last executing test programs: 1.523825718s ago: executing program 0 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) close(r1) 1.424039899s ago: executing program 0 (id=1616): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x3, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 1.386968389s ago: executing program 4 (id=1618): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000070000000000000003000000850000002e000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 1.252354709s ago: executing program 1 (id=1619): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) 1.201874384s ago: executing program 0 (id=1620): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b007f000001e000000200000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 1.174385817s ago: executing program 4 (id=1621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.049823183s ago: executing program 1 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.048332606s ago: executing program 4 (id=1625): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000700)=""/237, 0xed}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000080)=""/193, 0xc1}], 0x7}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 966.596595ms ago: executing program 1 (id=1626): r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) 888.487246ms ago: executing program 0 (id=1627): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32514, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000005d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, r1, 0x8) 888.04492ms ago: executing program 2 (id=1628): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40002120) 835.635166ms ago: executing program 1 (id=1629): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf8, 0x0, 0x3, 0x4, 0x0, 0x0, 0x80820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0xffffffffffffffff, 0x3}, 0x11a226, 0x0, 0x3, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) 709.902554ms ago: executing program 2 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c6394f90324fc602f000000", 0x18}], 0x1}, 0x0) 709.38958ms ago: executing program 4 (id=1631): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 708.955411ms ago: executing program 3 (id=1632): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000680)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 708.354709ms ago: executing program 0 (id=1633): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b2266"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 693.130701ms ago: executing program 1 (id=1634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 599.874264ms ago: executing program 2 (id=1635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f0000000340), 0x0}, 0x20) 544.530247ms ago: executing program 3 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) fstat(r0, &(0x7f00000002c0)) 544.032156ms ago: executing program 4 (id=1637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000006000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 521.166991ms ago: executing program 2 (id=1638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff3c, 0x0}, 0xe07e872420dfefca) 455.329935ms ago: executing program 3 (id=1639): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x2062) 362.001419ms ago: executing program 2 (id=1640): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4045, 0xfcd}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f00000002c0)=""/178, 0xb2}, {&(0x7f0000000140)=""/158, 0x9e}], 0x8}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 338.333807ms ago: executing program 3 (id=1641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 200.387224ms ago: executing program 0 (id=1642): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 199.835516ms ago: executing program 1 (id=1643): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0xfffbfffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, 0x0, 0x0, 0x9}, 0x94) 199.568114ms ago: executing program 2 (id=1644): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB="58000000150a0101"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x2010) 53.631991ms ago: executing program 4 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_QUERY(0x24, &(0x7f0000001540)={@ifindex, 0xa, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 53.171042ms ago: executing program 3 (id=1646): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)={[{0x5c, 'cpuset'}]}, 0x8) 0s ago: executing program 3 (id=1647): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x883a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14503, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, r1, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.193' (ED25519) to the list of known hosts. [ 67.973319][ T5854] cgroup: Unknown subsys name 'net' [ 68.143528][ T5854] cgroup: Unknown subsys name 'cpuset' [ 68.152286][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.546902][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.491163][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.497598][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.008560][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.016835][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.020879][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.026313][ T5883] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.033291][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.046517][ T5883] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.046981][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.062171][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.070397][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.078594][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.086404][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.086499][ T5882] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.094262][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.109936][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.111432][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.118479][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.134402][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.134462][ T5882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.142004][ T5185] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.157966][ T5185] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.166229][ T5185] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.193244][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.203584][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.212203][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.220486][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.743463][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 72.978516][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 73.014071][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 73.063550][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 73.133933][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 73.157168][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165288][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.173135][ T5865] bridge_slave_0: entered allmulticast mode [ 73.181085][ T5865] bridge_slave_0: entered promiscuous mode [ 73.198554][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.205688][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.213091][ T5865] bridge_slave_1: entered allmulticast mode [ 73.220054][ T5865] bridge_slave_1: entered promiscuous mode [ 73.346712][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.359862][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.426331][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.433794][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.441370][ T5866] bridge_slave_0: entered allmulticast mode [ 73.448291][ T5866] bridge_slave_0: entered promiscuous mode [ 