last executing test programs: 1.135826768s ago: executing program 3 (id=4): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x0, 0xfffffffd}, 0x1c) accept4$inet6(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000640)={&(0x7f0000000300), 0x10, 0x0}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r6}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000680)={0x1, 0x6}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f63047d2900ffffca88faca"], 0xdd12}], 0x1}, 0x0) socket(0xa, 0x40000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f0000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$thread_pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.131793635s ago: executing program 1 (id=2): r0 = socket$unix(0x1, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000f00000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000240)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 872.3271ms ago: executing program 2 (id=6): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x2, 0x0, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) 804.726257ms ago: executing program 1 (id=7): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c00000081feffff0200"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) 636.541098ms ago: executing program 2 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000040000000400000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) 496.352882ms ago: executing program 2 (id=9): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtclass={0x50, 0x28, 0x0, 0x0, 0x0, {}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_cake={0x9}, @TCA_RATE={0x6}, @tclass_kind_options=@c_htb={{0x8}, {0x4}}]}, 0x50}}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @private2}}}, 0x30) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f450700000053c407cd"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000300)='.\x00', 0xc00, 0x0) 402.452048ms ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 381.027648ms ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000085931704ce1a79239fbfe3afd1000000000002", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@deltaction={0x60, 0x18, 0x400, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x1) r5 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000280)={r7, 0x6}, 0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x11, 0x1ff, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000005000400000000000900020066797a30000000001c00078008000840000067b8080006400000010008001340fffffff7050005000000000005000100060000000d000300686173683a6d6163"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x24, r10, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x0) 363.404817ms ago: executing program 2 (id=10): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 264.479364ms ago: executing program 4 (id=11): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) 183.61934ms ago: executing program 2 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)}, 0x10) 182.832356ms ago: executing program 4 (id=13): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000180)=0xc) r2 = fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) dup3(r5, r6, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') 117.527527ms ago: executing program 3 (id=14): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setrlimit(0x9, &(0x7f0000000000)) 3.231873ms ago: executing program 2 (id=15): r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) 0s ago: executing program 0 (id=16): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @multicast1}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x1, 0x0, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) splice(r5, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[], 0xfffffe3e) r7 = openat$vcsa(0xffffff9c, &(0x7f0000000400), 0x610041, 0x0) setsockopt$inet_buf(r7, 0x0, 0x20, &(0x7f0000000440)="bade3b04465266d22ce0b3d4d2975b2c2d50824801ff682aeb23", 0x1a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. [ 51.120321][ T5218] cgroup: Unknown subsys name 'net' [ 51.266889][ T5218] cgroup: Unknown subsys name 'cpuset' [ 51.274800][ T5218] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.549808][ T5218] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.905044][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.914695][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.923427][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.931494][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.939549][ T5239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.948030][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.956252][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.958532][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.964139][ T5239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.978842][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.979534][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.986725][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.002035][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.009395][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.009457][ T5239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.024910][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.025549][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.033105][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.039928][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.053648][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.054848][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.061591][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.068866][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.082886][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.091169][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.101092][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.108902][ T5246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.121102][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.139630][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.151062][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.479259][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 56.583279][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.677739][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 56.718423][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 