last executing test programs: 8.004250788s ago: executing program 3 (id=69): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r1, 0x24, &(0x7f00000003c0)={0x2, 0x4, 0x2, 0x7}) 7.305322047s ago: executing program 1 (id=73): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.622039334s ago: executing program 3 (id=74): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@nouid32}]}, 0xfd, 0x269, &(0x7f0000000780)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 6.339877819s ago: executing program 2 (id=75): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) 6.255941725s ago: executing program 0 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0xa, 0x2, 0x1001, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.033488469s ago: executing program 1 (id=78): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, 0x0) 5.837624326s ago: executing program 2 (id=79): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4048091) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 5.60187743s ago: executing program 3 (id=80): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r0, 0x0, 0x91}, 0x18) setuid(0x0) 5.255206912s ago: executing program 0 (id=82): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) lsm_get_self_attr(0x68, 0x0, &(0x7f0000001040), 0x0) 4.696193741s ago: executing program 0 (id=84): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 4.602976614s ago: executing program 3 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xa04, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.462129014s ago: executing program 1 (id=86): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) bind$xdp(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 4.327803421s ago: executing program 2 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.003355159s ago: executing program 0 (id=88): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) unshare(0x28000600) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.823087589s ago: executing program 4 (id=89): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) 3.506964215s ago: executing program 2 (id=90): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_ignore}, {@jqfmt_vfsv0}, {@i_version}]}, 0x4, 0x75a, &(0x7f0000001d80)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64242, 0x19) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x82) ftruncate(r2, 0xee72) 3.236855687s ago: executing program 1 (id=91): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c00048048000180080001"], 0x122}}, 0x400c080) r2 = syz_open_dev$usbfs(0x0, 0x204, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) dup(r2) 2.949298726s ago: executing program 4 (id=92): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000580)='./file0\x00', 0x0) 2.752622217s ago: executing program 0 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r2) 2.633534509s ago: executing program 3 (id=94): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) lsm_get_self_attr(0x68, 0x0, &(0x7f0000001040), 0x0) 2.36710922s ago: executing program 4 (id=95): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = dup(r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x45, 0x1, 0x8, 0x61, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x40, 0x40, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001440)={'syztnl2\x00', 0x0}) 2.059496527s ago: executing program 2 (id=96): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCMBIC(r1, 0x5417, 0x0) 1.625483531s ago: executing program 1 (id=97): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x4}, 0x10) sendmsg$tipc(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4048091) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) 1.624844295s ago: executing program 3 (id=98): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 1.585442751s ago: executing program 0 (id=99): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r3 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) open_tree(0xffffffffffffffff, 0x0, 0x85801) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, 0x0, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) 1.148062995s ago: executing program 4 (id=100): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 667.361755ms ago: executing program 4 (id=101): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 324.990381ms ago: executing program 2 (id=102): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0x4}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000012c0)={0x7, 0x8, 0xfa00, {r4, 0xffffffff}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5, 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000000)) 100.909428ms ago: executing program 1 (id=103): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=104): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. [ 189.607525][ T5768] cgroup: Unknown subsys name 'net' [ 189.751122][ T5768] cgroup: Unknown subsys name 'cpuset' [ 189.765877][ T5768] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.350133][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.356959][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 240.364911][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 