73.472410][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.479583][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.488031][ T5877] bridge_slave_0: entered allmulticast mode [ 73.496011][ T5877] bridge_slave_0: entered promiscuous mode [ 73.530735][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.537919][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.545415][ T5866] bridge_slave_1: entered allmulticast mode [ 73.553278][ T5866] bridge_slave_1: entered promiscuous mode [ 73.581097][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.588357][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.596083][ T5877] bridge_slave_1: entered allmulticast mode [ 73.603202][ T5877] bridge_slave_1: entered promiscuous mode [ 73.634900][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.642097][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.649297][ T5864] bridge_slave_0: entered allmulticast mode [ 73.658131][ T5864] bridge_slave_0: entered promiscuous mode [ 73.667054][ T5865] team0: Port device team_slave_0 added [ 73.708457][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.716005][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.723657][ T5864] bridge_slave_1: entered allmulticast mode [ 73.731172][ T5864] bridge_slave_1: entered promiscuous mode [ 73.739644][ T5865] team0: Port device team_slave_1 added [ 73.760600][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.786696][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.838052][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.863411][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.870725][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.878006][ T5875] bridge_slave_0: entered allmulticast mode [ 73.886137][ T5875] bridge_slave_0: entered promiscuous mode [ 73.895712][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.908963][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.931376][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.938436][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.964786][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.989231][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.996565][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.004262][ T5875] bridge_slave_1: entered allmulticast mode [ 74.011811][ T5875] bridge_slave_1: entered promiscuous mode [ 74.021006][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.045846][ T5877] team0: Port device team_slave_0 added [ 74.052803][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.059860][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.086184][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.098836][ T5866] team0: Port device team_slave_0 added [ 74.130610][ T5877] team0: Port device team_slave_1 added [ 74.161698][ T5866] team0: Port device team_slave_1 added [ 74.207360][ T5864] team0: Port device team_slave_0 added [ 74.213492][ T5879] Bluetooth: hci0: command tx timeout [ 74.213497][ T5185] Bluetooth: hci2: command tx timeout [ 74.220837][ T5864] team0: Port device team_slave_1 added [ 74.272558][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.285804][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.295184][ T5185] Bluetooth: hci3: command tx timeout [ 74.295540][ T5880] Bluetooth: hci1: command tx timeout [ 74.306099][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.307023][ T5879] Bluetooth: hci4: command tx timeout [ 74.313873][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.345455][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.357959][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.365264][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.392108][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.403886][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.411221][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.437852][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.489755][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.496939][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.524124][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.536262][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.543452][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.570093][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.582669][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.589671][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.615842][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.657284][ T5865] hsr_slave_0: entered promiscuous mode [ 74.663976][ T5865] hsr_slave_1: entered promiscuous mode [ 74.684819][ T5875] team0: Port device team_slave_0 added [ 74.693830][ T5875] team0: Port device team_slave_1 added [ 74.785531][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.792795][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.819295][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.836724][ T5877] hsr_slave_0: entered promiscuous mode [ 74.843495][ T5877] hsr_slave_1: entered promiscuous mode [ 74.849602][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 74.855993][ T5877] Cannot create hsr debugfs directory [ 74.914934][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.922004][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.949114][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.981613][ T5866] hsr_slave_0: entered promiscuous mode [ 74.988036][ T5866] hsr_slave_1: entered promiscuous mode [ 74.994382][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 75.000147][ T5866] Cannot create hsr debugfs directory [ 75.011949][ T5864] hsr_slave_0: entered promiscuous mode [ 75.018164][ T5864] hsr_slave_1: entered promiscuous mode [ 75.024461][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 75.030233][ T5864] Cannot create hsr debugfs directory [ 75.232031][ T5875] hsr_slave_0: entered promiscuous mode [ 75.238509][ T5875] hsr_slave_1: entered promiscuous mode [ 75.245594][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 75.251397][ T5875] Cannot create hsr debugfs directory [ 75.618065][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.637037][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.649588][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.674767][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.780502][ T5866] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.793911][ T5866] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.804479][ T5866] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.833626][ T5866] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.916491][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.943716][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.961660][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.989414][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.060468][ T5877] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.072775][ T5877] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.085315][ T5877] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.109802][ T5877] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.184557][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.248114][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.258403][ T5875] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.282187][ T5880] Bluetooth: hci0: command tx timeout [ 76.287792][ T5879] Bluetooth: hci2: command tx timeout [ 76.290634][ T5875] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.306547][ T5875] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.317546][ T5875] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.330160][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.337449][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.360394][ T5879] Bluetooth: hci3: command tx timeout [ 76.372731][ T5880] Bluetooth: hci1: command tx timeout [ 76.374948][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.378290][ T5879] Bluetooth: hci4: command tx timeout [ 