56.732631][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 56.760406][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.768464][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.776135][ T5238] bridge_slave_0: entered allmulticast mode [ 56.782808][ T5238] bridge_slave_0: entered promiscuous mode [ 56.827278][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.834533][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.841669][ T5238] bridge_slave_1: entered allmulticast mode [ 56.848481][ T5238] bridge_slave_1: entered promiscuous mode [ 56.884189][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.891362][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.898880][ T5229] bridge_slave_0: entered allmulticast mode [ 56.905750][ T5229] bridge_slave_0: entered promiscuous mode [ 56.932214][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.939479][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.946798][ T5229] bridge_slave_1: entered allmulticast mode [ 56.953465][ T5229] bridge_slave_1: entered promiscuous mode [ 56.968406][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.999804][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.046272][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.072371][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.080153][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.087714][ T5230] bridge_slave_0: entered allmulticast mode [ 57.094922][ T5230] bridge_slave_0: entered promiscuous mode [ 57.107612][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.115527][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.122740][ T5228] bridge_slave_0: entered allmulticast mode [ 57.129848][ T5228] bridge_slave_0: entered promiscuous mode [ 57.138192][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.145494][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.152660][ T5228] bridge_slave_1: entered allmulticast mode [ 57.159463][ T5228] bridge_slave_1: entered promiscuous mode [ 57.167324][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.189042][ T5238] team0: Port device team_slave_0 added [ 57.199284][ T5238] team0: Port device team_slave_1 added [ 57.205541][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.212727][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.220040][ T5230] bridge_slave_1: entered allmulticast mode [ 57.226980][ T5230] bridge_slave_1: entered promiscuous mode [ 57.233295][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.243790][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.250994][ T5241] bridge_slave_0: entered allmulticast mode [ 57.258175][ T5241] bridge_slave_0: entered promiscuous mode [ 57.282185][ T5229] team0: Port device team_slave_0 added [ 57.311228][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.318679][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.326588][ T5241] bridge_slave_1: entered allmulticast mode [ 57.333274][ T5241] bridge_slave_1: entered promiscuous mode [ 57.350472][ T5229] team0: Port device team_slave_1 added [ 57.365349][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.372309][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.398528][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.412055][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.419277][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.445226][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.472746][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.495826][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.507705][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.531101][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.541854][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.562058][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.569093][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.595151][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.617733][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.650335][ T5228] team0: Port device team_slave_0 added [ 57.657791][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.664943][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.690896][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.723059][ T5228] team0: Port device team_slave_1 added [ 57.748594][ T5230] team0: Port device team_slave_0 added [ 57.757451][ T5230] team0: Port device team_slave_1 added [ 57.765772][ T5241] team0: Port device team_slave_0 added [ 57.782108][ T5238] hsr_slave_0: entered promiscuous mode [ 57.788871][ T5238] hsr_slave_1: entered promiscuous mode [ 57.805383][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.813148][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.839422][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.852339][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.859638][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.886013][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.904594][ T5241] team0: Port device team_slave_1 added [ 57.941764][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.948774][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.975631][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.005048][ T5229] hsr_slave_0: entered promiscuous mode [ 58.011432][ T5229] hsr_slave_1: entered promiscuous mode [ 58.018191][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.026258][ T5229] Cannot create hsr debugfs directory [ 58.044713][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.051692][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.078029][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.089696][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.096990][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.124566][ T53] Bluetooth: hci1: command tx timeout [ 58.129383][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.167188][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.174304][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.200978][ T53] Bluetooth: hci0: command tx timeout [ 58.201042][ T5249] Bluetooth: hci2: command tx timeout [ 58.208076][ T53] Bluetooth: hci3: command tx timeout [ 58.212549][ T4624] Bluetooth: hci4: command tx timeout [ 58.223594][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.258905][ T5228] hsr_slave_0: entered promiscuous mode [ 58.266364][ T5228] hsr_slave_1: entered promiscuous mode [ 