last executing test programs: 6m11.445957274s ago: executing program 2 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 6m11.30168346s ago: executing program 2 (id=353): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) 6m10.002349035s ago: executing program 2 (id=357): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 6m8.846162314s ago: executing program 2 (id=360): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x84) socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 6m7.887691785s ago: executing program 2 (id=366): setgroups(0x0, 0x0) 6m7.654395014s ago: executing program 2 (id=371): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) 6m7.432683274s ago: executing program 32 (id=371): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCMIWAIT(r0, 0x5453, 0x0) 8.488590822s ago: executing program 3 (id=3837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 8.350385328s ago: executing program 3 (id=3838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) close(0x3) 8.349991148s ago: executing program 0 (id=3839): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 8.191278564s ago: executing program 3 (id=3840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c", 0x10}], 0x1) 7.83426104s ago: executing program 0 (id=3843): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xecce}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.722329064s ago: executing program 0 (id=3846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 7.649482177s ago: executing program 1 (id=3847): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.290592073s ago: executing program 0 (id=3848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 7.054388503s ago: executing program 1 (id=3849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 6.697960908s ago: executing program 1 (id=3850): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10) 4.090234578s ago: executing program 1 (id=3852): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x4, 0xe}, {0xfff1}}}, 0x24}}, 0x74000800) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.739351037s ago: executing program 4 (id=3864): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf0c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.42167937s ago: executing program 4 (id=3865): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x10020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010) recvmsg$unix(r0, 0x0, 0x2002) 1.274258347s ago: executing program 4 (id=3866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1209ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.270439227s ago: executing program 4 (id=3867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) close(0x3) 1.149760892s ago: executing program 4 (id=3868): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x1}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {0x1}, {0x80}, @connect={{0x40, 0x5}, {0x80, 0xf}}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) read$char_usb(r2, 0x0, 0x0) 1.029615016s ago: executing program 4 (id=3869): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000022, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0, 0xffff]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x40004) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101, 0x0) close(r6) 1.028927987s ago: executing program 3 (id=3870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 1.010506668s ago: executing program 0 (id=3871): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x0) 978.261419ms ago: executing program 1 (id=3872): arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000300)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000016c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1c000000060a010200000000000000000700000408000a400000000120000000120a010100000000000000000100000a0900010073797a3100000000200000000b0a050000000000000000000a0000070c000b40000000000000000c600200000b0a01040000000000000000020000043c001280100001800a00010072656469720000002800018008000100647570001c000280080002400000000e08000240000000000800024000000015a9000d408b579248fc87f742e6a0e28b8b054a5a7cd7319531d4da5146fcc0fa81ed2150ce538a8744fbecd8897ab1bcf637e576895f0ec06b17daf3673b11e21791b94e5b95a701c52495ca4ebbc46b370effb29f627094c70031ca09e948332bdd91a35d25fe98c1ac360f091c40fcc0eb1dca780d42b9bde1f0fd6435e088ea02d42a8d10c34210b540ee956020a463efb0e1d20ed12b5e87b677a95b78f290f7ef0d4f3078f3e7000000080004400000000308000440000000050c000b400000000000000800480109800800014000800000080001400000000508000140000000092c0102800c00018008000140000000040c000180080001400000040024000180080001400000000f08000140000000030800014000000008080001400000000744000180080001400000000508000140000000010800014000000006080001400000000608000140000008e00800014000008000080001400000000808000140ffffffff040001800c00018008000140000000052c000180080001400000000808000140000000000800014000000007080001400000000d08000140000000061c000180080001400000080008000140000005c908000140b000000014000180080001400000000408000140000001003c00018008000140fffffffa0800e340000000060800014000000002080001400000000808000140000000040800014000001000080001400000000730000000000a01040000000000000000030000060900010073797a300000000008000240000000030800024000000002340000000e0a03000000000000000000010000010900020073797a30000000000900010073797a30000000000800044000000003dc000000020a0300000000000000000007000003b6000600f28ab29f456e0a1d0420665c8949243416307c02fa995b9d1e3fdbc4facc8e914c903a0819c8d7f370a2ffabb9c481e94fc9e484f02c138e664d35672b6aa006c3dbdfdb41938fc846edbee66cc3f6e0c627b9d34c2feb145a067c7378d094088c72bcc0e522d7f34bc6885ab9f257faaf2cc5cae322b995c0b8642539593e02e4e06c5f391ce97d788f8474896789036da1d955545e34d138ccf38ca0054d3a8d93814d17f611505497757670d059372a7400000800024000000002080002400000000234000000020a01080000000000000000070000040c00044000000000000000050c0004400000000000000001"], 0x510}, 0x1, 0x0, 0x0, 0x5}, 0x4) clock_settime(0x0, &(0x7f00000000c0)={0x7, 0xffffffff000}) syz_open_dev$vbi(0x0, 0x2, 0x2) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x8, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4080) write$binfmt_misc(r1, &(0x7f0000000340)="16ffa8e21aaf5113db97d10ee9586a7b1019cffa2396e5cbacac26138e22ff5fb54f745efb23c292601b8f3b685345a69e764a5e767726c32cb8d5cdf39891e636e63540a2e7619ff03fb7bd9bd0b1c430e7481fa9c4b608794ed05c64ecf998eb7c9ee3f6436c270d62c7abe248bbed71e96cf629801e6c96e70db5664f19a2c1c724ab6553ea8038fea04d723ab35779d78e8b382e995674de0fe7065f5ee04e73feacbd66822be410414d1907913a7831773c60089b98", 0xb8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x8007, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x32}}, 0x0, 0xebc, 0xb, 0x7, 0x0, 0x9, 0xd5}, 0x9c) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd', @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',\x00']) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xf58ee24b36171c4a}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x20000013) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, 0x0) 857.582814ms ago: executing program 0 (id=3873): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf0c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b0000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 695.924611ms ago: executing program 3 (id=3874): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x1}, 0x10020) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010) recvmsg$unix(r0, 0x0, 0x2002) 1.25356ms ago: executing program 1 (id=3875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000004c0), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 0s ago: executing program 3 (id=3876): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) close(0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) close(0x3) kernel console output (not intermixed with test programs): ctive_anon:0kB active_file:4972kB inactive_file:159784kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96540kB dirty:160kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12432kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 230.437098][ T9577] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 230.487879][ T9577] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.534515][ T9577] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 230.550620][ T9577] Node 0 DMA32 free:1450824kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:19780kB inactive_anon:0kB active_file:4972kB inactive_file:158448kB unevictable:1536kB writepending:160kB present:3129332kB managed:2589596kB mlocked:0kB bounce:0kB free_pcp:32328kB local_pcp:20640kB free_cma:0kB [ 230.588624][ T9577] lowmem_reserve[]: 0 0 1 1 1 [ 230.594630][ T9577] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 230.624876][ T9577] lowmem_reserve[]: 0 0 0 0 0 [ 230.635881][ T9577] Node 1 Normal free:3890372kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24736kB local_pcp:16160kB free_cma:0kB [ 230.651517][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 230.670034][ T5790] Bluetooth: hci4: command 0x1003 tx timeout [ 230.681447][ T9577] lowmem_reserve[]: 0 0 0 0 0 [ 230.695087][ T9577] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 230.736055][ T9577] Node 0 DMA32: 1122*4kB (UME) 645*8kB (UME) 428*16kB (UME) 583*32kB (UME) 74*64kB (UME) 13*128kB (UM) 65*256kB (UM) 45*512kB (UME) 29*1024kB (UM) 12*2048kB (UM) 321*4096kB (UM) = 1450320kB [ 230.784502][ T9577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 230.829382][ T9577] Node 1 Normal: 273*4kB (UME) 64*8kB (UME) 44*16kB (UME) 84*32kB (UME) 33*64kB (UME) 8*128kB (UME) 3*256kB (UME) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3890372kB [ 230.850747][ T9577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.864276][ T9577] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 230.879448][ T9577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 230.893312][ T9577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 230.904022][ T9577] 42669 total pagecache pages [ 230.908784][ T9577] 0 pages in swap cache [ 230.915457][ T9577] Free swap = 124648kB [ 230.919688][ T9577] Total swap = 124996kB [ 230.924955][ T9577] 2097051 pages RAM [ 230.928983][ T9577] 0 pages HighMem/MovableOnly [ 230.936642][ T9577] 416138 pages reserved [ 230.940978][ T9577] 0 pages cma reserved [ 232.252989][ T9609] (null): rxe_set_mtu: Set mtu to 1024 [ 232.266533][ T9609] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 232.812449][ T9596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1260'. [ 232.895006][ T9612] tipc: Enabling of bearer rejected, failed to enable media [ 233.048654][ T9620] loop3: detected capacity change from 0 to 128 [ 233.058982][ T9620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 233.074327][ T9620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 233.087214][ T9620] program syz.3.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.245360][ T9633] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1278'. [ 233.267419][ T9635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1279'. [ 233.389580][ T27] kauditd_printk_skb: 392 callbacks suppressed [ 233.389593][ T27] audit: type=1326 audit(1764269482.759:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.561576][ T27] audit: type=1326 audit(1764269482.789:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.606429][ T27] audit: type=1326 audit(1764269482.869:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.628874][ T27] audit: type=1326 audit(1764269482.869:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.651286][ T27] audit: type=1326 audit(1764269482.869:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.674097][ T27] audit: type=1326 audit(1764269482.869:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.711202][ T27] audit: type=1326 audit(1764269482.869:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.771954][ T27] audit: type=1326 audit(1764269482.869:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.842973][ T27] audit: type=1326 audit(1764269482.869:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 233.845810][ T9649] pimreg: entered allmulticast mode [ 233.881506][ T27] audit: type=1326 audit(1764269482.869:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9640 comm="syz.0.1282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 234.021728][ T9655] pimreg: left allmulticast mode [ 234.186826][ T9657] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 234.437383][ T9666] program syz.1.