245.252338][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.272499][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.280482][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.290956][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.299086][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.307110][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.316941][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.325192][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.333478][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.346084][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.358884][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.359385][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.381525][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.390884][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.405740][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.406852][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.415934][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.422186][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.431382][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.443428][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.444971][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.458540][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.461698][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.480541][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.615605][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.751720][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.781362][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.821346][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.842500][ T5797] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.852271][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.892754][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 247.024885][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 247.254735][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 247.331112][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 247.492319][ T5790] Bluetooth: hci0: command tx timeout [ 247.612737][ T5790] Bluetooth: hci1: command tx timeout [ 247.618401][ T5790] Bluetooth: hci2: command tx timeout [ 247.624276][ T5790] Bluetooth: hci3: command tx timeout [ 247.973656][ T52] Bluetooth: hci4: command tx timeout [ 248.113406][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.121903][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.129667][ T5785] bridge_slave_0: entered allmulticast mode [ 248.145088][ T5785] bridge_slave_0: entered promiscuous mode [ 248.165090][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 248.206365][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.214167][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.221901][ T5785] bridge_slave_1: entered allmulticast mode [ 248.231144][ T5785] bridge_slave_1: entered promiscuous mode [ 248.565636][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.573768][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.581551][ T5786] bridge_slave_0: entered allmulticast mode [ 248.591122][ T5786] bridge_slave_0: entered promiscuous mode [ 248.608416][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.618500][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.626318][ T5786] bridge_slave_1: entered allmulticast mode [ 248.635204][ T5786] bridge_slave_1: entered promiscuous mode [ 248.659698][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.671003][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.678638][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.687067][ T5794] bridge_slave_0: entered allmulticast mode [ 248.696091][ T5794] bridge_slave_0: entered promiscuous mode [ 248.822824][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.866888][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.874738][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.882521][ T5794] bridge_slave_1: entered allmulticast mode [ 248.891808][ T5794] bridge_slave_1: entered promiscuous mode [ 248.910336][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.918190][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.926751][ T5784] bridge_slave_0: entered allmulticast mode [ 248.935715][ T5784] bridge_slave_0: entered promiscuous mode [ 248.997510][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.074853][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.084438][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.092432][ T5784] bridge_slave_1: entered allmulticast mode [ 249.100815][ T5784] bridge_slave_1: entered promiscuous mode [ 249.153668][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.203692][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.220957][ T5785] team0: Port device team_slave_0 added [ 249.346264][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.358952][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.366807][ T5800] bridge_slave_0: entered allmulticast mode [ 249.375687][ T5800] bridge_slave_0: entered promiscuous mode [ 249.448005][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.464922][ T5786] team0: Port device team_slave_0 added [ 249.479194][ T5785] team0: Port device team_slave_1 added [ 249.496344][ T5786] team0: Port device team_slave_1 added [ 249.538189][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.546000][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.553814][ T5800] bridge_slave_1: entered allmulticast mode [ 249.562816][ T5800] bridge_slave_1: entered promiscuous mode [ 249.570974][ T52] Bluetooth: hci0: command tx timeout [ 249.650816][ T52] Bluetooth: hci3: command tx timeout [ 249.656444][ T52] Bluetooth: hci2: command tx timeout [ 249.663471][ T52] Bluetooth: hci1: command tx timeout [ 