last executing test programs: 12.03346932s ago: executing program 5 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.742601006s ago: executing program 5 (id=453): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 8.12545788s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="008000006400000008001b00000000000c002b80080001", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6.181685466s ago: executing program 5 (id=476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 5.242343459s ago: executing program 5 (id=479): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xc8a, 0x7, {}, {0x0}, 0x8001, 0x3}) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000140)=ANY=[], 0x2, 0x22d, &(0x7f0000000a40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000080)=""/124, 0x7c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020660b, &(0x7f0000000000)={0x402a, 0x10100002000001, 0x0, 0x80000000}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='subj_type=vfat\x00,appraise,uid<', @ANYRESDEC=r0, @ANYBLOB="087dddce2b6799f8c5"], 0x0, 0x258, &(0x7f0000000340)="$eJzs3c1qE1EYBuDP2p/QzWThSlwMuHE1NL2DQSqIASGSha4MtgVpQmEKAV3Y7lx6H16Od+BddCFEmgn5qVEQrccmzwNhXjh54ZtNksU5mdcPBieHp2fHxaev0WjksRFxEZcRzas0cWdy3Rjn7Zh3EQDAbdPp9MrUM3CzqqrsbUXEzg8r3c9JBgIAAAAAAAAAAOCP2f8PAOvH/v/VV1Vlb3fy+22R/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAOpejUTb6xSv1fADA3+f7HwDWz4uXr56V7fZBJ88bEYOPw+6wW1/r9fI43kY/jmIvsvgWMZqq85On7YO9fKwZ+eB80j8fdu8u9luRRXN5v1X388X+VuzO9/cji3vL+/tL+9vx6OFcv4gsvryJ0+jHYVx1Z/0PrTx//Lx9rb8zfh8AAAAAAAAAAAAAAAAAAAD8C0U+tfT8flH8bL3u/8b/A1w7X78Z9zfT3jsAAAAAAAAAAAAAAAAAAAD8L87evT/p9ftHlSAIwjSk/mQCAAAAAAAAAAAAAAAAAID1Mzv0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn9vz/mwup7xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWA3fAwAA//9oGry8") 2.590153493s ago: executing program 0 (id=509): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_CREATE2(r0, 0x0, 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.753807226s ago: executing program 0 (id=512): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 1.549797488s ago: executing program 0 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.549589547s ago: executing program 2 (id=517): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000035000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) 1.528208431s ago: executing program 5 (id=518): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.434001538s ago: executing program 3 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) 1.43380053s ago: executing program 2 (id=521): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_clone(0x2120200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, 0x0, 0x4) 1.345912701s ago: executing program 0 (id=523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200300, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0x6}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c0a9}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.270064831s ago: executing program 3 (id=524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) 1.244540173s ago: executing program 4 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc7b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 1.242829093s ago: executing program 1 (id=526): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xffffffff}, 0x1c, 0x0}, 0x40048d0) 1.058834816s ago: executing program 3 (id=527): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) 1.05730289s ago: executing program 1 (id=528): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 989.934635ms ago: executing program 4 (id=529): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x32, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) 930.706321ms ago: executing program 2 (id=530): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 898.127502ms ago: executing program 3 (id=531): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffff}, 0xa) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0x0) 793.817451ms ago: executing program 1 (id=532): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/25, 0x19}, 0x8001}, {{&(0x7f0000001500)=@generic, 0x80, &(0x7f0000001cc0)=[{0x0}, {0x0}, {&(0x7f0000001bc0)=""/67, 0x43}], 0x3}, 0x3}], 0x2, 0x10162, 0x0) 793.572391ms ago: executing program 2 (id=533): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 792.46602ms ago: executing program 4 (id=534): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000035000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, &(0x7f0000000400)=""/198}, 0x20) 711.31504ms ago: executing program 0 (id=535): prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x116c, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 641.730359ms ago: executing program 3 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) 596.922886ms ago: executing program 4 (id=537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0xffff}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010326bd7000fbdbdf251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x40006) 596.126991ms ago: executing program 1 (id=538): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xf, &(0x7f0000000cc0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000500)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x42}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 437.16413ms ago: executing program 4 (id=539): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 326.604071ms ago: executing program 2 (id=540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c00"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) 267.512105ms ago: executing program 1 (id=541): r0 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x1, 0x80000, @local, 0xffffffff}, 0x1c, 0x0}, 0x40048d0) 230.753936ms ago: executing program 0 (id=542): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000f02000000000000bc26100000000000bf672000000000001602000000c0ffff6702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 105.823181ms ago: executing program 2 (id=543): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x1c}], 0x1}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0x9ca99000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 