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.632585][ T9677] tipc: Enabling of bearer rejected, failed to enable media [ 235.050392][ T9691] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 235.160785][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 235.194877][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 235.252593][ T9697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1305'. [ 235.258680][ T9695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1303'. [ 235.565733][ T9704] tipc: Enabled bearer , priority 0 [ 235.587194][ T9703] tipc: Disabling bearer [ 237.074764][ T9734] tipc: Enabling of bearer rejected, failed to enable media [ 237.112016][ T9738] loop3: detected capacity change from 0 to 1024 [ 237.122683][ T9738] EXT4-fs: inline encryption not supported [ 237.133077][ T9738] EXT4-fs: Ignoring removed nobh option [ 237.141891][ T9738] EXT4-fs: Ignoring removed bh option [ 237.154546][ T9738] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 237.209192][ T9738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.257328][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.384888][ T9754] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 237.547055][ T9762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1325'. [ 237.587766][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 237.625800][ T9759] tipc: Enabled bearer , priority 0 [ 237.650982][ T9758] tipc: Resetting bearer [ 239.466014][ T9758] tipc: Disabling bearer [ 239.474875][ T9766] tipc: Enabled bearer , priority 0 [ 239.482789][ T9769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1331'. [ 239.503204][ T9764] tipc: Disabling bearer [ 239.565725][ T9774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1333'. [ 239.604415][ T9776] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1332'. [ 239.631978][ T9778] (null): rxe_set_mtu: Set mtu to 1024 [ 239.639350][ T9778] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 240.547209][ T27] kauditd_printk_skb: 89 callbacks suppressed [ 240.547224][ T27] audit: type=1326 audit(1764269489.919:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.602834][ T27] audit: type=1326 audit(1764269489.959:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.628802][ T27] audit: type=1326 audit(1764269489.969:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.651656][ T27] audit: type=1326 audit(1764269489.969:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.674300][ T27] audit: type=1326 audit(1764269489.969:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.706364][ T27] audit: type=1326 audit(1764269489.969:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.735666][ T27] audit: type=1326 audit(1764269490.079:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.783008][ T27] audit: type=1326 audit(1764269490.079:2751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 240.807212][ T27] audit: type=1326 audit(1764269490.079:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4c15bc2005 code=0x7ffc0000 [ 240.849364][ T27] audit: type=1326 audit(1764269490.109:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 241.114825][ T9799] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 241.761363][ T9802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1352'. [ 241.772258][ T9803] tipc: Enabling of bearer rejected, failed to enable media [ 242.155712][ T9828] tipc: Enabling of bearer rejected, failed to enable media [ 242.257130][ T9833] tipc: Enabled bearer , priority 0 [ 242.270692][ T9831] tipc: Disabling bearer [ 242.280119][ T9837] tipc: Enabling of bearer rejected, failed to enable media [ 242.349130][ T9840] siw: device registration error -23 [ 242.395002][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1360'. [ 242.707062][ T9859] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1367'. [ 242.856901][ T9865] loop3: detected capacity change from 0 to 2048 [ 242.889055][ T9865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.892181][ T9867] tipc: Enabling of bearer rejected, failed to enable media [ 242.927223][ T9865] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.029386][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1374'. [ 243.142440][ T9878] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1376'. [ 243.310906][ T9880] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1375'. [ 243.341446][ T6529] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.511457][ T6529] usb 4-1: device descriptor read/64, error -71 [ 243.553825][ T9886] vlan2: entered allmulticast mode [ 243.573512][ T9886] dummy0: entered allmulticast mode [ 243.772965][ T9870] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 243.785377][ T6529] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 243.836895][ T9870] EXT4-fs (loop3): Remounting filesystem read-only [ 243.971459][ T6529] usb 4-1: device descriptor read/64, error -71 [ 244.101666][ T6529] usb usb4-port1: attempt power cycle [ 244.511464][ T6529] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.562145][ T6529] usb 4-1: device descriptor read/8, error -71 [ 244.830666][ T9912] vlan2: entered allmulticast mode [ 244.834489][ T6529] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 244.836926][ T9912] dummy0: entered allmulticast mode [ 244.882242][ T6529] usb 4-1: device descriptor read/8, error -71 [ 245.002284][ T6529] usb usb4-port1: unable to enumerate USB device [ 245.380773][ T9916] __nla_validate_parse: 1 callbacks suppressed [ 245.380807][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1388'. [ 246.291555][ T9930] 9pnet_fd: Insufficient options for proto=fd [ 246.302039][ T9932] siw: device registration error -23 [ 246.434267][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.154622][ T9951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1400'. [ 248.207815][ T27] kauditd_printk_skb: 68 callbacks suppressed [ 248.207831][ T27] audit: type=1326 audit(1764269497.579:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 248.302511][ T27] audit: type=1326 audit(1764269497.619:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 248.371393][ T27] audit: type=1326 audit(1764269497.619:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9964 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 248.791211][ T9984] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1413'. [ 249.579758][ T9994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.591435][ T9994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.606951][ T9994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.617693][ T9994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.628112][ T9994] geneve2: entered promiscuous mode [ 249.633855][ T9994] geneve2: entered allmulticast mode [ 249.661476][ T9994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.676224][ T9990] syz.4.1417[9990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.676331][ T9990] syz.4.1417[9990] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.698787][ T9990] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1417'. [ 249.711508][ T9994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.727047][ T9990] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1417'. [ 249.741391][ T9994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.751510][ T9994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.036645][T10015] loop3: detected capacity change from 0 to 128 [ 250.061956][T10017] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 250.082339][T10015] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.131462][T10015] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.516479][T10032] tipc: Enabling of bearer rejected, failed to enable media [ 250.564330][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 251.471735][T10047] tipc: Enabled bearer , priority 0 [ 251.513724][T10047] tipc: Disabling bearer [ 251.539920][T10057] loop3: detected capacity change from 0 to 512 [ 251.587131][T10057] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 251.796962][T10065] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 251.849838][T10065] team0: Port device dummy0 added [ 251.878749][T10068] netlink: 'syz.0.1448': attribute type 10 has an invalid length. [ 251.962560][T10068] team0: Port device dummy0 removed [ 252.237139][T10083] tipc: Enabling of bearer rejected, failed to enable media [ 252.288113][T10084] lo speed is unknown, defaulting to 1000 [ 252.440704][ T27] audit: type=1326 audit(1764269501.809:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.485314][ T27] audit: type=1326 audit(1764269501.839:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.535930][ T27] audit: type=1326 audit(1764269501.839:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.584780][ T27] audit: type=1326 audit(1764269501.839:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.633220][ T27] audit: type=1326 audit(1764269501.809:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.680968][ T27] audit: type=1326 audit(1764269501.839:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.703718][ T27] audit: type=1326 audit(1764269501.839:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10093 comm="syz.4.1460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 252.833482][T10106] netlink: 'syz.4.1465': attribute type 10 has an invalid length. [ 252.868726][T10106] team0: Port device dummy0 added [ 252.908204][T10106] netlink: 'syz.4.1465': attribute type 10 has an invalid length. [ 252.941973][T10106] team0: Port device dummy0 removed [ 252.960261][T10106] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.095324][T10118] xt_TPROXY: Can be used only with -p tcp or -p udp [ 253.196396][T10123] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1472'. [ 253.213879][T10126] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 253.224509][T10123] 0ªî{X¹¦: renamed from gretap0 [ 253.232783][T10123] 0ªî{X¹¦: entered allmulticast mode [ 253.240024][T10123] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 253.270323][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 253.270335][ T27] audit: type=1326 audit(1764269502.639:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.340199][ T27] audit: type=1326 audit(1764269502.669:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.365335][ T27] audit: type=1326 audit(1764269502.669:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.388379][ T27] audit: type=1326 audit(1764269502.679:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.410997][ T27] audit: type=1326 audit(1764269502.709:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.457868][ T27] audit: type=1326 audit(1764269502.739:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f60fd5c2005 code=0x7ffc0000 [ 253.490101][ T27] audit: type=1326 audit(1764269502.739:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.537073][T10139] loop3: detected capacity change from 0 to 128 [ 253.568415][ T27] audit: type=1326 audit(1764269502.739:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.592683][T10139] syz.3.1480: attempt to access beyond end of device [ 253.592683][T10139] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 253.626806][ T27] audit: type=1326 audit(1764269502.739:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10124 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 253.674161][ T27] audit: type=1326 audit(1764269502.889:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.1.1474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 254.132666][T10156] loop3: detected capacity change from 0 to 1024 [ 254.140143][T10156] EXT4-fs: Ignoring removed orlov option [ 254.165739][T10156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.207274][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1488'. [ 254.893118][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.007276][T10182] vlan2: entered allmulticast mode [ 255.232199][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1502'. [ 255.618759][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.625197][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.941649][T10215] tipc: Enabling of bearer rejected, failed to enable media [ 256.017892][T10221] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 256.258093][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 256.286877][T10227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1519'. [ 256.825211][T10249] tipc: Enabling of bearer rejected, failed to enable media [ 257.019074][T10257] IPv6: NLM_F_CREATE should be specified when creating new route [ 257.487768][T10274] syz.1.1540[10274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.487892][T10274] syz.1.1540[10274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 257.635341][T10279] tipc: Enabling of bearer rejected, failed to enable media [ 258.168555][T10301] tipc: Enabling of bearer rejected, failed to enable media [ 258.288038][T10303] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1551'. [ 258.386609][T10307] syz.0.1553[10307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.386721][T10307] syz.0.1553[10307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.401958][T10307] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1553'. [ 258.423517][T10307] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1553'. [ 258.560647][ T27] kauditd_printk_skb: 266 callbacks suppressed [ 258.560659][ T27] audit: type=1326 audit(1764269507.929:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.601421][ T27] audit: type=1326 audit(1764269507.969:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.651772][ T27] audit: type=1326 audit(1764269507.969:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.701403][ T27] audit: type=1326 audit(1764269507.969:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.746687][ T27] audit: type=1326 audit(1764269507.969:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.814636][ T27] audit: type=1326 audit(1764269507.969:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.860814][ T27] audit: type=1326 audit(1764269507.969:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.907674][ T27] audit: type=1326 audit(1764269507.969:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.960691][ T27] audit: type=1326 audit(1764269507.969:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 258.971562][ T5798] Bluetooth: hci4: command 0x1003 tx timeout [ 258.983353][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 259.051414][ T27] audit: type=1326 audit(1764269507.969:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.0.