last executing test programs: 13.206167206s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) 12.333257589s ago: executing program 4: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x4a, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x8) 8.378741498s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000059e44e69fe75b405dde35af5f2ed405320a16c51fc856477b334dc7a3abc19f68217ab45c84feb0954be166b7d78e8de48c2d261bcbacdbd82b57994008ec8450b08b1600daf2e6d26ae93fbf3d4f48d51792e498f0add4bcc0dde6a28bf7b578da0d83ade"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @private}}) read$FUSE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 7.934244536s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x80}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x40}}, 0x0) 7.049895665s ago: executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0x80042103, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0x0, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, 0x0, &(0x7f0000000240)="01", 0x1, r0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0x5b) sendfile(r1, r2, &(0x7f0000000000), 0x6) 6.549281675s ago: executing program 0: socket$kcm(0xa, 0x5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000040)) 6.337817442s ago: executing program 2: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 6.188523848s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000000601"], 0x24}}, 0x0) 6.132771808s ago: executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0}) 6.095521794s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000780)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x80000001}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x50}}, 0x0) 5.502538912s ago: executing program 2: setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)="080027226da0d6c1", 0x8}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @private}}}], 0x20}, 0x31c467c443849ffc) 5.345435028s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010d26ce58d751eb729a480000304000000000000000000000000479448230ea0b7d60a41bd5f2a88865ade1e509fc74bc0caa91bf7ef81adf67e3775508229a69fa64592"], 0x50}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000070000"], 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 5.203276403s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @local}, &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0xffe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 4.572374633s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000200)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x11, &(0x7f00000002c0)="1a00000002000000", 0x8) 4.208963171s ago: executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) openat$dir(0xffffffffffffff9c, 0x0, 0x82, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_USERDATA={0x4}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) iopl(0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48810) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x94, 0xa, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_COMMENT={0xb, 0x1a, '-]+/^:\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20010}, 0x20004804) 3.811923288s ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000440)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000059e44e69fe75b405dde35af5f2ed405320a16c51fc856477b334dc7a3abc19f68217ab45c84feb0954be166b7d78e8de48c2d261bcbacdbd82b57994008ec8450b08b1600daf2e6d26ae93fbf3d4f48d51792e498f0add4bcc0dde6a28bf7b578da0d83ade"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @private}}) read$FUSE(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 3.014065422s ago: executing program 1: accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x1000004, &(0x7f0000000040)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3da}}, {@grpquota}]}, 0xff, 0x3f7, &(0x7f0000000500)="$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") r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40045304, &(0x7f0000000100)={{0x2}}) syz_read_part_table(0x5f7, &(0x7f0000002200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) preadv2(r0, &(0x7f0000000040), 0x0, 0x0, 0x4, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc08c5335, &(0x7f0000000180)) tkill(r1, 0x7) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xc5b2a54f8ad4680e}, 0x9c) 3.009744025s ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000010c0)=r1, 0x4) 2.977418843s ago: executing program 0: vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 2.676225025s ago: executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, 0x0, 0x0) 2.052517854s ago: executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x5}, 0x8) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) sendto$inet6(r1, &(0x7f0000000140)="db73d813b5bc34b7a61f2a9a7b46ed3107d6464019e934b5d876299c94c1e956baa363870b55cc460ace490fcb73b0cc1c6322882f1977", 0x37, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x0, 0x37, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x67, 0x0, 0xff, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x8b, 0x3, 0x3, [{@multicast2, 0x7fff}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x80}, {@empty, 0xfff}, {@broadcast, 0x6b}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_sync_file_enter\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) 1.672114348s ago: executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x35}, {0x1c}, {0x6, 0x0, 0x0, 0x7ffffeb9}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x23, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1c5c7e, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x0) 