last executing test programs: 43.599289673s ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="28d50000000000000000000000000000000900f1", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32], 0x50) 28.531887494s ago: executing program 32 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="28d50000000000000000000000000000000900f1", @ANYRES32=0x0, @ANYRES32, @ANYRES16, @ANYRES32], 0x50) 7.732502278s ago: executing program 0 (id=190): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 4.572769373s ago: executing program 0 (id=210): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x20004041}, 0x4000) 4.407321644s ago: executing program 0 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x6}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x40004}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) close(r4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x22, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) socket$netlink(0x10, 0x3, 0x4) 3.411292747s ago: executing program 0 (id=215): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7fffffff}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x9, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x8000) 2.888669624s ago: executing program 1 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 2.776499752s ago: executing program 0 (id=220): socket$kcm(0xa, 0x1, 0x106) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) getgroups(0x27, &(0x7f0000002540)) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045520, &(0x7f0000002a40)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) memfd_secret(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000c40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x508, 0x3d8, 0x3d8, 0x508, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x2}}}}, {{@uncond, 0x0, 0x1f8, 0x228, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp1\x00', {0x3ff, 0x1, 0x2, 0x8, 0x3b7c, 0x1ff, 0x1, 0x8, 0x40}, {0xffffffffffffffff}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0xb, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) 2.730630262s ago: executing program 3 (id=221): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd", 0x45}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) 2.527652022s ago: executing program 0 (id=222): r0 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r0]) syz_io_uring_setup(0x579c, &(0x7f0000000080)={0x0, 0x5ba7, 0x10100, 0x3, 0x1}, &(0x7f0000000140), &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r6 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r7}, 0x18) 2.47277363s ago: executing program 1 (id=223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001900010000"], 0x1c}}, 0x0) 2.472464357s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.32649174s ago: executing program 1 (id=225): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 2.191956887s ago: executing program 3 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2.106037747s ago: executing program 1 (id=227): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x800}, 0x20) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) 2.037093392s ago: executing program 5 (id=228): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106) 1.920791656s ago: executing program 3 (id=229): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) r7 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000680)=[r8]) setregid(0xffffffffffffffff, r8) socket$inet(0x2, 0x2, 0x1) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r9}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r9}) 1.920047511s ago: executing program 4 (id=230): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.786927338s ago: executing program 5 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 1.50417656s ago: executing program 5 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.136560565s ago: executing program 5 (id=233): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x20000010) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2501"], 0xd8}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.135988469s ago: executing program 3 (id=234): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02df7f000400000006009a4da9ba17d20fc7b469", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r1, 0x0, 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x8) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES64, @ANYRESHEX=r0], 0x20) r4 = socket$inet6(0xa, 0x800, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f40)=ANY=[@ANYBLOB="5800000002060108000034e40000f1ffffffff070c000780080006400000000311000300686173683a69702c706f7274000000000900020073797a3100000000050005000200000005000400000000000500010007000000", @ANYRES64=r3], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) sendmmsg$inet6(r2, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000881) listen(r2, 0x2000fff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x8}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000140)="24000000010006", 0x7) 1.077849686s ago: executing program 1 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3c, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x6}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYRESDEC=r1], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x40004}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r4) 918.537433ms ago: executing program 4 (id=236): r0 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="7a975c338d06eef95aa8869e"], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a"], 0x18c0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000951e000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1581c34836400000000d060208000000000005000100070000001100030068615c683a69702c706f72"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000b0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {0x0, 0x3}, {0xfff1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_POLICE={0x4}, @TCA_U32_POLICE={0x40, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x0, 0x5, 0x2, 0x800009, {0x0, 0x0, 0x6, 0x800, 0x8, 0x1ff}, {0x9, 0x0, 0x2, 0x1, 0x9, 0x5}, 0x3, 0x8, 0x4}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000480)={'gre0\x00', r5, 0x8000, 0x20, 0x80000000, 0x1, {{0x15, 0x4, 0x2, 0x16, 0x54, 0x68, 0x0, 0x9, 0x4, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0xed, 0x3, 0x3, [{@broadcast, 0x401}]}, @generic={0x82, 0x6, "5d5573d6"}, @lsrr={0x83, 0x7, 0xff, [@rand_addr=0x64010101]}, @noop, @rr={0x7, 0x23, 0x1c, [@dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @private=0xa010101, @rand_addr=0x64010101, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 704.208369ms ago: executing program 1 (id=237): socket$phonet(0x23, 0x2, 0x1) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_usbip_server_init(0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="043f"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) 628.867871ms ago: executing program 4 (id=238): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) sendmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000003040)="23814ca94e", 0x5}], 0x1}, 0x4) recvmsg(r1, 0x0, 0x0) 590.665526ms ago: executing program 5 (id=239): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r1], 0x40c}}, 0x20008850) 375.298175ms ago: executing program 4 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfd, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000600)=""/227, 0xe3) 176.726558ms ago: executing program 4 (id=241): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7"], 0x10b8}, 0x106) 132.29654ms ago: executing program 5 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) 21.525945ms ago: executing program 3 (id=243): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) close(0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r0, r4, 0x8f5, 0x100000000000000) write(r2, 0x0, 0x0) 0s ago: executing program 4 (id=244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) brk(0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. [ 69.739663][ T5824] cgroup: Unknown subsys name 'net' [ 69.870981][ T5824] cgroup: Unknown subsys name 'cpuset' [ 