90.71812ms ago: executing program 3 (id=544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0x4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 26.187574ms ago: executing program 1 (id=545): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 0s ago: executing program 4 (id=546): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x32, 0xfffc, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x0, 0x20000006}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000570600000fff07006706000002000000270600000ee60000bf2500000000000073350000000000006507000002001000070700004c0000001f75000000000000bf54000000000000070400004400f9f0ad32010000000000950000000000000005000000000000009500000000000000debfa255e44e4cc39f211fb04d7f202e6a53bd86bde99b679b4e6d24b8125690361eec3b181dcfd7c2fb2d1f8975b579a085bee32d414c1f3ab987a9de6385ae8021f4ca33b9b35fe817e98beb9cefe7f40fd6f0ea3affbdaaa897c70fb01d270a7b00d36fb5ab8fa92ac014a106e3e4decc68652503ca54fcef437d96c8a05d59ddcc8abf09cd77e93e940207b03189c5d4661e43df6f1f036c8d85a2ad7615a021f8cbe507ef94fb9f33315366e9ae080000001b532226b63b460d68808a67529637bf7f6731ad0cf1718bae3c8b9d2f89050cb496fe791381af6fab290900000000000000d640a5fde1f7d5eaa97cd25523fbd77300000000000000d67559b0c848aa3e7091f33e2dfc351e903ce85488fb25691249545bcf877011847df184bae6d3f5d0c016ec7d581d5b2fcb494d8c2df1929398ec5c3675ed16c27fff46a695eed7f50c531a612d5677b5e949ee4f16d10e41074702c4e89ee401ec2ec65f38f64189f1fa2cc0a42add3119025764759de2f093c26fe51d2f7635bb06bdf0b97d4a96cb0813e084232421c6026629fbf4c81954d11e154659b54fcf3468577295"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r3}, 0x38) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 83.009258][ T5812] cgroup: Unknown subsys name 'net' [ 83.123519][ T5812] cgroup: Unknown subsys name 'cpuset' [ 83.132739][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.602522][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.983775][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.991414][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.999208][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.008493][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.023627][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.038160][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.046918][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.062583][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.070989][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.078557][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.087094][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.094886][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 87.103865][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.105461][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.119272][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 87.122034][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.129382][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 87.133939][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.148018][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.149453][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.156067][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.169976][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.174795][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.179516][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.185209][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.191472][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.198806][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.212956][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.227068][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 87.237043][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.898605][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 88.177344][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 88.213463][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.262064][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 88.388362][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 88.434925][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.442393][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.449847][ T5842] bridge_slave_0: entered allmulticast mode [ 88.457179][ T5842] bridge_slave_0: entered promiscuous mode [ 88.499474][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.506896][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.514072][ T5842] bridge_slave_1: entered allmulticast mode [ 88.521438][ T5842] bridge_slave_1: entered promiscuous mode [ 88.529222][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.660910][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.702297][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.709486][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.717039][ T5833] bridge_slave_0: entered allmulticast mode [ 88.724426][ T5833] bridge_slave_0: entered promiscuous mode [ 88.746830][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.804437][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.812029][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.819142][ T5833] bridge_slave_1: entered allmulticast mode [ 88.827165][ T5833] bridge_slave_1: entered promiscuous mode [ 88.860018][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.867128][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.874320][ T5841] bridge_slave_0: entered allmulticast mode [ 88.881770][ T5841] bridge_slave_0: entered promiscuous mode [ 88.889992][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.897100][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.904846][ T5827] bridge_slave_0: entered allmulticast mode [ 88.912357][ T5827] bridge_slave_0: entered promiscuous mode [ 88.941339][ T5842] team0: Port device team_slave_0 added [ 88.960718][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.967847][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.975145][ T5841] bridge_slave_1: entered allmulticast mode [ 88.982966][ T5841] bridge_slave_1: entered promiscuous mode [ 88.990638][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.997767][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.005435][ T5827] bridge_slave_1: entered allmulticast mode [ 89.013311][ T5827] bridge_slave_1: entered promiscuous mode [ 89.041478][ T5842] team0: Port device team_slave_1 added [ 89.088819][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.124466][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.131704][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.138812][ T5838] bridge_slave_0: entered allmulticast mode [ 89.146749][ T5838] bridge_slave_0: entered promiscuous mode [ 89.180718][ T5839] Bluetooth: hci1: command tx timeout [ 89.183874][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.186305][ T5850] Bluetooth: hci0: command tx timeout [ 89.227302][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.235141][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.242561][ T5838] bridge_slave_1: entered allmulticast mode [ 89.250287][ T5838] bridge_slave_1: entered promiscuous mode [ 89.260361][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.270034][ T5839] Bluetooth: hci3: command tx timeout [ 89.270098][ T5851] Bluetooth: hci2: command tx timeout [ 89.275569][ T5850] Bluetooth: hci4: command tx timeout [ 89.284503][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.307978][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.315130][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.322423][ T5828] bridge_slave_0: entered allmulticast mode [ 89.330813][ T5828] bridge_slave_0: entered promiscuous mode [ 89.339308][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.346455][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.372477][ T5850] Bluetooth: hci5: command tx timeout [ 89.378120][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.405208][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.416826][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.438884][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.446086][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.453563][ T5828] bridge_slave_1: entered allmulticast mode [ 89.461566][ T5828] bridge_slave_1: entered promiscuous mode [ 89.469181][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.476244][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.502605][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.555881][ T5833] team0: Port device team_slave_0 added [ 89.585644][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.623819][ T5833] team0: Port device team_slave_1 added [ 89.645712][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.658151][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.670517][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.681746][ T5841] team0: Port device team_slave_0 added [ 89.689420][ T5827] team0: Port device team_slave_0 added [ 89.737000][ T5841] team0: Port device team_slave_1 added [ 89.744493][ T5827] team0: Port device team_slave_1 added [ 89.830332][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.837300][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.863805][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.889445][ T5828] team0: Port device team_slave_0 added [ 89.897007][ T5838] team0: Port device team_slave_0 added [ 89.939967][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.946928][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.973377][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.991567][ T5842] hsr_slave_0: entered promiscuous mode [ 89.998018][ T5842] hsr_slave_1: entered promiscuous mode [ 90.007028][ T5828] team0: Port device team_slave_1 added [ 90.014505][ T5838] team0: Port device team_slave_1 added [ 90.021607][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.028546][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.055114][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.067094][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.074128][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.100372][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.147612][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.154775][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.181119][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.192753][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.200415][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.230072][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.310831][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.317776][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.344305][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.356665][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.363763][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.390137][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.402889][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.409874][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.462235][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.503158][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.510223][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.536486][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.573217][ T5833] hsr_slave_0: entered promiscuous mode [ 90.579681][ T5833] hsr_slave_1: entered promiscuous mode [ 90.585824][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 90.591985][ T5833] Cannot create hsr debugfs directory [ 90.676391][ T5841] hsr_slave_0: entered promiscuous mode [ 90.683122][ T5841] hsr_slave_1: entered promiscuous mode [ 90.689246][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 90.695248][ T5841] Cannot create hsr debugfs directory [ 90.708027][ T5827] hsr_slave_0: entered promiscuous mode [ 90.715789][ T5827] hsr_slave_1: entered promiscuous mode [ 90.722467][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.728179][ T5827] Cannot create hsr debugfs directory [ 90.859481][ T5838] hsr_slave_0: entered promiscuous mode [ 90.866508][ T5838] hsr_slave_1: entered promiscuous mode [ 90.872912][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 90.878622][ T5838] Cannot create hsr debugfs directory [ 90.910606][ T5828] hsr_slave_0: entered promiscuous mode [ 90.917006][ T5828] hsr_slave_1: entered promiscuous mode [ 