249.716667][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.884615][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.896055][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.903385][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.929842][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.952650][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.967867][ T5794] team0: Port device team_slave_0 added [ 249.977900][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.985354][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.012020][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.051401][ T5790] Bluetooth: hci4: command tx timeout [ 250.061716][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.068838][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.095186][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.115602][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.131851][ T5794] team0: Port device team_slave_1 added [ 250.142495][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.149648][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.176004][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.327732][ T5784] team0: Port device team_slave_0 added [ 250.418403][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.425728][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.452214][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.470458][ T5784] team0: Port device team_slave_1 added [ 250.492671][ T5800] team0: Port device team_slave_0 added [ 250.530290][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.537610][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.564124][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.645806][ T5800] team0: Port device team_slave_1 added [ 250.845003][ T5786] hsr_slave_0: entered promiscuous mode [ 250.857284][ T5786] hsr_slave_1: entered promiscuous mode [ 250.874319][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.882773][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.909479][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.934387][ T5785] hsr_slave_0: entered promiscuous mode [ 250.944284][ T5785] hsr_slave_1: entered promiscuous mode [ 250.952530][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.960260][ T5785] Cannot create hsr debugfs directory [ 250.969200][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.976499][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.002897][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.022017][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.029205][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.055640][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.087861][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.095301][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.121680][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.439194][ T5800] hsr_slave_0: entered promiscuous mode [ 251.447905][ T5800] hsr_slave_1: entered promiscuous mode [ 251.455662][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.463691][ T5800] Cannot create hsr debugfs directory [ 251.483040][ T5794] hsr_slave_0: entered promiscuous mode [ 251.494067][ T5794] hsr_slave_1: entered promiscuous mode [ 251.502416][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.510164][ T5794] Cannot create hsr debugfs directory [ 251.668352][ T5790] Bluetooth: hci0: command tx timeout [ 251.748841][ T5790] Bluetooth: hci1: command tx timeout [ 251.754822][ T52] Bluetooth: hci2: command tx timeout [ 251.760499][ T52] Bluetooth: hci3: command tx timeout [ 251.787729][ T5784] hsr_slave_0: entered promiscuous mode [ 251.796396][ T5784] hsr_slave_1: entered promiscuous mode [ 251.805170][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.813096][ T5784] Cannot create hsr debugfs directory [ 252.131404][ T5790] Bluetooth: hci4: command tx timeout [ 252.933277][ T5785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.956733][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.988297][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.025170][ T5785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.087060][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.135013][ T5785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.192096][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.237126][ T5785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.431996][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.504766][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.548227][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.585643][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.609927][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.731106][ T5790] Bluetooth: hci0: command tx timeout [ 253.735875][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.807510][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.816643][ T5790] Bluetooth: hci1: command tx timeout [ 253.822698][ T5790] Bluetooth: hci3: command tx timeout [ 253.824845][ T52] Bluetooth: hci2: command tx timeout [ 253.852512][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.900365][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.926624][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.976728][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.043067][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.211298][ T52] Bluetooth: hci4: command tx timeout [ 