69.880102][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.298052][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.471436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.477973][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.645546][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.657184][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.665611][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.673947][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.682080][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.692107][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.700098][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.708498][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.709010][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.718427][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.725397][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.731126][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.737705][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.776669][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.785442][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.793845][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.795295][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.802485][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.812183][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.816151][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.829542][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.831644][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.844966][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.848722][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.859884][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.453795][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 76.581316][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 76.705251][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 76.721139][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 76.732108][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 76.782796][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.791576][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.799546][ T5836] bridge_slave_0: entered allmulticast mode [ 76.806648][ T5836] bridge_slave_0: entered promiscuous mode [ 76.879101][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.886287][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.893936][ T5836] bridge_slave_1: entered allmulticast mode [ 76.901469][ T5836] bridge_slave_1: entered promiscuous mode [ 76.940394][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.947723][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.954868][ T5834] bridge_slave_0: entered allmulticast mode [ 76.962162][ T5834] bridge_slave_0: entered promiscuous mode [ 76.971333][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.978572][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.985716][ T5834] bridge_slave_1: entered allmulticast mode [ 76.992874][ T5834] bridge_slave_1: entered promiscuous mode [ 77.059138][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.072047][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.147055][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.206557][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.240693][ T5836] team0: Port device team_slave_0 added [ 77.246917][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.254152][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.261450][ T5844] bridge_slave_0: entered allmulticast mode [ 77.269254][ T5844] bridge_slave_0: entered promiscuous mode [ 77.286350][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.293995][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.301427][ T5845] bridge_slave_0: entered allmulticast mode [ 77.310675][ T5845] bridge_slave_0: entered promiscuous mode [ 77.334670][ T5836] team0: Port device team_slave_1 added [ 77.341428][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.348872][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.356129][ T5844] bridge_slave_1: entered allmulticast mode [ 77.363463][ T5844] bridge_slave_1: entered promiscuous mode [ 77.370274][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.377399][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.385254][ T5851] bridge_slave_0: entered allmulticast mode [ 77.392357][ T5851] bridge_slave_0: entered promiscuous mode [ 77.403297][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.410564][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.417780][ T5845] bridge_slave_1: entered allmulticast mode [ 77.424879][ T5845] bridge_slave_1: entered promiscuous mode [ 77.434499][ T5834] team0: Port device team_slave_0 added [ 77.443492][ T5834] team0: Port device team_slave_1 added [ 77.473501][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.480709][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.488432][ T5851] bridge_slave_1: entered allmulticast mode [ 77.495425][ T5851] bridge_slave_1: entered promiscuous mode [ 77.602169][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.610454][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.637260][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.652006][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.665125][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.676933][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.689935][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.699920][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.706888][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.733300][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.745052][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.754259][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.780541][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.798097][ T51] Bluetooth: hci0: command tx timeout [ 77.812935][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.836241][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.858037][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.864990][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.868317][ T51] Bluetooth: hci2: command tx timeout [ 77.894474][ T5837] Bluetooth: hci1: command tx timeout [ 77.897526][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.947684][ T5837] Bluetooth: hci3: command tx timeout [ 77.947689][ T51] Bluetooth: hci4: command tx timeout [ 77.969857][ T5845] team0: Port device team_slave_0 added [ 77.979696][ T5845] team0: Port device team_slave_1 added [ 78.000732][ T5844] team0: Port device team_slave_0 added [ 78.009557][ T5851] team0: Port device team_slave_0 added [ 78.019483][ T5851] team0: Port device team_slave_1 added [ 78.049323][ T5844] team0: Port device team_slave_1 added [ 78.089494][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.096466][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.125000][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.174815][ T5836] hsr_slave_0: entered promiscuous mode [ 78.182857][ T5836] hsr_slave_1: entered promiscuous mode [ 78.190036][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.196995][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.224126][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.248105][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.255096][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.282302][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.295770][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.302819][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.330044][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.341663][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.348919][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.374866][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.387735][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.394695][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.420612][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.456452][ T5834] hsr_slave_0: entered promiscuous mode [ 78.462799][ T5834] hsr_slave_1: entered promiscuous mode [ 78.469134][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.476818][ T5834] Cannot create hsr