90.923368][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.929080][ T5828] Cannot create hsr debugfs directory [ 91.108303][ T30] cfg80211: failed to load regulatory.db [ 91.264589][ T5850] Bluetooth: hci0: command tx timeout [ 91.264623][ T5851] Bluetooth: hci1: command tx timeout [ 91.340009][ T5851] Bluetooth: hci4: command tx timeout [ 91.340079][ T5839] Bluetooth: hci3: command tx timeout [ 91.351675][ T5850] Bluetooth: hci2: command tx timeout [ 91.419737][ T5839] Bluetooth: hci5: command tx timeout [ 91.549475][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.563108][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.584183][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.604674][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.655138][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.668356][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.693674][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.704535][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.764062][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.777813][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.788873][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.802483][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.910099][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.922770][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.940694][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.953069][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.061410][ T5828] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 92.090517][ T5828] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 92.106457][ T5828] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 92.116995][ T5828] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 92.199247][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.206502][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.222716][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.233974][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.244874][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.337335][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.354294][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.374909][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.382113][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.411328][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.418416][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.475714][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.501182][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.518284][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.560948][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.568052][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.588651][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.599413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.606643][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.642561][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.649708][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.668123][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.692820][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.699954][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.709208][ T745] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.716345][ T745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.774081][ T745] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.781265][ T745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.842582][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.925649][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.980651][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.024688][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.054900][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.062045][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.092958][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.100089][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.144133][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.151300][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.181894][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.189053][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.214064][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.346078][ T5850] Bluetooth: hci0: command tx timeout [ 93.351731][ T5839] Bluetooth: hci1: command tx timeout [ 93.423329][ T5850] Bluetooth: hci3: command tx timeout [ 93.423505][ T5851] Bluetooth: hci2: command tx timeout [ 93.428790][ T5839] Bluetooth: hci4: command tx timeout [ 93.500028][ T5839] Bluetooth: hci5: command tx timeout [ 93.509208][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.574571][ T5842] veth0_vlan: entered promiscuous mode [ 93.655283][ T5842] veth1_vlan: entered promiscuous mode [ 93.696118][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.822831][ T5827] veth0_vlan: entered promiscuous mode [ 93.865602][ T5842] veth0_macvtap: entered promiscuous mode [ 93.885636][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.894903][ T5827] veth1_vlan: entered promiscuous mode [ 93.914521][ T5842] veth1_macvtap: entered promiscuous mode [ 93.970921][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.002941][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.033315][ T5833] veth0_vlan: entered promiscuous mode [ 94.049135][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.073834][ T5827] veth0_macvtap: entered promiscuous mode [ 94.104532][ T5833] veth1_vlan: entered promiscuous mode [ 94.141839][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.155064][ T5827] veth1_macvtap: entered promiscuous mode [ 94.208391][ T4249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.230174][ T4249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.238896][ T4249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.267469][ T4249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.295375][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.322743][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.393480][ T5833] veth0_macvtap: entered promiscuous mode [ 