58.272492][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.280501][ T5228] Cannot create hsr debugfs directory [ 58.371702][ T5230] hsr_slave_0: entered promiscuous mode [ 58.378332][ T5230] hsr_slave_1: entered promiscuous mode [ 58.386872][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.394573][ T5230] Cannot create hsr debugfs directory [ 58.436601][ T5241] hsr_slave_0: entered promiscuous mode [ 58.442949][ T5241] hsr_slave_1: entered promiscuous mode [ 58.449319][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.456986][ T5241] Cannot create hsr debugfs directory [ 58.659056][ T5238] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.670425][ T5238] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.690197][ T5238] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.717310][ T5238] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.769267][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.780161][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.796276][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.817748][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.860522][ T5228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.871414][ T5228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.887964][ T5228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.898413][ T5228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.004274][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.013385][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.054851][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.063669][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.081591][ T5241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.093999][ T5241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.109070][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.133869][ T5241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.152697][ T5241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.172359][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.205091][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.248076][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.255388][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.272947][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.280100][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.290256][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.341383][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.353184][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.360346][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.399684][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.406861][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.439314][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.466716][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.494604][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.501716][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.527444][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.552615][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.563203][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.570388][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.597692][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.608698][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.615882][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.648259][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.655771][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.739736][ T3080] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.746933][ T3080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.767040][ T3080] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.774764][ T3080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.880459][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.991371][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.067681][ T5229] veth0_vlan: entered promiscuous mode [ 60.143094][ T5229] veth1_vlan: entered promiscuous mode [ 60.176845][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.195498][ T5238] veth0_vlan: entered promiscuous mode [ 60.210885][ T4624] Bluetooth: hci1: command tx timeout [ 60.241791][ T5229] veth0_macvtap: entered promiscuous mode [ 60.259149][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.266411][ T53] Bluetooth: hci2: command tx timeout [ 60.271973][ T53] Bluetooth: hci0: command tx timeout [ 60.277530][ T5249] Bluetooth: hci3: command tx timeout [ 60.285449][ T4624] Bluetooth: hci4: command tx timeout [ 60.291966][ T5238] veth1_vlan: entered promiscuous mode [ 60.352553][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.362539][ T5229] veth1_macvtap: entered promiscuous mode [ 60.434218][ T5228] veth0_vlan: entered promiscuous mode [ 60.451235][ T5238] veth0_macvtap: entered promiscuous mode [ 60.467521][ T5228] veth1_vlan: entered promiscuous mode [ 60.486629][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.518728][ T5238] veth1_macvtap: entered promiscuous mode [ 60.544234][ T5241] veth0_vlan: entered promiscuous mode [ 60.554898][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.580261][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.589930][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.598978][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.608063][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.620172][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.631332][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.642817][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.658830][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.669834][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.681399][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.701525][ T5228] veth0_macvtap: entered promiscuous mode [ 60.710091][ T5238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.719222][ T5238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.728230][ T5238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.737569][ T5238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.760851][ T5241] veth1_vlan: entered promiscuous mode [ 60.775816][ T5228] veth1_macvtap: entered promiscuous mode [ 