debugfs directory [ 78.522210][ T5845] hsr_slave_0: entered promiscuous mode [ 78.528840][ T5845] hsr_slave_1: entered promiscuous mode [ 78.535106][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.543204][ T5845] Cannot create hsr debugfs directory [ 78.709490][ T5851] hsr_slave_0: entered promiscuous mode [ 78.716021][ T5851] hsr_slave_1: entered promiscuous mode [ 78.722398][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.730231][ T5851] Cannot create hsr debugfs directory [ 78.746319][ T5844] hsr_slave_0: entered promiscuous mode [ 78.754205][ T5844] hsr_slave_1: entered promiscuous mode [ 78.761701][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.769335][ T5844] Cannot create hsr debugfs directory [ 79.283880][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.296229][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.309995][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.330172][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.403686][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.429560][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.445358][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.466466][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.523823][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.546896][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.559441][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.595520][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.695567][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.707077][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.742182][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.754988][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.787299][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.868250][ T51] Bluetooth: hci0: command tx timeout [ 79.870991][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.892052][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.909229][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.921952][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.943832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.951121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.960256][ T51] Bluetooth: hci1: command tx timeout [ 79.962704][ T5837] Bluetooth: hci2: command tx timeout [ 79.984649][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.999628][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.021011][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.028193][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.038042][ T5837] Bluetooth: hci4: command tx timeout [ 80.038055][ T51] Bluetooth: hci3: command tx timeout [ 80.082350][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.114936][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.122129][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.168875][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.184216][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.191443][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.291098][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.313776][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.334871][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.342028][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.383645][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.390797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.473355][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.544109][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.551369][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.651304][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.658504][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.687920][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.762668][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.844125][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.853863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.861092][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.921185][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.928427][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.043019][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.071149][ T5836] veth0_vlan: entered promiscuous mode [ 81.209666][ T5836] veth1_vlan: entered promiscuous mode [ 81.248615][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.395483][ T5836] veth0_macvtap: entered promiscuous mode [ 81.421421][ T5836] veth1_macvtap: entered promiscuous mode [ 81.445024][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.482713][ T5834] veth0_vlan: entered promiscuous mode [ 81.499781][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.514486][ T5834] veth1_vlan: entered promiscuous mode [ 81.543574][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.631528][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.650598][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.672205][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.707248][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.732151][ T5834] veth0_macvtap: entered promiscuous mode [ 81.750781][ T5834] veth1_macvtap: entered promiscuous mode [ 81.865818][ T5851] veth0_vlan: entered promiscuous mode [ 81.905970][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.917882][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.934392][ T5851] veth1_vlan: entered promiscuous mode [ 81.945254][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.954006][ T5837] Bluetooth: hci0: command tx timeout [ 81.978275][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.984356][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.028666][ T51] Bluetooth: hci1: command tx timeout [ 82.034173][ T5837] Bluetooth: hci2: command tx timeout [ 82.101606][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.107689][ T5837] Bluetooth: hci3: command tx timeout [ 82.117830][ T51] Bluetooth: hci4: command tx timeout [ 82.162706][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.173760][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.199742][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.224199][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.224321][ T5851] veth0_macvtap: entered promiscuous mode [ 82.255354][ T5845] veth0_vlan: entered promiscuous mode [ 82.258363][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.273025][ T5845] veth1_vlan: entered promiscuous mode [ 82.315837][ T5851] veth1_macvtap: entered promiscuous mode [ 82.382999][ T5844] veth0_vlan: entered promiscuous mode [ 82.405637][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.413977][ T5844] veth1_vlan: entered promiscuous mode [ 82.543097][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.553097][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.561957][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.564241][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 82.592745][ T5844] veth0_macvtap: entered promiscuous mode [ 82.607214][ T5845] veth0_macvtap: entered promiscuous mode [ 82.621727][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.671706][ T5844] veth1_macvtap: entered promiscuous mode [ 82.684666][ T3477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.698012][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.701942][ T5845] veth1_macvtap: entered promiscuous mode [ 82.707523][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.742611][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.751395][ T3477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.764724][ T3477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822572][ T3477] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.853213][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.971470][ T153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986643][ T153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.130012][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.156987][ T153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.172103][ T153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.203900][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.323365][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.362153][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.363928][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.391841][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.408334][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.452760][ T153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.534288][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.556905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.618427][ T30] audit: type=1326 audit(1750815871.821:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 83.645959][ T5970] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9'. [ 83.663483][ T5970] ksmbd: Unknown IPC event: 3, ignore. [ 83.676120][ T30] audit: type=1326 audit(1750815871.831:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 83.722417][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.729802][ T30] audit: type=1326 audit(1750815871.831:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 83.763063][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.776519][ T30] audit: type=1326 audit(1750815871.831:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 83.887209][ T30] audit: type=1326 audit(1750815871.831:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 83.963894][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12'. [ 83.989415][ T30] audit: type=1326 audit(1750815871.831:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 84.028506][ T51] Bluetooth: hci0: command tx timeout [ 84.057507][ T30] audit: type=1326 audit(1750815871.831:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 84.102654][ T30] audit: type=1326 audit(1750815871.831:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 84.127549][ T51] Bluetooth: hci2: command tx timeout [ 84.128113][ T5837] Bluetooth: hci1: command tx timeout [ 84.169859][ T30] audit: type=1326 audit(1750815871.831:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 84.169876][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.169893][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.216815][ T5837] Bluetooth: hci3: command tx timeout [ 84.216824][ T51] Bluetooth: hci4: command tx timeout [ 84.216924][ T30] audit: type=1326 audit(1750815871.831:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 84.372078][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.372098][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.403418][ T5980] Falling back ldisc for ttyS3. [ 84.547028][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.559441][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.757291][ T6000] loop0: detected capacity change from 0 to 164 [ 84.796619][ T6000] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.852725][ T6000] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.865076][ T6000] rock: directory entry would overflow storage [ 84.865093][ T6000] rock: sig=0x4f50, size=4, remaining=3 [ 84.865109][ T6000] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 85.848855][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 85.918531][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21'. [ 87.055944][ T1208] cfg80211: failed to load regulatory.db [ 88.221343][ T6077] process 'syz.4.40' launched '/dev/fd/6' with NULL argv: empty string added [ 89.527645][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 89.527663][ T30] audit: type=1326 audit(1750815877.741:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.1.45" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x0 [ 89.893372][ T6113] dvmrp1: entered allmulticast mode [ 90.429313][ T6122] Driver unsupported XDP return value 0 on prog (id 47) dev N/A, expect packet loss! [ 90.451484][ T6124] loop4: detected capacity change from 0 to 256 [ 90.485861][ T6124] vfat: Unknown parameter 'shorname' [ 90.552740][ T6122] loop1: detected capacity change from 0 to 1024 [ 90.601043][ T6122] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.663518][ T6122] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.717751][ T6122] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 90.752457][ T6128] loop3: detected capacity change from 0 to 8192 [ 90.764472][ T6122] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 90.805936][ T6122] JBD2: no valid journal superblock found [ 90.805994][ T6122] EXT4-fs (loop1): Could not load journal inode [ 91.283847][ T30] audit: type=1326 audit(1750815879.491:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.343879][ T30] audit: type=1326 audit(1750815879.491:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.418628][ T30] audit: type=1326 audit(1750815879.501:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.537865][ T30] audit: type=1326 audit(1750815879.501:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.639994][ T6152] random: crng reseeded on system resumption [ 91.757516][ T30] audit: type=1326 audit(1750815879.501:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.877298][ T30] audit: type=1326 audit(1750815879.501:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.3.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 91.919387][ T6154] loop1: detected capacity change from 0 to 512 [ 92.021205][ T6156] netlink: 'syz.0.63': attribute type 11 has an invalid length. [ 92.120026][ T6154] EXT4-fs (loop1): 1 orphan inode deleted [ 92.185092][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.212038][ T3527] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 92.253083][ T3527] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 1 [ 92.266928][ T6154] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.413042][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.590667][ T6169] loop1: detected capacity change from 0 to 512 [ 92.653582][ T6169] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 92.683962][ T6169] EXT4-fs (loop1): invalid journal inode [ 92.718642][ T6169] EXT4-fs (loop1): can't get journal size [ 92.738335][ T30] audit: type=1326 audit(1750815880.951:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 92.743413][ T6169] EXT4-fs (loop1): 1 truncate cleaned up [ 92.761316][ T30] audit: type=1326 audit(1750815880.951:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.3.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 92.875006][ T6174] loop3: detected capacity change from 0 to 1024 [ 92.895172][ T6169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.962059][ T6174] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.158031][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.522521][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.590190][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.777694][ T6195] netlink: 332 bytes leftover after parsing attributes in process `syz.3.76'. [ 93.790902][ T6195] netlink: 160 bytes leftover after parsing attributes in process `syz.3.76'. [ 93.886649][ T6198] Zero length message leads to an empty skb [ 93.923799][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 94.262094][ T6213] bridge_slave_0: left allmulticast mode [ 94.322856][ T6213] bridge_slave_0: left promiscuous mode [ 94.339806][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.378063][ T6213] bridge_slave_1: left allmulticast mode [ 94.387559][ T6213] bridge_slave_1: left promiscuous mode [ 94.398018][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.422682][ T6213] bond0: (slave bond_slave_0): Releasing backup interface [ 94.442306][ T6213] bond0: (slave bond_slave_1): Releasing backup interface [ 94.477372][ T6213] team0: Port device team_slave_0 removed [ 94.494678][ T6213] team0: Port device team_slave_1 removed [ 94.505077][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.517360][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.535053][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.545376][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.594911][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.630077][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.657529][ T6219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.683187][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 94.713908][ T6219] netlink: 'syz.0.86': attribute type 6 has an invalid length. [ 94.773336][ T6220] netlink: 