94.407203][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.421807][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.462017][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.495237][ T5833] veth1_macvtap: entered promiscuous mode [ 94.505898][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.583953][ T5838] veth0_vlan: entered promiscuous mode [ 94.614829][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.629500][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.641828][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.694975][ T5838] veth1_vlan: entered promiscuous mode [ 94.713222][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.763507][ T745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.772310][ T745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.782830][ T1099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.794424][ T1099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810669][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.818839][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.834805][ T1099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.850303][ T5841] veth0_vlan: entered promiscuous mode [ 94.872321][ T1099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.893881][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.915292][ T5828] veth0_vlan: entered promiscuous mode [ 94.993588][ T5841] veth1_vlan: entered promiscuous mode [ 95.017431][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.035321][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.042811][ T5828] veth1_vlan: entered promiscuous mode [ 95.053026][ T5838] veth0_macvtap: entered promiscuous mode [ 95.124968][ T5838] veth1_macvtap: entered promiscuous mode [ 95.171108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.189899][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.272346][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.300680][ T5841] veth0_macvtap: entered promiscuous mode [ 95.307359][ T5975] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.316976][ T5975] ksmbd: Unknown IPC event: 3, ignore. [ 95.321986][ T5841] veth1_macvtap: entered promiscuous mode [ 95.344770][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.347676][ T5828] veth0_macvtap: entered promiscuous mode [ 95.359618][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.379441][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.429645][ T5839] Bluetooth: hci1: command tx timeout [ 95.429962][ T5851] Bluetooth: hci0: command tx timeout [ 95.441665][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.464944][ T5828] veth1_macvtap: entered promiscuous mode [ 95.500545][ T5851] Bluetooth: hci2: command tx timeout [ 95.502795][ T5850] Bluetooth: hci3: command tx timeout [ 95.511794][ T5839] Bluetooth: hci4: command tx timeout [ 95.522643][ T745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.549800][ T745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.589937][ T5850] Bluetooth: hci5: command tx timeout [ 95.595860][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.640772][ T745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.713297][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.739322][ T745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.763574][ T745] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.801782][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 95.811057][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 95.953273][ T745] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973541][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.008630][ T745] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.038021][ T745] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.097574][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.117646][ T1152] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.131620][ T5989] loop1: detected capacity change from 0 to 128 [ 96.182147][ T1152] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.182224][ T1152] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.204955][ T31] audit: type=1800 audit(1767747475.771:2): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 96.232450][ T5988] syz.1.10: attempt to access beyond end of device [ 96.232450][ T5988] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 96.232767][ T5988] syz.1.10: attempt to access beyond end of device [ 96.232767][ T5988] loop1: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 96.303711][ T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.303740][ T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.326236][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.402931][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.473119][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.481826][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.513190][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.534147][ T5994] loop1: detected capacity change from 0 to 128 [ 96.545798][ T5994] vfat: Unknown parameter 'ut' [ 96.551346][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.716791][ T31] audit: type=1326 audit(1767747476.281:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadd18f749 code=0x7ffc0000 [ 96.827889][ T31] audit: type=1326 audit(1767747476.311:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.3.