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 259.207047][T10327] tipc: Enabling of bearer rejected, failed to enable media [ 259.987610][T10358] tipc: Enabling of bearer rejected, failed to enable media [ 260.126961][T10363] syzkaller0: entered promiscuous mode [ 260.158051][T10363] syzkaller0: entered allmulticast mode [ 261.207671][T10385] 9pnet_fd: Insufficient options for proto=fd [ 261.215714][T10386] tipc: Enabling of bearer rejected, failed to enable media [ 261.401229][T10396] netlink: 320 bytes leftover after parsing attributes in process `syz.4.1590'. [ 263.989507][T10446] netlink: 'syz.1.1607': attribute type 10 has an invalid length. [ 264.059659][T10445] bridge0: port 3(macsec1) entered blocking state [ 264.080941][T10445] bridge0: port 3(macsec1) entered disabled state [ 264.093326][T10445] macsec1: entered allmulticast mode [ 264.098644][T10445] bridge0: entered allmulticast mode [ 264.111867][T10445] macsec1: left allmulticast mode [ 264.117057][T10445] bridge0: left allmulticast mode [ 264.424779][T10462] loop3: detected capacity change from 0 to 128 [ 264.448898][T10462] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.467305][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 264.467317][ T27] audit: type=1326 audit(1764269513.839:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.543591][T10462] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.556907][ T27] audit: type=1326 audit(1764269513.839:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.606692][T10462] program syz.3.1613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.623449][ T27] audit: type=1326 audit(1764269513.839:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.649533][ T27] audit: type=1326 audit(1764269513.839:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.691516][ T27] audit: type=1326 audit(1764269513.879:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.731389][ T27] audit: type=1326 audit(1764269513.879:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.1.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.785339][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1618'. [ 264.797395][ T27] audit: type=1326 audit(1764269514.169:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.846442][ T27] audit: type=1326 audit(1764269514.199:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.889303][ T27] audit: type=1326 audit(1764269514.199:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 264.914184][ T27] audit: type=1326 audit(1764269514.199:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.1.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 265.447409][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1626'. [ 268.162082][T10521] x_tables: duplicate underflow at hook 1 [ 268.588389][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1644'. [ 269.090276][T10547] can0: slcan on ptm0. [ 269.193302][T10547] can0 (unregistered): slcan off ptm0. [ 269.201166][T10547] Falling back ldisc for ptm0. [ 270.090825][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 270.090841][ T27] audit: type=1326 audit(1764269519.459:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.149024][ T27] audit: type=1326 audit(1764269519.459:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.211394][ T27] audit: type=1326 audit(1764269519.509:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.238894][ T27] audit: type=1326 audit(1764269519.509:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.266198][ T27] audit: type=1326 audit(1764269519.509:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.292051][T10574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1663'. [ 270.323490][ T27] audit: type=1326 audit(1764269519.519:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.371115][ T27] audit: type=1326 audit(1764269519.519:3193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.401935][T10581] loop3: detected capacity change from 0 to 128 [ 270.438067][ T27] audit: type=1326 audit(1764269519.519:3194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.442487][T10581] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.498901][ T27] audit: type=1326 audit(1764269519.519:3195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.574306][ T27] audit: type=1326 audit(1764269519.519:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10567 comm="syz.0.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 270.598340][T10581] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.667785][T10581] program syz.3.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.525455][T10620] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1684'. [ 271.556586][T10619] syzkaller0: entered promiscuous mode [ 271.570031][T10619] syzkaller0: entered allmulticast mode [ 271.667067][T10622] vlan2: entered allmulticast mode [ 271.675372][T10622] dummy0: entered allmulticast mode [ 272.381006][T10638] loop3: detected capacity change from 0 to 128 [ 272.425385][T10638] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.484382][T10638] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.558689][T10638] program syz.3.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.226024][T10672] loop3: detected capacity change from 0 to 512 [ 274.276566][T10672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.338861][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1706'. [ 274.385548][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.094878][ T27] kauditd_printk_skb: 56 callbacks suppressed [ 275.094913][ T27] audit: type=1326 audit(1764269524.469:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.293603][T10693] vlan2: entered allmulticast mode [ 275.419202][ T27] audit: type=1326 audit(1764269524.509:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.447313][ T27] audit: type=1326 audit(1764269524.509:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.477928][T10693] dummy0: entered allmulticast mode [ 275.503668][ T27] audit: type=1326 audit(1764269524.529:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.527285][ T27] audit: type=1326 audit(1764269524.529:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.563259][ T27] audit: type=1326 audit(1764269524.529:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.600340][ T27] audit: type=1326 audit(1764269524.549:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.631403][ T27] audit: type=1326 audit(1764269524.569:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.676622][ T27] audit: type=1326 audit(1764269524.569:3261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.716517][ T27] audit: type=1326 audit(1764269524.589:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.1.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 275.753915][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'. [ 275.824443][T10704] program syz.1.1711 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.991640][T10713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1717'. [ 276.267409][T10717] 9pnet_fd: Insufficient options for proto=fd [ 276.648848][T10729] vlan2: entered allmulticast mode [ 277.130845][ T5798] Bluetooth: hci4: sending frame failed (-49) [ 277.140080][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 277.200234][T10745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1730'. [ 278.435217][T10776] lo speed is unknown, defaulting to 1000 [ 278.474315][T10779] netlink: 'syz.4.1742': attribute type 6 has an invalid length. [ 278.730960][T10785] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'. [ 279.346233][T10812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.076953][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.096956][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.107937][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.146373][T10849] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.186162][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.195530][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.206486][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.219692][T10849] wg1 speed is unknown, defaulting to 1000 [ 280.291414][ T27] kauditd_printk_skb: 121 callbacks suppressed [ 280.291426][ T27] audit: type=1326 audit(1764269529.659:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.348563][ T27] audit: type=1326 audit(1764269529.689:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.402056][ T27] audit: type=1326 audit(1764269529.699:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.425856][ T27] audit: type=1326 audit(1764269529.699:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10857 comm="syz.1.1778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.451943][ T27] audit: type=1326 audit(1764269529.829:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 280.499358][ T27] audit: type=1326 audit(1764269529.849:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 280.540520][ T27] audit: type=1326 audit(1764269529.849:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.4.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 280.585838][ T27] audit: type=1326 audit(1764269529.959:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.613435][ T27] audit: type=1326 audit(1764269529.979:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 280.636169][ T27] audit: type=1326 audit(1764269529.989:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10867 comm="syz.1.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 281.697649][T10919] loop3: detected capacity change from 0 to 164 [ 281.708065][T10919] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 281.718198][T10919] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 282.029017][T10930] syz.3.1812[10930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.029138][T10930] syz.3.1812[10930] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.717687][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1821'. [ 282.865606][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 283.018251][T10960] bridge0: port 1(gretap0) entered blocking state [ 283.034796][T10960] bridge0: port 1(gretap0) entered disabled state [ 283.050803][T10960] gretap0: entered allmulticast mode [ 283.063398][T10960] gretap0: entered promiscuous mode [ 284.181786][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1833'. [ 284.307932][T10999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1836'. [ 286.045222][T11029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1847'. [ 286.983305][T11047] ALSA: seq fatal error: cannot create timer (-19) [ 288.244963][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 288.244978][ T27] audit: type=1326 audit(1764269537.619:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.306413][ T27] audit: type=1326 audit(1764269537.619:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.329554][ T27] audit: type=1326 audit(1764269537.649:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.352358][ T27] audit: type=1326 audit(1764269537.649:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.374976][ T27] audit: type=1326 audit(1764269537.649:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.410222][ T27] audit: type=1326 audit(1764269537.649:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.447991][ T27] audit: type=1326 audit(1764269537.649:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.473672][ T27] audit: type=1326 audit(1764269537.649:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.510156][ T27] audit: type=1326 audit(1764269537.649:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.533856][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1881'. [ 288.537520][ T27] audit: type=1326 audit(1764269537.649:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11093 comm="syz.1.1876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 288.643385][T11107] program syz.1.1882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 289.717229][T11151] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1902'. [ 289.935857][T11161] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1907'. [ 