ T29] audit: type=1326 audit(1733260557.040:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 67.497527][ T29] audit: type=1326 audit(1733260557.090:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 67.572126][ T29] audit: type=1326 audit(1733260557.090:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 67.672264][ T29] audit: type=1326 audit(1733260557.090:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 67.875872][ T29] audit: type=1326 audit(1733260557.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 68.161803][ T29] audit: type=1326 audit(1733260557.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 68.183011][ C1] vkms_vblank_simulate: vblank timer overrun [ 68.722789][ T29] audit: type=1326 audit(1733260557.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 68.820384][ T29] audit: type=1326 audit(1733260557.160:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 68.886454][ T29] audit: type=1326 audit(1733260557.160:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5924 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c6b7ff19 code=0x7ffc0000 [ 68.997114][ T5835] Bluetooth: hci0: command tx timeout [ 69.003112][ T5828] Bluetooth: hci3: command tx timeout [ 69.016577][ T54] Bluetooth: hci1: command tx timeout [ 69.016857][ T5828] Bluetooth: hci2: command tx timeout [ 69.183263][ T5833] Bluetooth: hci4: command tx timeout [ 69.622994][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20'. [ 69.854449][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 70.830161][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 71.332034][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 71.846045][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.855237][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.346863][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 72.346882][ T29] audit: type=1326 audit(1733260562.060:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.411336][ T29] audit: type=1326 audit(1733260562.060:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.499492][ T29] audit: type=1326 audit(1733260562.170:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.625424][ T29] audit: type=1326 audit(1733260562.170:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.704066][ T29] audit: type=1326 audit(1733260562.170:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.786579][ T6022] wireguard0: entered promiscuous mode [ 72.797693][ T29] audit: type=1326 audit(1733260562.170:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.808579][ T6022] wireguard0: entered allmulticast mode [ 72.819341][ T29] audit: type=1326 audit(1733260562.170:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6004 comm="syz.1.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 72.819389][ T29] audit: type=1326 audit(1733260562.260:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6013 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1597ff19 code=0x7ffc0000 [ 72.819421][ T29] audit: type=1326 audit(1733260562.260:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6013 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fab1597ff19 code=0x7ffc0000 [ 72.819451][ T29] audit: type=1326 audit(1733260562.260:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6013 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1597ff19 code=0x7ffc0000 [ 76.305090][ T6091] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.567034][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 77.567053][ T29] audit: type=1326 audit(1733260567.300:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6108 comm="syz.0.78" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f687c57ff19 code=0x0 [ 78.134977][ T6131] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 79.702060][ T6159] netlink: 44 bytes leftover after parsing attributes in process `syz.0.100'. [ 79.871187][ T6163] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.356331][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.110'. [ 80.771222][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 81.129828][ T6193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 81.447599][ T6203] bridge_slave_0: left allmulticast mode [ 81.492755][ T6203] bridge_slave_0: left promiscuous mode [ 81.502038][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.521168][ T6203] bridge_slave_1: left allmulticast mode [ 81.528115][ T6203] bridge_slave_1: left promiscuous mode [ 81.534115][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.546845][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 81.561027][ T6203] bond0: (slave bond_slave_0): Releasing backup interface [ 81.573514][ T6203] bond0: (slave bond_slave_1): Releasing backup interface [ 81.653377][ T6203] team0: Port device team_slave_0 removed [ 81.679951][ T6203] team0: Port device team_slave_1 removed [ 81.697594][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.732984][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.767196][ T6203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.807684][ T6203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.808257][ T29] audit: type=1326 audit(1733260571.530:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 81.837011][ T29] audit: type=1326 audit(1733260571.530:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 81.862010][ T29] audit: type=1326 audit(1733260571.590:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 81.884376][ T29] audit: type=1326 audit(1733260571.590:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 81.921115][ T6207] vlan2: entered promiscuous mode [ 81.926194][ T6207] gretap0: entered promiscuous mode [ 81.966783][ T46] cfg80211: failed to load regulatory.db [ 82.006053][ T6207] gretap0: left promiscuous mode [ 82.020580][ T29] audit: type=1326 audit(1733260571.590:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6213 comm="syz.0.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 83.474319][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 83.727972][ T6251] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.328000][ T29] audit: type=1326 audit(1733260575.060:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.361490][ T29] audit: type=1326 audit(1733260575.060:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.435848][ T29] audit: type=1326 audit(1733260575.060:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.458203][ T29] audit: type=1326 audit(1733260575.060:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.480798][ T29] audit: type=1326 audit(1733260575.060:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.503178][ T29] audit: type=1326 audit(1733260575.060:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.648904][ T29] audit: type=1326 audit(1733260575.060:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.681934][ T29] audit: type=1326 audit(1733260575.060:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 85.706042][ T29] audit: type=1326 audit(1733260575.060:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 86.253801][ T29] audit: type=1326 audit(1733260575.070:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6284 comm="syz.4.