76.385389][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.477847][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.518487][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.549695][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.575715][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.644479][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.651677][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.675989][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.701802][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.725885][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.733093][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.763388][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.770644][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.782880][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.790040][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.809574][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.861338][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.868471][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.897463][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.931929][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.939130][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.974577][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.997417][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.022203][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.055711][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.062925][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.093348][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.100616][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.286085][ T5865] veth0_vlan: entered promiscuous mode [ 77.371766][ T5865] veth1_vlan: entered promiscuous mode [ 77.413599][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.558460][ T5865] veth0_macvtap: entered promiscuous mode [ 77.582443][ T5865] veth1_macvtap: entered promiscuous mode [ 77.639346][ T5864] veth0_vlan: entered promiscuous mode [ 77.662772][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.708345][ T5864] veth1_vlan: entered promiscuous mode [ 77.727283][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.794126][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.804411][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.836548][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.845620][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.876922][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.891059][ T5864] veth0_macvtap: entered promiscuous mode [ 77.905669][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.926436][ T5864] veth1_macvtap: entered promiscuous mode [ 78.018867][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.079926][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.099502][ T5866] veth0_vlan: entered promiscuous mode [ 78.137436][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.159412][ T5866] veth1_vlan: entered promiscuous mode [ 78.195096][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.224080][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.255614][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.257791][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.293286][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.306549][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.324459][ T5866] veth0_macvtap: entered promiscuous mode [ 78.363014][ T5879] Bluetooth: hci2: command tx timeout [ 78.368871][ T5880] Bluetooth: hci0: command tx timeout [ 78.398317][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.405296][ T5866] veth1_macvtap: entered promiscuous mode [ 78.417135][ T5875] veth0_vlan: entered promiscuous mode [ 78.420689][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.441140][ T5880] Bluetooth: hci4: command tx timeout [ 78.443189][ T5879] Bluetooth: hci1: command tx timeout [ 78.446656][ T5880] Bluetooth: hci3: command tx timeout [ 78.466365][ T5875] veth1_vlan: entered promiscuous mode [ 78.512917][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.526276][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.564804][ T1088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.584589][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.589904][ T1088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.627949][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.640456][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.648435][ T1088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.667971][ T1088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.689723][ T5877] veth0_vlan: entered promiscuous mode [ 78.706848][ T5877] veth1_vlan: entered promiscuous mode [ 78.803595][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.814967][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.857621][ T5875] veth0_macvtap: entered promiscuous mode [ 78.882783][ T5877] veth0_macvtap: entered promiscuous mode [ 78.923338][ T5875] veth1_macvtap: entered promiscuous mode [ 78.937567][ T5877] veth1_macvtap: entered promiscuous mode [ 79.054328][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.077971][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.092907][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.127016][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.185263][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.200731][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.215164][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.224034][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253333][ T1152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.267287][ T1152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.338094][ T1152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.382233][ T1152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.492505][ T1152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522103][ T1088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.549106][ T6000] netlink: 'syz.2.9': attribute type 29 has an invalid length. [ 79.584983][ T1088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.595980][ T1088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651272][ T6000] netlink: 'syz.2.9': attribute type 29 has an invalid length. [ 79.724571][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.763691][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.863739][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.893595][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.309110][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.322216][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.325516][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.345160][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.453091][ T5880] Bluetooth: hci0: command tx timeout [ 80.453101][ T5879] Bluetooth: hci2: command tx timeout [ 80.521540][ T5880] Bluetooth: hci3: command tx timeout [ 80.521558][ T5879] Bluetooth: hci1: command tx timeout [ 80.521593][ T5879] Bluetooth: hci4: command tx timeout [ 80.532720][ T6027] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 80.532777][ T6027] netlink: 'syz.3.17': attribute type 7 has an invalid length. [ 80.555680][ T6027] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.17'. [ 81.408996][ T6049] warning: `syz.2.