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faadd18f749 code=0x7ffc0000 [ 97.581254][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.679605][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.872260][ T997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.899999][ T997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.255067][ T6012] bridge0: entered promiscuous mode [ 98.306378][ T6012] bridge0: port 3(macsec1) entered blocking state [ 98.323406][ T6012] bridge0: port 3(macsec1) entered disabled state [ 98.354041][ T6012] macsec1: entered allmulticast mode [ 98.409625][ T6012] bridge0: entered allmulticast mode [ 98.488993][ T6025] loop2: detected capacity change from 0 to 1024 [ 98.509067][ T6012] macsec1: left allmulticast mode [ 98.554110][ T6025] ext3: Unknown parameter 'bar' [ 98.601944][ T6012] bridge0: left allmulticast mode [ 98.659071][ T6012] bridge0: left promiscuous mode [ 98.921480][ T6023] syzkaller0: entered promiscuous mode [ 98.976181][ T6023] syzkaller0: entered allmulticast mode [ 99.192187][ T6025] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 99.198188][ T6025] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 99.404643][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27'. [ 99.416035][ T6025] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.426259][ T6025] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 99.497394][ T6025] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.506535][ T6025] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 99.589753][ T6025] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.617446][ T6025] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 99.751550][ T6025] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 99.789922][ T6025] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 99.952527][ T6025] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 99.958464][ T6025] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 102.243392][ T6099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.453671][ T31] audit: type=1326 audit(1767747482.021:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 102.511430][ T6100] syzkaller0: entered promiscuous mode [ 102.516933][ T6100] syzkaller0: entered allmulticast mode [ 102.553886][ T31] audit: type=1326 audit(1767747482.021:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 102.638378][ T31] audit: type=1326 audit(1767747482.021:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 102.747551][ T31] audit: type=1326 audit(1767747482.021:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 102.821266][ T31] audit: type=1326 audit(1767747482.061:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 102.949645][ T31] audit: type=1326 audit(1767747482.061:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 103.048704][ T6142] 9p: Bad value for 'wfdno' [ 103.089748][ T31] audit: type=1326 audit(1767747482.061:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 103.190395][ T31] audit: type=1326 audit(1767747482.071:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 103.339797][ T31] audit: type=1326 audit(1767747482.071:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 103.435731][ T31] audit: type=1326 audit(1767747482.071:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f902c38f749 code=0x7ffc0000 [ 103.695284][ T6156] loop3: detected capacity change from 0 to 8192 [ 104.098119][ T6156] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 104.105389][ T6156] FAT-fs (loop3): Filesystem has been set read-only [ 104.862969][ T6186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 105.482653][ T6195] syzkaller0: entered promiscuous mode [ 105.506384][ T6009] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.537967][ T6195] syzkaller0: entered allmulticast mode [ 105.579967][ T6009] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.611342][ T6207] 9p: Bad value for 'wfdno' [ 105.967724][ T6214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.66'. [ 106.397321][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.69'. [ 106.438151][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.69'. [ 106.491955][ T6225] binfmt_misc: register: failed to install interpreter file ./file0 [ 106.523365][ T6225] netlink: 'syz.0.70': attribute type 13 has an invalid length. [ 106.701079][ T6227] loop4: detected capacity change from 0 to 8192 [ 106.803645][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.811771][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.183625][ T6227] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 107.191103][ T6227] FAT-fs (loop4): Filesystem has been set read-only [ 107.363460][ T6238] loop2: detected capacity change from 0 to 4096 [ 107.375771][ T6238] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.401207][ T6238] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 107.508620][ T6238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.566989][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.690165][ T6225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.810731][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.060802][ T6262] 9p: Bad value for 'wfdno' [ 108.243540][ T37] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.267594][ T37] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.352406][ T37] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.400354][ T37] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.710567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.719396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.728108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.258660][ T6300] loop5: detected capacity change from 0 to 128 [ 110.345726][ T6302] netlink: 104 bytes leftover after parsing attributes in process `syz.2.90'. [ 110.483541][ T6300] syz.5.89: attempt to access beyond end of device [ 110.483541][ T6300] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 110.557034][ T6300] syz.5.89: attempt to access beyond end of device [ 110.557034][ T6300] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 110.590044][ T6300] syz.5.89: attempt to access beyond end of device [ 110.590044][ T6300] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 110.643385][ T6300] syz.5.89: attempt to access beyond end of device [ 110.643385][ T6300] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 110.737083][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 110.767450][ T6312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.92'. [ 111.045078][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.95'. [ 111.069495][ T6320] netlink: 'syz.3.94': attribute type 6 has an invalid length. [ 111.132679][ T6321] loop2: detected capacity change from 0 to 1024 [ 111.170540][ T6321] EXT4-fs: Ignoring removed orlov option [ 111.218916][ T6321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.272551][ T31] kauditd_printk_skb: 25 callbacks suppressed [ 111.272570][ T31] audit: type=1800 audit(1767747490.841:40): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.96" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 