last executing test programs: 2.896001521s ago: executing program 0 (id=389): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.877285353s ago: executing program 3 (id=392): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000007000000"], 0x0, 0x39}, 0x20) 2.749221247s ago: executing program 3 (id=393): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3031600000000000000000000000200090040000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000d61f0ca8bebfa56307f8d791b4a0c1da049983b90a6698b02221323e40e6551fb39126fa9035476d2d60056d7c358d71a3d9472a54dd9cd07e525875ebb2c123c8671111a17cd60cd8c86dfd869ba2a4e99f1f2bf689654551511074a2f377f82ad7dfae7c5a7878a9723d2f9992658b097eadda1ef722f0696b7e5017a4fce7a8bf723518762dec0331679e46924b33e356d4120fd1eb2ed22dabef4c3099"], &(0x7f0000000000)='GPL\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175}, 0x78) write(r1, &(0x7f0000000480)="1538c0aad8791de231d148", 0xb) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/185, 0xb9}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000002900)=""/140, 0x8c}, {&(0x7f00000029c0)=""/172, 0xac}], 0x5}}], 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440)=[@sack_perm, @window={0x3, 0x4, 0xce1c}, @mss={0x2, 0x7ff}, @sack_perm, @sack_perm, @timestamp, @sack_perm], 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1389}}], 0x18}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.703873119s ago: executing program 0 (id=394): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x4008440) close(r0) 2.642053188s ago: executing program 0 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfe3c) dup2(0xffffffffffffffff, r3) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x17ba, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xd0}) 2.615069395s ago: executing program 4 (id=398): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) 2.488559899s ago: executing program 1 (id=399): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000200)={{0x4}, {0xffffffffffffffff}, 0x0, 0x7}) 1.710293899s ago: executing program 4 (id=401): iopl(0x3) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) utime(&(0x7f00000000c0)='./file0\x00', 0x0) 1.701473846s ago: executing program 0 (id=402): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000002dc0)="$eJzs3ctrXNUfAPDvnSRNk/b3SwRB6yogaKB0YmpsFVxUXIhgoaBr22EyDTWTTMlMShMCtojgRlBxIeimax9159bHVv8LF9JSNS1WXEjkzqOdNjPppM3MBPL5wMmcc++dnPOdcx/nzr3MDWDPmkj/ZCIORcRHScRYfXoSEUPV3GDEidpyt9fX8mlKYmPjzT+S6jK31tfy0fSe1IF64cmI+PH9iMOZzfWWV1bnc8ViYalenqosnJ8qr6weObeQmyvMFRaPTc/MHD3+wvFjOxfrX7+sHrz+8WvPfnPin/eeuPrhT0mciIP1ec1x7JSJmKh/JkPpR3iPV3e6sj5L+t0AHkq6aQ7UtvI4FGMxUM21MdLLlgEA3fJuRGwAAHtM4vgPAHtM43uAW+tr+Ubq7zcSvXXjlYjYX4u/cX2zNmewfs1uf/U66Oit5J4rI0lEjO9A/RMR8cV3b3+Vpqj3g2tpQC9cuhwRZ8YnNu//k033LGzXc1vN3BiuvkzcN3mvHX+gn75Pxz8vthr/Ze6Mf6LF+Ge4xbb7MB68/Weu7UA1baXjv5eb7m273RR/3fhAvfS/6phvKDl7rlhI923/j4jJGBpOy9PVRVuP3CZv/nuzXf3N478/P3nny7T+9PXuEplrg8P3vmc2V8k9atwNNy5HPDXYKv7kTv8nbca/pzqs4/WXPvi83bw0/jTeRtocf3dtXIl4pmX/3+3LZMv7E6eqq8NUY6Vo4dtfPxttV39z/6cprb9xLtALaf+Pbh3/eNJ8v2Z5+3X8fGXsh3bzHhx/6/V/X/JWNb+vPu1irlJZmo7Yl7yxefrRu+9tlBvLp/FPPt16+69V23r9T88Jz3QY/+D1379++Pi7K41/dlv9v/3M1dvzA+3q76z/Z6q5yfqUTvZ/nTbwUT47AAAAAAAAAAAAAAAAAAAAAAAAAOhUJiIORpLJ3slnMtls7Rnej8doplgqVw6fLS0vzkb1WdnjMZRp/NTlWNPvoU7Xfw+/UT56X/n5iHgsIj4dHqmWs/lScbbfwQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3YE2z/9P/Tbc79YBAF2zv98NAAB6zvEfAPae7R3/R7rWDgCgd5z/A8De0/Hx/0x32wEA9I7zfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs1MmTadr4e30tn5ZnL6wsz5cuHJktlOezC8v5bL60dD47VyrNFQvZfGmh7T+6VHsplkrnZ2Jx+eJUpVCuTJVXVk8vlJYXK6fPLeTmCqcLQz2LDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6V15Znc8Vi4UlmS0zI7ujGbsmMxi7ohkyXcs07yVG+reDAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjl/gsAAP//IIYqoQ==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001400), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2, 0x3}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, &(0x7f0000005280)) 1.678476195s ago: executing program 1 (id=403): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000900000007000000"], 0x0, 0x39}, 0x20) 1.623957302s ago: executing program 2 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000557768100000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f000000cf00), 0x0, 0x0) 1.622633975s ago: executing program 4 (id=405): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x6, 0x2a3, &(0x7f0000000180)="$eJzs3b9Pa3UUAPBzS2mLDu3gZEi8iQ5OBFhdSgwkxE6aDuqgRCAxtDGBhMQfsTK5ujj6F5iYuPlPuPgfmLiavO0xkNyX2977Wnil0BcK78fns3D43nO+99zLLYShp1+u9o/20zg8++HfaDSSqLRjJc6TaEUlSj/FJe1fAgB4mZ1nWTzKRuapSyKisbi2AIAFmvvv/58LbwkAWLBPPv3so61OZ/vjNG3ETv/n027+n33+dXR86zC+jl4cxHo04yIie2oU72RZNqimuVa81x+cdvPK/hd/F/tv/R8xrN+IZrSGS5frdzvbG+nIRP0g7+ON4vztvH4zmvHWlPPvdrY3p9RHtxbvvzvR/1o045+v4pvoxf6wiXH9jxtp+mH26+PvP8/by+uTwWm3Pswby5bu+UcDAAAAAAAAAAAAAAAAAAAAAMArbK2YnVOP4fyefKmYv7N0kX+zHGmpdXk+z6g+KTe6Mh9okMVv5Xyd9TRNsyJxXF+Nt6tRfZirBgAAAAAAAAAAAAAAAAAAgBfLybffHe31egfHdxKU0wDKt/U/7z7tiZV3YnZyfXyuShHO2DmWypwkYmYb+UXc0W25KVi5ruff/5h3w8bNOcuz7s/dBOXTdbSXTL+H9ShXGuVD8tdkTi1uea7adYdWixZut09t6qHm3Ndee3MYDGbkRDLrdfHBf6O2i5Xk6ouoNryrU8uXi2Ci/MqzMdfz/OzvisS0DgAAAAAAAAAAAAAAAAAAWKjxm36nHDybWVrJ6gtrCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADu1fjz/+cIBkXxLZJrcXzywJcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAa+BJAAAA//9YAl9K") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlink(&(0x7f0000000280)='./file1\x00') ftruncate(r0, 0x5) 1.500617451s ago: executing program 2 (id=406): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, 0x0, 0x0, 0x4008440) close(r0) 1.449117457s ago: executing program 1 (id=407): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090029000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003f0000000000000008000f0001000000", 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/53, 0x35}], 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) 1.3599851s ago: executing program 3 (id=408): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 1.315987366s ago: executing program 2 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a00000000000800170041"], 0x3c}}, 0x0) 1.235006402s ago: executing program 2 (id=410): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r1 = gettid() rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) 1.215713974s ago: executing program 1 (id=411): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) 1.108404318s ago: executing program 0 (id=412): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfe3c) dup2(0xffffffffffffffff, r3) setxattr$security_ima(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0403"], 0x2, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = io_uring_setup(0x17ba, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/233, 0xe9}], 0x1}}], 0x1, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r7, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000040)={0xd0}) 1.108241993s ago: executing program 4 (id=413): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) 1.108093059s ago: executing program 3 (id=414): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x14, 0x14, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.107793678s ago: executing program 1 (id=415): r0 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file1\x00', 0x0) 983.896439ms ago: executing program 2 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000557768100000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}}], 0x1, 0x0) 969.840462ms ago: executing program 1 (id=417): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a450bb8ad", 0x45}, {&(0x7f00000003c0)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf7771d39142867c39bd1fad299d2b62cd296c293a32536d6b8d8", 0x80}], 0x2}}], 0x1, 0x40000) 512.294231ms ago: executing program 2 (id=418): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000fd7ff0), &(0x7f0000048000), 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3031600000000000000000000000200090040000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000030200000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x14, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000d61f0ca8bebfa56307f8d791b4a0c1da049983b90a6698b02221323e40e6551fb39126fa9035476d2d60056d7c358d71a3d9472a54dd9cd07e525875ebb2c123c8671111a17cd60cd8c86dfd869ba2a4e99f1f2bf689654551511074a2f377f82ad7dfae7c5a7878a9723d2f9992658b097eadda1ef722f0696b7e5017a4fce7a8bf723518762dec0331679e46924b33e356d4120fd1eb2ed22dabef4c3099"], &(0x7f0000000000)='GPL\x00', 0x4, 0xaf, &(0x7f00000000c0)=""/175}, 0x78) write(r1, &(0x7f0000000480)="1538c0aad8791de231d148", 0xb) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r0, 0x409, 0xb) r2 = socket(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/185, 0xb9}, {&(0x7f00000027c0)=""/250, 0xfa}, {&(0x7f0000002900)=""/140, 0x8c}, {&(0x7f00000029c0)=""/172, 0xac}], 0x5}}], 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440)=[@sack_perm, @window={0x3, 0x4, 0xce1c}, @mss={0x2, 0x7ff}, @sack_perm, @sack_perm, @timestamp, @sack_perm], 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1389}}], 0x18}}], 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 384.034908ms ago: executing program 3 (id=419): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0), 