290.741165][T11197] syzkaller0: entered promiscuous mode [ 290.751202][T11197] syzkaller0: entered allmulticast mode [ 290.813435][T11197] tipc: Enabled bearer , priority 0 [ 290.822988][T11195] tipc: Resetting bearer [ 290.878268][T11195] tipc: Disabling bearer [ 291.072312][T11210] veth1_to_bond: entered promiscuous mode [ 291.089191][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1929'. [ 291.380888][T11223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1934'. [ 291.415538][T11224] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1935'. [ 291.495603][T11228] loop3: detected capacity change from 0 to 128 [ 291.544766][T11228] syz.3.1937: attempt to access beyond end of device [ 291.544766][T11228] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 291.897229][T11246] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1946'. [ 292.817778][T11267] loop3: detected capacity change from 0 to 512 [ 292.846840][T11267] EXT4-fs error (device loop3): ext4_xattr_inode_iget:449: comm syz.3.1956: error while reading EA inode 32 err=-116 [ 292.874522][T11267] EXT4-fs (loop3): Remounting filesystem read-only [ 292.891492][T11267] EXT4-fs warning (device loop3): ext4_evict_inode:255: couldn't mark inode dirty (err -5) [ 292.911423][T11267] EXT4-fs (loop3): 1 orphan inode deleted [ 292.918385][T11267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.944299][T11267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.302811][T11291] loop3: detected capacity change from 0 to 512 [ 293.324445][T11291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.377510][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.489642][ T27] kauditd_printk_skb: 129 callbacks suppressed [ 293.489655][ T27] audit: type=1326 audit(1764269542.859:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 293.526034][T11303] loop3: detected capacity change from 0 to 128 [ 293.546930][T11303] syz.3.1970: attempt to access beyond end of device [ 293.546930][T11303] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 293.560732][ T27] audit: type=1326 audit(1764269542.889:3574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 293.588028][ T27] audit: type=1326 audit(1764269542.889:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 293.610712][ T27] audit: type=1326 audit(1764269542.889:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 293.633336][ T27] audit: type=1326 audit(1764269542.889:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 294.124400][T11314] lo: entered allmulticast mode [ 294.855315][ T27] audit: type=1326 audit(1764269544.229:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 294.904343][ T27] audit: type=1326 audit(1764269544.229:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 294.954062][ T27] audit: type=1326 audit(1764269544.259:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 295.003698][ T27] audit: type=1326 audit(1764269544.259:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 295.011508][T11320] xt_hashlimit: max too large, truncated to 1048576 [ 295.042110][ T27] audit: type=1326 audit(1764269544.259:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11317 comm="syz.3.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 295.625592][T11354] tipc: Enabling of bearer rejected, already enabled [ 295.795807][T11358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1993'. [ 296.267870][T11373] lo speed is unknown, defaulting to 1000 [ 296.659792][T11373] wg1 speed is unknown, defaulting to 1000 [ 297.585220][T11414] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2016'. [ 298.229062][T11443] program syz.1.2027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.552905][T11452] Process accounting resumed [ 298.590903][ T27] kauditd_printk_skb: 158 callbacks suppressed [ 298.590915][ T27] audit: type=1326 audit(1764269547.959:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.622999][ T27] audit: type=1326 audit(1764269547.959:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.648699][ T27] audit: type=1326 audit(1764269547.969:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.674206][ T27] audit: type=1326 audit(1764269547.969:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.700565][ T27] audit: type=1326 audit(1764269547.969:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.727592][ T27] audit: type=1326 audit(1764269547.969:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.755884][ T27] audit: type=1326 audit(1764269547.969:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.781238][ T27] audit: type=1326 audit(1764269548.019:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.834492][ T27] audit: type=1326 audit(1764269548.019:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 298.874006][ T27] audit: type=1326 audit(1764269548.019:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11453 comm="syz.4.2032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 299.267053][T11466] tipc: Enabled bearer , priority 0 [ 299.275509][T11465] tipc: Resetting bearer [ 299.629844][T11485] program syz.3.2044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.448416][T11465] tipc: Disabling bearer [ 302.475981][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2050'. [ 302.711073][T11525] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 303.084789][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2060'. [ 303.111469][T11548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2066'. [ 303.173107][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2060'. [ 303.253932][T11554] lo speed is unknown, defaulting to 1000 [ 303.375585][T11534] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2060'. [ 303.431241][T11561] program syz.1.2069 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.551873][T11554] wg1 speed is unknown, defaulting to 1000 [ 304.255890][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2074'. [ 304.304819][T11584] bridge0: entered promiscuous mode [ 304.310370][T11584] bridge0: entered allmulticast mode [ 304.689939][T11588] bridge0: port 1(gretap0) entered blocking state [ 304.696569][T11588] bridge0: port 1(gretap0) entered forwarding state [ 304.730640][T11588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.837654][T11588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.866935][ T6893] lo speed is unknown, defaulting to 1000 [ 304.874091][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 305.909500][T11601] syz.3.2080[11601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.909621][T11601] syz.3.2080[11601] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 306.014835][ T27] kauditd_printk_skb: 60 callbacks suppressed [ 306.014848][ T27] audit: type=1326 audit(1764269555.389:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.084068][ T27] audit: type=1326 audit(1764269555.429:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b4b18df90 code=0x7ffc0000 [ 306.127297][ T27] audit: type=1326 audit(1764269555.429:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.150409][T11607] wireguard1: entered promiscuous mode [ 306.169601][T11607] wireguard1: entered allmulticast mode [ 306.181751][ T27] audit: type=1326 audit(1764269555.429:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.205613][ T27] audit: type=1326 audit(1764269555.429:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.228214][ T27] audit: type=1326 audit(1764269555.429:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.250891][ T27] audit: type=1326 audit(1764269555.429:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 306.273502][ T27] audit: type=1326 audit(1764269555.429:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b4b191667 code=0x7ffc0000 [ 306.296175][ T27] audit: type=1326 audit(1764269555.429:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4b4b1915dc code=0x7ffc0000 [ 306.318786][ T27] audit: type=1326 audit(1764269555.429:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11604 comm="syz.0.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4b4b191514 code=0x7ffc0000 [ 307.719445][T11657] 9pnet: Could not find request transport: 0xffffffffffffffff [ 307.903244][T11665] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.061774][T11706] vlan2: entered allmulticast mode [ 309.251016][T11715] tipc: Enabling of bearer rejected, failed to enable media [ 309.294423][T11719] netlink: 'syz.4.2130': attribute type 27 has an invalid length. [ 309.886662][T11719] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.898649][T11719] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.907176][T11719] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.915774][T11719] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.929999][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2136'. [ 309.948675][T11731] vlan2: entered allmulticast mode [ 310.068247][T11737] lo: entered allmulticast mode [ 310.083550][T11736] lo: left allmulticast mode [ 310.578555][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 310.616116][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2147'. [ 311.148810][ T27] kauditd_printk_skb: 762 callbacks suppressed [ 311.148825][ T27] audit: type=1326 audit(1764269560.519:4583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 311.222212][ T27] audit: type=1326 audit(1764269560.569:4584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11758 comm="syz.0.2147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b4b18f749 code=0x7ffc0000 [ 311.534112][T11782] syz.1.2156[11782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.534236][T11782] syz.1.2156[11782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.554803][T11782] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2156'. [ 311.595426][T11786] syz.3.2158[11786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.595567][T11786] syz.3.2158[11786] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.617784][T11782] 0ªX¹¦À: renamed from caif0 [ 311.666229][ T27] audit: type=1326 audit(1764269561.039:4585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 311.720605][T11782] 0ªX¹¦À: entered allmulticast mode [ 311.734871][T11782] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 311.738437][ T27] audit: type=1326 audit(1764269561.039:4586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 311.812745][T11789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2159'. [ 311.835716][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2159'. [ 311.847338][ T27] audit: type=1326 audit(1764269561.059:4587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 311.899451][ T27] audit: type=1326 audit(1764269561.059:4588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 311.956903][ T27] audit: type=1326 audit(1764269561.059:4589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11785 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 312.010731][T11794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2161'. [ 312.144604][T11796] syzkaller0: entered promiscuous mode [ 312.191151][T11796] syzkaller0: entered allmulticast mode [ 312.246720][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2164'. [ 312.820552][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.829669][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.837551][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.845782][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.855423][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.862878][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.879413][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 312.888588][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 312.901509][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 312.910165][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 312.920104][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 312.927705][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.973863][T11803] lo speed is unknown, defaulting to 1000 [ 313.130058][T11803] wg1 speed is unknown, defaulting to 1000 [ 313.429634][T11803] chnl_net:caif_netlink_parms(): no params data found [ 313.484466][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 313.516342][T11817] xt_NFQUEUE: number of total queues is 0 [ 313.580811][T11803] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.588169][T11803] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.596620][T11803] bridge_slave_0: entered allmulticast mode [ 313.622653][T11803] bridge_slave_0: entered promiscuous mode [ 313.650590][T11803] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.674467][T11803] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.700905][T11803] bridge_slave_1: entered allmulticast mode [ 313.731470][T11803] bridge_slave_1: entered promiscuous mode [ 313.755058][ T27] audit: type=1326 audit(1764269563.129:4590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11825 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 313.805225][ T27] audit: type=1326 audit(1764269563.129:4591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11825 