111.321135][ T31] audit: type=1804 audit(1767747490.891:41): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.96" name="/newroot/13/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 112.145863][ T6333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.98'. [ 112.265143][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.556115][ T6341] Zero length message leads to an empty skb [ 112.700333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 115.063137][ T6369] bridge_slave_0: left allmulticast mode [ 115.068887][ T6369] bridge_slave_0: left promiscuous mode [ 115.103217][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.193462][ T6369] bridge_slave_1: left allmulticast mode [ 115.199144][ T6369] bridge_slave_1: left promiscuous mode [ 115.228367][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.284135][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 115.321361][ T6369] bond0: (slave bond_slave_0): Releasing backup interface [ 115.361138][ T6369] bond0: (slave bond_slave_1): Releasing backup interface [ 115.400924][ T6369] team0: Port device team_slave_0 removed [ 115.428893][ T6369] team0: Port device team_slave_1 removed [ 115.446663][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.456845][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.466990][ T6369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.467659][ T31] audit: type=1326 audit(1767747495.031:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 115.475313][ T6369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.510083][ T6369] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.549204][ T31] audit: type=1326 audit(1767747495.031:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 115.563018][ T6372] team0: Mode changed to "loadbalance" [ 115.593630][ T31] audit: type=1326 audit(1767747495.031:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 115.651975][ T6347] loop4: detected capacity change from 0 to 32768 [ 115.674136][ T31] audit: type=1326 audit(1767747495.071:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6382 comm="syz.5.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 115.696908][ T6347] read_mapping_page failed! [ 115.711758][ T6347] jfs_mount: Failed to read AGGREGATE_I [ 115.726368][ T6347] Mount JFS Failure: -5 [ 115.733850][ T6385] loop5: detected capacity change from 0 to 128 [ 115.848875][ T6385] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 116.079643][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 116.219812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 116.237115][ T6385] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.340113][ T5850] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 117.346664][ T5839] Bluetooth: hci6: command 0x1003 tx timeout [ 118.417127][ T31] audit: type=1326 audit(1767747497.981:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6395 comm="syz.1.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9378f749 code=0x7fc00000 [ 118.561741][ T6409] loop4: detected capacity change from 0 to 1024 [ 118.564561][ T5828] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.569396][ T6409] ======================================================= [ 118.569396][ T6409] WARNING: The mand mount option has been deprecated and [ 118.569396][ T6409] and is ignored by this kernel. Remove the mand [ 118.569396][ T6409] option from the mount to silence this warning. [ 118.569396][ T6409] ======================================================= [ 118.612816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 118.626549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 118.649341][ T6409] journal_path: Non-blockdev passed as './file0' [ 118.700020][ T6409] EXT4-fs: error: could not find journal device path [ 118.995701][ T6422] IPv6: NLM_F_CREATE should be specified when creating new route [ 119.040237][ T6422] binfmt_misc: register: failed to install interpreter file ./file0 [ 119.173978][ T6428] 9p: Bad value for 'wfdno' [ 119.211516][ T6422] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.733219][ T6444] netlink: 'syz.0.133': attribute type 3 has an invalid length. [ 120.139734][ T31] audit: type=1326 audit(1767747499.691:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 120.210165][ T31] audit: type=1326 audit(1767747499.691:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 120.269631][ T31] audit: type=1326 audit(1767747499.691:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6454 comm="syz.4.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 120.444318][ T6466] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.477007][ T6466] binfmt_misc: register: failed to install interpreter file ./file0 [ 121.181751][ T6493] loop1: detected capacity change from 0 to 2048 [ 121.198388][ T6495] loop0: detected capacity change from 0 to 512 [ 121.245923][ T6495] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm +}[@: iget: bad extended attribute block 1 [ 121.261315][ T6495] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm +}[@: couldn't read orphan inode 15 (err -117) [ 121.263853][ T6493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.276182][ T6495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.377172][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.382179][ T31] audit: type=1800 audit(1767747500.941:50): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.151" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 121.990762][ T6536] loop5: detected capacity change from 0 to 512 [ 121.997925][ T6536] EXT4-fs: Ignoring removed i_version option [ 122.032353][ T6536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.132409][ T6541] IPv6: NLM_F_CREATE should be specified when creating new route [ 122.152202][ T6541] binfmt_misc: register: failed to install interpreter file ./file0 [ 122.217763][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.309504][ T5828] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.894019][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 123.845712][ T31] audit: type=1326 audit(1767747503.411:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 