0x0, 0x4008440) close(r0) 162.595311ms ago: executing program 4 (id=420): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x10d, 0xb, &(0x7f0000000080)=0xf, 0x4) 147.478615ms ago: executing program 0 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090029000000"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r1, 0x0, 0x0, 0x4f, 0x0, &(0x7f0000000500)=""/79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003f0000000000000008000f0001000000", 0x24) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) readv(r3, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/53, 0x35}], 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) 82.521776ms ago: executing program 3 (id=422): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="7a0af8ff75257025bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) close(r0) 0s ago: executing program 4 (id=423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000008000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='signal_deliver\x00', r0}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 51.789836][ T5213] cgroup: Unknown subsys name 'net' [ 51.889004][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.215864][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.234638][ T5226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.262608][ T5226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.272639][ T5226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.302667][ T5226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.310260][ T5226] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.317933][ T5226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.347163][ T5226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.355474][ T5226] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.363690][ T5226] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.379802][ T5226] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.387499][ T5226] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.395166][ T5226] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.432848][ T4619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.443080][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.451021][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.476904][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.485681][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.495071][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.502383][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.510362][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.518092][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.563860][ T5226] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.572590][ T5226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.580126][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.594723][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.607666][ T5226] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.615485][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.623903][ T5226] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.642934][ T5226] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.651150][ T5226] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.731640][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 55.807194][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 55.912849][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.920619][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.928402][ T5227] bridge_slave_0: entered allmulticast mode [ 55.935561][ T5227] bridge_slave_0: entered promiscuous mode [ 55.977198][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.984895][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.992047][ T5227] bridge_slave_1: entered allmulticast mode [ 55.998943][ T5227] bridge_slave_1: entered promiscuous mode [ 56.065534][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.072801][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.079979][ T5223] bridge_slave_0: entered allmulticast mode [ 56.088528][ T5223] bridge_slave_0: entered promiscuous mode [ 56.098841][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.106031][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.113365][ T5223] bridge_slave_1: entered allmulticast mode [ 56.120295][ T5223] bridge_slave_1: entered promiscuous mode [ 56.135532][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.149653][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.169835][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 56.212365][ T5227] team0: Port device team_slave_0 added [ 56.240836][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.253848][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.269441][ T5227] team0: Port device team_slave_1 added [ 56.284076][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 56.323946][ T5223] team0: Port device team_slave_0 added [ 56.356721][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.364063][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.390838][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.404424][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.411384][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.437404][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.449871][ T5223] team0: Port device team_slave_1 added [ 56.477241][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.484501][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.491643][ T5231] bridge_slave_0: entered allmulticast mode [ 56.498696][ T5231] bridge_slave_0: entered promiscuous mode [ 56.506458][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.513763][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.520996][ T5231] bridge_slave_1: entered allmulticast mode [ 56.527770][ T5231] bridge_slave_1: entered promiscuous mode [ 56.555011][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.561980][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.590606][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.623779][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.636085][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.643548][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.669548][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.706916][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.757465][ T5227] hsr_slave_0: entered promiscuous mode [ 56.765078][ T5227] hsr_slave_1: entered promiscuous mode [ 56.810557][ T5223] hsr_slave_0: entered promiscuous mode [ 56.816968][ T5223] hsr_slave_1: entered promiscuous mode [ 56.825756][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.833526][ T5223] Cannot create hsr debugfs directory [ 56.839099][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 56.860718][ T5231] team0: Port device team_slave_0 added [ 56.908038][ T5231] team0: Port device team_slave_1 added [ 56.914194][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.921316][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.928949][ T5237] bridge_slave_0: entered allmulticast mode [ 56.935881][ T5237] bridge_slave_0: entered promiscuous mode [ 56.962486][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.969717][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.977253][ T5237] bridge_slave_1: entered allmulticast mode [ 56.983885][ T5237] bridge_slave_1: entered promiscuous mode [ 57.015764][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.022865][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.048838][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.088127][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.095464][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.121551][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.140454][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.172800][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.215356][ T5231] hsr_slave_0: entered promiscuous mode [ 57.221533][ T5231] hsr_slave_1: entered promiscuous mode [ 57.228150][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.235811][ T5231] Cannot create hsr debugfs directory [ 57.250821][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.258305][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.265936][ T5232] bridge_slave_0: entered allmulticast mode [ 57.272652][ T5232] bridge_slave_0: entered promiscuous mode [ 57.294014][ T5237] team0: Port device team_slave_0 added [ 57.314651][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.321831][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.329314][ T5232] bridge_slave_1: entered allmulticast mode [ 57.336124][ T5232] bridge_slave_1: entered promiscuous mode [ 57.343605][ T4619] Bluetooth: hci0: command tx timeout [ 57.360505][ T5237] team0: Port device team_slave_1 added [ 57.418039][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.427250][ T4619] Bluetooth: hci1: command tx timeout [ 57.438874][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.466335][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.474549][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.500845][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.536301][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.544460][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.571312][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.606728][ T5232] team0: Port device team_slave_0 added [ 57.616926][ T5232] team0: Port device team_slave_1 added [ 57.665942][ T4619] Bluetooth: hci2: command tx timeout [ 57.701216][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.708401][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.734616][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.745556][ T4619] Bluetooth: hci4: command tx timeout [ 57.747721][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.758232][ T4619] Bluetooth: hci3: command tx timeout [ 57.765145][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.791525][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.809460][ T5237] hsr_slave_0: entered promiscuous mode [ 57.816046][ T5237] hsr_slave_1: entered promiscuous mode [ 57.822090][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.829913][ T5237] Cannot create hsr debugfs directory [ 57.886246][ T5223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.915602][ T5232] hsr_slave_0: entered promiscuous mode [ 57.921963][ T5232] hsr_slave_1: entered promiscuous mode [ 57.928156][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.936154][ T5232] Cannot create hsr debugfs directory [ 57.941712][ T5223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.980796][ T5223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.989920][ T5223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.081467][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.091805][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.134905][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.147107][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.172655][ T5231] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.181879][ T5231] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.191343][ T5231] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.211432][ T5231] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.314850][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.330800][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.359729][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.370023][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.441200][ T5232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.461120][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.468747][ T5232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.499054][ T5232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.508844][ T5232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.565596][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.601589][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.622699][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.631215][ T3129] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.638531][ T3129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.664859][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.672011][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.704340][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.734482][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.741558][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.750946][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.758039][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.787036][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.818083][ T3129] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.825221][ T3129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.836627][ T3129] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.843745][ T3129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.916574][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.964617][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.985012][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.020844][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.099404][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.106698][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.149249][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.175570][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.183383][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.216692][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.223852][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.249779][ T3129] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.256936][ T3129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.321641][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.356559][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.371788][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.423043][ T4619] Bluetooth: hci0: command tx timeout [ 59.502752][ T4619] Bluetooth: hci1: command tx timeout [ 59.526078][ T5227] veth0_vlan: entered promiscuous mode [ 59.554192][ T5231] veth0_vlan: entered promiscuous mode [ 59.576876][ T5231] veth1_vlan: entered promiscuous mode [ 59.595494][ T5227] veth1_vlan: entered promiscuous mode [ 59.613679][ T5223] veth0_vlan: entered promiscuous mode [ 59.649257][ T5223] veth1_vlan: entered promiscuous mode [ 59.695173][ T5231] veth0_macvtap: entered promiscuous mode [ 59.731898][ T5227] veth0_macvtap: entered promiscuous mode [ 59.744071][ T4619] Bluetooth: hci2: command tx timeout [ 59.747923][ T5231] veth1_macvtap: entered promiscuous mode [ 59.769452][ T5227] veth1_macvtap: entered promiscuous mode [ 59.785686][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.807670][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.824084][ T5226] Bluetooth: hci4: command tx timeout [ 59.829591][ T4619] Bluetooth: hci3: command tx timeout [ 59.842874][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.863822][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.877041][ T5231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.887962][ T5231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.899223][ T5231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.908595][ T5231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.922095][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.933457][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.945342][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.954648][ T5223] veth0_macvtap: entered promiscuous mode [ 59.972838][ T5223] veth1_macvtap: entered promiscuous mode [ 59.979970][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.997136][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.011041][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.049599][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.068966][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.077845][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.087667][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.120794][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.132009][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.143173][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.154041][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.166086][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.214579][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.239033][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.249033][ T5223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.259697][ T5223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.271636][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.310813][ T5237] veth0_vlan: entered promiscuous mode [ 60.319558][ T5223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.328884][ T5223] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.338024][ T5223] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.347931][ T5223] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.388691][ T5237] veth1_vlan: entered promiscuous mode [ 60.436204][ T710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.445655][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.452256][ T710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.456747][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.524823][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.544015][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.568875][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.577957][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.595576][ T5237] veth0_macvtap: entered promiscuous mode [ 60.603371][ T5232] veth0_vlan: entered promiscuous mode [ 60.639359][ T5237] veth1_macvtap: entered promiscuous mode [ 60.651175][ T5232] veth1_vlan: entered promiscuous mode [ 60.742902][ T3129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.750766][ T3129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.761337][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.777426][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.791708][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.829745][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.842483][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.853498][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.874033][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.909452][ T5232] veth0_macvtap: entered promiscuous mode [ 