'syz.3.87': attribute type 4 has an invalid length. [ 95.645421][ T6250] loop3: detected capacity change from 0 to 512 [ 95.805851][ T6250] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.188656][ T6250] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 96.232723][ T6250] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.100: attempt to clear invalid blocks 2 len 1 [ 96.309556][ T6250] EXT4-fs (loop3): Remounting filesystem read-only [ 96.358877][ T6250] EXT4-fs (loop3): 1 truncate cleaned up [ 96.366226][ T6250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.426040][ T6250] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 96.451418][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 96.451436][ T30] audit: type=1326 audit(1750815884.661:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.570171][ T30] audit: type=1326 audit(1750815884.701:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.591078][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.637061][ T30] audit: type=1326 audit(1750815884.701:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.726923][ T30] audit: type=1326 audit(1750815884.701:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.802065][ T30] audit: type=1326 audit(1750815884.701:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.827014][ T6268] loop3: detected capacity change from 0 to 512 [ 96.870200][ T6268] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.104: casefold flag without casefold feature [ 96.884932][ T30] audit: type=1326 audit(1750815884.701:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.909532][ T30] audit: type=1326 audit(1750815884.701:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.932085][ T30] audit: type=1326 audit(1750815884.701:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.953805][ T6268] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.104: couldn't read orphan inode 15 (err -117) [ 96.955567][ T30] audit: type=1326 audit(1750815884.701:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 96.989983][ T30] audit: type=1326 audit(1750815884.701:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6259 comm="syz.0.102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 97.001729][ T6268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.408116][ T6268] mmap: +}[@ (6268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.572562][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.705886][ T6278] netlink: 'syz.1.109': attribute type 13 has an invalid length. [ 97.825904][ T6282] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 97.908949][ T6278] gretap0: refused to change device tx_queue_len [ 97.936505][ T6278] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 98.182779][ T6291] loop3: detected capacity change from 0 to 1024 [ 98.839237][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.406910][ T6310] futex_wake_op: syz.4.119 tries to shift op by -1; fix this program [ 99.637343][ T6296] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 99.693549][ T6314] loop4: detected capacity change from 0 to 512 [ 99.731633][ T6314] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 99.757668][ T6313] netlink: 92 bytes leftover after parsing attributes in process `syz.1.120'. [ 99.784288][ T6314] EXT4-fs (loop4): invalid journal inode [ 99.794080][ T6314] EXT4-fs (loop4): can't get journal size [ 99.843691][ T6314] EXT4-fs (loop4): 1 truncate cleaned up [ 99.852916][ T6313] netem: unknown loss type 0 [ 99.866444][ T6314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.897594][ T6313] netem: change failed [ 100.636461][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.734521][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.752669][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.769130][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.786314][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.795356][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.893850][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.922873][ T5837] Bluetooth: hci5: command tx timeout [ 103.397712][ T6342] loop3: detected capacity change from 0 to 512 [ 103.405962][ T6342] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.412540][ T6342] EXT4-fs: Ignoring removed bh option [ 103.945756][ T6342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.008809][ T6342] EXT4-fs (loop3): 1 truncate cleaned up [ 104.031413][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.526247][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.574581][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 104.574598][ T30] audit: type=1326 audit(1750815892.781:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.726722][ T30] audit: type=1326 audit(1750815892.861:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.788133][ T30] audit: type=1326 audit(1750815892.861:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.853894][ T30] audit: type=1326 audit(1750815892.861:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.882724][ T30] audit: type=1326 audit(1750815892.871:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.905330][ T30] audit: type=1326 audit(1750815892.871:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.927823][ T30] audit: type=1326 audit(1750815892.871:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 104.953983][ T30] audit: type=1326 audit(1750815892.881:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb96618d290 code=0x7ffc0000 [ 104.983225][ T30] audit: type=1326 audit(1750815892.881:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 105.006821][ T5837] Bluetooth: hci5: command tx timeout [ 105.012479][ T30] audit: type=1326 audit(1750815892.881:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6350 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 105.688826][ T6366] loop0: detected capacity change from 0 to 1024 [ 105.776659][ T6366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.068139][ T5837] Bluetooth: hci5: command tx timeout [ 107.190993][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 107.459689][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.126127][ T3492] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.501745][ T6402] loop1: detected capacity change from 0 to 736 [ 108.908446][ T6402] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 109.147723][ T5837] Bluetooth: hci5: command tx timeout [ 109.621934][ T3492] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.893161][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 109.893178][ T30] audit: type=1326 audit(1750815898.101:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 110.007536][ T30] audit: type=1326 audit(1750815898.141:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 110.090600][ T30] audit: type=1326 audit(1750815898.141:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 110.146218][ T6422] loop0: detected capacity change from 0 to 1024 [ 110.173407][ T30] audit: type=1326 audit(1750815898.141:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 110.180692][ T6422] ======================================================= [ 110.180692][ T6422] WARNING: The mand mount option has been deprecated and [ 110.180692][ T6422] and is ignored by this kernel. Remove the mand [ 110.180692][ T6422] option from the mount to silence this warning. [ 110.180692][ T6422] ======================================================= [ 110.206741][ T30] audit: type=1326 audit(1750815898.151:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 110.703694][ T6422] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.929164][ T6425] loop3: detected capacity change from 0 to 1024 [ 111.267378][ T6425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.349182][ T30] audit: type=1326 audit(1750815899.481:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 111.451969][ T3492] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.485377][ T30] audit: type=1326 audit(1750815899.481:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 111.630236][ T30] audit: type=1326 audit(1750815899.611:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 111.772565][ T30] audit: type=1326 