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 313.841634][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 313.853433][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.863276][ T27] audit: type=1326 audit(1764269563.159:4592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11825 comm="syz.3.2173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 313.894955][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.004263][T11803] team0: Port device team_slave_0 added [ 314.018993][T11803] team0: Port device team_slave_1 added [ 314.084726][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.106062][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.164760][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.180147][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.187947][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.214511][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.298593][T11803] hsr_slave_0: entered promiscuous mode [ 314.306304][T11803] hsr_slave_1: entered promiscuous mode [ 314.312658][T11803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.329083][T11803] Cannot create hsr debugfs directory [ 314.564129][T11803] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.609774][T11803] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.659177][T11803] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.713805][T11803] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.937075][T11803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 314.947678][T11803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 314.959635][T11803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 314.971241][T11803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 314.981918][ T5801] Bluetooth: hci1: command tx timeout [ 314.988050][T11850] netlink: 'syz.3.2184': attribute type 10 has an invalid length. [ 315.000946][T11850] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 315.154905][T11803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.193039][T11803] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.214043][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.221325][ T5948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.270266][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.277533][ T5950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.334421][T11867] program syz.3.2189 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.775574][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.867446][T11803] veth0_vlan: entered promiscuous mode [ 315.891887][T11803] veth1_vlan: entered promiscuous mode [ 315.954837][T11803] veth0_macvtap: entered promiscuous mode [ 315.983868][T11803] veth1_macvtap: entered promiscuous mode [ 316.059030][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.124938][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.568699][T11803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.675091][T11803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.683898][T11803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.692706][T11803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.854349][ T5948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.864996][ T5948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.906326][ T5948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.915084][ T5948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.043928][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 317.043942][ T27] audit: type=1326 audit(1764269566.419:4623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 317.082664][ T5801] Bluetooth: hci1: command tx timeout [ 317.089539][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.096839][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.114632][ T27] audit: type=1326 audit(1764269566.419:4624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 317.139814][ T27] audit: type=1326 audit(1764269566.419:4625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11898 comm="syz.0.2162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 317.211176][T11906] vlan2: entered allmulticast mode [ 318.095602][T11986] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2216'. [ 318.120319][T11986] 0ªX¹¦À: renamed from caif0 [ 318.144239][T11986] 0ªX¹¦À: entered allmulticast mode [ 318.167090][T11986] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 318.412884][ T27] audit: type=1326 audit(1764269567.789:4626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.467583][ T27] audit: type=1326 audit(1764269567.789:4627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.544426][ T27] audit: type=1326 audit(1764269567.819:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.603289][ T27] audit: type=1326 audit(1764269567.819:4629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.656643][ T27] audit: type=1326 audit(1764269567.819:4630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.710654][ T27] audit: type=1326 audit(1764269567.819:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.747249][ T27] audit: type=1326 audit(1764269567.879:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11995 comm="syz.0.2221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 318.914211][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 319.131526][ T5801] Bluetooth: hci1: command tx timeout [ 321.000994][T12096] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 321.085582][T12096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.214402][ T5801] Bluetooth: hci1: command tx timeout [ 321.288877][T12103] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 322.163221][T12138] ip6gre1: entered allmulticast mode [ 322.395947][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 322.395962][ T27] audit: type=1326 audit(1764269571.759:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.440321][ T27] audit: type=1326 audit(1764269571.769:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.498833][ T27] audit: type=1326 audit(1764269571.769:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60fd58f783 code=0x7ffc0000 [ 322.551817][ T27] audit: type=1326 audit(1764269571.769:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f60fd58f783 code=0x7ffc0000 [ 322.580244][ T27] audit: type=1326 audit(1764269571.769:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.628609][ T27] audit: type=1326 audit(1764269571.769:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.681973][ T27] audit: type=1326 audit(1764269571.769:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.682036][ T27] audit: type=1326 audit(1764269571.769:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.682078][ T27] audit: type=1326 audit(1764269571.769:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.682122][ T27] audit: type=1326 audit(1764269571.769:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12149 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60fd58f749 code=0x7ffc0000 [ 322.809030][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2295'. [ 323.102377][T12181] x_tables: duplicate entry at hook 1 [ 323.789814][T12205] lo speed is unknown, defaulting to 1000 [ 324.145978][T12214] lo speed is unknown, defaulting to 1000 [ 324.216468][T12215] pim6reg: entered allmulticast mode [ 324.337840][T12205] wg1 speed is unknown, defaulting to 1000 [ 324.781036][T12221] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2316'. [ 324.807784][T12214] wg1 speed is unknown, defaulting to 1000 [ 324.814410][T12211] pim6reg: left allmulticast mode [ 326.297803][T12242] 9pnet_fd: Insufficient options for proto=fd [ 326.385060][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 326.399811][T12245] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2326'. [ 326.500939][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 326.679353][T12246] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2325'. [ 326.938915][T12260] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 326.984744][T12260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2331'. [ 327.020434][T12260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 329.830394][T12284] lo speed is unknown, defaulting to 1000 [ 329.975264][T12284] wg1 speed is unknown, defaulting to 1000 [ 330.571389][T12302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2342'. [ 330.955796][T12309] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2345'. [ 331.691394][T12326] program syz.0.2351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.856346][T12330] bridge0: port 1(macsec2) entered blocking state [ 331.881464][T12330] bridge0: port 1(macsec2) entered disabled state [ 331.903196][T12330] macsec2: entered allmulticast mode [ 331.913154][T12330] bridge0: entered allmulticast mode [ 331.929839][T12330] macsec2: left allmulticast mode [ 331.939185][T12330] bridge0: left allmulticast mode [ 332.060386][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.080033][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.089229][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.100922][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.109803][T12336] 9pnet: Unknown protocol version 9 [ 332.118136][ T5798] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 332.130025][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.208596][T12333] lo speed is unknown, defaulting to 1000 [ 332.582270][ T27] kauditd_printk_skb: 213 callbacks suppressed [ 332.582285][ T27] audit: type=1326 audit(1764269581.959:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.583033][T12333] wg1 speed is unknown, defaulting to 1000 [ 332.588808][ T27] audit: type=1326 audit(1764269581.959:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.713454][ T27] audit: type=1326 audit(1764269582.019:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.788923][ T27] audit: type=1326 audit(1764269582.019:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.858356][ T27] audit: type=1326 audit(1764269582.019:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.936009][ T27] audit: type=1326 audit(1764269582.029:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 332.985950][ T27] audit: type=1326 audit(1764269582.029:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 333.035695][T12333] chnl_net:caif_netlink_parms(): no params data found [ 333.042697][ T27] audit: type=1326 audit(1764269582.029:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 333.120261][ T27] audit: type=1326 audit(1764269582.029:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 333.161836][ T27] audit: type=1326 audit(1764269582.029:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12347 comm="syz.3.2362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b1c58f749 code=0x7ffc0000 [ 333.276521][T12333] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.293986][T12333] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.302344][T12333] bridge_slave_0: entered allmulticast mode [ 333.309557][T12333] bridge_slave_0: entered promiscuous mode [ 333.332277][T12333] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.347142][T12333] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.363384][T12333] bridge_slave_1: entered allmulticast mode [ 333.379448][T12333] bridge_slave_1: entered promiscuous mode [ 333.478986][T12333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.506133][T12333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.601005][T12333] team0: Port device team_slave_0 added [ 333.625807][T12333] team0: Port device team_slave_1 added [ 333.685857][T12333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.697860][T12333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.728399][T12333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.741062][T12333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.754548][T12333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.789750][T12333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.860299][T12333] hsr_slave_0: entered promiscuous mode [ 333.872866][T12333] hsr_slave_1: entered promiscuous mode [ 333.881070][T12333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.889587][T12333] Cannot create hsr debugfs directory [ 334.171794][ T5798] Bluetooth: hci4: command tx timeout [ 334.302674][T12399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2383'. [ 334.434017][T12333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.446159][T12333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.460719][T12333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.479056][T12333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.690882][T12333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.732927][T12333] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.773994][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.781195][T11923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.799190][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.806361][T11923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.141722][T12429] (null): rxe_set_mtu: Set mtu to 1024 [ 335.153283][T12429] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 335.284011][T12333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.380955][T12333] veth0_vlan: entered promiscuous mode [ 335.397504][T12333] veth1_vlan: entered promiscuous mode [ 335.467588][T12333] veth0_macvtap: entered promiscuous mode [ 335.482110][T12333] veth1_macvtap: entered promiscuous mode [ 335.524014][T12333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.549164][T12333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.570686][T12333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.594617][T12333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.615365][T12333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.637998][T12333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.685491][T12333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.714766][T12333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.741358][T12333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.765134][T12333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.029889][T12452] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2403'. [ 336.157179][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.183325][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.251995][ T5798] Bluetooth: hci4: command tx timeout [ 336.261697][T12454] 9pnet: Could not find request transport: f [ 336.286055][ T1319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.332308][ T1319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.339984][T12461] netlink: 'syz.3.2405': attribute type 11 has an invalid length. [ 336.369023][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2405'. [ 336.768019][T12476] lo speed is unknown, defaulting to 1000 [ 336.803072][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2410'. [ 336.852000][T12477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2410'. [ 337.226700][T12476] wg1 speed is unknown, defaulting to 1000 [ 337.376071][ T6893] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 337.530927][T12495] program syz.1.2417 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.557739][T12497] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2418'. [ 337.612551][ T6893] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 337.620824][ T6893] usb 4-1: config 0 has no interface number 0 [ 337.637891][ T6893] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 337.662775][ T6893] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 337.691672][ T6893] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 337.730350][ T6893] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 337.761387][ T6893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.784767][ T6893] usb 4-1: config 0 descriptor?? [ 337.791246][T12486] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.806586][T12499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2419'. [ 337.819025][ T6893] ldusb 4-1:0.55: Interrupt in endpoint not found [ 338.069857][ T6533] usb 4-1: USB disconnect, device number 8 [ 338.331633][ T5798] Bluetooth: hci4: command tx timeout [ 338.849730][T12512] lo speed is unknown, defaulting to 1000 [ 339.126872][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 339.126887][ T27] audit: type=1326 audit(1764269588.499:4946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.204226][ T27] audit: type=1326 audit(1764269588.499:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.274520][ T27] audit: type=1326 audit(1764269588.539:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.348810][ T27] audit: type=1326 audit(1764269588.539:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.400214][T12512] wg1 speed is unknown, defaulting to 1000 [ 339.427029][ T27] audit: type=1326 audit(1764269588.539:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.513122][ T27] audit: type=1326 audit(1764269588.539:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.587223][ T27] audit: type=1326 audit(1764269588.539:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.621225][ T27] audit: type=1326 audit(1764269588.539:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.660945][T12526] program syz.0.2429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 339.663546][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.685079][ T27] audit: type=1326 audit(1764269588.539:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.688183][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.720646][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.733439][ T27] audit: type=1326 audit(1764269588.539:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12520 comm="syz.4.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c15b8f749 code=0x7ffc0000 [ 339.757014][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.764835][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.778281][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.938996][T12527] lo speed is unknown, defaulting to 1000 [ 340.190794][T12531] syz.4.2430[12531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.190953][T12531] syz.4.2430[12531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.217906][T12527] wg1 speed is unknown, defaulting to 1000 [ 340.245965][ T5959] tipc: Disabling bearer [ 340.254352][ T5959] tipc: Left network mode [ 340.412109][ T5798] Bluetooth: hci4: command tx timeout [ 340.877092][T12546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2436'. [ 340.993898][T12527] chnl_net:caif_netlink_parms(): no params data found [ 341.040255][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2438'. [ 341.270642][T12527] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.290721][T12527] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.301652][T12527] bridge_slave_0: entered allmulticast mode [ 341.315318][T12527] bridge_slave_0: entered promiscuous mode [ 341.338141][T12527] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.345558][T12527] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.361688][T12527] bridge_slave_1: entered allmulticast mode [ 341.368852][T12527] bridge_slave_1: entered promiscuous mode [ 341.456872][T12527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.489035][T12527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.605173][T12527] team0: Port device team_slave_0 added [ 341.630019][T12527] team0: Port device team_slave_1 added [ 341.755666][T12568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2442'. [ 341.768165][T12568] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2442'. [ 341.777645][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 341.807268][ T5959] hsr_slave_0: left promiscuous mode [ 341.815194][ T5959] hsr_slave_1: left promiscuous mode [ 341.828321][ T5959] bridge_slave_1: left allmulticast mode [ 341.837191][ T5959] bridge_slave_1: left promiscuous mode [ 341.843090][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.851907][ T5798] Bluetooth: hci0: command tx timeout [ 341.860740][ T5959] bridge_slave_0: left promiscuous mode [ 341.876102][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.589334][ T5959] team0 (unregistering): Port device team_slave_1 removed [ 342.689643][ T5959] team0 (unregistering): Port device team_slave_0 removed [ 342.785333][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.934599][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.459974][T12597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2454'. [ 343.604313][ T5959] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 343.931913][ T5798] Bluetooth: hci0: command tx timeout [ 344.207684][ T5959] bond0 (unregistering): Released all slaves [ 344.405977][T12527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.413096][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.452133][T12527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.475310][T12585] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2449'. [ 344.511067][T12527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.527909][T12527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.607275][T12527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.639718][T12607] lo speed is unknown, defaulting to 1000 [ 344.658208][T12606] lo speed is unknown, defaulting to 1000 [ 344.785285][T12527] hsr_slave_0: entered promiscuous mode [ 344.804806][T12527] hsr_slave_1: entered promiscuous mode [ 344.831796][T12527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.849716][T12527] Cannot create hsr debugfs directory [ 345.203612][T12607] wg1 speed is unknown, defaulting to 1000 [ 345.308218][ T27] kauditd_printk_skb: 235 callbacks suppressed [ 345.308233][ T27] audit: type=1326 audit(1764269594.679:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 345.388135][ T27] audit: type=1326 audit(1764269594.679:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 345.445606][ T27] audit: type=1326 audit(1764269594.679:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 345.480489][ T27] audit: type=1326 audit(1764269594.679:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12616 comm="syz.0.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01afd8f749 code=0x7ffc0000 [ 345.786954][T12606] wg1 speed is unknown, defaulting to 1000 [ 345.928453][T12627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2466'. [ 345.961509][T12627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2466'. [ 346.011384][ T5798] Bluetooth: hci0: command tx timeout [ 346.124264][T12527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.140659][T12527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.185407][T12527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.212800][T12527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 346.451187][T12527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.553389][T12639] syzkaller0: entered promiscuous mode [ 346.580207][T12639] syzkaller0: entered allmulticast mode [ 346.744638][T12527] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.816520][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.823711][ T5959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.889711][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.898026][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.036308][T12527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.478407][T12651] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2472'. [ 347.522850][T12527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.628380][T12527] veth0_vlan: entered promiscuous mode [ 347.649463][T12527] veth1_vlan: entered promiscuous mode [ 347.684131][ T27] audit: type=1326 audit(1764269597.059:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8de18f749 code=0x7ffc0000 [ 347.734909][ T27] audit: type=1326 audit(1764269597.079:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fb8de18f749 code=0x7ffc0000 [ 347.762266][ T27] audit: type=1326 audit(1764269597.079:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12653 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8de18f749 code=0x7ffc0000 [ 347.790551][T12527] veth0_macvtap: entered promiscuous mode [ 347.810036][T12527] veth1_macvtap: entered promiscuous mode [ 347.846019][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.881457][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.911520][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.935515][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.953948][T12527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.980414][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.008966][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.025666][T12527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.060509][T12527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.079223][T12527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.092556][ T5798] Bluetooth: hci0: command tx timeout [ 348.143486][T12527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.182521][T12527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.203419][T12527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.212778][T12661] program syz.1.2476 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.241401][T12527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.389491][T11940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.417320][T11940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.503700][T11940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.522389][T11940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.972942][T12593] Set syz1 is full, maxelem 65536 reached [ 349.192037][T12673] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 351.087580][T12699] program syz.1.