60.932934][ T5308] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.951859][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.982713][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.993149][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.010751][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.022139][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.041496][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.054099][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.066626][ T710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.075866][ T710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.089856][ T5232] veth1_macvtap: entered promiscuous mode [ 61.115427][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.129420][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.144981][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.156234][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.175090][ T5316] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.216607][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.230554][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.242200][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.254018][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.264589][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.275640][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.286014][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.296686][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.307896][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.318517][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.337333][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.366315][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.396263][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.406354][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.417020][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.429098][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.440502][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.452079][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.460401][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 61.469572][ T5318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10'. [ 61.503592][ T4619] Bluetooth: hci0: command tx timeout [ 61.511548][ T5232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.520397][ T5232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.529505][ T5232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.553322][ T5232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.583766][ T4619] Bluetooth: hci1: command tx timeout [ 61.710645][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.724771][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.761967][ T3129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.774050][ T3129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.805708][ T1000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.815983][ T1000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.823144][ T4619] Bluetooth: hci2: command tx timeout [ 61.903893][ T4619] Bluetooth: hci3: command tx timeout [ 61.909889][ T5226] Bluetooth: hci4: command tx timeout [ 61.953174][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.018121][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.131812][ T5334] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 62.236284][ T5332] IPVS: stopping master sync thread 5334 ... [ 62.295764][ T5337] loop1: detected capacity change from 0 to 736 [ 62.330297][ T5337] ======================================================= [ 62.330297][ T5337] WARNING: The mand mount option has been deprecated and [ 62.330297][ T5337] and is ignored by this kernel. Remove the mand [ 62.330297][ T5337] option from the mount to silence this warning. [ 62.330297][ T5337] ======================================================= [ 62.436731][ T5342] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.591150][ T5346] loop2: detected capacity change from 0 to 2048 [ 62.633993][ T5346] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 62.771084][ T5230] udevd[5230]: incorrect nilfs2 checksum on /dev/loop2 [ 62.779903][ T5352] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 63.161104][ T5353] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 63.219756][ T5353] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.18'. [ 63.283349][ T5346] overlay: ./file0 is not a directory [ 63.393078][ T5353] netlink: 'syz.4.18': attribute type 1 has an invalid length. [ 63.584788][ T4619] Bluetooth: hci0: command tx timeout [ 63.663175][ T4619] Bluetooth: hci1: command tx timeout [ 63.904290][ T4619] Bluetooth: hci2: command tx timeout [ 63.983049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 63.992712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 64.003288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.012812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.021342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.029891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.118829][ T4619] Bluetooth: hci3: command tx timeout [ 64.124349][ T4619] Bluetooth: hci4: command tx timeout [ 64.153006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.162906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.227389][ T5383] Cannot find add_set index 0 as target [ 64.410938][ T5380] IPVS: stopping master sync thread 5385 ... [ 64.418459][ T5385] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 64.636052][ T5394] loop3: detected capacity change from 0 to 736 [ 65.948755][ T5406] loop4: detected capacity change from 0 to 2048 [ 66.012719][ T5406] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 66.015960][ T5408] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 66.059752][ T5246] udevd[5246]: incorrect nilfs2 checksum on /dev/loop4 [ 66.087542][ T5413] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 66.109282][ T5408] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.33'. [ 66.196835][ T5408] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 66.222331][ T5406] overlayfs: missing 'workdir' [ 66.725484][ T5423] IPVS: stopping master sync thread 5427 ... [ 66.732620][ T5427] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 66.973330][ T5431] Cannot find add_set index 0 as target [ 67.184580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 67.320429][ T5415] loop2: detected capacity change from 0 to 40427 [ 67.359505][ T5415] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 67.394500][ T5415] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 67.412304][ T5415] F2FS-fs (loop2): invalid crc value [ 67.438487][ T5415] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.553518][ T5440] loop3: detected capacity change from 0 to 736 [ 67.575342][ T5415] F2FS-fs (loop2): Start checkpoint disabled! [ 67.608388][ T5415] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 67.617496][ T5415] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 68.511559][ T36] kworker/u8:3: attempt to access beyond end of device [ 68.511559][ T36] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 68.587560][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 68.594704][ T36] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 68.688553][ T5453] netlink: 76 bytes leftover after parsing attributes in process `syz.4.53'. [ 68.853012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.836852][ T5468] syz.4.53 uses obsolete (PF_INET,SOCK_PACKET) [ 70.541618][ T5484] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.229899][ T5478] loop4: detected capacity change from 0 to 2048 [ 71.352687][ T5478] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.516060][ T5230] udevd[5230]: incorrect nilfs2 checksum on /dev/loop4 [ 71.545291][ T5491] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.627779][ T5493] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 71.635464][ T5493] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.61'. [ 71.644653][ T5493] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 71.666748][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.676948][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.783704][ T5478] overlayfs: missing 'workdir' [ 72.475110][ T5500] loop1: detected capacity change from 0 to 736 [ 74.178002][ T5515] loop4: detected capacity change from 0 to 512 [ 75.635195][ T5515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.728304][ T5515] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.256450][ T5540] loop2: detected capacity change from 0 to 2048 [ 76.325730][ T5540] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 76.356318][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.391959][ T5544] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 76.399790][ T5544] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.75'. [ 76.409114][ T5544] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 76.505943][ T5545] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.657032][ T5540] overlayfs: upper fs does not support tmpfile. [ 76.719850][ T5540] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 76.796912][ T5550] evm: overlay not supported [ 76.919175][ T5540] overlayfs: failed to set xattr on upper [ 76.973752][ T47] cfg80211: failed to load regulatory.db [ 77.193893][ T5540] overlayfs: ...falling back to redirect_dir=nofollow. [ 77.385035][ T5540] overlayfs: ...falling back to index=off. [ 77.442712][ T5540] overlayfs: ...falling back to uuid=null. [ 77.615797][ T5556] loop1: detected capacity change from 0 to 736 [ 78.783478][ T5577] Zero length message leads to an empty skb [ 80.186737][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.317586][ T5603] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 80.325399][ T5603] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.88'. [ 80.334738][ T5603] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 80.649103][ T5604] Cannot find add_set index 0 as target [ 80.911458][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.412038][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.727653][ T5623] netlink: 'syz.4.93': attribute type 11 has an invalid length. [ 82.248414][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.566970][ T4619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.576092][ T4619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.584538][ T4619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.592364][ T4619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.600990][ T4619] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.608383][ T4619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.899925][ T34] bridge_slave_1: left allmulticast mode [ 82.919675][ T34] bridge_slave_1: left promiscuous mode [ 82.927710][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.965982][ T34] bridge_slave_0: left allmulticast mode [ 82.983586][ T34] bridge_slave_0: left promiscuous mode [ 82.993220][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.273138][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.295466][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.323487][ T34] bond0 (unregistering): Released all slaves [ 84.712986][ T4619] Bluetooth: hci4: command tx timeout [ 85.168661][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 85.307701][ T5683] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 85.315535][ T5683] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.106'. [ 85.327018][ T5683] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 85.634037][ T5696] loop0: detected capacity change from 0 to 512 [ 85.795690][ T5696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.263240][ T5633] chnl_net:caif_netlink_parms(): no params data found [ 86.382722][ T5696] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.782552][ T4619] Bluetooth: hci4: command tx timeout [ 87.076733][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 87.098418][ T34] hsr_slave_0: left promiscuous mode [ 87.113420][ T34] hsr_slave_1: left promiscuous mode [ 88.032620][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.063131][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.083136][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.103420][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.146440][ T34] veth1_macvtap: left promiscuous mode [ 88.152968][ T34] veth0_macvtap: left promiscuous mode [ 88.159454][ T34] veth1_vlan: left promiscuous mode [ 88.177869][ T34] veth0_vlan: left promiscuous mode [ 88.790520][ T34] team0 (unregistering): Port device team_slave_1 removed [ 88.823003][ T34] team0 (unregistering): Port device team_slave_0 removed [ 88.862560][ T4619] Bluetooth: hci4: command tx timeout [ 89.140389][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 89.179143][ T5729] geneve0: entered promiscuous mode [ 89.195999][ T5729] geneve0: entered allmulticast mode [ 89.284964][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.301240][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.320853][ T5633] bridge_slave_0: entered allmulticast mode [ 89.350973][ T5633] bridge_slave_0: entered promiscuous mode [ 89.420113][ T5742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 89.450101][ T5742] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.453466][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.482506][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.508055][ T5633] bridge_slave_1: entered allmulticast mode [ 89.541643][ T5633] bridge_slave_1: entered promiscuous mode [ 89.709969][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.775316][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.685047][ T5633] team0: Port device team_slave_0 added [ 90.715681][ T5633] team0: Port device team_slave_1 added [ 90.773050][ T5273] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.859819][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.868775][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.909121][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.931562][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.942613][ T4619] Bluetooth: hci4: command tx timeout [ 90.949829][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.976200][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.988053][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.999562][ T5778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.133'. [ 91.011638][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.060511][ T5273] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 91.082038][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.155553][ T5273] usb 1-1: config 0 descriptor?? [ 91.168088][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 91.198562][ T5783] veth0_macvtap: left promiscuous mode [ 91.395724][ T5633] hsr_slave_0: entered promiscuous mode [ 91.414220][ T5633] hsr_slave_1: entered promiscuous mode [ 91.422637][ T5633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.445526][ T5633] Cannot create hsr debugfs directory [ 91.653421][ T5273] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 91.660929][ T5273] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 91.696563][ T5273] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 91.711987][ T5273] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 91.720017][ T5273] hid-steam 0003:28DE:1142.0001: unknown main item tag 0x0 [ 91.797858][ T5273] hid-steam 0003:28DE:1142.0001: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 93.407506][ T5809] tty tty22: ldisc open failed (-12), clearing slot 21 [ 93.701789][ T5273] usb 1-1: USB disconnect, device number 2 [ 95.601315][ T5857] loop3: detected capacity change from 0 to 1024 [ 95.726762][ T5860] loop0: detected capacity change from 0 to 2048 [ 95.755823][ T5857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.795161][ T5860] loop0: p3 < > p4 < > [ 95.799623][ T5860] loop0: partition table partially beyond EOD, truncated [ 95.807978][ T5860] loop0: p3 start 4284289 is beyond EOD, truncated [ 95.839616][ T4681] loop0: p3 < > p4 < > [ 95.874750][ T4681] loop0: partition table partially beyond EOD, truncated [ 95.882021][ T4681] loop0: p3 start 4284289 is beyond EOD, truncated [ 96.038178][ T5633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.109949][ T5633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.140034][ T5827] loop4: detected capacity change from 0 to 32768 [ 96.145982][ T5633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.204866][ T5827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.144 (5827) [ 96.219452][ T5633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.307655][ T5827] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.349855][ T5827] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 96.382567][ T5827] BTRFS info (device loop4): using free-space-tree [ 96.591129][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.598601][ T5857] syz.3.151[5857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.598694][ T5857] syz.3.151[5857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.610953][ T5857] syz.3.151[5857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.711013][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.825529][ T29] audit: type=1800 audit(1723586063.015:2): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 97.014575][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.021757][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.033864][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.097670][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.105605][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.120868][ T5894] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 97.364019][ T5633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.708627][ T5904] loop0: detected capacity change from 0 to 1024 [ 98.026407][ T5904] EXT4-fs: Ignoring removed orlov option [ 98.059121][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.082564][ T5904] EXT4-fs (loop0): Test dummy encryption mode enabled [ 98.120746][ T5904] EXT4-fs (loop0): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 98.185715][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.385412][ T5927] loop3: detected capacity change from 0 to 128 [ 98.736666][ T5633] veth0_vlan: entered promiscuous mode [ 98.751000][ T5633] veth1_vlan: entered promiscuous mode [ 98.797545][ T5927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.937477][ T5931] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 98.998309][ T5633] veth0_macvtap: entered promiscuous mode [ 99.053771][ T5927] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.118311][ T5633] veth1_macvtap: entered promiscuous mode [ 99.141943][ T5223] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.240541][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.302552][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.338943][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.382673][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.402454][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.449959][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.472915][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.492463][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.524247][ T5227] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.549622][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.585468][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.634918][ T5232] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.646608][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.669176][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.692767][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.710549][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.724545][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.749813][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.837875][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.875406][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.893238][ T5949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 99.960605][ T5949] veth0_macvtap: left promiscuous mode [ 100.164895][ T5633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.183957][ T5633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.227405][ T5633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.273128][ T5633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.495333][ T5275] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.760986][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.782308][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.792576][ T5275] usb 1-1: Using ep0 maxpacket: 16 [ 101.804595][ T5275] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.833890][ T5275] usb 1-1: config 0 has no interfaces? [ 101.854989][ T5275] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 101.903676][ T5275] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 101.912065][ T5275] usb 1-1: Product: syz [ 101.917364][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.937597][ T5275] usb 1-1: Manufacturer: syz [ 101.940073][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.958444][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.168'. [ 101.963577][ T5275] usb 1-1: config 0 descriptor?? [ 101.996318][ T6005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.168'. [ 102.188601][ T47] usb 1-1: USB disconnect, device number 3 [ 102.273380][ T5229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.485087][ T6017] netlink: 'syz.2.92': attribute type 29 has an invalid length. [ 102.503218][ T5229] usb 5-1: Using ep0 maxpacket: 8 [ 102.517911][ T5229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.528610][ T5229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.539064][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.561069][ T5229] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.572469][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.580588][ T5229] usb 5-1: Product: syz [ 102.593186][ T5229] usb 5-1: Manufacturer: syz [ 102.602530][ T5229] usb 5-1: SerialNumber: syz [ 102.742606][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 102.750967][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.775077][ T6029] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 102.821933][ T6028] IPVS: stopping master sync thread 6029 ... [ 102.842721][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.870978][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.912470][ T25] usb 4-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 102.912522][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.926817][ T25] usb 4-1: config 0 descriptor?? [ 102.949548][ T25] io_ti 4-1:0.0: required endpoints missing [ 103.262080][ T5229] usb 5-1: 0:2 : does not exist [ 103.271335][ T6039] overlayfs: failed to resolve './file0': -2 [ 103.319109][ T5229] usb 5-1: USB disconnect, device number 2 [ 103.368559][ T5230] udevd[5230]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.397903][ T25] usb 4-1: USB disconnect, device number 2 [ 103.728884][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 104.063801][ T6062] loop4: detected capacity change from 0 to 512 [ 104.110517][ T6062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.169191][ T6062] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.409155][ T5232] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 104.427075][ T6067] netlink: 'syz.2.182': attribute type 29 has an invalid length. [ 104.907334][ T6094] loop3: detected capacity change from 0 to 4096 [ 104.955651][ T6094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.221759][ T6106] devpts: called with bogus options [ 105.250569][ T6104] netlink: 108 bytes leftover after parsing attributes in process `syz.3.192'. [ 105.253317][ T5275] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.467134][ T5275] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.476230][ T5275] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.487526][ T5275] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 105.497766][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 105.510323][ T5275] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 105.537055][ T5275] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 105.546503][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 105.640471][ T5275] usb 2-1: Product: syz [ 105.644808][ T5275] usb 2-1: Manufacturer: syz [ 105.685066][ T5275] cdc_wdm 2-1:1.0: skipping garbage [ 105.690524][ T5275] cdc_wdm 2-1:1.0: skipping garbage [ 105.700040][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.754161][ T5275] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 105.768741][ T5275] cdc_wdm 2-1:1.0: Unknown control protocol [ 105.918980][ T6117] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 106.062035][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.068920][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.075859][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.082514][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.088822][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.095439][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.101763][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.108376][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.114640][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.121257][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.127628][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.134238][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.140513][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.147113][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.153354][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.159969][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.166241][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.172834][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.179064][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 106.185667][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 106.213009][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 106.221746][ T5275] usb 2-1: USB disconnect, device number 2 [ 106.384391][ T6139] loop2: detected capacity change from 0 to 1024 [ 106.414042][ T6141] netlink: 6 bytes leftover after parsing attributes in process `syz.0.210'. [ 106.478794][ T6139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.803027][ T6124] loop3: detected capacity change from 0 to 32768 [ 106.830466][ T6124] XFS: noikeep mount option is deprecated. [ 106.869455][ T6124] XFS: attr2 mount option is deprecated. [ 107.137529][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.214571][ T6124] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.260292][ T6137] loop4: detected capacity change from 0 to 32768 [ 107.290553][ T6137] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.206 (6137) [ 107.317976][ T6137] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.333606][ T6137] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 107.358046][ T6137] BTRFS info (device loop4): using free-space-tree [ 107.565485][ T6124] XFS (loop3): Ending clean mount [ 107.594452][ T6124] XFS (loop3): Quotacheck needed: Please wait. [ 107.706401][ T29] audit: type=1800 audit(1723586073.885:3): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.206" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 108.063043][ T6124] XFS (loop3): Quotacheck: Done. [ 108.101685][ T6197] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 108.317211][ T6192] netlink: 'syz.1.217': attribute type 29 has an invalid length. [ 108.375687][ T6189] netlink: 