254.884144][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.028366][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.144122][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.179748][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.275865][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.283581][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.345360][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.353073][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.386901][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.401370][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.436794][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.444482][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.506782][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.514626][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.563701][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.571518][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.597036][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.617765][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.746705][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.754416][ T4161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.003298][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.049572][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.190290][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.197999][ T4161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.224861][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.232556][ T4161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.336152][ T4161] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.343925][ T4161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.370255][ T4161] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.377989][ T4161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.718681][ T5794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.891941][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 258.206375][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.226898][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.303184][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.722201][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.836607][ T5800] veth0_vlan: entered promiscuous mode [ 258.947832][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.966659][ T5786] veth0_vlan: entered promiscuous mode [ 259.038444][ T5800] veth1_vlan: entered promiscuous mode [ 259.110015][ T5786] veth1_vlan: entered promiscuous mode [ 259.462461][ T5794] veth0_vlan: entered promiscuous mode [ 259.490476][ T5800] veth0_macvtap: entered promiscuous mode [ 259.591300][ T5784] veth0_vlan: entered promiscuous mode [ 259.607002][ T5786] veth0_macvtap: entered promiscuous mode [ 259.635008][ T5800] veth1_macvtap: entered promiscuous mode [ 259.656151][ T5794] veth1_vlan: entered promiscuous mode [ 259.688871][ T5786] veth1_macvtap: entered promiscuous mode [ 259.767790][ T5784] veth1_vlan: entered promiscuous mode [ 259.877218][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.949379][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.960402][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.976601][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.065043][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.108083][ T5794] veth0_macvtap: entered promiscuous mode [ 260.136550][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.148507][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.165302][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.229964][ T5794] veth1_macvtap: entered promiscuous mode [ 260.287439][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.297998][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.308021][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.317183][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.338139][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.347350][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.356719][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.365911][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.498013][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.509012][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.519278][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.530141][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.547653][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.612988][ T5784] veth0_macvtap: entered promiscuous mode [ 260.705034][ T5784] veth1_macvtap: entered promiscuous mode [ 260.754712][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.766635][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.778007][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.788788][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.805624][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.000516][ T5794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.009774][ T5794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.019111][ T5794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.028294][ T5794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.062551][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.073428][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.083677][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.094608][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.104806][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.115572][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.131200][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.418508][ T5785] veth0_vlan: entered