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.513641][T12730] program syz.1.2502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.392142][T12734] batman_adv: batadv0: Adding interface: dummy0 [ 355.410297][T12734] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.460893][T12734] batman_adv: batadv0: Interface activated: dummy0 [ 355.489546][T12735] batadv0: mtu less than device minimum [ 355.523314][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.536033][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.548279][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.560485][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.572715][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.584920][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.597117][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 355.600499][T12734] Dead loop on virtual device ip6_vti0, fix it urgently! [ 355.609431][T12735] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 356.788639][T12740] warning: `syz.0.2506' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 357.125519][T12746] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2508'. [ 357.992601][T12757] lo speed is unknown, defaulting to 1000 [ 358.416612][T12757] wg1 speed is unknown, defaulting to 1000 [ 358.573441][T12753] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2511'. [ 359.511835][T12763] lo speed is unknown, defaulting to 1000 [ 359.644855][T12763] wg1 speed is unknown, defaulting to 1000 [ 359.788462][T12772] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2517'. [ 360.752714][T12787] lo: entered allmulticast mode [ 360.801158][T12787] tunl0: entered allmulticast mode [ 360.823818][T12787] gre0: entered allmulticast mode [ 361.000171][T12787] gretap0: entered allmulticast mode [ 361.046506][T12787] erspan0: entered allmulticast mode [ 361.101932][T12787] ip_vti0: entered allmulticast mode [ 361.110404][T12787] ip6_vti0: entered allmulticast mode [ 361.176443][T12787] sit0: entered allmulticast mode [ 361.235217][T12787] ip6tnl0: entered allmulticast mode [ 361.291042][T12787] ip6gre0: entered allmulticast mode [ 361.324355][T12787] syz_tun: entered allmulticast mode [ 361.359765][T12787] ip6gretap0: entered allmulticast mode [ 361.396423][T12787] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.404088][T12787] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.413276][T12787] bridge0: entered allmulticast mode [ 361.882910][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2528'. [ 363.608633][T12825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2539'. [ 366.669488][T12838] (null): rxe_set_mtu: Set mtu to 1024 [ 367.083293][T12838] infiniband syz1: set down [ 367.088062][T12838] infiniband syz1: added syz_tun [ 367.192149][T12838] RDS/IB: syz1: added [ 367.196311][T12838] smc: adding ib device syz1 with port count 1 [ 367.202715][T12838] smc: ib device syz1 port 1 has pnetid [ 367.312163][T12853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2549'. [ 367.495435][T12855] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2550'. [ 368.879610][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2558'. [ 370.595019][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2567'. [ 371.271636][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.363418][T12919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.392982][T12883] lo speed is unknown, defaulting to 1000 [ 371.528678][T12883] wg1 speed is unknown, defaulting to 1000 [ 372.197894][T12928] netlink: 'syz.0.2579': attribute type 17 has an invalid length. [ 372.221324][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2579'. [ 378.302758][T13123] lo speed is unknown, defaulting to 1000 [ 378.496224][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.502891][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.691931][T13055] lo speed is unknown, defaulting to 1000 [ 378.728942][T13123] wg1 speed is unknown, defaulting to 1000 [ 378.855858][T13055] wg1 speed is unknown, defaulting to 1000 [ 382.244550][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.263214][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.280293][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.289551][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.298463][ T5801] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.306142][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.406023][T13191] lo speed is unknown, defaulting to 1000 [ 382.852085][T13191] wg1 speed is unknown, defaulting to 1000 [ 384.108590][T13191] chnl_net:caif_netlink_parms(): no params data found [ 384.298218][T13224] (null): rxe_set_mtu: Set mtu to 1024 [ 384.315686][T13224] rdma_rxe: rxe_newlink: failed to add syz_tun [ 384.333362][ T5798] Bluetooth: hci2: command tx timeout [ 384.421611][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.432823][T13191] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.440008][T13191] bridge_slave_0: entered allmulticast mode [ 384.447683][T13191] bridge_slave_0: entered promiscuous mode [ 384.461207][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.468515][T13191] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.475718][T13191] bridge_slave_1: entered allmulticast mode [ 384.483021][T13191] bridge_slave_1: entered promiscuous mode [ 384.660974][T13191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.762267][T13191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.912573][T13191] team0: Port device team_slave_0 added [ 384.938593][T13191] team0: Port device team_slave_1 added [ 385.074197][ T1319] hsr_slave_0: left promiscuous mode [ 385.094495][ T1319] hsr_slave_1: left promiscuous mode [ 386.416114][ T5798] Bluetooth: hci2: command tx timeout [ 386.723935][T13262] (null): rxe_set_mtu: Set mtu to 1024 [ 386.729722][T13262] rdma_rxe: rxe_newlink: failed to add syz_tun [ 386.821116][ T1319] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 387.004130][ T1319] bond0 (unregistering): (slave team0): Releasing backup interface [ 387.135597][ T1319] bond0 (unregistering): Released all slaves [ 387.210235][ T1319] lo (unregistering): left allmulticast mode [ 387.234198][T13246] : renamed from ipvlan0 [ 387.261654][T13191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.291654][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.349224][T13191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.375624][T13191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.393113][T13191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.437401][T13191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.549727][T13191] hsr_slave_0: entered promiscuous mode [ 387.599917][T13191] hsr_slave_1: entered promiscuous mode [ 388.298629][T13191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 388.314126][T13191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 388.340128][T13191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 388.375351][T13191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 388.492600][ T5798] Bluetooth: hci2: command tx timeout [ 388.576659][T13191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.629437][T13191] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.668663][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.675867][T11940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.764598][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.771790][T11940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.922226][T13299] lo speed is unknown, defaulting to 1000 [ 389.395567][T13299] wg1 speed is unknown, defaulting to 1000 [ 389.414602][T13191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.520439][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2742'. [ 389.569094][T13321] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2742'. [ 389.589944][T13325] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2742'. [ 390.055385][T13191] veth0_vlan: entered promiscuous mode [ 390.070390][T13191] veth1_vlan: entered promiscuous mode [ 390.111158][T13191] veth0_macvtap: entered promiscuous mode [ 390.130326][T13191] veth1_macvtap: entered promiscuous mode [ 390.132105][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 390.147047][T13340] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 390.162660][T13339] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 390.176338][T13343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2748'. [ 390.208890][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.226305][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.238791][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.257058][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.266986][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.286613][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.306745][T13191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.340625][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.359060][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.369479][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.386766][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.401491][T13191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.419907][T13191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.432200][T13191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.456710][T13191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.472971][T13191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.489041][T13191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.511432][T13191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.585341][ T5798] Bluetooth: hci2: command tx timeout [ 390.640072][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.657863][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.726301][ T5959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.740876][ T5959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.731621][T13380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 391.757359][T13380] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 391.775374][T13379] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2765'. [ 391.796285][T13384] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 391.808413][T13384] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 391.825912][T13384] netlink: 'syz.1.2766': attribute type 29 has an invalid length. [ 392.367183][T13412] netlink: 'syz.4.2779': attribute type 20 has an invalid length. [ 392.369267][T13413] syz.3.2780 (13413) used obsolete PPPIOCDETACH ioctl [ 393.558936][T13458] tipc: Enabling of bearer rejected, failed to enable media [ 393.915318][T13470] net_ratelimit: 11 callbacks suppressed [ 393.915334][T13470] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 394.449942][T13483] tipc: Enabling of bearer rejected, failed to enable media [ 394.468890][T13485] netlink: 'syz.4.2813': attribute type 5 has an invalid length. [ 397.032133][T13525] __nla_validate_parse: 8 callbacks suppressed [ 397.032147][T13525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 397.068632][T13525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 397.079713][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 397.097982][T13522] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2831'. [ 398.036026][T13541] tipc: Enabling of bearer rejected, failed to enable media [ 402.175763][T13554] netlink: 'syz.3.2845': attribute type 17 has an invalid length. [ 402.184377][T13554] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2845'. [ 402.193806][T13556] netlink: 'syz.0.2846': attribute type 10 has an invalid length. [ 402.201868][T13556] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2846'. [ 402.211866][T13556] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 403.182905][T13587] tipc: Enabling of bearer rejected, failed to enable media [ 407.860520][T13647] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2884'. [ 407.881603][T13647] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 408.163503][T13669] lo speed is unknown, defaulting to 1000 [ 408.500837][T13669] wg1 speed is unknown, defaulting to 1000 [ 408.946412][T13691] tipc: Enabling of bearer rejected, failed to enable media [ 412.900957][T13777] lo speed is unknown, defaulting to 1000 [ 413.132836][T13777] wg1 speed is unknown, defaulting to 1000 [ 413.952017][T13846] tipc: Enabling of bearer rejected, failed to enable media [ 418.342568][T13997] tipc: Enabling of bearer rejected, failed to enable media [ 419.250391][T14027] tipc: Enabling of bearer rejected, failed to enable media [ 423.826083][T14139] : renamed from ipvlan0 [ 424.176952][T11940] veth1_vlan: left promiscuous mode [ 424.193000][T11940] veth0_vlan: left promiscuous mode [ 425.056511][ T1319] smc: removing ib device syz! [ 426.398755][T11940] bond0 (unregistering): Released all slaves [ 426.747570][T14145] tipc: Enabling of bearer rejected, failed to enable media [ 426.769348][ T6529] wg1 speed is unknown, defaulting to 1000 [ 430.399236][T14214] dummy0: entered promiscuous mode [ 431.546788][T14342] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3199'. [ 431.578664][T14342] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 431.810320][T14358] netlink: 'syz.0.3207': attribute type 21 has an invalid length. [ 431.830605][T14358] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3207'. [ 