1.550794122s ago: executing program 3: openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x0, 0x0) r0 = io_uring_setup(0x7fdc, &(0x7f0000000080)) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.546175705s ago: executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) 918.005319ms ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000010d26ce58d751eb729a480000304000000000000000000000000479448230ea0b7d60a41bd5f2a88865ade1e509fc74bc0caa91bf7ef81adf67e3775508229a69fa64592"], 0x50}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) write$P9_RLERRORu(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000070000"], 0x16) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 401.394357ms ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @dev}, 0xc) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 335.795846ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @local}, &(0x7f0000000280)=0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0xffe8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r2, 0x0, 0x8000002b) 186.445252ms ago: executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000980)=[@in, @in6={0xa, 0x4e24, 0x0, @private2}], 0x2c) 63.560861ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000002000000000000000001801000020786c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000550000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='tlb_flush\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000a14000/0x3000)=nil, 0x3000) 0s ago: executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. 2024/06/08 08:14:37 fuzzer started 2024/06/08 08:14:38 dialing manager at 10.128.0.169:30026 [ 159.443702][ T5054] cgroup: Unknown subsys name 'net' [ 159.702846][ T5054] cgroup: Unknown subsys name 'rlimit' 2024/06/08 08:15:25 starting 5 executor processes [ 205.739440][ T5055] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 208.203089][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.224630][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.238766][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.282927][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.309945][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.333563][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.388574][ T5082] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.399142][ T5082] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.416116][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.452170][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.477159][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.495033][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.636975][ T4431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.681758][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.691011][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.701857][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.713624][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.725016][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.734631][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.750792][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.762449][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.771740][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.785320][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.818337][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.951860][ T5086] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.965258][ T5086] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.974865][ T5086] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.988283][ T5086] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.999560][ T5086] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.009029][ T5086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 209.590214][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 210.149452][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 210.451300][ T4431] Bluetooth: hci0: command tx timeout [ 210.612696][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 210.677791][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.686552][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.694062][ T4431] Bluetooth: hci1: command tx timeout [ 210.694422][ T5080] bridge_slave_0: entered allmulticast mode [ 210.707893][ T5080] bridge_slave_0: entered promiscuous mode [ 210.735059][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.742862][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.750511][ T5080] bridge_slave_1: entered allmulticast mode [ 210.759625][ T5080] bridge_slave_1: entered promiscuous mode [ 210.768826][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 210.854788][ T4431] Bluetooth: hci3: command tx timeout [ 210.860448][ T5086] Bluetooth: hci2: command tx timeout [ 210.989558][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.097367][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.101646][ T5086] Bluetooth: hci4: command tx timeout [ 211.254223][ T5080] team0: Port device team_slave_0 added [ 211.266017][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 211.300633][ T5080] team0: Port device team_slave_1 added [ 211.626064][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.633492][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.659877][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.775094][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.782396][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.810173][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.869433][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.877438][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.885281][ T5090] bridge_slave_0: entered allmulticast mode [ 211.894308][ T5090] bridge_slave_0: entered promiscuous mode [ 211.907774][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.915597][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.923361][ T5084] bridge_slave_0: entered allmulticast mode [ 211.932635][ T5084] bridge_slave_0: entered promiscuous mode [ 211.952356][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.960054][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.967969][ T5090] bridge_slave_1: entered allmulticast mode [ 211.977945][ T5090] bridge_slave_1: entered promiscuous mode [ 212.046102][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.057673][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.065564][ T5084] bridge_slave_1: entered allmulticast mode [ 212.074748][ T5084] bridge_slave_1: entered promiscuous mode [ 212.286659][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.296744][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.304602][ T5095] bridge_slave_0: entered allmulticast mode [ 212.313996][ T5095] bridge_slave_0: entered promiscuous mode [ 212.397920][ T5080] hsr_slave_0: entered promiscuous mode [ 212.444645][ T5080] hsr_slave_1: entered promiscuous mode [ 212.490565][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.537490][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.544879][ T5086] Bluetooth: hci0: command tx timeout [ 212.553514][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.561370][ T5095] bridge_slave_1: entered allmulticast mode [ 212.569543][ T5095] bridge_slave_1: entered promiscuous mode [ 212.590173][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.621663][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.733473][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.771335][ T5086] Bluetooth: hci1: command tx timeout [ 212.859020][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.866856][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.874735][ T5088] bridge_slave_0: entered allmulticast mode [ 212.883436][ T5088] bridge_slave_0: entered promiscuous mode [ 212.951558][ T5086] Bluetooth: hci2: command tx timeout [ 212.957186][ T5086] Bluetooth: hci3: command tx timeout [ 212.973818][ T5090] team0: Port device team_slave_0 added [ 213.035787][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.044267][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.052242][ T5088] bridge_slave_1: entered allmulticast mode [ 213.061587][ T5088] bridge_slave_1: entered promiscuous mode [ 213.097033][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.146821][ T5090] team0: Port device team_slave_1 added [ 213.163167][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.176448][ T5086] Bluetooth: hci4: command tx timeout [ 213.194448][ T5084] team0: Port device team_slave_0 added [ 213.314788][ T5084] team0: Port device team_slave_1 added [ 213.367519][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.463153][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.470313][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.498024][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.549108][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.560720][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.568106][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.594568][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.614336][ T5095] team0: Port device team_slave_0 added [ 213.636730][ T5095] team0: Port device team_slave_1 added [ 213.660581][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.668030][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.694318][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.803068][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.810216][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.836651][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.008829][ T5088] team0: Port device team_slave_0 added [ 214.031823][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.038965][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.065412][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.166353][ T5088] team0: Port device team_slave_1 added [ 214.176890][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.184283][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.210613][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.252637][ T5090] hsr_slave_0: entered promiscuous mode [ 214.261512][ T5090] hsr_slave_1: entered promiscuous mode [ 214.269502][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.277422][ T5090] Cannot create hsr debugfs directory [ 214.390581][ T5084] hsr_slave_0: entered promiscuous mode [ 214.401632][ T5084] hsr_slave_1: entered promiscuous mode [ 214.410019][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.418661][ T5084] Cannot create hsr debugfs directory [ 214.472257][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.479406][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.505970][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.600983][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.609379][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.635819][ T5086] Bluetooth: hci0: command tx timeout [ 214.642744][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.742977][ T5095] hsr_slave_0: entered promiscuous mode [ 214.752641][ T5095] hsr_slave_1: entered promiscuous mode [ 214.760882][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.770808][ T5095] Cannot create hsr debugfs directory [ 214.853452][ T5086] Bluetooth: hci1: command tx timeout [ 214.965985][ T5080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 214.988987][ T5080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.011448][ T5086] Bluetooth: hci2: command tx timeout [ 215.017064][ T5086] Bluetooth: hci3: command tx timeout [ 215.163252][ T5080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.195240][ T5080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.251394][ T5086] Bluetooth: hci4: command tx timeout [ 215.300546][ T5088] hsr_slave_0: entered promiscuous mode [ 215.320271][ T5088] hsr_slave_1: entered promiscuous mode [ 215.329677][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.337709][ T5088] Cannot create hsr debugfs directory [ 216.241652][ T5084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.279356][ T5084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.320007][ T5084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.360712][ T5084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.479258][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.524039][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.554933][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.609768][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.711262][ T5086] Bluetooth: hci0: command tx timeout [ 216.837387][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 216.876007][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 216.902786][ T5088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.930057][ T5088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 216.950799][ T5086] Bluetooth: hci1: command tx timeout [ 216.965456][ T5088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 216.988234][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.009069][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.072226][ T5088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.094367][ T5086] Bluetooth: hci3: command tx timeout [ 217.099983][ T5086] Bluetooth: hci2: command tx timeout [ 217.242611][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.333111][ T5086] Bluetooth: hci4: command tx timeout [ 217.497150][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.654743][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.662561][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.779246][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.787037][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.154717][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.336490][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.377027][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.507148][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.515047][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.539534][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.631738][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.639399][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.704349][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.728959][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.852714][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.860399][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.899118][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.940548][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.021848][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.029530][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.125924][ T1217] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.132945][ T1217] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.188935][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.196691][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.216718][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.224441][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.239977][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.247722][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.263465][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.271204][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.768245][ T5090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.779398][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.824389][ T5088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.262559][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.459433][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.638793][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.857397][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.904504][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.244722][ T5084] veth0_vlan: entered promiscuous mode [ 222.430877][ T5084] veth1_vlan: entered promiscuous mode [ 222.502328][ T5088] veth0_vlan: entered promiscuous mode [ 222.519171][ T5090] veth0_vlan: entered promiscuous mode [ 222.658678][ T5095] veth0_vlan: entered promiscuous mode [ 222.670561][ T5088] veth1_vlan: entered promiscuous mode [ 222.731491][ T5090] veth1_vlan: entered promiscuous mode [ 222.842324][ T5084] veth0_macvtap: entered promiscuous mode [ 222.860035][ T5095] veth1_vlan: entered promiscuous mode [ 222.969055][ T5084] veth1_macvtap: entered promiscuous mode [ 223.183643][ T5088] veth0_macvtap: entered promiscuous mode [ 223.263067][ T5088] veth1_macvtap: entered promiscuous mode [ 223.282250][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.302464][ T5080] veth0_vlan: entered promiscuous mode [ 223.396663][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.422636][ T5090] veth0_macvtap: entered promiscuous mode [ 223.458147][ T5095] veth0_macvtap: entered promiscuous mode [ 223.493926][ T5080] veth1_vlan: entered promiscuous mode [ 223.523008][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.533797][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.549158][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.578664][ T5095] veth1_macvtap: entered promiscuous mode [ 223.629239][ T5084] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.638535][ T5084] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.647918][ T5084] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.657147][ T5084] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.740045][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.754030][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.769136][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.785836][ T5090] veth1_macvtap: entered promiscuous mode [ 223.843915][ T5088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.853157][ T5088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.863620][ T5088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.872744][ T5088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.023987][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.034902][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.045111][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.058695][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.074609][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.147948][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.160649][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.172251][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.183791][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.198752][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.274146][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.283404][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.294558][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.305076][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.336218][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.348314][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.358527][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.369258][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.380249][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.391483][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.406809][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.475678][ T5080] veth0_macvtap: entered promiscuous mode [ 224.549480][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.560262][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.570523][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.581319][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.592398][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.603134][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.621939][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.668146][ T5080] veth1_macvtap: entered promiscuous mode [ 224.869037][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.879821][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.890110][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.900853][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.910950][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.921738][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.931907][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.944055][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.961468][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.028899][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.038068][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.047304][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.056427][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.269319][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.280199][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.290363][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.301247][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.311459][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.322215][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.332301][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.343045][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.358026][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.472552][ T5080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.484480][ T5080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.498226][ T5080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.509206][ T5080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.985945][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.994181][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.217279][ T2863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.225598][ T2863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.768422][ T2863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.776591][ T2863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.035785][ T3322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.044319][ T3322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.086330][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.096754][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.443510][ T3182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.451704][ T3182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.095024][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.103348][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.275476][ T5133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.283909][ T5133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.467229][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.475616][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.510755][ T4296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.518905][ T4296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.767078][ T5282] net_ratelimit: 44 callbacks suppressed [ 233.767150][ T5282] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.641873][ T5290] loop0: detected capacity change from 0 to 256 [ 234.709324][ T5290] ======================================================= [ 234.709324][ T5290] WARNING: The mand mount option has been deprecated and [ 234.709324][ T5290] and is ignored by this kernel. Remove the mand [ 234.709324][ T5290] option from the mount to silence this warning. [ 234.709324][ T5290] ======================================================= [ 235.140339][ T5290] FAT-fs (loop0): Directory bread(block 64) failed [ 235.147265][ T5290] FAT-fs (loop0): Directory bread(block 65) failed [ 235.154628][ T5290] FAT-fs (loop0): Directory bread(block 66) failed [ 235.161789][ T5290] FAT-fs (loop0): Directory bread(block 67) failed [ 235.168721][ T5290] FAT-fs (loop0): Directory bread(block 68) failed [ 235.175638][ T5290] FAT-fs (loop0): Directory bread(block 69) failed [ 235.182758][ T5290] FAT-fs (loop0): Directory bread(block 70) failed [ 235.189506][ T5290] FAT-fs (loop0): Directory bread(block 71) failed [ 235.196614][ T5290] FAT-fs (loop0): Directory bread(block 72) failed [ 235.203497][ T5290] FAT-fs (loop0): Directory bread(block 73) failed [ 236.263129][ T4731] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.332236][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 236.547232][ T4731] usb 5-1: Using ep0 maxpacket: 32 [ 236.641817][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 236.872275][ T4731] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 236.881768][ T4731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.890033][ T4731] usb 5-1: Product: syz [ 236.894670][ T4731] usb 5-1: Manufacturer: syz [ 236.899504][ T4731] usb 5-1: SerialNumber: syz [ 236.984946][ T4731] usb 5-1: config 0 descriptor?? [ 237.001922][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 237.014566][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.025351][ T10] usb 3-1: Product: syz [ 237.029857][ T10] usb 3-1: Manufacturer: syz [ 237.034884][ T10] usb 3-1: SerialNumber: syz [ 237.096928][ T10] usb 3-1: config 0 descriptor?? [ 237.421686][ T5133] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 237.713792][ T4731] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3a:ee:dc:58:bf:de [ 237.788275][ T4731] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 237.848627][ T4731] usb 5-1: USB disconnect, device number 2 [ 237.852490][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.866080][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.882726][ T5133] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 237.892178][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.908021][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:af:c4:a8:20:ea [ 237.955092][ T5133] usb 1-1: config 0 descriptor?? [ 238.037080][ T10] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 238.167632][ T10] usb 3-1: USB disconnect, device number 2 [ 239.038946][ T5318] sit0: entered allmulticast mode [ 239.066124][ T5316] veth0_vlan: entered allmulticast mode [ 239.086038][ T5133] usb 1-1: string descriptor 0 read error: -71 [ 239.123514][ T5133] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 239.133274][ T5133] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 239.141748][ T5133] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 239.150227][ T5133] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 239.158496][ T5133] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 239.257211][ T5321] sit0: entered promiscuous mode [ 239.493561][ T5133] usb 1-1: USB disconnect, device number 2 [ 240.293606][ T5333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 242.853939][ T5137] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 243.231263][ T5137] usb 4-1: Using ep0 maxpacket: 32 [ 243.562064][ T5137] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 243.571736][ T5137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.580016][ T5137] usb 4-1: Product: syz [ 243.584563][ T5137] usb 4-1: Manufacturer: syz [ 243.589392][ T5137] usb 4-1: SerialNumber: syz [ 243.653573][ T5137] usb 4-1: config 0 descriptor?? [ 243.891262][ T5362] loop2: detected capacity change from 0 to 512 [ 244.060885][ T5362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.074680][ T5362] ext4 filesystem being mounted at /root/syzkaller-testdir3205976617/syzkaller.PtoExh/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.398797][ T5095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.521906][ T5137] (unnamed net_device) (uninitialized): Assigned a random MAC address: b6:7c:42:5b:a1:5a [ 244.603870][ T5137] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 244.687312][ T5137] usb 4-1: USB disconnect, device number 2 [ 246.479237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 247.932303][ T5388] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 248.102776][ T5390] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 248.718155][ T5398] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.982428][ T5325] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.248697][ T5325] usb 5-1: Using ep0 maxpacket: 32 [ 249.561923][ T5325] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 249.571551][ T5325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.579810][ T5325] usb 5-1: Product: syz [ 249.585059][ T5325] usb 5-1: Manufacturer: syz [ 249.589892][ T5325] usb 5-1: SerialNumber: syz [ 249.656875][ T5325] usb 5-1: config 0 descriptor?? [ 250.552278][ T5325] (unnamed net_device) (uninitialized): Assigned a random MAC address: 5a:ff:ef:fe:09:cb [ 250.587616][ T5325] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 250.614012][ T5412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.806595][ T5325] usb 5-1: USB disconnect, device number 3 [ 251.746823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 251.896179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 251.908834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 251.931923][ T29] audit: type=1326 audit(1717834571.891:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 251.954949][ T29] audit: type=1326 audit(1717834571.891:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.208775][ T5430] loop1: detected capacity change from 0 to 512 [ 252.260930][ T29] audit: type=1326 audit(1717834572.141:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.284239][ T29] audit: type=1326 audit(1717834572.141:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.307241][ T29] audit: type=1326 audit(1717834572.151:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.334564][ T29] audit: type=1326 audit(1717834572.161:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf742d5a7 code=0x7ffc0000 [ 252.358904][ T29] audit: type=1326 audit(1717834572.161:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.388561][ T29] audit: type=1326 audit(1717834572.191:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.416337][ T29] audit: type=1326 audit(1717834572.211:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf742d5a7 code=0x7ffc0000 [ 252.443863][ T29] audit: type=1326 audit(1717834572.211:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x7ffc0000 [ 252.580465][ T5430] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 252.652934][ T5430] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 252.663109][ T5430] EXT4-fs (loop1): group descriptors corrupted! [ 253.522800][ T5442] loop1: detected capacity change from 0 to 2048 [ 253.609266][ T5442] loop1: p1 < > p4 [ 253.672816][ T5442] loop1: p4 size 8388608 extends beyond EOD, truncated [ 254.775359][ T5466] ===================================================== [ 254.782631][ T5466] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0 [ 254.789068][ T5466] strnchr+0x90/0xd0 [ 254.793135][ T5466] bpf_bprintf_prepare+0x1c2/0x23c0 [ 254.798530][ T5466] bpf_trace_printk+0xec/0x3e0 [ 254.803483][ T5466] ___bpf_prog_run+0x13fe/0xe0f0 [ 254.808660][ T5466] __bpf_prog_run32+0xb2/0xe0 [ 254.813500][ T5466] bpf_trace_run2+0x116/0x300 [ 254.818325][ T5466] __bpf_trace_tlb_flush+0x2c/0x40 [ 254.823617][ T5466] switch_mm_irqs_off+0x9d2/0x1010 [ 254.828890][ T5466] __text_poke+0xb4e/0xfb0 [ 254.833482][ T5466] text_poke_bp_batch+0x17f/0x960 [ 254.838694][ T5466] text_poke_finish+0x7d/0xd0 [ 254.843548][ T5466] arch_jump_label_transform_apply+0x23/0x40 [ 254.849686][ T5466] __jump_label_update+0x6af/0x6d0 [ 254.854988][ T5466] jump_label_update+0x6a0/0x7a0 [ 254.860106][ T5466] static_key_enable_cpuslocked+0x229/0x260 [ 254.866189][ T5466] static_key_enable+0x23/0x30 [ 254.871124][ T5466] tracepoint_add_func+0x1084/0x1280 [ 254.876627][ T5466] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 254.883605][ T5466] bpf_probe_register+0x201/0x250 [ 254.888788][ T5466] bpf_raw_tp_link_attach+0x627/0x8a0 [ 254.894345][ T5466] bpf_raw_tracepoint_open+0x485/0x8a0 [ 254.899978][ T5466] __sys_bpf+0x5a6/0xd90 [ 254.904371][ T5466] __ia32_sys_bpf+0xa0/0xe0 [ 254.909020][ T5466] ia32_sys_call+0xf7e/0x40a0 [ 254.913885][ T5466] __do_fast_syscall_32+0xb4/0x120 [ 254.919179][ T5466] do_fast_syscall_32+0x38/0x80 [ 254.924207][ T5466] do_SYSENTER_32+0x1f/0x30 [ 254.928886][ T5466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 254.935429][ T5466] [ 254.937829][ T5466] Local variable stack created at: [ 254.943034][ T5466] __bpf_prog_run32+0x43/0xe0 [ 254.947867][ T5466] bpf_trace_run2+0x116/0x300 [ 254.952686][ T5466] [ 254.955103][ T5466] CPU: 1 PID: 5466 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 254.965238][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 254.975409][ T5466] ===================================================== [ 254.982434][ T5466] Disabling lock debugging due to kernel taint [ 254.988673][ T5466] Kernel panic - not syncing: kmsan.panic set ... [ 254.995174][ T5466] CPU: 1 PID: 5466 Comm: syz-executor.0 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 255.006750][ T5466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 255.016893][ T5466] Call Trace: [ 255.020245][ T5466] [ 255.023241][ T5466] dump_stack_lvl+0x216/0x2d0 [ 255.028065][ T5466] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 255.034007][ T5466] dump_stack+0x1e/0x30 [ 255.038296][ T5466] panic+0x4e2/0xcd0 [ 255.042329][ T5466] ? kmsan_get_metadata+0xf1/0x1d0 [ 255.047581][ T5466] kmsan_report+0x2d5/0x2e0 [ 255.052209][ T5466] ? __msan_warning+0x95/0x120 [ 255.057076][ T5466] ? strnchr+0x90/0xd0 [ 255.061283][ T5466] ? bpf_bprintf_prepare+0x1c2/0x23c0 [ 255.066815][ T5466] ? bpf_trace_printk+0xec/0x3e0 [ 255.071893][ T5466] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 255.077131][ T5466] ? __bpf_prog_run32+0xb2/0xe0 [ 255.082105][ T5466] ? bpf_trace_run2+0x116/0x300 [ 255.087069][ T5466] ? __bpf_trace_tlb_flush+0x2c/0x40 [ 255.092490][ T5466] ? switch_mm_irqs_off+0x9d2/0x1010 [ 255.097899][ T5466] ? __text_poke+0xb4e/0xfb0 [ 255.102626][ T5466] ? text_poke_bp_batch+0x17f/0x960 [ 255.107971][ T5466] ? text_poke_finish+0x7d/0xd0 [ 255.112964][ T5466] ? arch_jump_label_transform_apply+0x23/0x40 [ 255.119243][ T5466] ? __jump_label_update+0x6af/0x6d0 [ 255.124680][ T5466] ? jump_label_update+0x6a0/0x7a0 [ 255.129928][ T5466] ? static_key_enable_cpuslocked+0x229/0x260 [ 255.136150][ T5466] ? static_key_enable+0x23/0x30 [ 255.141224][ T5466] ? tracepoint_add_func+0x1084/0x1280 [ 255.146835][ T5466] ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 255.153940][ T5466] ? bpf_probe_register+0x201/0x250 [ 255.159263][ T5466] ? bpf_raw_tp_link_attach+0x627/0x8a0 [ 255.164957][ T5466] ? bpf_raw_tracepoint_open+0x485/0x8a0 [ 255.170726][ T5466] ? __sys_bpf+0x5a6/0xd90 [ 255.175264][ T5466] ? __ia32_sys_bpf+0xa0/0xe0 [ 255.180055][ T5466] ? ia32_sys_call+0xf7e/0x40a0 [ 255.185054][ T5466] ? __do_fast_syscall_32+0xb4/0x120 [ 255.190484][ T5466] ? do_fast_syscall_32+0x38/0x80 [ 255.195650][ T5466] ? do_SYSENTER_32+0x1f/0x30 [ 255.200467][ T5466] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.207134][ T5466] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 255.213576][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.218902][ T5466] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 255.224840][ T5466] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 255.230772][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.236089][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.241415][ T5466] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 255.247354][ T5466] __msan_warning+0x95/0x120 [ 255.252056][ T5466] strnchr+0x90/0xd0 [ 255.256091][ T5466] bpf_bprintf_prepare+0x1c2/0x23c0 [ 255.261451][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.266769][ T5466] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 255.273181][ T5466] ? __msan_memcpy+0x108/0x1c0 [ 255.278096][ T5466] bpf_trace_printk+0xec/0x3e0 [ 255.283003][ T5466] ? __bpf_prog_run32+0x5c/0xe0 [ 255.287983][ T5466] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 255.293924][ T5466] ___bpf_prog_run+0x13fe/0xe0f0 [ 255.298989][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.304326][ T5466] __bpf_prog_run32+0xb2/0xe0 [ 255.309150][ T5466] ? kmsan_get_metadata+0x110/0x1d0 [ 255.314480][ T5466] ? __pfx___bpf_prog_run32+0x10/0x10 [ 255.319981][ T5466] bpf_trace_run2+0x116/0x300 [ 255.324780][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.330102][ T5466] __bpf_trace_tlb_flush+0x2c/0x40 [ 255.335348][ T5466] switch_mm_irqs_off+0x9d2/0x1010 [ 255.340601][ T5466] __text_poke+0xb4e/0xfb0 [ 255.345179][ T5466] ? __pfx_text_poke_memcpy+0x10/0x10 [ 255.350738][ T5466] ? switch_mm_irqs_off+0x920/0x1010 [ 255.356178][ T5466] ? switch_mm_irqs_off+0x920/0x1010 [ 255.361600][ T5466] text_poke_bp_batch+0x17f/0x960 [ 255.366786][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.372112][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.377458][ T5466] ? kmsan_get_shadow_origin_ptr+0x16/0xb0 [ 255.383424][ T5466] text_poke_finish+0x7d/0xd0 [ 255.388261][ T5466] arch_jump_label_transform_apply+0x23/0x40 [ 255.394388][ T5466] __jump_label_update+0x6af/0x6d0 [ 255.399678][ T5466] jump_label_update+0x6a0/0x7a0 [ 255.404766][ T5466] ? kmsan_report+0x2a0/0x2e0 [ 255.409585][ T5466] static_key_enable_cpuslocked+0x229/0x260 [ 255.415652][ T5466] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 255.421614][ T5466] static_key_enable+0x23/0x30 [ 255.426528][ T5466] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 255.432067][ T5466] tracepoint_add_func+0x1084/0x1280 [ 255.437521][ T5466] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 255.443941][ T5466] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 255.449886][ T5466] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 255.456819][ T5466] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 255.462767][ T5466] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 255.468712][ T5466] bpf_probe_register+0x201/0x250 [ 255.473882][ T5466] bpf_raw_tp_link_attach+0x627/0x8a0 [ 255.479455][ T5466] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 255.485704][ T5466] ? kmsan_get_metadata+0x146/0x1d0 [ 255.491041][ T5466] bpf_raw_tracepoint_open+0x485/0x8a0 [ 255.496664][ T5466] __sys_bpf+0x5a6/0xd90 [ 255.501067][ T5466] __ia32_sys_bpf+0xa0/0xe0 [ 255.505694][ T5466] ia32_sys_call+0xf7e/0x40a0 [ 255.510525][ T5466] __do_fast_syscall_32+0xb4/0x120 [ 255.515791][ T5466] ? irqentry_exit+0x16/0x60 [ 255.520517][ T5466] do_fast_syscall_32+0x38/0x80 [ 255.525516][ T5466] do_SYSENTER_32+0x1f/0x30 [ 255.530163][ T5466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.536681][ T5466] RIP: 0023:0xf747f579 [ 255.540849][ T5466] Code: Unable to access opcode bytes at 0xf747f54f. [ 255.547605][ T5466] RSP: 002b:00000000f5f085ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 255.556148][ T5466] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 255.564238][ T5466] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.572351][ T5466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.580424][ T5466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.588493][ T5466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.596580][ T5466] [ 256.983953][ T5466] Shutting down cpus with NMI [ 256.988956][ T5466] Kernel Offset: disabled [ 256.993367][ T5466] Rebooting in 86400 seconds..