audit(1750815899.611:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 111.910593][ T30] audit: type=1326 audit(1750815899.611:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 111.947019][ T3492] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.993329][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.008673][ T5834] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.012275][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.044445][ T6439] loop4: detected capacity change from 0 to 512 [ 112.055080][ T6327] bridge_slave_0: entered allmulticast mode [ 112.067558][ T6439] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 112.082522][ T6327] bridge_slave_0: entered promiscuous mode [ 112.145598][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.150230][ T6439] EXT4-fs (loop4): invalid journal inode [ 112.191296][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.197700][ T6439] EXT4-fs (loop4): can't get journal size [ 112.207845][ T6327] bridge_slave_1: entered allmulticast mode [ 112.215758][ T6327] bridge_slave_1: entered promiscuous mode [ 112.242047][ T6439] EXT4-fs (loop4): 1 truncate cleaned up [ 112.275886][ T6439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.349903][ T6428] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 112.489767][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.542058][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.696637][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 112.876466][ T6327] team0: Port device team_slave_0 added [ 112.990565][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.041306][ T6327] team0: Port device team_slave_1 added [ 113.054117][ T3492] bridge_slave_1: left allmulticast mode [ 113.099047][ T3492] bridge_slave_1: left promiscuous mode [ 113.119158][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.339960][ T3492] bridge_slave_0: left allmulticast mode [ 113.347206][ T3492] bridge_slave_0: left promiscuous mode [ 113.354073][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.416527][ T6464] syz.1.165 uses obsolete (PF_INET,SOCK_PACKET) [ 114.491380][ T6475] hub 2-0:1.0: USB hub found [ 114.496856][ T6475] hub 2-0:1.0: 1 port detected [ 114.750437][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.771433][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.782056][ T3492] bond0 (unregistering): Released all slaves [ 114.889442][ T6470] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 114.900583][ T6470] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 114.912467][ T6478] syz_tun: entered allmulticast mode [ 114.918820][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 114.918835][ T30] audit: type=1326 audit(1750815903.131:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 114.969353][ T30] audit: type=1326 audit(1750815903.131:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6469 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 115.064609][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.083223][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.116723][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.138651][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.146007][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.208093][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.227943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.237730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.317821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 115.328317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 115.750833][ T30] audit: type=1326 audit(1750815903.951:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abf18e929 code=0x7ffc0000 [ 115.808611][ T6327] hsr_slave_0: entered promiscuous mode [ 115.828719][ T6327] hsr_slave_1: entered promiscuous mode [ 115.872791][ T6327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.874263][ T30] audit: type=1326 audit(1750815904.011:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f1abf18e929 code=0x7ffc0000 [ 115.908496][ T6327] Cannot create hsr debugfs directory [ 116.021785][ T30] audit: type=1326 audit(1750815904.011:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abf18e929 code=0x7ffc0000 [ 116.251876][ T59] Bluetooth: hci2: Frame reassembly failed (-84) [ 116.298917][ T6500] loop1: detected capacity change from 0 to 512 [ 116.337453][ T6500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.377523][ T6500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.389548][ T6500] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 116.399720][ T6500] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 116.409220][ T6500] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.175: Failed to acquire dquot type 1 [ 116.440429][ T6500] EXT4-fs (loop1): 1 truncate cleaned up [ 116.474543][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.718776][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.018178][ T30] audit: type=1326 audit(1750815904.011:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6490 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abf18e929 code=0x7ffc0000 [ 118.191545][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 118.197937][ T5837] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 118.545744][ T30] audit: type=1326 audit(1750815906.751:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 118.665305][ T30] audit: type=1326 audit(1750815906.751:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.0.181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3af8e929 code=0x7ffc0000 [ 118.779352][ T3492] hsr_slave_0: left promiscuous mode [ 118.813487][ T3492] hsr_slave_1: left promiscuous mode [ 118.836823][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.849474][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.860954][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.873843][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.923248][ T3492] veth1_macvtap: left promiscuous mode [ 118.931566][ T3492] veth0_macvtap: left promiscuous mode [ 118.937369][ T3492] veth1_vlan: left promiscuous mode [ 118.946295][ T3492] veth0_vlan: left promiscuous mode [ 119.410416][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 119.450884][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 119.804214][ T6516] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 119.814217][ T6516] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 119.991118][ T6526] kthread_run failed with err -4 [ 120.388314][ T6546] pim6reg: entered allmulticast mode [ 120.544003][ T6555] netlink: 'syz.3.191': attribute type 1 has an invalid length. [ 120.551852][ T6555] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 120.560130][ T6555] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.191'. [ 120.621426][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.670215][ T6544] pim6reg: left allmulticast mode [ 120.872150][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 120.872166][ T30] audit: type=1326 audit(1750815909.081:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 120.897070][ T6562] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1088) [ 120.913332][ T30] audit: type=1326 audit(1750815909.081:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 120.934565][ T6562] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 120.965817][ T30] audit: type=1326 audit(1750815909.091:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.044724][ T30] audit: type=1326 audit(1750815909.091:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.086614][ T30] audit: type=1326 audit(1750815909.091:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.220002][ T30] audit: type=1326 audit(1750815909.091:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.266250][ T30] audit: type=1326 audit(1750815909.091:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.322506][ T30] audit: type=1326 audit(1750815909.091:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.345619][ T6327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.359813][ T6327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.420109][ T30] audit: type=1326 audit(1750815909.091:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.442602][ T30] audit: type=1326 audit(1750815909.091:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb96618e929 code=0x7ffc0000 [ 121.483768][ T6327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.622081][ T6327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.705887][ T6582] loop4: detected capacity change from 0 to 512 [ 121.739621][ T6582] EXT4-fs: Ignoring removed nobh option [ 121.847595][ T6582] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 121.858163][ T6582] System zones: 0-2, 18-18, 34-34 [ 121.867582][ T6582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.999759][ T6582] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.032032][ T6327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.103567][ T6327] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.153097][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.160327][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.203949][ T6605] loop3: detected capacity change from 0 to 1024 [ 122.240101][ T6605] EXT4-fs: Ignoring removed nobh option [ 122.261374][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.268607][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.276292][ T6605] EXT4-fs: Ignoring removed bh option [ 122.322361][ T6610] syz_tun: entered allmulticast mode [ 122.345130][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.409413][ T6605] EXT4-fs (loop3): shut down requested (2) [ 122.540245][ T5851] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.949868][ T6327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.632857][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 123.797010][ T6646] team1: entered promiscuous mode [ 123.837058][ T6646] team1: entered allmulticast mode [ 123.950026][ T6597] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 124.129455][ T6327] veth0_vlan: entered promiscuous mode [ 124.212669][ T6327] veth1_vlan: entered promiscuous mode [ 124.689349][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.706288][ T6327] veth0_macvtap: entered promiscuous mode [ 124.758665][ T6327] veth1_macvtap: entered promiscuous mode [ 124.849904][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.891278][ T6327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.983845][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.993829][ T6671] netlink: 'syz.0.215': attribute type 13 has an invalid length. [ 125.006457][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.051853][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.146249][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.161708][ T6674] rdma_op ffff88807ea829f0 conn xmit_rdma 0000000000000000 [ 125.188899][ T6671] gretap0: refused to change device tx_queue_len [ 125.198149][ T6671] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 125.259614][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.562617][ T6688] SET target dimension over the limit! [ 125.611416][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.640291][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.755725][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.802480][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.813139][ T6698] 9pnet_fd: Insufficient options for proto=fd [ 125.833690][ T6697] netlink: 96 bytes leftover after parsing attributes in process `syz.3.224'. [ 126.227982][ T5908] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 126.359464][ T6717] loop3: detected capacity change from 0 to 128 [ 126.393301][ T6719] loop9: detected capacity change from 0 to 7 [ 126.410128][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.442349][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.487152][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.496734][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.524145][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 126.525105][ T6724] syz.3.229: attempt to access beyond end of device [ 126.525105][ T6724] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 126.547638][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.554561][ T6724] syz.3.229: attempt to access beyond end of device [ 126.554561][ T6724] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 126.572717][ T6724] syz.3.229: attempt to access beyond end of device [ 126.572717][ T6724] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 126.583073][ T5908] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 126.588765][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.615853][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.621825][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.642572][ T6724] syz.3.229: attempt to access beyond end of device [ 126.642572][ T6724] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 126.646839][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.660925][ T5908] usb 1-1: config 0 descriptor?? [ 126.688076][ T6724] syz.3.229: attempt to access beyond end of device [ 126.688076][ T6724] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 126.729607][ T6724] syz.3.229: attempt to access beyond end of device [ 126.729607][ T6724] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 126.766719][ T6719] ldm_validate_partition_table(): Disk read failed. [ 126.770269][ T6724] syz.3.229: attempt to access beyond end of device [ 126.770269][ T6724] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 126.792914][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.799309][ T6724] syz.3.229: attempt to access beyond end of device [ 126.799309][ T6724] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 126.812131][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.815676][ T6724] syz.3.229: attempt to access beyond end of device [ 126.815676][ T6724] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 126.839734][ T6719] Buffer I/O error on dev loop9, logical block 0, async page read [ 126.857685][ T6724] syz.3.229: attempt to access beyond end of device [ 126.857685][ T6724] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 126.864700][ T30] kauditd_printk_skb: 112 callbacks suppressed [ 126.864716][ T30] audit: type=1326 audit(1750815915.071:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 126.878278][ T6719] Dev loop9: unable to read RDB block 0 [ 126.951319][ T6719] loop9: unable to read partition table [ 126.992073][ T6719] loop9: partition table beyond EOD, truncated [ 127.052732][ T30] audit: type=1326 audit(1750815915.111:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.090463][ T6719] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 127.090463][ T6719] ) failed (rc=-5) [ 127.164622][ T30] audit: type=1326 audit(1750815915.111:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.190416][ T5908] kovaplus 0003:1E7D:2D50.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 127.247654][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 127.267171][ T6732] netlink: 196 bytes leftover after parsing attributes in process `syz.5.233'. [ 127.291482][ T30] audit: type=1326 audit(1750815915.111:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.332130][ T30] audit: type=1326 audit(1750815915.111:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.399183][ T30] audit: type=1326 audit(1750815915.111:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.507840][ T6744] Bluetooth: MGMT ver 1.23 [ 127.607540][ T30] audit: type=1326 audit(1750815915.111:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.738538][ T30] audit: type=1326 audit(1750815915.111:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.790995][ T6749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 127.797811][ T6749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 127.803556][ T6751] netlink: 136 bytes leftover after parsing attributes in process `syz.5.239'. [ 127.843868][ T30] audit: type=1326 audit(1750815915.111:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 127.852402][ T6749] vhci_hcd vhci_hcd.0: Device attached [ 127.872385][ T6751] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 127.901958][ T30] audit: type=1326 audit(1750815915.111:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54f578e929 code=0x7ffc0000 [ 128.077588][ T5938] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 