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.220592][ T6067] netlink: 'syz.3.34': attribute type 4 has an invalid length. [ 82.241177][ T6067] netlink: 140 bytes leftover after parsing attributes in process `syz.3.34'. [ 82.650063][ C1] hrtimer: interrupt took 37836 ns [ 83.536906][ T6108] netlink: 76 bytes leftover after parsing attributes in process `syz.1.50'. [ 84.178097][ T6123] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 84.661868][ T6156] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.73'. [ 84.832986][ T6163] netlink: 132 bytes leftover after parsing attributes in process `syz.4.76'. [ 84.958407][ T6169] syz.1.79 uses obsolete (PF_INET,SOCK_PACKET) [ 85.926181][ T6204] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.97'. [ 85.947406][ T6205] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.96'. [ 86.586200][ T6228] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 86.848838][ T982] cfg80211: failed to load regulatory.db [ 86.989799][ T6248] netlink: 'syz.2.118': attribute type 21 has an invalid length. [ 87.024597][ T6248] netlink: 176 bytes leftover after parsing attributes in process `syz.2.118'. [ 87.126822][ T6255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.122'. [ 87.774951][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 87.797251][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'. [ 87.991661][ T6297] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.141'. [ 88.292439][ T6314] netlink: 'syz.2.149': attribute type 8 has an invalid length. [ 88.325083][ T6314] netlink: 'syz.2.149': attribute type 3 has an invalid length. [ 88.352447][ T6314] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.149'. [ 88.915465][ T6341] Illegal XDP return value 4294967274 on prog (id 29) dev N/A, expect packet loss! [ 89.337174][ T6357] openvswitch: netlink: EtherType 50a is less than min 600 [ 89.568446][ T6371] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 90.580483][ T6404] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 90.612857][ T6407] netlink: 'syz.4.191': attribute type 29 has an invalid length. [ 90.857159][ T6427] netlink: 168 bytes leftover after parsing attributes in process `syz.3.202'. [ 90.961476][ T6431] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.204'. [ 91.267519][ T6445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.349870][ T6447] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 91.441983][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.214'. [ 91.513721][ T6454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'. [ 92.478946][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.234'. [ 92.723338][ T6503] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 92.781938][ T6503] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.237'. [ 93.236151][ T6520] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.247'. [ 93.254983][ T6520] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 93.264242][ T6520] openvswitch: netlink: Message has 1 unknown bytes. [ 93.452953][ T6529] netlink: 147608 bytes leftover after parsing attributes in process `syz.0.251'. [ 93.465515][ T6529] netlink: 62239 bytes leftover after parsing attributes in process `syz.0.251'. [ 93.676636][ T6542] netlink: 182 bytes leftover after parsing attributes in process `syz.3.257'. [ 94.135495][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 94.615584][ T6580] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 94.641478][ T6580] netlink: 'syz.3.276': attribute type 2 has an invalid length. [ 94.719924][ T6584] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 94.746368][ T6584] nbd: must specify at least one socket [ 94.747804][ T6585] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 95.260818][ T6608] netlink: 'syz.3.289': attribute type 2 has an invalid length. [ 95.640026][ T6625] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 96.010576][ T6642] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 96.268640][ T6656] __nla_validate_parse: 4 callbacks suppressed [ 96.268660][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 96.326099][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 96.353588][ T6656] netlink: 'syz.4.312': attribute type 1 has an invalid length. [ 96.360034][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 96.384139][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.312'. [ 96.401706][ T6660] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 97.531755][ T6713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.339'. [ 97.582468][ T6709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.339'. [ 97.844241][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 98.839502][ T6780] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.371'. [ 98.856480][ T6776] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.371'. [ 98.970796][ T6782] ======================================================= [ 98.970796][ T6782] WARNING: The mand mount option has been deprecated and [ 98.970796][ T6782] and is ignored by this kernel. Remove the mand [ 98.970796][ T6782] option from the mount to silence this warning. [ 98.970796][ T6782] ======================================================= [ 99.183730][ T6782] tmpfs: Bad value for 'uid' [ 99.193210][ T6782] tmpfs: Bad value for 'uid' [ 100.037164][ T6818] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 100.220608][ T6824] lo speed is unknown, defaulting to 1000 [ 100.226713][ T6824] lo speed is unknown, defaulting to 1000 [ 100.259395][ T6824] lo speed is unknown, defaulting to 1000 [ 100.297235][ T6824] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.376602][ T6824] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 100.471071][ T6839] netlink: 'syz.3.402': attribute type 12 has an invalid length. [ 100.538115][ T6841] netlink: 'syz.0.403': attribute type 29 has an invalid length. [ 100.570478][ T6824] lo speed is unknown, defaulting to 1000 [ 100.595827][ T6841] netlink: 'syz.0.403': attribute type 29 has an invalid length. [ 100.664565][ T6824] lo speed is unknown, defaulting to 1000 [ 100.694216][ T6824] lo speed is unknown, defaulting to 1000 [ 100.761350][ T6824] lo speed is unknown, defaulting to 1000 [ 100.792780][ T6824] lo speed is unknown, defaulting to 1000 [ 100.877872][ T6853] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 100.915734][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.438377][ T6881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.106423][ T6899] netlink: 'syz.2.432': attribute type 13 has an invalid length. [ 102.153938][ T6899] __nla_validate_parse: 10 callbacks suppressed [ 102.153954][ T6899] netlink: 164 bytes leftover after parsing attributes in process `syz.2.432'. [ 102.229395][ T6899] syz_tun: refused to change device tx_queue_len [ 102.418973][ T6913] netlink: 'syz.3.437': attribute type 1 has an invalid length. [ 102.460593][ T6913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.146858][ T6940] netlink: 2 bytes leftover after parsing attributes in process `syz.1.452'. [ 103.188463][ T6940] batadv_slave_1: entered promiscuous mode [ 103.700888][ T6964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.278593][ T6989] netlink: 'syz.2.475': attribute type 21 has an invalid length. [ 104.302471][ T6989] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 104.340414][ T6989] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.475'. [ 104.533112][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.480'. [ 104.592426][ T6997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.065255][ T7025] xt_HMARK: spi-set and port-set can't be combined [ 105.293630][ T7034] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 105.302636][ T7034] netlink: 164 bytes leftover after parsing attributes in process `syz.0.496'. [ 105.343213][ T7034] netlink: 'syz.0.496': attribute type 2 has an invalid length. [ 105.359933][ T7034] netlink: 164 bytes leftover after parsing attributes in process `syz.0.496'. [ 105.472901][ T7038] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 105.538491][ T7044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.497'. [ 106.811190][ T7094] netlink: 36 bytes leftover after parsing attributes in process `syz.4.525'. [ 107.273514][ T7113] C: renamed from team_slave_0 (while UP) [ 107.411803][ T7113] netlink: 'syz.2.534': attribute type 3 has an invalid length. [ 107.439423][ T7113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.534'. [ 