'syz.1.217': attribute type 29 has an invalid length. [ 108.545806][ T5227] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.696592][ T5232] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.638080][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 109.875913][ T6223] loop3: detected capacity change from 0 to 1024 [ 109.900882][ T6223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.312477][ T6243] syz.3.230[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.312674][ T6243] syz.3.230[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.324719][ T6243] syz.3.230[6243] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.411127][ T5229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.701506][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.750082][ T5227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.760733][ T5229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.788760][ T6248] loop1: detected capacity change from 0 to 1024 [ 110.790691][ T5229] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.802077][ T6248] EXT4-fs: Ignoring removed orlov option [ 110.863836][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.917105][ T5229] usb 1-1: config 0 descriptor?? [ 110.969849][ T6248] EXT4-fs (loop1): Test dummy encryption mode enabled [ 111.130457][ T6248] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 111.542286][ T6248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.870161][ T5229] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 111.886322][ T5229] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5 [ 111.906334][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 112.619451][ T6265] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 112.814293][ T6259] veth0_macvtap: left promiscuous mode [ 112.815535][ T5231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.923320][ T5229] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v73.1e Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 112.955966][ T6273] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.241'. [ 112.967054][ T6273] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 113.186502][ T5276] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 113.477956][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.246'. [ 113.504462][ T6287] veth0_macvtap: left promiscuous mode [ 113.643078][ T6291] netlink: 76 bytes leftover after parsing attributes in process `syz.1.248'. [ 115.932681][ T6326] netlink: 'syz.0.256': attribute type 49 has an invalid length. [ 115.995941][ T5274] usb 1-1: USB disconnect, device number 4 [ 117.143541][ T6340] bond_slave_0: entered promiscuous mode [ 117.149557][ T6340] bond_slave_1: entered promiscuous mode [ 117.200646][ T6340] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.210873][ T6340] team0: Port device macvlan2 added [ 117.217847][ T6345] netlink: 'syz.4.260': attribute type 4 has an invalid length. [ 117.225983][ T6345] netlink: 152 bytes leftover after parsing attributes in process `syz.4.260'. [ 118.272447][ T6345] bond_slave_0: left promiscuous mode [ 118.309932][ T6345] bond_slave_1: left promiscuous mode [ 118.541717][ T6358] netlink: 76 bytes leftover after parsing attributes in process `syz.0.265'. [ 119.376149][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 119.425512][ T6389] veth0_macvtap: left promiscuous mode [ 120.659767][ T6408] netlink: 'syz.0.281': attribute type 21 has an invalid length. [ 120.952121][ T6416] process 'syz.0.281' launched './file0' with NULL argv: empty string added [ 121.271097][ T6427] netlink: 76 bytes leftover after parsing attributes in process `syz.2.287'. [ 125.761221][ T6482] netlink: 76 bytes leftover after parsing attributes in process `syz.0.304'. [ 126.416576][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'. [ 126.915418][ T29] audit: type=1326 audit(1723586093.055:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6509 comm="syz.3.311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10ddd799f9 code=0x0 [ 127.481167][ T6520] loop2: detected capacity change from 0 to 512 [ 127.617341][ T6520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 127.630693][ T6520] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.634205][ T5633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 129.507425][ T6550] netlink: 76 bytes leftover after parsing attributes in process `syz.1.322'. [ 129.526197][ T6553] IPVS: stopping master sync thread 6554 ... [ 130.153624][ T5304] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.374099][ T5304] usb 5-1: Using ep0 maxpacket: 32 [ 130.518006][ T5304] usb 5-1: config 0 has an invalid interface number: 232 but max is 0 [ 130.529459][ T5304] usb 5-1: config 0 has no interface number 0 [ 130.556076][ T5304] usb 5-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=b8.98 [ 130.637453][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.093810][ T5304] usb 5-1: config 0 descriptor?? [ 131.299757][ T5304] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 131.534594][ T5304] gspca_vc032x: reg_r err -71 [ 131.587330][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.638370][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.668944][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.733219][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.774619][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.805170][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.851653][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 131.980385][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.071398][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.162996][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.225649][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.231184][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.236892][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.242198][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.247998][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.253621][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.260042][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.265475][ T5304] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.271000][ T5304] gspca_vc032x: Unknown sensor... [ 132.308978][ T5304] vc032x 5-1:0.232: probe with driver vc032x failed with error -22 [ 132.372341][ T5304] usb 5-1: USB disconnect, device number 3 [ 132.527292][ T6583] syz.3.330 (6583) used greatest stack depth: 18256 bytes left [ 132.883880][ T6606] netlink: 76 bytes leftover after parsing attributes in process `syz.3.340'. [ 133.104171][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.117536][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.114094][ T1170] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.041729][ T6625] syz.3.347[6625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.041823][ T6625] syz.3.347[6625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.053351][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.344'. [ 137.135789][ T6625] syz.3.347[6625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.241819][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.349'. [ 137.389077][ T6644] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 137.397631][ T6644] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.352'. [ 137.407030][ T6644] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 137.492045][ T6650] netlink: 24 bytes leftover after parsing attributes in process `syz.4.355'. [ 137.530673][ T6650] netlink: 152 bytes leftover after parsing attributes in process `syz.4.355'. [ 137.647340][ T6653] netlink: 76 bytes leftover after parsing attributes in process `syz.0.357'. [ 138.572699][ T6665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 139.052721][ T5274] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.303480][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 139.474072][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 139.483867][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 139.507404][ T5274] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 139.536666][ T5274] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 139.575094][ T5274] usb 5-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 139.606463][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.643732][ T5274] usb 5-1: config 0 descriptor?? [ 139.677679][ T5274] io_ti 5-1:0.0: required endpoints missing [ 139.691403][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 139.880081][ T5274] usb 5-1: USB disconnect, device number 4 [ 139.977167][ T6699] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 139.985069][ T6699] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.368'. [ 139.994391][ T6699] netlink: 'syz.0.368': attribute type 1 has an invalid length. [ 142.209186][ T6739] kvm: emulating exchange as write [ 142.444572][ T6751] zonefs (nbd4) ERROR: Not a zoned block device [ 142.551518][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.391'. [ 143.831815][ T6792] loop4: detected capacity change from 0 to 256 [ 143.972832][ T6792] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 143.998647][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 144.000794][ T6792] FAT-fs (loop4): Filesystem