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 88.654845][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 89.818566][ T6372] syz.2.192: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 89.834782][ T6372] CPU: 0 UID: 0 PID: 6372 Comm: syz.2.192 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 89.845421][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 89.855534][ T6372] Call Trace: [ 89.858846][ T6372] [ 89.861816][ T6372] dump_stack_lvl+0x241/0x360 [ 89.866550][ T6372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.871785][ T6372] ? __pfx__printk+0x10/0x10 [ 89.876401][ T6372] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 89.882866][ T6372] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 89.889421][ T6372] warn_alloc+0x278/0x410 [ 89.893764][ T6372] ? stack_depot_save_flags+0x6e4/0x830 [ 89.899347][ T6372] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 89.905423][ T6372] ? __pfx_warn_alloc+0x10/0x10 [ 89.910321][ T6372] ? kasan_save_track+0x3f/0x80 [ 89.915171][ T6372] ? __kasan_kmalloc+0x98/0xb0 [ 89.919939][ T6372] ? xsk_setsockopt+0x598/0x950 [ 89.924785][ T6372] ? do_sock_setsockopt+0x3af/0x720 [ 89.929978][ T6372] ? __x64_sys_setsockopt+0x1ee/0x280 [ 89.935358][ T6372] ? do_syscall_64+0xf3/0x230 [ 89.940040][ T6372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.946200][ T6372] __vmalloc_node_range_noprof+0x126/0x1380 [ 89.952117][ T6372] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 89.958469][ T6372] ? __kasan_kmalloc+0x98/0xb0 [ 89.963246][ T6372] vmalloc_user_noprof+0x74/0x80 [ 89.968185][ T6372] ? xskq_create+0xb6/0x170 [ 89.972718][ T6372] xskq_create+0xb6/0x170 [ 89.977076][ T6372] xsk_init_queue+0xa1/0x100 [ 89.981681][ T6372] xsk_setsockopt+0x598/0x950 [ 89.986364][ T6372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 89.991569][ T6372] ? __pfx_lock_acquire+0x10/0x10 [ 89.996593][ T6372] ? __fget_files+0x2a/0x410 [ 90.001275][ T6372] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.006480][ T6372] do_sock_setsockopt+0x3af/0x720 [ 90.011522][ T6372] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.017087][ T6372] ? __fget_files+0x395/0x410 [ 90.021781][ T6372] ? __fget_files+0x2a/0x410 [ 90.026392][ T6372] __x64_sys_setsockopt+0x1ee/0x280 [ 90.031613][ T6372] do_syscall_64+0xf3/0x230 [ 90.036119][ T6372] ? clear_bhb_loop+0x35/0x90 [ 90.040798][ T6372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.046693][ T6372] RIP: 0033:0x7fd8c6b7ff19 [ 90.051124][ T6372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.070733][ T6372] RSP: 002b:00007fd8c79ac058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.079148][ T6372] RAX: ffffffffffffffda RBX: 00007fd8c6d45fa0 RCX: 00007fd8c6b7ff19 [ 90.087119][ T6372] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 90.095092][ T6372] RBP: 00007fd8c6bf3986 R08: 0000000000000020 R09: 0000000000000000 [ 90.103061][ T6372] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 90.111037][ T6372] R13: 0000000000000000 R14: 00007fd8c6d45fa0 R15: 00007ffef77deee8 [ 90.119028][ T6372] [ 90.122501][ T6372] Mem-Info: [ 90.126800][ T6372] active_anon:341 inactive_anon:3139 isolated_anon:0 [ 90.126800][ T6372] active_file:4297 inactive_file:35303 isolated_file:0 [ 90.126800][ T6372] unevictable:768 dirty:236 writeback:0 [ 90.126800][ T6372] slab_reclaimable:9713 slab_unreclaimable:97836 [ 90.126800][ T6372] mapped:28548 shmem:1428 pagetables:676 [ 90.126800][ T6372] sec_pagetables:0 bounce:0 [ 90.126800][ T6372] kernel_misc_reclaimable:0 [ 90.126800][ T6372] free:1343054 free_pcp:4304 free_cma:0 [ 90.172736][ T6372] Node 0 active_anon:1364kB inactive_anon:12656kB active_file:17116kB inactive_file:141212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114292kB dirty:944kB writeback:0kB shmem:4176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:2704kB sec_pagetables:0kB all_unreclaimable? no [ 90.206324][ T6372] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 90.238310][ T6372] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.265756][ T6372] lowmem_reserve[]: 0 2465 2466 0 0 [ 90.272783][ T6372] Node 0 DMA32 free:1466868kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1360kB inactive_anon:12620kB active_file:16328kB inactive_file:141160kB unevictable:1536kB writepending:944kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:1620kB local_pcp:1060kB free_cma:0kB [ 90.303912][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 90.309596][ T6372] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.337275][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 90.342426][ T6372] Node 1 Normal free:3905040kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 90.371480][ T6372] lowmem_reserve[]: 0 0 0 0 0 [ 90.376657][ T6372] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 90.389792][ T6372] Node 0 DMA32: 41*4kB (M) 282*8kB (UME) 446*16kB (UME) 249*32kB (UME) 177*64kB (UME) 99*128kB (UME) 63*256kB (UME) 23*512kB (UME) 19*1024kB (UME) 13*2048kB (UME) 330*4096kB (UM) = 1467188kB [ 90.409411][ T6372] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 90.432105][ T6372] Node 1 Normal: 200*4kB (UME) 50*8kB (UME) 40*16kB (UME) 209*32kB (UME) 91*64kB (UME) 34*128kB (UME) 15*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 946*4096kB (ME) = 3905040kB [ 90.450743][ T6372] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.460512][ T6372] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.470037][ T6372] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 90.479865][ T6372] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 90.489429][ T6372] 41028 total pagecache pages [ 90.494236][ T6372] 0 pages in swap cache [ 90.498562][ T6372] Free swap = 124996kB [ 90.502874][ T6372] Total swap = 124996kB [ 90.507175][ T6372] 2097051 pages RAM [ 90.511525][ T6372] 0 pages HighMem/MovableOnly [ 90.516800][ T6372] 426991 pages reserved [ 90.520990][ T6372] 0 pages cma reserved [ 90.605343][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 90.605360][ T29] audit: type=1326 audit(1733260580.330:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 90.710508][ T29] audit: type=1326 audit(1733260580.330:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 90.753867][ T6373] bridge0: entered allmulticast mode [ 90.794863][ T29] audit: type=1326 audit(1733260580.370:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 