60.810668][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.822427][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.834282][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.845442][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.857010][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.887867][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.902273][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.913296][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.924468][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.935654][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.949054][ T5228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.958187][ T5228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.968089][ T5228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.976855][ T5228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.015726][ T5230] veth0_vlan: entered promiscuous mode [ 61.089456][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.098790][ T5230] veth1_vlan: entered promiscuous mode [ 61.114421][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.151898][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.161646][ T5241] veth0_macvtap: entered promiscuous mode [ 61.169390][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.203201][ T5241] veth1_macvtap: entered promiscuous mode [ 61.214112][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.221968][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.230834][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.251361][ T5230] veth0_macvtap: entered promiscuous mode [ 61.253895][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.267165][ T5230] veth1_macvtap: entered promiscuous mode [ 61.291759][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.302698][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.302868][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.320150][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.337571][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.341409][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.347864][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.365652][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.377463][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.401228][ T5238] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.408353][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.429963][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.437715][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.453239][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.465675][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.476296][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.486284][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.497054][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.508237][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.523057][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.536582][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.549103][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.559673][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.569807][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.580328][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.590300][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.600988][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.612458][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.648079][ T5241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.659415][ T5241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.669246][ T5241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.679591][ T5241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.708051][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.733085][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.740628][ T5315] loop2: detected capacity change from 0 to 512 [ 61.746707][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.762218][ T5315] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 61.766640][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.778459][ T5315] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.806081][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.817106][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.823375][ T5315] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.828485][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.848426][ T5315] EXT4-fs (loop2): 1 truncate cleaned up [ 61.851318][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.862845][ T5315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.868586][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.892590][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.901421][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.911106][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.920022][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.038394][ T29] audit: type=1804 audit(1728046614.521:2): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3" name="/newroot/0/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 62.065280][ T29] audit: type=1800 audit(1728046614.521:3): pid=5315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 62.182069][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.190317][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.225648][ T5322] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 62.257702][ T5238] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.285657][ T53] Bluetooth: hci1: command tx timeout [ 62.295571][ T5322] syz.3.4[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.295665][ T5322] syz.3.4[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.323789][ T5322] syz.3.4[5322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.344724][ T53] Bluetooth: hci3: command tx timeout [ 62.361495][ T53] Bluetooth: hci2: command tx timeout [ 62.364266][ T4624] Bluetooth: hci0: command tx timeout [ 62.371618][ T53] Bluetooth: hci4: command tx timeout [ 62.402773][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.411327][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.517225][ T3080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.532311][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.532416][ T3080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.545053][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.806309][ T5335] hub 2-0:1.0: USB hub found [ 62.834321][ T5335] hub 2-0:1.0: 1 port detected [ 62.912808][ T5335] loop0: detected capacity change from 0 