promiscuous mode [ 261.430133][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.441267][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.451482][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.462177][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.472317][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.482988][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.498066][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.624284][ T5785] veth1_vlan: entered promiscuous mode [ 261.669320][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.680949][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.689989][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.701052][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.109600][ T5785] veth0_macvtap: entered promiscuous mode [ 262.204231][ T5785] veth1_macvtap: entered promiscuous mode [ 262.424087][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.434996][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.445188][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.456912][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.467041][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.477876][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.488081][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.498872][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.513896][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.672609][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.686566][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.698181][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.712132][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.722333][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.733138][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.743300][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.754250][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.769527][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.052627][ T5785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.062031][ T5785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.071246][ T5785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.080345][ T5785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.942615][ T4161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.951814][ T4161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.176882][ T4161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.186175][ T4161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.458064][ T3782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.466519][ T3782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.714228][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.722783][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.960337][ T5786] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 268.330993][ T3782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.339079][ T3782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.481452][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.489627][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.685941][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.694937][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.835905][ T3782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.846099][ T3782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.300521][ T5980] loop3: detected capacity change from 0 to 128 [ 270.021444][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.021539][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.229046][ T5982] workqueue: Failed to create a rescuer kthread for wq "dio/loop3": -EINTR [ 270.250313][ T5980] syz.3.4: attempt to access beyond end of device [ 270.250313][ T5980] loop3: rw=2049, sector=129, nr_sectors = 408 limit=128 [ 270.388527][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.396897][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.662939][ T5986] loop0: detected capacity change from 0 to 512 [ 270.713750][ T5986] EXT4-fs: Ignoring removed oldalloc option [ 271.004244][ T5986] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1: Parent and EA inode have the same ino 15 [ 271.065471][ T5986] EXT4-fs (loop0): Remounting filesystem read-only [ 271.072957][ T5986] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 271.088046][ T5986] EXT4-fs warning (device loop0): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 271.099394][ T5986] EXT4-fs (loop0): 1 orphan inode deleted [ 271.107989][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.180040][ T5993] program syz.2.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.278671][ T5986] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.446386][ T5995] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 272.252730][ T6003] loop2: detected capacity change from 0 to 1024 [ 272.349293][ T6003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.523462][ T6009] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 272.593714][ T6009] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 272.612488][ T6009] EXT4-fs (loop2): This should not happen!! Data will be lost [ 272.612488][ T6009] [ 272.624331][ T6009] EXT4-fs (loop2): Total free blocks count 0 [ 272.630541][ T6009] EXT4-fs (loop2): Free/Dirty block details [ 272.636913][ T6009] EXT4-fs (loop2): free_blocks=68451041280 [ 272.643121][ T6009] EXT4-fs (loop2): dirty_blocks=496 [ 272.648542][ T6009] EXT4-fs (loop2): Block reservation details [ 272.654920][ T6009] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 272.689275][ T6003] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 272.840927][ T6013] syzkaller1: entered promiscuous mode [ 272.846794][ T6013] syzkaller1: entered allmulticast mode [ 273.397070][ T6018] netlink: 'syz.1.14': attribute type 3 has an invalid length. [ 273.470009][ T6016] loop0: detected capacity change from 0 to 512 [ 273.544362][ T6016] EXT4-fs: Ignoring removed bh option [ 273.600855][ T6016] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 273.614300][ T6016] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 273.812994][ T6016] EXT4-fs (loop0): 1 truncate cleaned up [ 273.821549][ T6016] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.063945][ T6027] random: crng reseeded on system resumption [ 274.899904][ T6035] loop4: detected capacity change from 0 to 1024 [ 275.017805][ T6016] infiniband syz2: set active [ 275.022884][ T6016] infiniband syz2: added veth0_to_bond [ 275.071425][ T29] audit: type=1326 audit(1739853496.716:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 275.109267][ T6035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.291201][ T6038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 275.546380][ T6016] RDS/IB: syz2: added [ 275.550831][ T6016] smc: adding ib device syz2 with port count 1 [ 275.557281][ T6016] smc: ib device syz2 port 1 has pnetid [ 276.835260][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.542448][ T6053] loop1: detected capacity change from 0 to 128 [ 277.595280][ T6054] Illegal XDP return value 268435456 on prog (id 16) dev syz_tun, expect packet loss! [ 277.601923][ T29] audit: type=1804 audit(1739853499.256:3): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.20" name="/newroot/5/file0/bus" dev="loop1" ino=4 res=1 errno=0 [ 277.631704][ T29] audit: type=1800 audit(1739853499.256:4): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.20" name="bus" dev="loop1" ino=4 res=0 errno=0 [ 277.654241][ T29] audit: type=1326 audit(1739853499.296:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 277.675992][ T29] audit: type=1326 audit(1739853499.296:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 277.774269][ T6053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 277.828931][ T6056] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 278.013886][ T29] audit: type=1326 audit(1739853499.376:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 278.041180][ T29] audit: type=1326 audit(1739853499.396:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 278.064614][ T29] audit: type=1326 audit(1739853499.396:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 278.086444][ T29] audit: type=1326 audit(1739853499.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 278.108391][ T29] audit: type=1326 audit(1739853499.416:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6051 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 280.068765][ T6073] loop1: detected capacity change from 0 to 164 [ 280.100918][ T6073] ======================================================= [ 280.100918][ T6073] WARNING: The mand mount option has been deprecated and [ 280.100918][ T6073] and is ignored by this kernel. Remove the mand [ 280.100918][ T6073] option from the mount to silence this warning. [ 280.100918][ T6073] ======================================================= [ 280.123087][ T8] IPVS: starting estimator thread 0... [ 280.143935][ T6067] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 280.195442][ T6073] Unable to read rock-ridge attributes [ 280.241269][ T6073] Unable to read rock-ridge attributes [ 280.251240][ T6075] IPVS: using max 288 ests per chain, 14400 per kthread [ 280.334212][ T6065] syz.3.26 (6065) used greatest stack depth: 5216 bytes left [ 280.509919][ T6076] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 281.597134][ T5794] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.691649][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 281.691720][ T29] audit: type=1326 audit(1739853503.336:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 281.793397][ T6083] can0: slcan on ttyS3. [ 281.828721][ T6085] capability: warning: `syz.1.32' uses deprecated v2 capabilities in a way that may be insecure [ 281.833852][ T29] audit: type=1326 audit(1739853503.416:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 281.862495][ T29] audit: type=1326 audit(1739853503.496:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 281.885112][ T29] audit: type=1326 audit(1739853503.546:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 281.908961][ T29] audit: type=1326 audit(1739853503.546:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.215149][ T29] audit: type=1326 audit(1739853503.646:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.242104][ T29] audit: type=1326 audit(1739853503.646:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.266783][ T29] audit: type=1326 audit(1739853503.726:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.292148][ T29] audit: type=1326 audit(1739853503.816:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.314891][ T29] audit: type=1326 audit(1739853503.816:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6079 comm="syz.1.32" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1579 code=0x7ffc0000 [ 282.543722][ T6083] can0 (unregistered): slcan off ttyS3. [ 283.601605][ T6103] loop4: detected capacity change from 0 to 1024 [ 283.717970][ T6103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.821349][ T6107] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 284.509951][ T5785] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.113572][ T6132] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 289.038881][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'. [ 289.984752][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.4.52'. [ 290.797723][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.804729][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.536377][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 291.536452][ T29] audit: type=1326 audit(1739853513.206:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6176 comm="syz.1.57" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd1579 code=0x0 [ 292.195237][ T6187] loop3: detected capacity change from 0 to 512 [ 292.389452][ T6187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.402836][ T6187] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.934878][ T5800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.588895][ T6233] loop3: detected capacity change from 0 to 128 [ 296.694590][ T6233] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 296.781465][ T6233] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.415217][ T5800] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.902313][ T6248] syz.4.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 300.087582][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.91'. [ 300.097091][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.91'. [ 300.302103][ T6269] loop2: detected capacity change from 0 to 2048 [ 300.312108][ T6269] EXT4-fs: Ignoring removed i_version option [ 300.423383][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.703604][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.91'. [ 300.713394][ T6271] netlink: 60 bytes leftover after parsing attributes in process `syz.1.91'. [ 300.914022][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.614325][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'. [ 303.667627][ T6309] ===================================================== [ 303.675032][ T6309] BUG: KMSAN: uninit-value in ip_route_output_key_hash_rcu+0x3b7/0x3810 [ 303.683768][ T6309] ip_route_output_key_hash_rcu+0x3b7/0x3810 [ 303.690121][ T6309] ip_route_output_flow+0xca/0x2b0 [ 303.695565][ T6309] ipvlan_process_v4_outbound+0x2a8/0x770 [ 303.701592][ T6309] ipvlan_queue_xmit+0xf21/0x1780 [ 303.706818][ T6309] ipvlan_start_xmit+0x5b/0x210 [ 303.711996][ T6309] dev_hard_start_xmit+0x247/0xa20 [ 303.717337][ T6309] __dev_queue_xmit+0x366a/0x57d0 [ 303.722753][ T6309] packet_xmit+0x9c/0x6c0 [ 303.727309][ T6309] packet_sendmsg+0x93e0/0xa7e0 [ 303.732468][ T6309] __sock_sendmsg+0x30f/0x380 [ 303.737345][ T6309] __sys_sendto+0x594/0x750 [ 303.742147][ T6309] __ia32_sys_sendto+0x123/0x1c0 [ 303.747315][ T6309] ia32_sys_call+0x3dd0/0x4180 [ 303.752387][ T6309] __do_fast_syscall_32+0xb0/0x110 [ 303.757697][ T6309] do_fast_syscall_32+0x38/0x80 [ 303.763019][ T6309] do_SYSENTER_32+0x1f/0x30 [ 303.767717][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.774389][ T6309] [ 303.776837][ T6309] Uninit was stored to memory at: [ 303.782213][ T6309] ipvlan_process_v4_outbound+0x374/0x770 [ 303.788133][ T6309] ipvlan_queue_xmit+0xf21/0x1780 [ 303.793441][ T6309] ipvlan_start_xmit+0x5b/0x210 [ 303.798487][ T6309] dev_hard_start_xmit+0x247/0xa20 [ 303.803925][ T6309] __dev_queue_xmit+0x366a/0x57d0 [ 303.809190][ T6309] packet_xmit+0x9c/0x6c0 [ 303.813859][ T6309] packet_sendmsg+0x93e0/0xa7e0 [ 303.818896][ T6309] __sock_sendmsg+0x30f/0x380 [ 303.823907][ T6309] __sys_sendto+0x594/0x750 [ 303.828633][ T6309] __ia32_sys_sendto+0x123/0x1c0 [ 303.833883][ T6309] ia32_sys_call+0x3dd0/0x4180 [ 303.838849][ T6309] __do_fast_syscall_32+0xb0/0x110 [ 303.844279][ T6309] do_fast_syscall_32+0x38/0x80 [ 303.849340][ T6309] do_SYSENTER_32+0x1f/0x30 [ 303.854175][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.860852][ T6309] [ 303.863275][ T6309] Uninit was created at: [ 303.867768][ T6309] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 303.873968][ T6309] kmalloc_reserve+0x13d/0x4a0 [ 303.878943][ T6309] __alloc_skb+0x363/0x7b0 [ 303.883760][ T6309] alloc_skb_with_frags+0xc8/0xd00 [ 303.889152][ T6309] sock_alloc_send_pskb+0xa81/0xbf0 [ 303.894654][ T6309] packet_sendmsg+0x7722/0xa7e0 [ 303.899719][ T6309] __sock_sendmsg+0x30f/0x380 [ 303.904748][ T6309] __sys_sendto+0x594/0x750 [ 303.909519][ T6309] __ia32_sys_sendto+0x123/0x1c0 [ 303.914806][ T6309] ia32_sys_call+0x3dd0/0x4180 [ 303.919813][ T6309] __do_fast_syscall_32+0xb0/0x110 [ 303.925252][ T6309] do_fast_syscall_32+0x38/0x80 [ 303.930300][ T6309] do_SYSENTER_32+0x1f/0x30 [ 303.935104][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.941785][ T6309] [ 303.944236][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.4.104 Not tainted 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 303.955120][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 303.965419][ T6309] ===================================================== [ 303.972554][ T6309] Disabling lock debugging due to kernel taint [ 303.978836][ T6309] Kernel panic - not syncing: kmsan.panic set ... [ 303.985398][ T6309] CPU: 0 UID: 0 PID: 6309 Comm: syz.4.104 Tainted: G B 6.14.0-rc3-syzkaller-00012-g2408a807bfc3 #0 [ 303.997658][ T6309] Tainted: [B]=BAD_PAGE [ 304.001905][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 304.012095][ T6309] Call Trace: [ 304.015476][ T6309] [ 304.018498][ T6309] dump_stack_lvl+0x216/0x2d0 [ 