90.860545][ T29] audit: type=1326 audit(1733260580.370:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 90.934998][ T29] audit: type=1326 audit(1733260580.370:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 91.011727][ T6381] infiniband syz0: set down [ 91.016665][ T29] audit: type=1326 audit(1733260580.380:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 91.017261][ T6399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.201'. [ 91.044741][ T6381] infiniband syz0: added bond0 [ 91.076694][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.201'. [ 91.088788][ T29] audit: type=1326 audit(1733260580.380:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 91.117674][ T29] audit: type=1326 audit(1733260580.380:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 91.140466][ T6381] RDS/IB: syz0: added [ 91.145324][ T6381] smc: adding ib device syz0 with port count 1 [ 91.146990][ T29] audit: type=1326 audit(1733260580.380:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 91.166388][ T6381] smc: ib device syz0 port 1 has pnetid [ 91.179419][ T29] audit: type=1326 audit(1733260580.380:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6382 comm="syz.0.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 92.689452][ T6427] netlink: 56 bytes leftover after parsing attributes in process `syz.2.213'. [ 92.716516][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 95.703189][ T6489] syz.1.239[6489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.703283][ T6489] syz.1.239[6489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.745181][ T6489] syz.1.239[6489] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.827462][ T6498] ip6t_rpfilter: unknown options [ 95.987220][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 95.987238][ T29] audit: type=1326 audit(1733260585.720:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6499 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 96.081895][ T29] audit: type=1326 audit(1733260585.740:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6499 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 96.163096][ T29] audit: type=1326 audit(1733260585.740:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6499 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 96.220949][ T29] audit: type=1326 audit(1733260585.740:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6499 comm="syz.1.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 96.476996][ T6496] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.092866][ T29] audit: type=1326 audit(1733260587.820:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6527 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 98.156524][ T29] audit: type=1326 audit(1733260587.820:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6527 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 98.184256][ T29] audit: type=1326 audit(1733260587.860:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6527 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 98.214340][ T29] audit: type=1326 audit(1733260587.870:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6527 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 98.251466][ T29] audit: type=1326 audit(1733260587.870:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6527 comm="syz.1.256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 98.282978][ T29] audit: type=1326 audit(1733260587.870:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6531 comm="syz.0.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 100.191986][ T6496] warn_alloc: 2 callbacks suppressed [ 100.192007][ T6496] syz.2.240: vmalloc error: size 536875008, failed to allocated page array size 1048584, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 100.247687][ T6496] CPU: 1 UID: 0 PID: 6496 Comm: syz.2.240 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 100.258325][ T6496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.268418][ T6496] Call Trace: [ 100.271716][ T6496] [ 100.274671][ T6496] dump_stack_lvl+0x241/0x360 [ 100.279386][ T6496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.284628][ T6496] ? __pfx__printk+0x10/0x10 [ 100.289258][ T6496] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 100.295717][ T6496] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 100.302268][ T6496] warn_alloc+0x278/0x410 [ 100.306658][ T6496] ? __pfx_warn_alloc+0x10/0x10 [ 100.311562][ T6496] ? hash_ipport_create+0x801/0x1670 [ 100.316879][ T6496] ? __get_vm_area_node+0x1c8/0x2d0 [ 100.322092][ T6496] ? __get_vm_area_node+0x25c/0x2d0 [ 100.327299][ T6496] __vmalloc_node_range_noprof+0x62f/0x1380 [ 100.333197][ T6496] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 100.338939][ T6496] ? rcu_is_watching+0x15/0xb0 [ 100.343715][ T6496] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 100.350080][ T6496] ? rcu_is_watching+0x15/0xb0 [ 100.354852][ T6496] ? trace_kmalloc+0x1f/0xd0 [ 100.359479][ T6496] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 100.364945][ T6496] ? __kvmalloc_node_noprof+0x72/0x190 [ 100.370409][ T6496] __kvmalloc_node_noprof+0x142/0x190 [ 100.375821][ T6496] ? hash_ipport_create+0x801/0x1670 [ 100.381110][ T6496] hash_ipport_create+0x801/0x1670 [ 100.386244][ T6496] ? __pfx_lock_acquire+0x10/0x10 [ 100.391305][ T6496] ? __pfx_hash_ipport_create+0x10/0x10 [ 100.396873][ T6496] ? __nla_parse+0x40/0x60 [ 100.401296][ T6496] ? __pfx_hash_ipport_create+0x10/0x10 [ 100.406853][ T6496] ip_set_create+0xa5c/0x1900 [ 100.411533][ T6496] ? ip_set_create+0x45e/0x1900 [ 100.416395][ T6496] ? __pfx_ip_set_create+0x10/0x10 [ 100.421529][ T6496] ? nfnetlink_rcv_msg+0x225/0x1180 [ 100.426734][ T6496] nfnetlink_rcv_msg+0xbec/0x1180 [ 100.431759][ T6496] ? nfnetlink_rcv_msg+0x225/0x1180 [ 100.436973][ T6496] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.442429][ T6496] ? stack_trace_save+0x118/0x1d0 [ 100.447488][ T6496] ? dev_hard_start_xmit+0x27a/0x7d0 [ 100.452777][ T6496] ? __dev_queue_xmit+0x1b73/0x3f50 [ 100.458008][ T6496] ? __netlink_deliver_tap+0x56b/0x7f0 [ 100.463467][ T6496] ? netlink_deliver_tap+0x19d/0x1b0 [ 100.468750][ T6496] ? netlink_unicast+0x7c4/0x990 [ 100.473687][ T6496] ? netlink_sendmsg+0x8e4/0xcb0 [ 100.478640][ T6496] ? __sock_sendmsg+0x221/0x270 [ 100.483512][ T6496] ? ____sys_sendmsg+0x52a/0x7e0 [ 100.488471][ T6496] ? __sys_sendmsg+0x269/0x350 [ 100.493246][ T6496] netlink_rcv_skb+0x1e3/0x430 [ 100.498009][ T6496] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.503474][ T6496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.508773][ T6496] ? cap_capable+0x1b4/0x250 [ 100.513368][ T6496] ? safesetid_security_capable+0xb2/0x1d0 [ 100.519187][ T6496] ? bpf_lsm_capable+0x9/0x10 [ 100.523860][ T6496] ? security_capable+0x7e/0x2d0 [ 100.528810][ T6496] nfnetlink_rcv+0x297/0x2ab0 [ 100.533490][ T6496] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 100.539388][ T6496] ? __dev_queue_xmit+0x2f4/0x3f50 [ 100.544498][ T6496] ? __dev_queue_xmit+0x1775/0x3f50 [ 100.549724][ T6496] ? kasan_save_track+0x51/0x80 [ 100.554586][ T6496] ? ____sys_sendmsg+0x52a/0x7e0 [ 100.559527][ T6496] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 100.564643][ T6496] ? __dev_queue_xmit+0x2f4/0x3f50 [ 100.569758][ T6496] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.575136][ T6496] ? ref_tracker_free+0x643/0x7e0 [ 100.580158][ T6496] ? __asan_memcpy+0x40/0x70 [ 100.584756][ T6496] ? __pfx_ref_tracker_free+0x10/0x10 [ 100.590132][ T6496] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.595322][ T6496] ? skb_clone+0x240/0x390 [ 100.599764][ T6496] ? __pfx_lock_release+0x10/0x10 [ 100.604791][ T6496] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 100.610253][ T6496] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.615453][ T6496] netlink_unicast+0x7f6/0x990 [ 100.620226][ T6496] ? __pfx_netlink_unicast+0x10/0x10 [ 100.625508][ T6496] ? __virt_addr_valid+0x183/0x530 [ 100.630623][ T6496] ? __check_object_size+0x48e/0x900 [ 100.635909][ T6496] netlink_sendmsg+0x8e4/0xcb0 [ 100.640675][ T6496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.645967][ T6496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.651259][ T6496] __sock_sendmsg+0x221/0x270 [ 100.655948][ T6496] ____sys_sendmsg+0x52a/0x7e0 [ 100.660745][ T6496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.666034][ T6496] ? __fget_files+0x2a/0x410 [ 100.670722][ T6496] ? __fget_files+0x2a/0x410 [ 100.675316][ T6496] __sys_sendmsg+0x269/0x350 [ 100.679913][ T6496] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.685017][ T6496] ? kmem_cache_free+0x195/0x410 [ 100.689983][ T6496] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.696306][ T6496] ? do_syscall_64+0x100/0x230 [ 100.701070][ T6496] ? do_syscall_64+0xb6/0x230 [ 100.705746][ T6496] do_syscall_64+0xf3/0x230 [ 100.710338][ T6496] ? clear_bhb_loop+0x35/0x90 [ 100.715026][ T6496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.720918][ T6496] RIP: 0033:0x7fd8c6b7ff19 [ 100.725331][ T6496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.744951][ T6496] RSP: 002b:00007fd8c79ac058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.753366][ T6496] RAX: ffffffffffffffda RBX: 00007fd8c6d45fa0 RCX: 00007fd8c6b7ff19 [ 100.761339][ T6496] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000005 [ 100.769319][ T6496] RBP: 00007fd8c6bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 100.777301][ T6496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.785363][ T6496] R13: 0000000000000000 R14: 00007fd8c6d45fa0 R15: 00007ffef77deee8 [ 100.793605][ T6496] [ 100.807223][ T6496] Mem-Info: [ 100.810406][ T6496] active_anon:1365 inactive_anon:21403 isolated_anon:0 [ 100.810406][ T6496] active_file:9602 inactive_file:39947 isolated_file:0 [ 100.810406][ T6496] unevictable:768 dirty:199 writeback:0 [ 100.810406][ T6496] slab_reclaimable:9987 slab_unreclaimable:99321 [ 100.810406][ T6496] mapped:33291 shmem:20652 pagetables:709 [ 100.810406][ T6496] sec_pagetables:0 bounce:0 [ 100.810406][ T6496] kernel_misc_reclaimable:0 [ 100.810406][ T6496] free:1282124 free_pcp:1238 free_cma:0 [ 100.865181][ T6496] Node 0 active_anon:5460kB inactive_anon:83712kB active_file:38336kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133164kB dirty:796kB writeback:0kB shmem:79172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10912kB pagetables:2836kB sec_pagetables:0kB all_unreclaimable? no [ 100.901544][ T6496] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 100.968386][ T6496] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.009820][ T6496] lowmem_reserve[]: 0 2465 2466 0 0 [ 101.015587][ T6496] Node 0 DMA32 free:1211264kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:5456kB inactive_anon:73976kB active_file:37548kB inactive_file:159736kB unevictable:1536kB writepending:796kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:13424kB local_pcp:764kB free_cma:0kB [ 101.100851][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 101.115976][ T6496] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:788kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.179017][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 101.183829][ T6496] Node 1 Normal free:3905112kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.280080][ T6496] lowmem_reserve[]: 0 0 0 0 0 [ 101.284882][ T6496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.321548][ T6496] Node 0 DMA32: 160*4kB (UME) 278*8kB (UME) 160*16kB (UME) 204*32kB (UME) 179*64kB (UME) 50*128kB (UM) 32*256kB (UME) 7*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 287*4096kB (M) = 1224304kB [ 101.374533][ T6496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 101.411856][ T6496] Node 1 Normal: 208*4kB (UME) 51*8kB (UME) 40*16kB (UME) 208*32kB (UME) 92*64kB (UME) 34*128kB (UME) 15*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 946*4096kB (ME) = 3905112kB [ 101.461242][ T6496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.496091][ T6496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.510144][ T6496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 101.524784][ T6496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 101.536753][ T6496] 60991 total pagecache pages [ 101.541593][ T6496] 0 pages in swap cache [ 101.586190][ T6496] Free swap = 124996kB [ 101.599539][ T6496] Total swap = 124996kB [ 101.611746][ T6496] 2097051 pages RAM [ 101.625519][ T6496] 0 pages HighMem/MovableOnly [ 101.641191][ T6496] 426991 pages reserved [ 101.652383][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 101.661647][ T6496] 0 pages cma reserved [ 101.679563][ T6572] bridge_slave_1: left allmulticast mode [ 101.695214][ T6572] bridge_slave_1: left promiscuous mode [ 101.721158][ T6572] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.759496][ T6572] bridge_slave_0: left allmulticast mode [ 101.779954][ T6572] bridge_slave_0: left promiscuous mode [ 101.798288][ T6572] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.661251][ T6590] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.695523][ T6590] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 103.747042][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 103.747060][ T29] audit: type=1326 audit(1733260593.480:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 103.796501][ T29] audit: type=1326 audit(1733260593.480:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 103.818252][ T29] audit: type=1326 audit(1733260593.490:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 103.840699][ T29] audit: type=1326 audit(1733260593.490:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 103.893129][ T29] audit: type=1326 audit(1733260593.490:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6608 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 104.129073][ T29] audit: type=1326 audit(1733260593.860:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 104.204707][ T29] audit: type=1326 audit(1733260593.890:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 104.226792][ T29] audit: type=1326 audit(1733260593.890:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 104.256768][ T29] audit: type=1326 audit(1733260593.890:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 104.308016][ T29] audit: type=1326 audit(1733260593.890:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6616 comm="syz.4.