to 128 [ 63.116572][ T5346] BUG: unable to handle page fault for address: fffffbfff0000000 [ 63.124311][ T5346] #PF: supervisor read access in kernel mode [ 63.130263][ T5346] #PF: error_code(0x0000) - not-present page [ 63.136217][ T5346] PGD 23ffe4067 P4D 23ffe4067 PUD 23ffe3067 PMD 0 [ 63.142754][ T5346] Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI [ 63.148824][ T5346] CPU: 0 UID: 0 PID: 5346 Comm: syz.3.14 Not tainted 6.12.0-rc1-next-20241003-syzkaller #0 [ 63.158788][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.168917][ T5346] RIP: 0010:kasan_check_range+0x82/0x290 [ 63.174552][ T5346] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 63.194144][ T5346] RSP: 0018:ffffc900044dfd18 EFLAGS: 00010286 [ 63.200209][ T5346] RAX: 0000000000000001 RBX: 1ffffffff0000000 RCX: ffffffff81cf410f [ 63.208166][ T5346] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff80000000 [ 63.216122][ T5346] RBP: ffffffffffffffff R08: ffffffff80000004 R09: 1ffffffff0000000 [ 63.224092][ T5346] R10: dffffc0000000000 R11: fffffbfff0000000 R12: ffffffff80000000 [ 63.232048][ T5346] R13: 0000000000000005 R14: dffffc0000000001 R15: fffffbfff0000001 [ 63.240018][ T5346] FS: 00007fe158d816c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 63.248934][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.255501][ T5346] CR2: fffffbfff0000000 CR3: 0000000078f1c000 CR4: 00000000003526f0 [ 63.263465][ T5346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.271414][ T5346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.279367][ T5346] Call Trace: [ 63.282628][ T5346] [ 63.285542][ T5346] ? __die_body+0x5f/0xb0 [ 63.289850][ T5346] ? page_fault_oops+0x8e4/0xcc0 [ 63.294771][ T5346] ? fd_install+0x9c/0x5d0 [ 63.299184][ T5346] ? __pfx_page_fault_oops+0x10/0x10 [ 63.304482][ T5346] ? is_prefetch+0x4ed/0x780 [ 63.309064][ T5346] ? __pfx_lock_acquire+0x10/0x10 [ 63.314079][ T5346] ? fd_install+0x9c/0x5d0 [ 63.318485][ T5346] ? __pfx_is_prefetch+0x10/0x10 [ 63.323407][ T5346] ? rcu_read_lock_sched_held+0x8d/0x130 [ 63.329022][ T5346] ? __bad_area_nosemaphore+0x118/0x770 [ 63.334553][ T5346] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 63.340429][ T5346] ? spurious_kernel_fault+0x119/0x5a0 [ 63.345869][ T5346] ? exc_page_fault+0x5c8/0x8c0 [ 63.350704][ T5346] ? asm_exc_page_fault+0x26/0x30 [ 63.355716][ T5346] ? copy_from_kernel_nofault+0x6f/0x2f0 [ 63.361327][ T5346] ? kasan_check_range+0x82/0x290 [ 63.366331][ T5346] copy_from_kernel_nofault+0x6f/0x2f0 [ 63.371780][ T5346] bpf_probe_read_compat+0x10f/0x180 [ 63.377058][ T5346] ? bpf_trace_run2+0x1fc/0x540 [ 63.381905][ T5346] bpf_prog_cb06cae8179e3bfa+0x43/0x45 [ 63.387362][ T5346] bpf_trace_run2+0x2ec/0x540 [ 63.392037][ T5346] ? __pfx_bpf_trace_run2+0x10/0x10 [ 63.397222][ T5346] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 63.403190][ T5346] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.409501][ T5346] ? do_syscall_64+0x100/0x230 [ 63.414249][ T5346] trace_sys_enter+0x93/0xd0 [ 63.418837][ T5346] syscall_trace_enter+0xf8/0x150 [ 63.423836][ T5346] do_syscall_64+0xcc/0x230 [ 63.428320][ T5346] ? clear_bhb_loop+0x35/0x90 [ 63.433066][ T5346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.438951][ T5346] RIP: 0033:0x7fe157f7dff9 [ 63.443341][ T5346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.462920][ T5346] RSP: 002b:00007fe158d810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.471415][ T5346] RAX: ffffffffffffffda RBX: 00007fe158135f88 RCX: 00007fe157f7dff9 [ 63.479385][ T5346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe158135f8c [ 63.487357][ T5346] RBP: 00007fe158135f80 R08: 7fffffffffffffff R09: 0000000000000000 [ 63.495320][ T5346] R10: 0000000000000004 R11: 0000000000000246 R12: 00007fe158135f8c [ 63.503292][ T5346] R13: 0000000000000000 R14: 00007ffe708dd8b0 R15: 00007ffe708dd998 [ 63.511360][ T5346] [ 63.514364][ T5346] Modules linked in: [ 63.518274][ T5346] CR2: fffffbfff0000000 [ 63.522509][ T5346] ---[ end trace 0000000000000000 ]--- [ 63.522546][ T5231] BUG: unable to handle page fault for address: fffffbfff0000000 [ 63.527958][ T5346] RIP: 0010:kasan_check_range+0x82/0x290 [ 63.535660][ T5231] #PF: supervisor read access in kernel mode [ 63.541352][ T5346] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 63.547392][ T5231] #PF: error_code(0x0000) - not-present page [ 63.566968][ T5346] RSP: 0018:ffffc900044dfd18 EFLAGS: 00010286 [ 63.572918][ T5231] PGD 23ffe4067 [ 63.572929][ T5346] [ 63.578959][ T5231] P4D 23ffe4067 PUD 23ffe3067 [ 63.582475][ T5346] RAX: 0000000000000001 RBX: 1ffffffff0000000 RCX: ffffffff81cf410f [ 63.584783][ T5231] PMD 0 [ 63.589514][ T5346] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff80000000 [ 63.597455][ T5231] Oops: Oops: 0000 [#2] PREEMPT SMP KASAN PTI [ 63.600276][ T5346] RBP: ffffffffffffffff R08: ffffffff80000004 R09: 1ffffffff0000000 [ 63.608222][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: udevd Tainted: G D 6.12.0-rc1-next-20241003-syzkaller #0 [ 63.614348][ T5346] R10: dffffc0000000000 R11: fffffbfff0000000 R12: ffffffff80000000 [ 63.622302][ T5231] Tainted: [D]=DIE [ 63.633451][ T5346] R13: 0000000000000005 R14: dffffc0000000001 R15: fffffbfff0000001 [ 63.641396][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 63.645086][ T5346] FS: 00007fe158d816c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 63.653030][ T5231] RIP: 0010:kasan_check_range+0x82/0x290 [ 63.663060][ T5346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.672045][ T5231] Code: 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 48 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd <41> 80 3b 00 0f 85 c9 01 00 00 49 ff c3 48 ff c5 75 ee e9 1e 01 00 [ 63.677643][ T5346] CR2: fffffbfff0000000 CR3: 0000000078f1c000 CR4: 00000000003526f0 [ 63.684195][ T5231] RSP: 0018:ffffc90004067d18 EFLAGS: 00010286 [ 63.703773][ T5346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.711713][ T5231] [ 63.711720][ T5231] RAX: 0000000000000001 RBX: 1ffffffff0000000 RCX: ffffffff81cf410f [ 63.717752][ T5346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.725697][ T5231] RDX: 0000000000000000 RSI: 0000000000000005 RDI: ffffffff80000000 [ 63.728002][ T5346] Kernel panic - not syncing: Fatal exception [ 64.832261][ T5346] Shutting down cpus with NMI [ 64.859270][ T5346] Kernel Offset: disabled [ 64.863581][ T5346] Rebooting in 86400 seconds..