304.023332][ T6309] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.029353][ T6309] dump_stack+0x1e/0x24 [ 304.033683][ T6309] panic+0x4e2/0xcf0 [ 304.037790][ T6309] ? kmsan_get_metadata+0xb1/0x1c0 [ 304.043110][ T6309] kmsan_report+0x2c7/0x2d0 [ 304.047804][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.053182][ T6309] ? __msan_warning+0x95/0x120 [ 304.058108][ T6309] ? ip_route_output_key_hash_rcu+0x3b7/0x3810 [ 304.064474][ T6309] ? ip_route_output_flow+0xca/0x2b0 [ 304.069960][ T6309] ? ipvlan_process_v4_outbound+0x2a8/0x770 [ 304.076081][ T6309] ? ipvlan_queue_xmit+0xf21/0x1780 [ 304.081445][ T6309] ? ipvlan_start_xmit+0x5b/0x210 [ 304.086652][ T6309] ? dev_hard_start_xmit+0x247/0xa20 [ 304.092250][ T6309] ? __dev_queue_xmit+0x366a/0x57d0 [ 304.097656][ T6309] ? packet_xmit+0x9c/0x6c0 [ 304.102326][ T6309] ? packet_sendmsg+0x93e0/0xa7e0 [ 304.107529][ T6309] ? __sock_sendmsg+0x30f/0x380 [ 304.112572][ T6309] ? __sys_sendto+0x594/0x750 [ 304.117469][ T6309] ? __ia32_sys_sendto+0x123/0x1c0 [ 304.122789][ T6309] ? ia32_sys_call+0x3dd0/0x4180 [ 304.127911][ T6309] ? __do_fast_syscall_32+0xb0/0x110 [ 304.133371][ T6309] ? do_fast_syscall_32+0x38/0x80 [ 304.138580][ T6309] ? do_SYSENTER_32+0x1f/0x30 [ 304.143438][ T6309] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.150180][ T6309] ? stack_depot_save_flags+0x6db/0x750 [ 304.155926][ T6309] ? stack_depot_save+0x12/0x20 [ 304.160945][ T6309] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 304.166938][ T6309] ? kmsan_internal_chain_origin+0x57/0xd0 [ 304.172934][ T6309] ? __msan_chain_origin+0xc3/0x150 [ 304.178301][ T6309] ? ip_route_output_flow+0x12c/0x2b0 [ 304.183862][ T6309] ? ipvlan_process_v4_outbound+0x2a8/0x770 [ 304.189946][ T6309] ? ipvlan_queue_xmit+0xf21/0x1780 [ 304.195352][ T6309] ? ipvlan_start_xmit+0x5b/0x210 [ 304.200547][ T6309] ? dev_hard_start_xmit+0x247/0xa20 [ 304.206091][ T6309] ? __dev_queue_xmit+0x366a/0x57d0 [ 304.211548][ T6309] ? packet_xmit+0x9c/0x6c0 [ 304.216227][ T6309] ? packet_sendmsg+0x93e0/0xa7e0 [ 304.221409][ T6309] ? __sock_sendmsg+0x30f/0x380 [ 304.226453][ T6309] ? __sys_sendto+0x594/0x750 [ 304.231336][ T6309] ? __ia32_sys_sendto+0x123/0x1c0 [ 304.236653][ T6309] ? ia32_sys_call+0x3dd0/0x4180 [ 304.241788][ T6309] ? __do_fast_syscall_32+0xb0/0x110 [ 304.247258][ T6309] ? do_fast_syscall_32+0x38/0x80 [ 304.252499][ T6309] ? do_SYSENTER_32+0x1f/0x30 [ 304.257369][ T6309] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.264131][ T6309] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 304.270681][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.276109][ T6309] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.282138][ T6309] __msan_warning+0x95/0x120 [ 304.286936][ T6309] ip_route_output_key_hash_rcu+0x3b7/0x3810 [ 304.293182][ T6309] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 304.299226][ T6309] ? stack_depot_save_flags+0x6db/0x750 [ 304.305002][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.310516][ T6309] ? __rcu_read_lock+0x46/0x70 [ 304.315535][ T6309] ip_route_output_flow+0xca/0x2b0 [ 304.320853][ T6309] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.326872][ T6309] ipvlan_process_v4_outbound+0x2a8/0x770 [ 304.332825][ T6309] ipvlan_queue_xmit+0xf21/0x1780 [ 304.338015][ T6309] ? dev_queue_xmit_nit+0x1311/0x1460 [ 304.343603][ T6309] ? __pfx_ipvlan_start_xmit+0x10/0x10 [ 304.349272][ T6309] ipvlan_start_xmit+0x5b/0x210 [ 304.354345][ T6309] ? __pfx_ipvlan_start_xmit+0x10/0x10 [ 304.360015][ T6309] dev_hard_start_xmit+0x247/0xa20 [ 304.365381][ T6309] __dev_queue_xmit+0x366a/0x57d0 [ 304.370604][ T6309] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.376631][ T6309] ? __dev_queue_xmit+0x3d6/0x57d0 [ 304.381962][ T6309] packet_xmit+0x9c/0x6c0 [ 304.386512][ T6309] packet_sendmsg+0x93e0/0xa7e0 [ 304.391588][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.396978][ T6309] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 304.403066][ T6309] ? aa_label_sk_perm+0x677/0x7b0 [ 304.408265][ T6309] ? filter_irq_stacks+0x60/0x1a0 [ 304.413480][ T6309] ? stack_depot_save_flags+0x2c/0x750 [ 304.419130][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.424602][ T6309] ? __pfx_packet_sendmsg+0x10/0x10 [ 304.429991][ T6309] ? __pfx_packet_sendmsg+0x10/0x10 [ 304.435396][ T6309] __sock_sendmsg+0x30f/0x380 [ 304.440273][ T6309] __sys_sendto+0x594/0x750 [ 304.445068][ T6309] ? do_futex+0x341/0x4a0 [ 304.449594][ T6309] ? kmsan_get_metadata+0x13e/0x1c0 [ 304.455036][ T6309] __ia32_sys_sendto+0x123/0x1c0 [ 304.460209][ T6309] ia32_sys_call+0x3dd0/0x4180 [ 304.465160][ T6309] __do_fast_syscall_32+0xb0/0x110 [ 304.470441][ T6309] ? irqentry_exit+0x16/0x60 [ 304.475180][ T6309] do_fast_syscall_32+0x38/0x80 [ 304.480215][ T6309] do_SYSENTER_32+0x1f/0x30 [ 304.484876][ T6309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.491444][ T6309] RIP: 0023:0xf7fd0579 [ 304.495649][ T6309] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 304.515467][ T6309] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 304.524078][ T6309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 304.532195][ T6309] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000080000440 [ 304.540300][ T6309] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 304.548408][ T6309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.556534][ T6309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.564678][ T6309] [ 304.568130][ T6309] Kernel Offset: disabled [ 304.572539][ T6309] Rebooting in 86400 seconds..