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 105.766660][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.775430][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 105.815317][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 105.895749][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 106.017083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.892040][ T6670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.922740][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 108.090864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.091023][ T25] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.138379][ T6670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.154271][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.238365][ T25] usb 3-1: config 0 descriptor?? [ 108.285153][ T25] cp210x 3-1:0.0: cp210x converter detected [ 108.626647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.634986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.635592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.643746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.666941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.675264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.841402][ T25] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 108.956981][ T6670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.105968][ T6670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.184743][ T25] usb 3-1: cp210x converter now attached to ttyUSB0 [ 109.313487][ T6670] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.368544][ T6670] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.434668][ T6670] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.463764][ T9] usb 3-1: USB disconnect, device number 2 [ 109.479821][ T6670] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.516098][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 109.598333][ T9] cp210x 3-1:0.0: device disconnected [ 109.873497][ T6700] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.084100][ T6726] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.116496][ T6731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 111.529078][ T6731] bridge_slave_1: left allmulticast mode [ 111.535175][ T6731] bridge_slave_1: left promiscuous mode [ 111.543712][ T6731] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.734436][ T6731] bridge_slave_0: left allmulticast mode [ 111.740326][ T6731] bridge_slave_0: left promiscuous mode [ 111.759377][ T6731] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.329839][ T6778] No such timeout policy "syz0" [ 114.405802][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.351'. [ 114.837147][ T6798] capability: warning: `syz.2.358' uses deprecated v2 capabilities in a way that may be insecure [ 115.125955][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.363'. [ 115.687758][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.886648][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 115.993930][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.086141][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 116.099366][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 116.108545][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.132719][ T8] usb 3-1: config 0 descriptor?? [ 116.143445][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 116.230770][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.369'. [ 116.601471][ T6835] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.131791][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.387'. [ 118.237641][ T5872] usb 3-1: USB disconnect, device number 3 [ 119.039473][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 119.039519][ T29] audit: type=1326 audit(1733260608.740:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6899 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 119.069150][ T29] audit: type=1326 audit(1733260608.740:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6899 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 119.094566][ T29] audit: type=1326 audit(1733260608.740:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6899 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 119.116638][ T29] audit: type=1326 audit(1733260608.740:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6899 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.161318][ T29] audit: type=1326 audit(1733260610.890:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.206283][ T29] audit: type=1326 audit(1733260610.920:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.256222][ T29] audit: type=1326 audit(1733260610.920:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.333426][ T29] audit: type=1326 audit(1733260610.920:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.399059][ T29] audit: type=1326 audit(1733260610.920:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.448785][ T29] audit: type=1326 audit(1733260610.920:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6939 comm="syz.4.418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 121.865638][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 122.211541][ T5919] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 122.222049][ T5919] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 122.433057][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 122.556591][ T5872] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 122.580493][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 122.757063][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.775882][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.785961][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.799234][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.808664][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.828531][ T5872] usb 5-1: config 0 descriptor?? [ 122.931497][ T6987] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.524253][ T5872] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 123.534490][ T5872] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 123.561981][ T5872] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 123.738453][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 123.756625][ T7000] netlink: 56 bytes leftover after parsing attributes in process `syz.1.442'. [ 123.821919][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 125.493932][ T5870] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 125.548029][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 125.548048][ T29] audit: type=1326 audit(1733260615.270:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.613350][ T29] audit: type=1326 audit(1733260615.320:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.641072][ T29] audit: type=1326 audit(1733260615.320:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.664100][ T29] audit: type=1326 audit(1733260615.320:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.685910][ T29] audit: type=1326 audit(1733260615.320:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.726442][ T29] audit: type=1326 audit(1733260615.320:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.741648][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 125.755075][ T29] audit: type=1326 audit(1733260615.320:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.769509][ T7033] bridge_slave_1: left allmulticast mode [ 125.778593][ T29] audit: type=1326 audit(1733260615.320:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.791601][ T7033] bridge_slave_1: left promiscuous mode [ 125.805913][ T29] audit: type=1326 audit(1733260615.320:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.805952][ T29] audit: type=1326 audit(1733260615.320:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.0.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 125.850512][ T7035] netlink: 56 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.865467][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.456'. [ 125.871472][ T7033] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.883629][ T7033] bridge_slave_0: left allmulticast mode [ 125.889725][ T7033] bridge_slave_0: left promiscuous mode [ 125.895468][ T7033] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.919940][ T7033] bridge0 (unregistering): left allmulticast mode [ 126.338324][ T46] usb 5-1: USB disconnect, device number 2 [ 127.397430][ T7071] netlink: 56 bytes leftover after parsing attributes in process `syz.4.471'. [ 127.432399][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'. [ 127.475224][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.472'. [ 127.491122][ T7067] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 128.066544][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.231220][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.328614][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.411565][ T5870] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.533694][ T5870] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.618518][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.758706][ T5870] usb 5-1: config 0 descriptor?? [ 130.276806][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 130.286872][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 130.296274][ T5828] Bluetooth: hci4: hardware error 0x00 [ 130.406109][ T5870] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 130.419588][ T5870] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 132.364120][ T5157] usb 5-1: USB disconnect, device number 3 [ 132.422752][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 132.576240][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 132.576258][ T29] audit: type=1326 audit(1733260622.300:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 132.656599][ T29] audit: type=1326 audit(1733260622.300:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 132.696578][ T29] audit: type=1326 audit(1733260622.320:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 132.766669][ T29] audit: type=1326 audit(1733260622.320:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 132.946743][ T29] audit: type=1326 audit(1733260622.320:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.007364][ T29] audit: type=1326 audit(1733260622.320:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.031835][ T29] audit: type=1326 audit(1733260622.320:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.053456][ T29] audit: type=1326 audit(1733260622.320:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.135470][ T29] audit: type=1326 audit(1733260622.320:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.142130][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164825][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.203528][ T29] audit: type=1326 audit(1733260622.320:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7127 comm="syz.4.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00f4d7ff19 code=0x7ffc0000 [ 133.465465][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 135.484047][ T5828] Bluetooth: hci2: command 0x0405 tx timeout [ 136.131303][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'. [ 136.302820][ T5872] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.348191][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 136.606794][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 136.628017][ T5872] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 136.636958][ T5872] usb 5-1: config 0 has no interface number 0 [ 136.694470][ T5872] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 136.731875][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.765964][ T5872] usb 5-1: Product: syz [ 136.772426][ T5872] usb 5-1: Manufacturer: syz [ 136.792707][ T5872] usb 5-1: SerialNumber: syz [ 136.808683][ T5872] usb 5-1: config 0 descriptor?? [ 137.090606][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.120925][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.159841][ T5870] usb 5-1: USB disconnect, device number 4 [ 137.477295][ T5872] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 137.492335][ T5872] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 137.701009][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 137.701027][ T29] audit: type=1326 audit(1733260627.430:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 138.004603][ T29] audit: type=1326 audit(1733260627.430:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 138.951782][ T29] audit: type=1326 audit(1733260627.520:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 139.016531][ T29] audit: type=1326 audit(1733260627.950:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 139.086519][ T29] audit: type=1326 audit(1733260627.950:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.1.