128.081457][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.237'. [ 128.190094][ T5908] kovaplus 0003:1E7D:2D50.0001: couldn't init struct kovaplus_device [ 128.198602][ T5908] kovaplus 0003:1E7D:2D50.0001: couldn't install mouse [ 128.231197][ T6752] vhci_hcd: connection reset by peer [ 128.240914][ T5908] kovaplus 0003:1E7D:2D50.0001: probe with driver kovaplus failed with error -71 [ 128.250191][ T3527] vhci_hcd: stop threads [ 128.255350][ T3527] vhci_hcd: release socket [ 128.285426][ T3527] vhci_hcd: disconnect device [ 128.305323][ T6768] ------------[ cut here ]------------ [ 128.310881][ T6768] Please remove unsupported % in format string [ 128.318066][ T6768] WARNING: lib/vsprintf.c:2776 at format_decode+0x965/0xe30, CPU#1: syz.4.244/6768 [ 128.327443][ T6768] Modules linked in: [ 128.331553][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.4.244 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 128.342996][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.353128][ T6768] RIP: 0010:format_decode+0x965/0xe30 [ 128.358648][ T6768] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b4 04 00 00 41 0f b6 34 24 48 c7 c7 80 ce b9 8c e8 ac 9f 19 f6 90 <0f> 0b 90 90 e9 6b fc ff ff e8 3d eb 55 f6 48 89 dd e9 55 fa ff ff [ 128.378360][ T6768] RSP: 0018:ffffc90003f0f7b0 EFLAGS: 00010246 [ 128.380443][ T5908] usb 1-1: USB disconnect, device number 2 [ 128.384454][ T6768] RAX: f25f65898bc50b00 RBX: 0000000000000000 RCX: 0000000000080000 [ 128.398317][ T6768] RDX: ffffc9000d9bc000 RSI: 0000000000004fe7 RDI: 0000000000004fe8 [ 128.406309][ T6768] RBP: ffffc90003f0f9ac R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 128.414696][ T6768] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffffc90003f0f9ac [ 128.422718][ T6768] R13: ffffffff8cb9c980 R14: 0000000000000406 R15: 0000000000000400 [ 128.430734][ T6768] FS: 00007f1abff8a6c0(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 128.439751][ T6768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.446350][ T6768] CR2: 000000110c370675 CR3: 0000000021b68000 CR4: 00000000003526f0 [ 128.454403][ T6768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.462433][ T6768] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.470560][ T6768] Call Trace: [ 128.473847][ T6768] [ 128.476790][ T6768] bstr_printf+0xd0/0xb70 [ 128.481206][ T6768] bpf_trace_printk+0x10e/0x190 [ 128.486079][ T6768] ? ktime_get+0x3e/0x1f0 [ 128.490463][ T6768] ? __pfx_bpf_trace_printk+0x10/0x10 [ 128.495856][ T6768] ? __local_bh_disable_ip+0xf1/0x190 [ 128.501292][ T6768] ? read_tsc+0x9/0x20 [ 128.505390][ T6768] ? ktime_get+0x1cb/0x1f0 [ 128.509865][ T6768] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 128.515357][ T6768] bpf_test_run+0x38b/0x830 [ 128.519928][ T6768] ? bpf_test_run+0x205/0x830 [ 128.524630][ T6768] ? __pfx_bpf_test_run+0x10/0x10 [ 128.529757][ T6768] ? slab_build_skb+0x273/0x3e0 [ 128.534632][ T6768] ? convert___skb_to_skb+0x3d/0x590 [ 128.539979][ T6768] bpf_prog_test_run_skb+0xb30/0x1560 [ 128.545480][ T6768] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 128.551339][ T6768] bpf_prog_test_run+0x2c4/0x340 [ 128.556298][ T6768] __sys_bpf+0x4a4/0x860 [ 128.560599][ T6768] ? __pfx___sys_bpf+0x10/0x10 [ 128.565391][ T6768] ? __secure_computing+0xe2/0x2a0 [ 128.570552][ T6768] __x64_sys_bpf+0x7c/0x90 [ 128.574993][ T6768] do_syscall_64+0xfa/0x3b0 [ 128.579542][ T6768] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.584760][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.590900][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 128.595608][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.601574][ T6768] RIP: 0033:0x7f1abf18e929 [ 128.606002][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.625683][ T6768] RSP: 002b:00007f1abff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.634162][ T6768] RAX: ffffffffffffffda RBX: 00007f1abf3b5fa0 RCX: 00007f1abf18e929 [ 128.642220][ T6768] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 128.650334][ T6768] RBP: 00007f1abf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.658715][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.666713][ T6768] R13: 0000000000000000 R14: 00007f1abf3b5fa0 R15: 00007fff56223288 [ 128.674788][ T6768] [ 128.677854][ T6768] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.685155][ T6768] CPU: 1 UID: 0 PID: 6768 Comm: syz.4.244 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 128.696534][ T6768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.706582][ T6768] Call Trace: [ 128.709855][ T6768] [ 128.712781][ T6768] dump_stack_lvl+0x99/0x250 [ 128.717363][ T6768] ? __asan_memcpy+0x40/0x70 [ 128.721942][ T6768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.727136][ T6768] ? __pfx__printk+0x10/0x10 [ 128.731768][ T6768] panic+0x2db/0x790 [ 128.735688][ T6768] ? __pfx_panic+0x10/0x10 [ 128.740127][ T6768] __warn+0x334/0x4c0 [ 128.744130][ T6768] ? format_decode+0x965/0xe30 [ 128.748896][ T6768] ? format_decode+0x965/0xe30 [ 128.753647][ T6768] report_bug+0x2be/0x4f0 [ 128.758009][ T6768] ? format_decode+0x965/0xe30 [ 128.762759][ T6768] ? format_decode+0x965/0xe30 [ 128.767510][ T6768] ? format_decode+0x967/0xe30 [ 128.772274][ T6768] handle_bug+0x84/0x160 [ 128.776519][ T6768] exc_invalid_op+0x1a/0x50 [ 128.781021][ T6768] asm_exc_invalid_op+0x1a/0x20 [ 128.785864][ T6768] RIP: 0010:format_decode+0x965/0xe30 [ 128.791225][ T6768] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 b4 04 00 00 41 0f b6 34 24 48 c7 c7 80 ce b9 8c e8 ac 9f 19 f6 90 <0f> 0b 90 90 e9 6b fc ff ff e8 3d eb 55 f6 48 89 dd e9 55 fa ff ff [ 128.810819][ T6768] RSP: 0018:ffffc90003f0f7b0 EFLAGS: 00010246 [ 128.816881][ T6768] RAX: f25f65898bc50b00 RBX: 0000000000000000 RCX: 0000000000080000 [ 128.824838][ T6768] RDX: ffffc9000d9bc000 RSI: 0000000000004fe7 RDI: 0000000000004fe8 [ 128.832805][ T6768] RBP: ffffc90003f0f9ac R08: ffff8880b8724293 R09: 1ffff110170e4852 [ 128.840779][ T6768] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffffc90003f0f9ac [ 128.848744][ T6768] R13: ffffffff8cb9c980 R14: 0000000000000406 R15: 0000000000000400 [ 128.856726][ T6768] bstr_printf+0xd0/0xb70 [ 128.861058][ T6768] bpf_trace_printk+0x10e/0x190 [ 128.865904][ T6768] ? ktime_get+0x3e/0x1f0 [ 128.870224][ T6768] ? __pfx_bpf_trace_printk+0x10/0x10 [ 128.875591][ T6768] ? __local_bh_disable_ip+0xf1/0x190 [ 128.880961][ T6768] ? read_tsc+0x9/0x20 [ 128.885017][ T6768] ? ktime_get+0x1cb/0x1f0 [ 128.889424][ T6768] bpf_prog_12183cdb1cd51dab+0x37/0x3f [ 128.894870][ T6768] bpf_test_run+0x38b/0x830 [ 128.899385][ T6768] ? bpf_test_run+0x205/0x830 [ 128.904061][ T6768] ? __pfx_bpf_test_run+0x10/0x10 [ 128.909104][ T6768] ? slab_build_skb+0x273/0x3e0 [ 128.913962][ T6768] ? convert___skb_to_skb+0x3d/0x590 [ 128.919243][ T6768] bpf_prog_test_run_skb+0xb30/0x1560 [ 128.924627][ T6768] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 128.930431][ T6768] bpf_prog_test_run+0x2c4/0x340 [ 128.935364][ T6768] __sys_bpf+0x4a4/0x860 [ 128.939605][ T6768] ? __pfx___sys_bpf+0x10/0x10 [ 128.944384][ T6768] ? __secure_computing+0xe2/0x2a0 [ 128.949494][ T6768] __x64_sys_bpf+0x7c/0x90 [ 128.953901][ T6768] do_syscall_64+0xfa/0x3b0 [ 128.958407][ T6768] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.963598][ T6768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.969650][ T6768] ? clear_bhb_loop+0x60/0xb0 [ 128.974322][ T6768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.980200][ T6768] RIP: 0033:0x7f1abf18e929 [ 128.984606][ T6768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.004199][ T6768] RSP: 002b:00007f1abff8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 129.012605][ T6768] RAX: ffffffffffffffda RBX: 00007f1abf3b5fa0 RCX: 00007f1abf18e929 [ 129.020656][ T6768] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 129.028615][ T6768] RBP: 00007f1abf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 129.036585][ T6768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.044542][ T6768] R13: 0000000000000000 R14: 00007f1abf3b5fa0 R15: 00007fff56223288 [ 129.052524][ T6768] [ 129.055844][ T6768] Kernel Offset: disabled [ 129.060159][ T6768] Rebooting in 86400 seconds..