107.478809][ T7120] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 108.130657][ T7152] netlink: 220 bytes leftover after parsing attributes in process `syz.3.553'. [ 108.712258][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 108.725184][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.4.565'. [ 108.880600][ T7183] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.568'. [ 109.006317][ T7187] netlink: 'syz.3.570': attribute type 3 has an invalid length. [ 109.027535][ T7187] netlink: 'syz.3.570': attribute type 3 has an invalid length. [ 109.051381][ T7191] netlink: 44 bytes leftover after parsing attributes in process `syz.1.572'. [ 109.078593][ T7187] netlink: 130500 bytes leftover after parsing attributes in process `syz.3.570'. [ 109.861029][ T7215] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 109.892368][ T7215] netlink: 'syz.3.583': attribute type 29 has an invalid length. [ 110.519475][ T7241] netlink: 60 bytes leftover after parsing attributes in process `syz.2.592'. [ 110.708614][ T7249] netlink: 'syz.0.595': attribute type 21 has an invalid length. [ 111.358588][ T7280] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 111.876448][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.629'. [ 112.177251][ T7315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.626'. [ 112.228678][ T7318] netlink: 'syz.2.627': attribute type 33 has an invalid length. [ 112.252105][ T7318] netlink: 'syz.2.627': attribute type 3 has an invalid length. [ 112.977270][ T7345] __nla_validate_parse: 1 callbacks suppressed [ 112.977289][ T7345] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.638'. [ 113.768791][ T7373] netlink: 'syz.1.651': attribute type 21 has an invalid length. [ 113.828651][ T7373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.651'. [ 114.470407][ T7397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 114.492341][ T7398] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.664'. [ 114.512687][ T7393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.663'. [ 114.515741][ T7398] netlink: zone id is out of range [ 114.561968][ T7398] netlink: zone id is out of range [ 114.580625][ T7398] netlink: zone id is out of range [ 114.599179][ T7398] netlink: get zone limit has 8 unknown bytes [ 114.941412][ T7410] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.682521][ T7424] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.677'. [ 116.204552][ T7443] netlink: 132 bytes leftover after parsing attributes in process `syz.2.686'. [ 117.127056][ T7482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.703'. [ 117.141081][ T7479] netlink: 60 bytes leftover after parsing attributes in process `syz.2.703'. [ 117.338639][ T7490] netlink: 'syz.2.708': attribute type 3 has an invalid length. [ 117.355506][ T7490] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 117.624976][ T7498] tmpfs: Bad value for 'gid' [ 117.629629][ T7498] tmpfs: Bad value for 'gid' [ 117.826321][ T7510] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 119.143018][ T7568] netlink: 'syz.4.744': attribute type 23 has an invalid length. [ 119.698290][ T7588] netlink: 44 bytes leftover after parsing attributes in process `syz.3.758'. [ 119.735182][ T7588] netlink: 43 bytes leftover after parsing attributes in process `syz.3.758'. [ 119.770254][ T7588] netlink: 'syz.3.758': attribute type 5 has an invalid length. [ 119.781993][ T7592] netlink: 948 bytes leftover after parsing attributes in process `syz.2.757'. [ 119.797215][ T7588] netlink: 43 bytes leftover after parsing attributes in process `syz.3.758'. [ 119.806683][ T7594] netlink: 'syz.4.760': attribute type 1 has an invalid length. [ 120.388689][ T7622] netlink: 64 bytes leftover after parsing attributes in process `syz.3.771'. [ 120.471783][ T7624] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.772'. [ 121.264821][ T7665] netlink: 92 bytes leftover after parsing attributes in process `syz.4.790'. [ 121.289594][ T7665] netlink: 92 bytes leftover after parsing attributes in process `syz.4.790'. [ 121.524432][ T7678] netlink: 'syz.4.799': attribute type 12 has an invalid length. [ 121.536684][ T7678] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.799'. [ 121.957636][ T7698] netlink: 'syz.1.808': attribute type 29 has an invalid length. [ 121.981370][ T7698] netlink: 'syz.1.808': attribute type 29 has an invalid length. [ 122.234737][ T7712] netlink: 'syz.0.815': attribute type 12 has an invalid length. [ 122.266249][ T7712] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.815'. [ 122.555215][ T7726] netlink: 'syz.3.822': attribute type 2 has an invalid length. [ 123.084381][ T7754] netlink: 'syz.0.835': attribute type 4 has an invalid length. [ 123.303114][ T7765] tmpfs: Bad value for 'uid' [ 123.307757][ T7765] tmpfs: Bad value for 'uid' [ 125.341808][ T7845] netlink: 'syz.1.878': attribute type 21 has an invalid length. [ 125.372853][ T7847] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 125.380723][ T7845] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.176323][ T7891] netlink: 'syz.0.899': attribute type 2 has an invalid length. [ 126.249667][ T7891] k›*·]: entered promiscuous mode [ 126.263374][ T7895] netlink: 'syz.4.901': attribute type 25 has an invalid length. [ 126.299303][ T7895] __nla_validate_parse: 6 callbacks suppressed [ 126.299320][ T7895] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.901'. [ 126.677303][ T7914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.719268][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.911'. [ 126.770608][ T7915] netlink: 60 bytes leftover after parsing attributes in process `syz.1.911'. [ 126.877513][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.915'. [ 127.108249][ T7937] netlink: 132 bytes leftover after parsing attributes in process `syz.0.921'. [ 127.244641][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.923'. [ 127.263982][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.4.923'. [ 127.577004][ T7959] netlink: 168 bytes leftover after parsing attributes in process `syz.4.931'. [ 127.968834][ T7975] netlink: 822 bytes leftover after parsing attributes in process `syz.2.941'. [ 128.843546][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.960'. [ 130.171484][ T8082] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 131.806352][ T8163] __nla_validate_parse: 7 callbacks suppressed [ 131.806368][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1031'. [ 131.916254][ T8170] netlink: 'syz.2.1035': attribute type 4 has an invalid length. [ 131.978753][ T8170] netlink: 'syz.2.1035': attribute type 11 has an invalid length. [ 132.000638][ T8170] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1035'. [ 132.387008][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 132.405329][ T8197] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 132.451664][ T8197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.945934][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.952431][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042360][ T8218] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 133.110831][ T8218] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 134.153621][ T8264] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1082'. [ 134.176707][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1081'. [ 135.926272][ T8324] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.327396][ T8337] netlink: 'syz.3.1115': attribute type 27 has an invalid length. [ 136.354981][ T8337] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1115'. [ 137.115709][ T8376] openvswitch: netlink: Key type 174 is out of range max 32 [ 137.299192][ T8382] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1136'. [ 137.326116][ T8386] netlink: 'syz.0.1140': attribute type 6 has an invalid length. [ 137.341655][ T8386] netlink: 'syz.0.1140': attribute type 1 has an invalid length. [ 137.349666][ T8386] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1140'. [ 137.413695][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 137.759594][ T8408] netlink: 'syz.1.1149': attribute type 1 has an invalid length. [ 138.369129][ T8439] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1165'. [ 138.895193][ T8467] netlink: 'syz.1.1178': attribute type 3 has an invalid length. [ 138.915816][ T8467] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1178'. [ 139.093312][ T8476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1181'. [ 139.139210][ T8476] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1181'. [ 139.281582][ T8485] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1185'. [ 139.753544][ T8510] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1198'. [ 139.785526][ T8512] netlink: 'syz.4.1199': attribute type 21 has an invalid length. [ 139.939752][ T8518] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1202'. [ 140.288091][ T8537] netlink: 'syz.0.1212': attribute type 1 has an invalid length. [ 141.347418][ T8583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.718570][ T8602] __nla_validate_parse: 4 callbacks suppressed [ 142.718590][ T8602] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1241'. [ 142.782312][ T8603] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1241'. [ 142.860312][ T8607] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1244'. [ 143.213751][ T8623] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.1252'. [ 143.270722][ T8623] nbd: must specify a size in bytes for the device [ 143.288782][ T8630] netlink: 'syz.4.1256': attribute type 21 has an invalid length. [ 143.319669][ T8630] netlink: 'syz.4.1256': attribute type 1 has an invalid length. [ 143.445192][ T8633] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.1257'. [ 145.186077][ T8721] x_tables: ip_tables: udp match: only valid for protocol 17 [ 145.399267][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 146.126828][ T8762] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1319'. [ 146.136281][ T8766] netlink: 'syz.2.1323': attribute type 2 has an invalid length. [ 146.147295][ T8766] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1323'. [ 146.165079][ T8766] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.226677][ T8773] C: renamed from team_slave_0 (while UP) [ 146.289696][ T8773] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 146.307037][ T8773] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1325'. [ 146.320968][ T8773] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.467000][ T8781] netlink: 'syz.2.1329': attribute type 3 has an invalid length. [ 146.480941][ T8781] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1329'. [ 147.308042][ T8821] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 147.350636][ T8821] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 147.372220][ T8821] netlink: 'syz.1.1347': attribute type 29 has an invalid length. [ 147.739318][ T8841] __nla_validate_parse: 1 callbacks suppressed [ 147.739340][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1354'. [ 147.755945][ T8835] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1354'. [ 147.766695][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1354'. [ 147.914380][ T8848] openvswitch: netlink: VXLAN extension 14 out of range max 1 [ 147.967412][ T8852] netlink: 'syz.3.1360': attribute type 33 has an invalid length. [ 147.986866][ T8852] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1360'. [ 148.121418][ T8861] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1365'. [ 148.128401][ T8857] netlink: 'syz.1.1363': attribute type 2 has an invalid length. [ 148.154742][ T8857] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1363'. [ 148.234355][ T8865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 148.262151][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'. [ 148.474445][ T8881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'. [ 148.510563][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1372'. [ 148.917235][ T8905] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 149.495157][ T8939] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 149.514796][ T8939] netlink: 'syz.2.1403': attribute type 2 has an invalid length. [ 149.928551][ T8965] tap0: tun_chr_ioctl cmd 1074025677 [ 149.935990][ T8965] tap0: linktype set to 773 [ 150.502860][ T8996] netlink: 'syz.3.1431': attribute type 2 has an invalid length. [ 150.521918][ T8997] netlink: 'syz.2.1430': attribute type 2 has an invalid length. [ 152.126075][ T9044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.599506][ T9057] netlink: 'syz.1.1458': attribute type 3 has an invalid length. [ 153.222225][ T9082] __nla_validate_parse: 20 callbacks suppressed [ 153.222333][ T9082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1471'. [ 153.238644][ T9083] netlink: 'syz.2.1469': attribute type 2 has an invalid length. [ 153.254617][ T9082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1471'. [ 153.287566][ T9082] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1471'. [ 153.717690][ T9109] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1484'. [ 154.153927][ T9127] netlink: 'syz.3.1493': attribute type 33 has an invalid length. [ 154.206189][ T9127] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1493'. [ 154.300368][ T9131] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1494'. [ 154.910654][ T9160] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1508'. [ 154.934908][ T9160] veth0_macvtap: left promiscuous mode [ 155.022211][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'. [ 155.046143][ T9168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'. [ 155.076526][ T9164] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1510'. [ 155.488652][ T9191] netlink: 'syz.3.1521': attribute type 2 has an invalid length. [ 155.554295][ T9191] netlink: 'syz.3.1521': attribute type 1 has an invalid length. [ 155.608100][ T9191] nbd: couldn't find a device at index 65545 [ 156.452061][ T9241] pimreg: tun_chr_ioctl cmd 2148553947 [ 156.909163][ T9270] netlink: 'syz.4.1560': attribute type 15 has an invalid length. [ 157.359431][ T9294] Zero length message leads to an empty skb [ 158.176963][ T9326] netlink: 'syz.1.1585': attribute type 39 has an invalid length. [ 159.573153][ T9395] netlink: 'syz.2.1617': attribute type 29 has an invalid length. [ 159.574029][ T9399] netlink: 'syz.0.1620': attribute type 1 has an invalid length. [ 159.657076][ T9399] __nla_validate_parse: 11 callbacks suppressed [ 159.657095][ T9399] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1620'. [ 159.810871][ T9412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1625'. [ 159.822549][ T9410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1625'. [ 159.845207][ T9412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1625'. [ 160.190394][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 160.235325][ T9429] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 160.420364][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 160.444917][ T9441] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 160.461779][ T9442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1640'. [ 160.695657][ T9455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1644'. [ 160.725496][ T9449] ================================================================== [ 160.733622][ T9449] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 160.741682][ T9449] Read of size 1 at addr ffff88802f57c330 by task syz.0.1642/9449 [ 160.749475][ T9449] [ 160.751816][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.0.1642 Not tainted syzkaller #0 PREEMPT(full) [ 160.751833][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.751847][ T9449] Call Trace: [ 160.751856][ T9449] [ 160.751864][ T9449] dump_stack_lvl+0x189/0x250 [ 160.751885][ T9449] ? __virt_addr_valid+0x1c8/0x5c0 [ 