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5f917ff19 code=0x7ffc0000 [ 140.177981][ T5833] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 140.186761][ T5833] Bluetooth: hci0: Injecting HCI hardware error event [ 140.194977][ T5828] Bluetooth: hci0: hardware error 0x00 [ 141.211303][ T5833] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 141.220522][ T5833] Bluetooth: hci3: Injecting HCI hardware error event [ 141.230329][ T5833] Bluetooth: hci3: hardware error 0x00 [ 141.380203][ T7224] binder: 7220:7224 ioctl 4018620d 0 returned -22 [ 141.866507][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.036483][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 142.337668][ T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 142.356432][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.380337][ T8] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 143.081744][ T7262] netlink: 56 bytes leftover after parsing attributes in process `syz.0.536'. [ 143.116903][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.536'. [ 143.194164][ T8] usb 4-1: config 1 has no interface number 1 [ 143.200417][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 143.213385][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.216792][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 143.231860][ T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 143.255026][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.286464][ T8] usb 4-1: Product: syz [ 143.316426][ T8] usb 4-1: Manufacturer: syz [ 143.336713][ T8] usb 4-1: SerialNumber: syz [ 143.396776][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 143.516507][ T29] audit: type=1326 audit(1733260633.230:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 143.799322][ T29] audit: type=1326 audit(1733260633.230:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.0.539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f687c57ff19 code=0x7ffc0000 [ 144.216855][ T8] usb 4-1: USB disconnect, device number 2 [ 147.411404][ T7296] netlink: 56 bytes leftover after parsing attributes in process `syz.2.549'. [ 147.469263][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 147.599929][ T7308] netlink: 40 bytes leftover after parsing attributes in process `syz.3.553'. [ 149.298858][ T7337] Invalid option length (0) for dns_resolver key [ 150.426550][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.565'. [ 154.336088][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 154.625513][ T7402] netlink: 64 bytes leftover after parsing attributes in process `syz.1.582'. [ 159.102953][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.300130][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 159.334617][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.352044][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.383689][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.401638][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.416585][ T5872] usb 4-1: Product: syz [ 159.420977][ T5872] usb 4-1: Manufacturer: syz [ 159.427585][ T5872] usb 4-1: SerialNumber: syz [ 159.486503][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 159.668275][ T5870] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.726552][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.753105][ T5870] usb 3-1: config 0 descriptor?? [ 159.763671][ T5870] cp210x 3-1:0.0: cp210x converter detected [ 159.848862][ T5872] usb 4-1: cannot find UAC_HEADER [ 159.907280][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.908079][ T5872] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 159.963878][ T5872] usb 4-1: USB disconnect, device number 3 [ 159.996700][ T5870] usb 3-1: cp210x converter now attached to ttyUSB0 [ 160.066454][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 160.091628][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.143524][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 160.157956][ T46] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 160.167909][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 160.181623][ T7447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.598'. [ 160.193587][ T5870] usb 3-1: USB disconnect, device number 4 [ 160.212885][ T5870] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 160.226941][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.237414][ T5870] cp210x 3-1:0.0: device disconnected [ 160.257549][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 160.276745][ T46] usb 5-1: SerialNumber: syz [ 160.289013][ T7440] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.300215][ T7440] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 160.370586][ T46] hub 5-1:1.0: bad descriptor, ignoring hub [ 160.373695][ T7453] trusted_key: encrypted_key: insufficient parameters specified [ 160.383842][ T46] hub 5-1:1.0: probe with driver hub failed with error -5 [ 161.031402][ T7460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 161.118571][ T7440] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 161.146681][ T7440] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 161.455196][ T46] cdc_ether 5-1:1.0 eth1: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 163.248967][ T5870] usb 5-1: USB disconnect, device number 5 [ 163.256680][ T5870] cdc_ether 5-1:1.0 eth1: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 163.833549][ T7494] trusted_key: encrypted_key: insufficient parameters specified [ 165.476128][ T7488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 168.544540][ T7556] ------------[ cut here ]------------ [ 168.550451][ T7556] refcount_t: underflow; use-after-free. [ 168.579380][ T7556] WARNING: CPU: 0 PID: 7556 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 168.589015][ T7556] Modules linked in: [ 168.592962][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.636 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 168.603653][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.613866][ T7556] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 168.620149][ T7556] Code: a0 4b 5e 8c e8 47 3f 9e fc 90 0f 0b 90 90 eb 99 e8 7b 98 dd fc c6 05 40 83 40 0b 01 90 48 c7 c7 00 4c 5e 8c e8 27 3f 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 58 98 dd fc c6 05 1a 83 40 0b 01 90 [ 168.640032][ T7556] RSP: 0018:ffffc900056a78e8 EFLAGS: 00010246 [ 168.646686][ T7556] RAX: 79739117b6060300 RBX: ffff88805e21c0e4 RCX: 0000000000080000 [ 168.654781][ T7556] RDX: ffffc9000e42a000 RSI: 0000000000003f6f RDI: 0000000000003f70 [ 168.663405][ T7556] RBP: 0000000000000003 R08: ffffffff81601b22 R09: fffffbfff1cfa210 [ 168.671530][ T7556] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880283ab068 [ 168.679592][ T7556] R13: ffff88805e21c0e4 R14: 1ffff11005075618 R15: ffff8880283ab000 [ 168.687733][ T7556] FS: 00007fab167b46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 168.696747][ T7556] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.703355][ T7556] CR2: 00007fd5f930a2d8 CR3: 00000000350e4000 CR4: 00000000003526f0 [ 168.711410][ T7556] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 168.719463][ T7556] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 168.727538][ T7556] Call Trace: [ 168.730833][ T7556] [ 168.733781][ T7556] ? __warn+0x165/0x4d0 [ 168.738405][ T7556] ? refcount_warn_saturate+0x15a/0x1d0 [ 168.744447][ T7556] ? report_bug+0x2b3/0x500 [ 168.749302][ T7556] ? refcount_warn_saturate+0x15a/0x1d0 [ 168.754872][ T7556] ? handle_bug+0x60/0x90 [ 168.759315][ T7556] ? exc_invalid_op+0x1a/0x50 [ 168.764042][ T7556] ? asm_exc_invalid_op+0x1a/0x20 [ 168.769204][ T7556] ? __warn_printk+0x292/0x360 [ 168.774005][ T7556] ? refcount_warn_saturate+0x15a/0x1d0 [ 168.779658][ T7556] ? refcount_warn_saturate+0x159/0x1d0 [ 168.785243][ T7556] j1939_session_put+0x1ed/0x440 [ 168.790493][ T7556] j1939_sk_sendmsg+0x121b/0x14c0 [ 168.795578][ T7556] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 168.801529][ T7556] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 168.806981][ T7556] ? __import_iovec+0x590/0x870 [ 168.811882][ T7556] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 168.817350][ T7556] __sock_sendmsg+0x221/0x270 [ 168.822069][ T7556] ____sys_sendmsg+0x52a/0x7e0 [ 168.827284][ T7556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.832606][ T7556] ? __fget_files+0x2a/0x410 [ 168.837334][ T7556] ? __fget_files+0x2a/0x410 [ 168.841984][ T7556] __sys_sendmsg+0x269/0x350 [ 168.847100][ T7556] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.852339][ T7556] ? do_raw_spin_unlock+0x13c/0x8b0 [ 168.858259][ T7556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.864741][ T7556] ? do_syscall_64+0x100/0x230 [ 168.869609][ T7556] ? do_syscall_64+0xb6/0x230 [ 168.874384][ T7556] do_syscall_64+0xf3/0x230 [ 168.879013][ T7556] ? clear_bhb_loop+0x35/0x90 [ 168.883737][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.889715][ T7556] RIP: 0033:0x7fab1597ff19 [ 168.894168][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.913876][ T7556] RSP: 002b:00007fab167b4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.922385][ T7556] RAX: ffffffffffffffda RBX: 00007fab15b45fa0 RCX: 00007fab1597ff19 [ 168.930496][ T7556] RDX: 0000000000000886 RSI: 0000000020000240 RDI: 0000000000000003 [ 168.938539][ T7556] RBP: 00007fab159f3986 R08: 0000000000000000 R09: 0000000000000000 [ 168.946612][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.955128][ T7556] R13: 0000000000000000 R14: 00007fab15b45fa0 R15: 00007ffe21bce3f8 [ 168.963777][ T7556] [ 168.966949][ T7556] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 168.974257][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.3.636 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 168.984883][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.994978][ T7556] Call Trace: [ 168.998282][ T7556] [ 169.001236][ T7556] dump_stack_lvl+0x241/0x360 [ 169.005956][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.011191][ T7556] ? __pfx__printk+0x10/0x10 [ 169.015803][ T7556] ? _printk+0xd5/0x120 [ 169.019969][ T7556] ? __init_begin+0x41000/0x41000 [ 169.025015][ T7556] ? vscnprintf+0x5d/0x90 [ 169.029347][ T7556] panic+0x349/0x880 [ 169.033260][ T7556] ? __warn+0x174/0x4d0 [ 169.037417][ T7556] ? __pfx_panic+0x10/0x10 [ 169.041863][ T7556] __warn+0x344/0x4d0 [ 169.045929][ T7556] ? refcount_warn_saturate+0x15a/0x1d0 [ 169.051498][ T7556] report_bug+0x2b3/0x500 [ 169.055844][ T7556] ? refcount_warn_saturate+0x15a/0x1d0 [ 169.061404][ T7556] handle_bug+0x60/0x90 [ 169.065588][ T7556] exc_invalid_op+0x1a/0x50 [ 169.070092][ T7556] asm_exc_invalid_op+0x1a/0x20 [ 169.074949][ T7556] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 169.081129][ T7556] Code: a0 4b 5e 8c e8 47 3f 9e fc 90 0f 0b 90 90 eb 99 e8 7b 98 dd fc c6 05 40 83 40 0b 01 90 48 c7 c7 00 4c 5e 8c e8 27 3f 9e fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 58 98 dd fc c6 05 1a 83 40 0b 01 90 [ 169.100736][ T7556] RSP: 0018:ffffc900056a78e8 EFLAGS: 00010246 [ 169.106806][ T7556] RAX: 79739117b6060300 RBX: ffff88805e21c0e4 RCX: 0000000000080000 [ 169.114789][ T7556] RDX: ffffc9000e42a000 RSI: 0000000000003f6f RDI: 0000000000003f70 [ 169.122756][ T7556] RBP: 0000000000000003 R08: ffffffff81601b22 R09: fffffbfff1cfa210 [ 169.130816][ T7556] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff8880283ab068 [ 169.138795][ T7556] R13: ffff88805e21c0e4 R14: 1ffff11005075618 R15: ffff8880283ab000 [ 169.146771][ T7556] ? __warn_printk+0x292/0x360 [ 169.151549][ T7556] ? refcount_warn_saturate+0x159/0x1d0 [ 169.157104][ T7556] j1939_session_put+0x1ed/0x440 [ 169.162048][ T7556] j1939_sk_sendmsg+0x121b/0x14c0 [ 169.167075][ T7556] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 169.172807][ T7556] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 169.178353][ T7556] ? __import_iovec+0x590/0x870 [ 169.183214][ T7556] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 169.188584][ T7556] __sock_sendmsg+0x221/0x270 [ 169.193273][ T7556] ____sys_sendmsg+0x52a/0x7e0 [ 169.198062][ T7556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.203364][ T7556] ? __fget_files+0x2a/0x410 [ 169.207969][ T7556] ? __fget_files+0x2a/0x410 [ 169.212575][ T7556] __sys_sendmsg+0x269/0x350 [ 169.217170][ T7556] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.222311][ T7556] ? do_raw_spin_unlock+0x13c/0x8b0 [ 169.227548][ T7556] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.234119][ T7556] ? do_syscall_64+0x100/0x230 [ 169.238922][ T7556] ? do_syscall_64+0xb6/0x230 [ 169.243628][ T7556] do_syscall_64+0xf3/0x230 [ 169.248145][ T7556] ? clear_bhb_loop+0x35/0x90 [ 169.252831][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.258756][ T7556] RIP: 0033:0x7fab1597ff19 [ 169.263177][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.282793][ T7556] RSP: 002b:00007fab167b4058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.291211][ T7556] RAX: ffffffffffffffda RBX: 00007fab15b45fa0 RCX: 00007fab1597ff19 [ 169.299185][ T7556] RDX: 0000000000000886 RSI: 0000000020000240 RDI: 0000000000000003 [ 169.307170][ T7556] RBP: 00007fab159f3986 R08: 0000000000000000 R09: 0000000000000000 [ 169.315170][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.323176][ T7556] R13: 0000000000000000 R14: 00007fab15b45fa0 R15: 00007ffe21bce3f8 [ 169.331189][ T7556] [ 169.334579][ T7556] Kernel Offset: disabled [ 169.338977][ T7556] Rebooting in 86400 seconds..