432.392096][T14378] netlink: 'syz.4.3217': attribute type 1 has an invalid length. [ 432.400965][T14378] netlink: 'syz.4.3217': attribute type 4 has an invalid length. [ 432.418817][T14378] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3217'. [ 433.612775][T14396] veth0_vlan: entered allmulticast mode [ 433.749381][T14401] veth0_vlan: left promiscuous mode [ 433.765439][T14401] veth0_vlan: entered promiscuous mode [ 436.898406][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 438.914820][T14480] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3263'. [ 439.158973][T14490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 439.168214][T14490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 439.182174][T14490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 439.198000][T14490] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3268'. [ 439.877628][T14510] (null): rxe_set_mtu: Set mtu to 1024 [ 439.885185][T14510] rdma_rxe: rxe_newlink: failed to add syz_tun [ 439.935775][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.952110][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.096029][T14560] (null): rxe_set_mtu: Set mtu to 1024 [ 441.107140][T14560] rdma_rxe: rxe_newlink: failed to add syz_tun [ 442.260914][T14614] (null): rxe_set_mtu: Set mtu to 1024 [ 442.274780][T14614] rdma_rxe: rxe_newlink: failed to add syz_tun [ 442.732366][T14635] netlink: 'syz.0.3336': attribute type 25 has an invalid length. [ 442.749758][T14635] netlink: 'syz.0.3336': attribute type 7 has an invalid length. [ 443.493509][T14669] syz1: rxe_newlink: already configured on syz_tun [ 444.802142][T14727] (null): rxe_set_mtu: Set mtu to 1024 [ 444.812866][T14727] rdma_rxe: rxe_newlink: failed to add syz_tun [ 446.444150][T14781] (null): rxe_set_mtu: Set mtu to 1024 [ 446.459053][T14781] rdma_rxe: rxe_newlink: failed to add syz_tun [ 446.585707][T14783] netlink: 'syz.0.3407': attribute type 1 has an invalid length. [ 446.593751][T14783] netlink: 'syz.0.3407': attribute type 4 has an invalid length. [ 446.607815][T14783] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3407'. [ 453.128925][T14984] (null): rxe_set_mtu: Set mtu to 1024 [ 453.141530][T14984] rdma_rxe: rxe_newlink: failed to add syz_tun [ 454.321904][T15043] (null): rxe_set_mtu: Set mtu to 1024 [ 454.327664][T15043] rdma_rxe: rxe_newlink: failed to add syz_tun [ 454.669464][T15061] netlink: 'syz.3.3542': attribute type 10 has an invalid length. [ 454.720444][T15061] batman_adv: batadv0: Adding interface: team0 [ 454.740526][T15061] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.772070][T15061] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 455.402127][T15103] (null): rxe_set_mtu: Set mtu to 1024 [ 455.408228][T15103] rdma_rxe: rxe_newlink: failed to add syz_tun [ 457.371554][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 459.958551][T15362] (null): rxe_set_mtu: Set mtu to 1024 [ 459.964853][T15362] rdma_rxe: rxe_newlink: failed to add syz_tun [ 460.875066][T15407] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3708'. [ 461.015211][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3710'. [ 461.079119][T15414] 9pnet_fd: Insufficient options for proto=fd [ 462.392009][T15437] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3720'. [ 462.455735][T15439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3721'. [ 462.495593][T15439] 9pnet_fd: Insufficient options for proto=fd [ 462.499349][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 464.245962][T15464] (null): rxe_set_mtu: Set mtu to 1024 [ 464.265582][T15464] rdma_rxe: rxe_newlink: failed to add syz_tun [ 464.375996][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3733'. [ 464.424766][T15468] 9pnet_fd: Insufficient options for proto=fd [ 465.957664][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 466.198728][T15500] 9pnet_fd: Insufficient options for proto=fd [ 468.311833][T15537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 468.333933][T15537] 9pnet_fd: Insufficient options for proto=fd [ 469.999311][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3767'. [ 470.050668][T15559] 9pnet_fd: Insufficient options for proto=fd [ 474.785938][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3802'. [ 474.822625][T15647] 9pnet_fd: Insufficient options for proto=fd [ 488.160602][T15721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 489.641081][T15754] syz.1.3847[15754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.641390][T15754] syz.1.3847[15754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.123521][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3854'. [ 493.599755][T15775] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3856'. [ 495.196290][T15792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3863'. [ 495.932349][T15756] netlink: 'syz.0.3848': attribute type 1 has an invalid length. [ 495.944751][T15756] netlink: 'syz.0.3848': attribute type 4 has an invalid length. [ 495.954621][T15756] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3848'. [ 495.969144][T15768] netlink: 'syz.1.3852': attribute type 17 has an invalid length. [ 496.006003][T15768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'. [ 496.116547][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3872'. [ 497.136623][T15826] [ 497.139005][T15826] ====================================================== [ 497.146032][T15826] WARNING: possible circular locking dependency detected [ 497.153067][T15826] syzkaller #0 Not tainted [ 497.157489][T15826] ------------------------------------------------------ [ 497.164513][T15826] syz.1.3875/15826 is trying to acquire lock: [ 497.170580][T15826] ffff8880b8e29370 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x15a/0x780 [ 497.179230][T15826] [ 497.179230][T15826] but task is already holding lock: [ 497.186616][T15826] ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 497.195522][T15826] [ 497.195522][T15826] which lock already depends on the new lock. [ 497.195522][T15826] [ 497.205932][T15826] [ 497.205932][T15826] the existing dependency chain (in reverse order) is: [ 497.214953][T15826] [ 497.214953][T15826] -> #1 (&base->lock){-.-.}-{2:2}: [ 497.222284][T15826] _raw_spin_lock_irqsave+0xa8/0xf0 [ 497.228026][T15826] lock_timer_base+0x123/0x270 [ 497.233333][T15826] __mod_timer+0xf9/0xdb0 [ 497.238204][T15826] queue_delayed_work_on+0x12a/0x1e0 [ 497.244047][T15826] kvfree_call_rcu+0x541/0x780 [ 497.249349][T15826] rtnl_register_internal+0x486/0x590 [ 497.255275][T15826] rtnl_register+0x32/0x70 [ 497.260227][T15826] ip_rt_init+0x2ec/0x390 [ 497.265112][T15826] ip_init+0xe/0x20 [ 497.269458][T15826] inet_init+0x2c1/0x3e0 [ 497.274247][T15826] do_one_initcall+0x1fd/0x750 [ 497.279546][T15826] do_initcall_level+0x137/0x1f0 [ 497.285023][T15826] do_initcalls+0x69/0xd0 [ 497.289901][T15826] kernel_init_freeable+0x3d2/0x570 [ 497.295648][T15826] kernel_init+0x1d/0x1c0 [ 497.300511][T15826] ret_from_fork+0x48/0x80 [ 497.305462][T15826] ret_from_fork_asm+0x11/0x20 [ 497.310770][T15826] [ 497.310770][T15826] -> #0 (krc.lock){..-.}-{2:2}: [ 497.317828][T15826] __lock_acquire+0x2ddb/0x7c80 [ 497.323218][T15826] lock_acquire+0x197/0x410 [ 497.328253][T15826] _raw_spin_lock+0x2e/0x40 [ 497.333293][T15826] kvfree_call_rcu+0x15a/0x780 [ 497.338589][T15826] trie_delete_elem+0x535/0x6a0 [ 497.343956][T15826] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 497.349923][T15826] bpf_trace_run3+0x1e7/0x400 [ 497.355124][T15826] __bpf_trace_timer_start+0x14a/0x1b0 [ 497.361097][T15826] enqueue_timer+0x398/0x530 [ 497.366197][T15826] __mod_timer+0x977/0xdb0 [ 497.371126][T15826] sk_reset_timer+0x23/0xc0 [ 497.376139][T15826] tipc_sk_finish_conn+0x154/0x7e0 [ 497.381754][T15826] tipc_socketpair+0x254/0x470 [ 497.387024][T15826] __sys_socketpair+0x2b0/0x550 [ 497.392386][T15826] __x64_sys_socketpair+0x9b/0xb0 [ 497.397921][T15826] do_syscall_64+0x55/0xb0 [ 497.402847][T15826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.409251][T15826] [ 497.409251][T15826] other info that might help us debug this: [ 497.409251][T15826] [ 497.419471][T15826] Possible unsafe locking scenario: [ 497.419471][T15826] [ 497.426911][T15826] CPU0 CPU1 [ 497.432264][T15826] ---- ---- [ 497.437612][T15826] lock(&base->lock); [ 497.441669][T15826] lock(krc.lock); [ 497.447982][T15826] lock(&base->lock); [ 497.454557][T15826] lock(krc.lock); [ 497.458363][T15826] [ 497.458363][T15826] *** DEADLOCK *** [ 497.458363][T15826] [ 497.466488][T15826] 2 locks held by syz.1.3875/15826: [ 497.471667][T15826] #0: ffff8880b8e29598 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 497.480965][T15826] #1: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run3+0xf4/0x400 [ 497.490264][T15826] [ 497.490264][T15826] stack backtrace: [ 497.496138][T15826] CPU: 0 PID: 15826 Comm: syz.1.3875 Not tainted syzkaller #0 [ 497.503578][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 497.513626][T15826] Call Trace: [ 497.516897][T15826] [ 497.519829][T15826] dump_stack_lvl+0x16c/0x230 [ 497.524509][T15826] ? load_image+0x3b0/0x3b0 [ 497.529019][T15826] ? show_regs_print_info+0x20/0x20 [ 497.534238][T15826] ? print_circular_bug+0x12b/0x1a0 [ 497.539426][T15826] check_noncircular+0x2bd/0x3c0 [ 497.544357][T15826] ? print_deadlock_bug+0x5d0/0x5d0 [ 497.549545][T15826] ? lockdep_lock+0xe0/0x220 [ 497.554139][T15826] ? _find_first_zero_bit+0xd3/0x100 [ 497.559420][T15826] __lock_acquire+0x2ddb/0x7c80 [ 497.564281][T15826] ? stack_trace_snprint+0xf0/0xf0 [ 497.569385][T15826] ? __stack_depot_save+0x560/0x630 [ 497.574569][T15826] ? verify_lock_unused+0x140/0x140 [ 497.579778][T15826] ? kasan_save_stack+0x4d/0x60 [ 497.584625][T15826] ? kasan_save_stack+0x3e/0x60 [ 497.589461][T15826] ? __kasan_record_aux_stack+0xaf/0xc0 [ 497.594999][T15826] ? kvfree_call_rcu+0xee/0x780 [ 497.599841][T15826] ? trie_delete_elem+0x535/0x6a0 [ 497.604857][T15826] ? bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 497.610478][T15826] ? bpf_trace_run3+0x1e7/0x400 [ 497.615327][T15826] ? __bpf_trace_timer_start+0x14a/0x1b0 [ 497.620951][T15826] ? enqueue_timer+0x398/0x530 [ 497.625710][T15826] ? __mod_timer+0x977/0xdb0 [ 497.630293][T15826] ? sk_reset_timer+0x23/0xc0 [ 497.634960][T15826] ? tipc_sk_finish_conn+0x154/0x7e0 [ 497.640228][T15826] ? tipc_socketpair+0x254/0x470 [ 497.645165][T15826] ? __sys_socketpair+0x2b0/0x550 [ 497.650188][T15826] ? __x64_sys_socketpair+0x9b/0xb0 [ 497.655380][T15826] ? do_syscall_64+0x55/0xb0 [ 497.659974][T15826] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.666035][T15826] lock_acquire+0x197/0x410 [ 497.670529][T15826] ? kvfree_call_rcu+0x15a/0x780 [ 497.675465][T15826] ? read_lock_is_recursive+0x20/0x20 [ 497.680842][T15826] ? __phys_addr+0xba/0x170 [ 497.685347][T15826] _raw_spin_lock+0x2e/0x40 [ 497.689846][T15826] ? kvfree_call_rcu+0x15a/0x780 [ 497.694777][T15826] kvfree_call_rcu+0x15a/0x780 [ 497.699550][T15826] ? call_rcu+0x930/0x930 [ 497.703901][T15826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 497.709783][T15826] ? _raw_spin_unlock+0x40/0x40 [ 497.714627][T15826] trie_delete_elem+0x535/0x6a0 [ 497.719472][T15826] bpf_prog_5186c38a4019a4cb+0x4a/0x4e [ 497.724919][T15826] bpf_trace_run3+0x1e7/0x400 [ 497.729593][T15826] ? bpf_trace_run3+0xf4/0x400 [ 497.734345][T15826] ? bpf_trace_run2+0x3c0/0x3c0 [ 497.739184][T15826] ? __bpf_trace_timer_start+0x133/0x1b0 [ 497.744838][T15826] __bpf_trace_timer_start+0x14a/0x1b0 [ 497.750330][T15826] ? __bpf_trace_timer_class+0x100/0x100 [ 497.755961][T15826] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 497.761846][T15826] ? _raw_spin_unlock+0x40/0x40 [ 497.766685][T15826] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 497.772050][T15826] enqueue_timer+0x398/0x530 [ 497.776627][T15826] __mod_timer+0x977/0xdb0 [ 497.781051][T15826] sk_reset_timer+0x23/0xc0 [ 497.785555][T15826] tipc_sk_finish_conn+0x154/0x7e0 [ 497.790657][T15826] tipc_socketpair+0x254/0x470 [ 497.795416][T15826] __sys_socketpair+0x2b0/0x550 [ 497.800276][T15826] __x64_sys_socketpair+0x9b/0xb0 [ 497.805326][T15826] do_syscall_64+0x55/0xb0 [ 497.809735][T15826] ? clear_bhb_loop+0x40/0x90 [ 497.814400][T15826] ? clear_bhb_loop+0x40/0x90 [ 497.819067][T15826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 497.824947][T15826] RIP: 0033:0x7fb8de18f749 [ 497.829352][T15826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.848947][T15826] RSP: 002b:00007fb8dc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 497.857357][T15826] RAX: ffffffffffffffda RBX: 00007fb8de3e5fa0 RCX: 00007fb8de18f749 [ 497.865315][T15826] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 497.873272][T15826] RBP: 00007fb8de213f91 R08: 0000000000000000 R09: 0000000000000000 [ 497.881231][T15826] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000000 [ 497.889188][T15826] R13: 00007fb8de3e6038 R14: 00007fb8de3e5fa0 R15: 00007ffd6e4a7128 [ 497.897151][T15826] [ 501.376049][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.384602][ T1279] ieee802154 phy1 wpan1: encryption failed: -22