has been set read-only [ 145.311711][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 145.373448][ T6837] ------------[ cut here ]------------ [ 145.379296][ T6837] Please remove unsupported % in format string [ 145.386261][ T6837] WARNING: CPU: 1 PID: 6837 at lib/vsprintf.c:2680 format_decode+0x1193/0x1bb0 [ 145.395306][ T6837] Modules linked in: [ 145.399280][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.3.422 Not tainted 6.11.0-rc3-next-20240813-syzkaller #0 [ 145.409451][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 145.419606][ T6837] RIP: 0010:format_decode+0x1193/0x1bb0 [ 145.425306][ T6837] Code: d4 de f5 c6 05 71 92 4d 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 80 8f 34 8d e8 de f1 a0 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 145.445002][ T6837] RSP: 0018:ffffc900040a75c0 EFLAGS: 00010246 [ 145.451197][ T6837] RAX: 976b68d1cdc6e700 RBX: 0000000000000000 RCX: 0000000000040000 [ 145.459273][ T6837] RDX: ffffc9000985c000 RSI: 00000000000045ca RDI: 00000000000045cb [ 145.467325][ T6837] RBP: ffffc900040a76b0 R08: ffffffff8155ae72 R09: fffffbfff1cf9f4c [ 145.475397][ T6837] R10: dffffc0000000000 R11: fffffbfff1cf9f4c R12: 1ffff92000814f1d [ 145.483461][ T6837] R13: ffffc900040a78ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 145.491487][ T6837] FS: 00007f10deb6b6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 145.500547][ T6837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.507211][ T6837] CR2: 000000110c39a22f CR3: 000000007a5d0000 CR4: 00000000003506f0 [ 145.515269][ T6837] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.523399][ T6837] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.531407][ T6837] Call Trace: [ 145.534772][ T6837] [ 145.537729][ T6837] ? __warn+0x163/0x4e0 [ 145.541907][ T6837] ? format_decode+0x1193/0x1bb0 [ 145.546955][ T6837] ? report_bug+0x2b3/0x500 [ 145.551493][ T6837] ? format_decode+0x1193/0x1bb0 [ 145.558163][ T6837] ? handle_bug+0x60/0x90 [ 145.562580][ T6837] ? exc_invalid_op+0x1a/0x50 [ 145.567286][ T6837] ? asm_exc_invalid_op+0x1a/0x20 [ 145.572338][ T6837] ? __warn_printk+0x292/0x360 [ 145.577191][ T6837] ? format_decode+0x1193/0x1bb0 [ 145.582177][ T6837] ? __pfx_format_decode+0x10/0x10 [ 145.587392][ T6837] ? bstr_printf+0x721/0x1210 [ 145.592113][ T6837] bstr_printf+0x137/0x1210 [ 145.596717][ T6837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.603137][ T6837] ? __pfx_bstr_printf+0x10/0x10 [ 145.608110][ T6837] ? timekeeping_get_ns+0x5c/0x420 [ 145.613330][ T6837] ? lockdep_hardirqs_on+0x99/0x150 [ 145.618647][ T6837] ? bpf_trace_printk+0x115/0x230 [ 145.623786][ T6837] bpf_trace_printk+0x1a1/0x230 [ 145.628680][ T6837] ? timekeeping_get_ns+0x2b1/0x420 [ 145.633971][ T6837] ? __pfx_bpf_trace_printk+0x10/0x10 [ 145.639810][ T6837] ? timekeeping_get_ns+0x2b1/0x420 [ 145.645097][ T6837] ? bpf_test_run+0x370/0xa90 [ 145.651290][ T6837] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 145.651329][ T6837] bpf_test_run+0x4f0/0xa90 [ 145.651353][ T6837] ? do_syscall_64+0xf3/0x230 [ 145.651374][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.672196][ T6837] ? bpf_test_run+0x370/0xa90 [ 145.676970][ T6837] ? __pfx_bpf_test_run+0x10/0x10 [ 145.682036][ T6837] ? eth_type_trans+0x3d1/0x7a0 [ 145.686983][ T6837] ? __pfx_eth_type_trans+0x10/0x10 [ 145.692222][ T6837] ? convert___skb_to_skb+0x41/0x620 [ 145.697596][ T6837] bpf_prog_test_run_skb+0xc97/0x1820 [ 145.703064][ T6837] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 145.708907][ T6837] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 145.714787][ T6837] bpf_prog_test_run+0x33a/0x3b0 [ 145.719767][ T6837] __sys_bpf+0x48d/0x810 [ 145.724110][ T6837] ? __pfx___sys_bpf+0x10/0x10 [ 145.728921][ T6837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.735046][ T6837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.741416][ T6837] ? do_syscall_64+0x100/0x230 [ 145.746270][ T6837] __x64_sys_bpf+0x7c/0x90 [ 145.750717][ T6837] do_syscall_64+0xf3/0x230 [ 145.755304][ T6837] ? clear_bhb_loop+0x35/0x90 [ 145.760014][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.765986][ T6837] RIP: 0033:0x7f10ddd799f9 [ 145.770426][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.790131][ T6837] RSP: 002b:00007f10deb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.798634][ T6837] RAX: ffffffffffffffda RBX: 00007f10ddf15f80 RCX: 00007f10ddd799f9 [ 145.806689][ T6837] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 145.814741][ T6837] RBP: 00007f10ddde78ee R08: 0000000000000000 R09: 0000000000000000 [ 145.822805][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.830813][ T6837] R13: 0000000000000000 R14: 00007f10ddf15f80 R15: 00007ffea5fe52d8 [ 145.838890][ T6837] [ 145.841938][ T6837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.849232][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.3.422 Not tainted 6.11.0-rc3-next-20240813-syzkaller #0 [ 145.859308][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 145.869366][ T6837] Call Trace: [ 145.872638][ T6837] [ 145.875559][ T6837] dump_stack_lvl+0x241/0x360 [ 145.880236][ T6837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.885429][ T6837] ? __pfx__printk+0x10/0x10 [ 145.890011][ T6837] ? vscnprintf+0x5d/0x90 [ 145.894345][ T6837] panic+0x349/0x870 [ 145.898239][ T6837] ? __warn+0x172/0x4e0 [ 145.902390][ T6837] ? __pfx_panic+0x10/0x10 [ 145.906815][ T6837] __warn+0x346/0x4e0 [ 145.910793][ T6837] ? format_decode+0x1193/0x1bb0 [ 145.915736][ T6837] report_bug+0x2b3/0x500 [ 145.920058][ T6837] ? format_decode+0x1193/0x1bb0 [ 145.924994][ T6837] handle_bug+0x60/0x90 [ 145.929144][ T6837] exc_invalid_op+0x1a/0x50 [ 145.933641][ T6837] asm_exc_invalid_op+0x1a/0x20 [ 145.938482][ T6837] RIP: 0010:format_decode+0x1193/0x1bb0 [ 145.944020][ T6837] Code: d4 de f5 c6 05 71 92 4d 04 01 90 43 0f b6 04 34 84 c0 0f 85 14 0a 00 00 41 0f b6 75 00 48 c7 c7 80 8f 34 8d e8 de f1 a0 f5 90 <0f> 0b 90 90 e9 0e fd ff ff 48 8b 4c 24 10 80 e1 07 38 c1 0f 8c 14 [ 145.963614][ T6837] RSP: 0018:ffffc900040a75c0 EFLAGS: 00010246 [ 145.969670][ T6837] RAX: 976b68d1cdc6e700 RBX: 0000000000000000 RCX: 0000000000040000 [ 145.977630][ T6837] RDX: ffffc9000985c000 RSI: 00000000000045ca RDI: 00000000000045cb [ 145.985589][ T6837] RBP: ffffc900040a76b0 R08: ffffffff8155ae72 R09: fffffbfff1cf9f4c [ 145.993553][ T6837] R10: dffffc0000000000 R11: fffffbfff1cf9f4c R12: 1ffff92000814f1d [ 146.001515][ T6837] R13: ffffc900040a78ec R14: dffffc0000000000 R15: ffff0000ffffff00 [ 146.009485][ T6837] ? __warn_printk+0x292/0x360 [ 146.014259][ T6837] ? __pfx_format_decode+0x10/0x10 [ 146.019369][ T6837] ? bstr_printf+0x721/0x1210 [ 146.024042][ T6837] bstr_printf+0x137/0x1210 [ 146.028543][ T6837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.034866][ T6837] ? __pfx_bstr_printf+0x10/0x10 [ 146.039795][ T6837] ? timekeeping_get_ns+0x5c/0x420 [ 146.044898][ T6837] ? lockdep_hardirqs_on+0x99/0x150 [ 146.050086][ T6837] ? bpf_trace_printk+0x115/0x230 [ 146.055102][ T6837] bpf_trace_printk+0x1a1/0x230 [ 146.059943][ T6837] ? timekeeping_get_ns+0x2b1/0x420 [ 146.065134][ T6837] ? __pfx_bpf_trace_printk+0x10/0x10 [ 146.070704][ T6837] ? timekeeping_get_ns+0x2b1/0x420 [ 146.075915][ T6837] ? bpf_test_run+0x370/0xa90 [ 146.080608][ T6837] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 146.086069][ T6837] bpf_test_run+0x4f0/0xa90 [ 146.090574][ T6837] ? do_syscall_64+0xf3/0x230 [ 146.095245][ T6837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.101313][ T6837] ? bpf_test_run+0x370/0xa90 [ 146.105989][ T6837] ? __pfx_bpf_test_run+0x10/0x10 [ 146.111008][ T6837] ? eth_type_trans+0x3d1/0x7a0 [ 146.115864][ T6837] ? __pfx_eth_type_trans+0x10/0x10 [ 146.121063][ T6837] ? convert___skb_to_skb+0x41/0x620 [ 146.126342][ T6837] bpf_prog_test_run_skb+0xc97/0x1820 [ 146.131722][ T6837] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.137522][ T6837] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 146.143318][ T6837] bpf_prog_test_run+0x33a/0x3b0 [ 146.148253][ T6837] __sys_bpf+0x48d/0x810 [ 146.152493][ T6837] ? __pfx___sys_bpf+0x10/0x10 [ 146.157256][ T6837] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.163232][ T6837] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.169555][ T6837] ? do_syscall_64+0x100/0x230 [ 146.174311][ T6837] __x64_sys_bpf+0x7c/0x90 [ 146.178721][ T6837] do_syscall_64+0xf3/0x230 [ 146.183213][ T6837] ? clear_bhb_loop+0x35/0x90 [ 146.187886][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.193774][ T6837] RIP: 0033:0x7f10ddd799f9 [ 146.198180][ T6837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.217773][ T6837] RSP: 002b:00007f10deb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.226186][ T6837] RAX: ffffffffffffffda RBX: 00007f10ddf15f80 RCX: 00007f10ddd799f9 [ 146.234152][ T6837] RDX: 0000000000000028 RSI: 0000000020000080 RDI: 000000000000000a [ 146.242117][ T6837] RBP: 00007f10ddde78ee R08: 0000000000000000 R09: 0000000000000000 [ 146.250078][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.258040][ T6837] R13: 0000000000000000 R14: 00007f10ddf15f80 R15: 00007ffea5fe52d8 [ 146.266014][ T6837] [ 146.269242][ T6837] Kernel Offset: disabled [ 146.273603][ T6837] Rebooting in 86400 seconds..