160.751904][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.751918][ T9449] ? __virt_addr_valid+0x1c8/0x5c0 [ 160.751934][ T9449] ? lock_release+0x4b/0x3e0 [ 160.751956][ T9449] ? __virt_addr_valid+0x4a5/0x5c0 [ 160.751973][ T9449] print_report+0xca/0x240 [ 160.751987][ T9449] ? xfrm_state_find+0x2cf2/0x5400 [ 160.751998][ T9449] kasan_report+0x118/0x150 [ 160.752018][ T9449] ? xfrm_state_find+0x2cf2/0x5400 [ 160.752035][ T9449] xfrm_state_find+0x2cf2/0x5400 [ 160.752058][ T9449] ? validate_chain+0x897/0x2140 [ 160.752077][ T9449] ? xfrm_state_find+0x1da/0x5400 [ 160.752091][ T9449] ? __pfx_xfrm_state_find+0x10/0x10 [ 160.752102][ T9449] ? perf_trace_lock+0xec/0x3b0 [ 160.752117][ T9449] ? __pfx_perf_trace_lock+0x10/0x10 [ 160.752134][ T9449] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 160.752162][ T9449] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 160.752178][ T9449] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 160.752194][ T9449] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 160.752212][ T9449] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 160.752231][ T9449] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 160.752265][ T9449] ? xfrm_expand_policies+0x41f/0x6a0 [ 160.752283][ T9449] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 160.752303][ T9449] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 160.752320][ T9449] ? __asan_memset+0x22/0x50 [ 160.752337][ T9449] xfrm_lookup_route+0x3c/0x1c0 [ 160.752353][ T9449] ip_tunnel_xmit+0x96b/0x2390 [ 160.752371][ T9449] ? ip_tunnel_xmit+0xb0/0x2390 [ 160.752393][ T9449] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 160.752406][ T9449] ? gre_build_header+0x31c/0xa40 [ 160.752424][ T9449] ? __pfx_gre_build_header+0x10/0x10 [ 160.752436][ T9449] ? skb_network_protocol+0x508/0x760 [ 160.752450][ T9449] ? iptunnel_handle_offloads+0x2fd/0x630 [ 160.752471][ T9449] ipgre_xmit+0x89e/0xc50 [ 160.752490][ T9449] ? __pfx_ipgre_xmit+0x10/0x10 [ 160.752508][ T9449] dev_hard_start_xmit+0x2d7/0x830 [ 160.752531][ T9449] __dev_queue_xmit+0x1b8d/0x3b50 [ 160.752545][ T9449] ? do_syscall_64+0xfa/0x3b0 [ 160.752561][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.752580][ T9449] ? __dev_queue_xmit+0x27b/0x3b50 [ 160.752602][ T9449] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.752622][ T9449] ? rcu_is_watching+0x15/0xb0 [ 160.752639][ T9449] ? skb_release_data+0x2b6/0x7c0 [ 160.752657][ T9449] ? pskb_expand_head+0xb00/0x1150 [ 160.752672][ T9449] ? __bpf_redirect+0x56d/0xe40 [ 160.752691][ T9449] __bpf_tx_skb+0x18e/0x260 [ 160.752706][ T9449] bpf_clone_redirect+0x272/0x3d0 [ 160.752726][ T9449] ? bpf_test_run+0x197/0x7b0 [ 160.752743][ T9449] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 160.752764][ T9449] ? preempt_schedule+0xae/0xc0 [ 160.752779][ T9449] ? bpf_test_run+0x197/0x7b0 [ 160.752796][ T9449] ? preempt_schedule_common+0x83/0xd0 [ 160.752814][ T9449] ? preempt_schedule+0xae/0xc0 [ 160.752829][ T9449] ? __pfx_preempt_schedule+0x10/0x10 [ 160.752847][ T9449] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 160.752863][ T9449] ? preempt_schedule_thunk+0x16/0x30 [ 160.752884][ T9449] ? __local_bh_disable_ip+0xf1/0x190 [ 160.752897][ T9449] ? __pfx___cant_migrate+0x10/0x10 [ 160.752909][ T9449] ? __local_bh_enable_ip+0x13e/0x1c0 [ 160.752922][ T9449] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.752936][ T9449] ? bpf_test_timer_continue+0x136/0x350 [ 160.752956][ T9449] bpf_test_run+0x318/0x7b0 [ 160.752984][ T9449] ? __pfx_bpf_test_run+0x10/0x10 [ 160.753013][ T9449] ? slab_build_skb+0x273/0x3e0 [ 160.753031][ T9449] ? convert___skb_to_skb+0x3d/0x590 [ 160.753055][ T9449] bpf_prog_test_run_skb+0xb30/0x1560 [ 160.753080][ T9449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 160.753097][ T9449] bpf_prog_test_run+0x2c7/0x340 [ 160.753117][ T9449] __sys_bpf+0x581/0x870 [ 160.753134][ T9449] ? __pfx___sys_bpf+0x10/0x10 [ 160.753161][ T9449] ? rcu_is_watching+0x15/0xb0 [ 160.753177][ T9449] __x64_sys_bpf+0x7c/0x90 [ 160.753191][ T9449] do_syscall_64+0xfa/0x3b0 [ 160.753209][ T9449] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.753225][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.753237][ T9449] ? clear_bhb_loop+0x60/0xb0 [ 160.753252][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.753265][ T9449] RIP: 0033:0x7f3ba338ebe9 [ 160.753279][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.753290][ T9449] RSP: 002b:00007f3ba41a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.753309][ T9449] RAX: ffffffffffffffda RBX: 00007f3ba35c5fa0 RCX: 00007f3ba338ebe9 [ 160.753319][ T9449] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 160.753328][ T9449] RBP: 00007f3ba3411e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.753337][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.753345][ T9449] R13: 00007f3ba35c6038 R14: 00007f3ba35c5fa0 R15: 00007ffeefea11a8 [ 160.753364][ T9449] [ 160.753370][ T9449] [ 161.260545][ T9449] Allocated by task 7799: [ 161.264856][ T9449] kasan_save_track+0x3e/0x80 [ 161.269524][ T9449] __kasan_slab_alloc+0x6c/0x80 [ 161.274454][ T9449] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 161.279899][ T9449] xfrm_state_alloc+0x24/0x2f0 [ 161.284662][ T9449] xfrm_add_sa+0x17d1/0x4070 [ 161.289235][ T9449] xfrm_user_rcv_msg+0x7a0/0xab0 [ 161.294246][ T9449] netlink_rcv_skb+0x205/0x470 [ 161.299007][ T9449] xfrm_netlink_rcv+0x79/0x90 [ 161.303756][ T9449] netlink_unicast+0x82c/0x9e0 [ 161.308505][ T9449] netlink_sendmsg+0x805/0xb30 [ 161.313341][ T9449] __sock_sendmsg+0x21c/0x270 [ 161.318003][ T9449] ____sys_sendmsg+0x505/0x830 [ 161.323108][ T9449] ___sys_sendmsg+0x21f/0x2a0 [ 161.327883][ T9449] __x64_sys_sendmsg+0x19b/0x260 [ 161.332818][ T9449] do_syscall_64+0xfa/0x3b0 [ 161.337314][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.343210][ T9449] [ 161.345517][ T9449] Freed by task 5951: [ 161.349497][ T9449] kasan_save_track+0x3e/0x80 [ 161.354167][ T9449] kasan_save_free_info+0x46/0x50 [ 161.359176][ T9449] __kasan_slab_free+0x5b/0x80 [ 161.363928][ T9449] kmem_cache_free+0x18f/0x400 [ 161.368683][ T9449] xfrm_state_gc_task+0x52d/0x6b0 [ 161.373696][ T9449] process_scheduled_works+0xae1/0x17b0 [ 161.379227][ T9449] worker_thread+0x8a0/0xda0 [ 161.383900][ T9449] kthread+0x711/0x8a0 [ 161.388133][ T9449] ret_from_fork+0x3f9/0x770 [ 161.392710][ T9449] ret_from_fork_asm+0x1a/0x30 [ 161.397757][ T9449] [ 161.400064][ T9449] The buggy address belongs to the object at ffff88802f57c000 [ 161.400064][ T9449] which belongs to the cache xfrm_state of size 928 [ 161.414016][ T9449] The buggy address is located 816 bytes inside of [ 161.414016][ T9449] freed 928-byte region [ffff88802f57c000, ffff88802f57c3a0) [ 161.427795][ T9449] [ 161.430106][ T9449] The buggy address belongs to the physical page: [ 161.436688][ T9449] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802f57c000 pfn:0x2f57c [ 161.446786][ T9449] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 161.455274][ T9449] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 161.462828][ T9449] page_type: f5(slab) [ 161.466801][ T9449] raw: 00fff00000000040 ffff8881422bec80 dead000000000122 0000000000000000 [ 161.475371][ T9449] raw: ffff88802f57c000 00000000800f000d 00000000f5000000 0000000000000000 [ 161.484114][ T9449] head: 00fff00000000040 ffff8881422bec80 dead000000000122 0000000000000000 [ 161.492771][ T9449] head: ffff88802f57c000 00000000800f000d 00000000f5000000 0000000000000000 [ 161.501427][ T9449] head: 00fff00000000002 ffffea0000bd5f01 00000000ffffffff 00000000ffffffff [ 161.510084][ T9449] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 161.518739][ T9449] page dumped because: kasan: bad access detected [ 161.525138][ T9449] page_owner tracks the page as allocated [ 161.530841][ T9449] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6059, tgid 6058 (syz.0.29), ts 81932099992, free_ts 81608262937 [ 161.549957][ T9449] post_alloc_hook+0x240/0x2a0 [ 161.554733][ T9449] get_page_from_freelist+0x21e4/0x22c0 [ 161.560265][ T9449] __alloc_frozen_pages_noprof+0x181/0x370 [ 161.566053][ T9449] alloc_pages_mpol+0x232/0x4a0 [ 161.570895][ T9449] allocate_slab+0x8a/0x370 [ 161.575471][ T9449] ___slab_alloc+0xbeb/0x1410 [ 161.580134][ T9449] kmem_cache_alloc_noprof+0x283/0x3c0 [ 161.585584][ T9449] xfrm_state_alloc+0x24/0x2f0 [ 161.590337][ T9449] __find_acq_core+0x8a7/0x1c00 [ 161.595169][ T9449] xfrm_find_acq+0x78/0xa0 [ 161.599578][ T9449] xfrm_alloc_userspi+0x6b3/0xc90 [ 161.604588][ T9449] xfrm_user_rcv_msg+0x7a0/0xab0 [ 161.609511][ T9449] netlink_rcv_skb+0x205/0x470 [ 161.614266][ T9449] xfrm_netlink_rcv+0x79/0x90 [ 161.618927][ T9449] netlink_unicast+0x82c/0x9e0 [ 161.623679][ T9449] netlink_sendmsg+0x805/0xb30 [ 161.628439][ T9449] page last free pid 5931 tgid 5931 stack trace: [ 161.634745][ T9449] __free_frozen_pages+0xbc4/0xd30 [ 161.640024][ T9449] __put_partials+0x156/0x1a0 [ 161.644696][ T9449] put_cpu_partial+0x17c/0x250 [ 161.649455][ T9449] __slab_free+0x2d5/0x3c0 [ 161.653858][ T9449] qlist_free_all+0x97/0x140 [ 161.658437][ T9449] kasan_quarantine_reduce+0x148/0x160 [ 161.663885][ T9449] __kasan_slab_alloc+0x22/0x80 [ 161.668724][ T9449] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 161.674256][ T9449] getname_flags+0xb8/0x540 [ 161.678738][ T9449] vfs_fstatat+0x43/0x170 [ 161.683050][ T9449] __x64_sys_newfstatat+0x116/0x190 [ 161.688232][ T9449] do_syscall_64+0xfa/0x3b0 [ 161.692722][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.698604][ T9449] [ 161.700913][ T9449] Memory state around the buggy address: [ 161.706525][ T9449] ffff88802f57c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.714686][ T9449] ffff88802f57c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.722730][ T9449] >ffff88802f57c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 161.730771][ T9449] ^ [ 161.736394][ T9449] ffff88802f57c380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 161.744443][ T9449] ffff88802f57c400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 161.752490][ T9449] ================================================================== [ 161.760756][ T9449] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 161.767959][ T9449] CPU: 1 UID: 0 PID: 9449 Comm: syz.0.1642 Not tainted syzkaller #0 PREEMPT(full) [ 161.777242][ T9449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.787305][ T9449] Call Trace: [ 161.790592][ T9449] [ 161.793510][ T9449] dump_stack_lvl+0x99/0x250 [ 161.798091][ T9449] ? __asan_memcpy+0x40/0x70 [ 161.802668][ T9449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.807863][ T9449] ? __pfx__printk+0x10/0x10 [ 161.812541][ T9449] vpanic+0x281/0x750 [ 161.816509][ T9449] ? __pfx_vpanic+0x10/0x10 [ 161.820999][ T9449] ? irqentry_exit+0x74/0x90 [ 161.825582][ T9449] panic+0xb9/0xc0 [ 161.829379][ T9449] ? __pfx_panic+0x10/0x10 [ 161.833784][ T9449] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 161.839762][ T9449] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 161.845826][ T9449] ? xfrm_state_find+0x2cf2/0x5400 [ 161.850928][ T9449] check_panic_on_warn+0x89/0xb0 [ 161.855876][ T9449] ? xfrm_state_find+0x2cf2/0x5400 [ 161.861058][ T9449] end_report+0x78/0x160 [ 161.865290][ T9449] kasan_report+0x129/0x150 [ 161.869793][ T9449] ? xfrm_state_find+0x2cf2/0x5400 [ 161.874980][ T9449] xfrm_state_find+0x2cf2/0x5400 [ 161.879913][ T9449] ? validate_chain+0x897/0x2140 [ 161.884841][ T9449] ? xfrm_state_find+0x1da/0x5400 [ 161.889858][ T9449] ? __pfx_xfrm_state_find+0x10/0x10 [ 161.895152][ T9449] ? perf_trace_lock+0xec/0x3b0 [ 161.899988][ T9449] ? __pfx_perf_trace_lock+0x10/0x10 [ 161.905262][ T9449] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 161.911599][ T9449] ? xfrm_policy_lookup_bytype+0x2a7/0x1250 [ 161.917546][ T9449] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 161.923531][ T9449] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 161.930213][ T9449] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 161.936095][ T9449] ? xfrm_policy_lookup_bytype+0x11ef/0x1250 [ 161.942091][ T9449] ? xfrm_expand_policies+0x41f/0x6a0 [ 161.947538][ T9449] xfrm_lookup_with_ifid+0x58a/0x1a70 [ 161.952938][ T9449] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 161.958762][ T9449] ? __asan_memset+0x22/0x50 [ 161.963428][ T9449] xfrm_lookup_route+0x3c/0x1c0 [ 161.968270][ T9449] ip_tunnel_xmit+0x96b/0x2390 [ 161.973025][ T9449] ? ip_tunnel_xmit+0xb0/0x2390 [ 161.977896][ T9449] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 161.983099][ T9449] ? gre_build_header+0x31c/0xa40 [ 161.988143][ T9449] ? __pfx_gre_build_header+0x10/0x10 [ 161.993516][ T9449] ? skb_network_protocol+0x508/0x760 [ 161.998972][ T9449] ? iptunnel_handle_offloads+0x2fd/0x630 [ 162.005047][ T9449] ipgre_xmit+0x89e/0xc50 [ 162.009371][ T9449] ? __pfx_ipgre_xmit+0x10/0x10 [ 162.014214][ T9449] dev_hard_start_xmit+0x2d7/0x830 [ 162.019328][ T9449] __dev_queue_xmit+0x1b8d/0x3b50 [ 162.024346][ T9449] ? do_syscall_64+0xfa/0x3b0 [ 162.029022][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.035084][ T9449] ? __dev_queue_xmit+0x27b/0x3b50 [ 162.040193][ T9449] ? __pfx___dev_queue_xmit+0x10/0x10 [ 162.045566][ T9449] ? rcu_is_watching+0x15/0xb0 [ 162.050325][ T9449] ? skb_release_data+0x2b6/0x7c0 [ 162.055428][ T9449] ? pskb_expand_head+0xb00/0x1150 [ 162.060775][ T9449] ? __bpf_redirect+0x56d/0xe40 [ 162.065652][ T9449] __bpf_tx_skb+0x18e/0x260 [ 162.070181][ T9449] bpf_clone_redirect+0x272/0x3d0 [ 162.075208][ T9449] ? bpf_test_run+0x197/0x7b0 [ 162.079873][ T9449] bpf_prog_1eda3e3d4f38ab1d+0x5f/0x68 [ 162.085326][ T9449] ? preempt_schedule+0xae/0xc0 [ 162.090167][ T9449] ? bpf_test_run+0x197/0x7b0 [ 162.094867][ T9449] ? preempt_schedule_common+0x83/0xd0 [ 162.100317][ T9449] ? preempt_schedule+0xae/0xc0 [ 162.105155][ T9449] ? __pfx_preempt_schedule+0x10/0x10 [ 162.110704][ T9449] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 162.117189][ T9449] ? preempt_schedule_thunk+0x16/0x30 [ 162.122566][ T9449] ? __local_bh_disable_ip+0xf1/0x190 [ 162.127929][ T9449] ? __pfx___cant_migrate+0x10/0x10 [ 162.133109][ T9449] ? __local_bh_enable_ip+0x13e/0x1c0 [ 162.138644][ T9449] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 162.144442][ T9449] ? bpf_test_timer_continue+0x136/0x350 [ 162.150078][ T9449] bpf_test_run+0x318/0x7b0 [ 162.154685][ T9449] ? __pfx_bpf_test_run+0x10/0x10 [ 162.159754][ T9449] ? slab_build_skb+0x273/0x3e0 [ 162.164686][ T9449] ? convert___skb_to_skb+0x3d/0x590 [ 162.170077][ T9449] bpf_prog_test_run_skb+0xb30/0x1560 [ 162.175461][ T9449] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 162.181258][ T9449] bpf_prog_test_run+0x2c7/0x340 [ 162.186558][ T9449] __sys_bpf+0x581/0x870 [ 162.190791][ T9449] ? __pfx___sys_bpf+0x10/0x10 [ 162.195553][ T9449] ? rcu_is_watching+0x15/0xb0 [ 162.200306][ T9449] __x64_sys_bpf+0x7c/0x90 [ 162.204797][ T9449] do_syscall_64+0xfa/0x3b0 [ 162.209372][ T9449] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.214571][ T9449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.220709][ T9449] ? clear_bhb_loop+0x60/0xb0 [ 162.225376][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.231259][ T9449] RIP: 0033:0x7f3ba338ebe9 [ 162.235665][ T9449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.255256][ T9449] RSP: 002b:00007f3ba41a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.263676][ T9449] RAX: ffffffffffffffda RBX: 00007f3ba35c5fa0 RCX: 00007f3ba338ebe9 [ 162.271639][ T9449] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 162.279613][ T9449] RBP: 00007f3ba3411e19 R08: 0000000000000000 R09: 0000000000000000 [ 162.287586][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.295588][ T9449] R13: 00007f3ba35c6038 R14: 00007f3ba35c5fa0 R15: 00007ffeefea11a8 [ 162.303570][ T9449] [ 162.307033][ T9449] Kernel Offset: disabled [ 162.311353][ T9449] Rebooting in 86400 seconds..