123.869113][ T6584] loop2: detected capacity change from 0 to 512 [ 123.879037][ T6584] EXT4-fs: Ignoring removed nobh option [ 123.919257][ T31] audit: type=1326 audit(1767747503.411:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 123.956301][ T6588] binfmt_misc: register: failed to install interpreter file ./file0 [ 123.971895][ T6584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.989690][ T5850] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 123.995997][ T5839] Bluetooth: hci6: command 0x1003 tx timeout [ 124.001502][ T31] audit: type=1326 audit(1767747503.411:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.039762][ T6584] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.069756][ T31] audit: type=1326 audit(1767747503.411:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.093686][ T31] audit: type=1326 audit(1767747503.411:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.117566][ T31] audit: type=1326 audit(1767747503.411:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.139858][ T31] audit: type=1326 audit(1767747503.411:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.163449][ T31] audit: type=1326 audit(1767747503.411:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.171965][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 124.192248][ T31] audit: type=1326 audit(1767747503.411:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.249006][ T6597] loop3: detected capacity change from 0 to 128 [ 124.281003][ T31] audit: type=1326 audit(1767747503.411:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 124.316363][ T6599] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz.2.185: iget: bad i_size value: 2533274857506816 [ 124.316901][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 124.355044][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 124.412891][ T6597] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 124.466132][ T6605] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 124.475573][ T6597] team0: Port device dummy0 added [ 124.523835][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.574547][ T6605] team0: Port device dummy0 removed [ 124.604745][ T6605] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.730910][ T6615] loop2: detected capacity change from 0 to 1024 [ 124.739075][ T6615] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 124.838160][ T6620] netlink: 20 bytes leftover after parsing attributes in process `syz.4.197'. [ 124.881598][ T6615] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 125.157428][ T6615] JBD2: no valid journal superblock found [ 125.296366][ T6615] EXT4-fs (loop2): Could not load journal inode [ 125.874383][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.1.206'. [ 125.929933][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'. [ 125.939126][ T6628] loop3: detected capacity change from 0 to 8192 [ 126.069882][ T5833] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 126.099040][ T5833] FAT-fs (loop3): Filesystem has been set read-only [ 126.213194][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 126.298850][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 126.314696][ T6655] 9p: Bad value for 'wfdno' [ 126.459319][ T6659] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.476063][ T6632] loop4: detected capacity change from 0 to 32768 [ 126.897823][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.554852][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.562942][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.570597][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.577972][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.614350][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.632181][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.664442][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.697059][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.735769][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 127.783016][ T9] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 128.086715][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 128.234246][ T6695] 9p: Bad value for 'wfdno' [ 128.630131][ T6708] loop1: detected capacity change from 0 to 128 [ 128.712784][ T5912] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 128.902335][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.923792][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.960405][ T5912] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.986503][ T6708] syz.1.234: attempt to access beyond end of device [ 128.986503][ T6708] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 129.000233][ T5912] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 129.008229][ T5912] usb 6-1: Manufacturer: syz [ 129.042307][ T5912] usb 6-1: config 0 descriptor?? [ 129.051115][ T6708] syz.1.234: attempt to access beyond end of device [ 129.051115][ T6708] loop1: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 129.080917][ T6708] syz.1.234: attempt to access beyond end of device [ 129.080917][ T6708] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 129.122817][ T6708] syz.1.234: attempt to access beyond end of device [ 129.122817][ T6708] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 129.146953][ T6708] syz.1.234: attempt to access beyond end of device [ 129.146953][ T6708] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 129.170431][ T6708] syz.1.234: attempt to access beyond end of device [ 129.170431][ T6708] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 129.213869][ T6708] syz.1.234: attempt to access beyond end of device [ 129.213869][ T6708] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 129.239546][ T6708] syz.1.234: attempt to access beyond end of device [ 129.239546][ T6708] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 129.281942][ T6708] syz.1.234: attempt to access beyond end of device [ 129.281942][ T6708] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 129.302658][ T6708] syz.1.234: attempt to access beyond end of device [ 129.302658][ T6708] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 129.679844][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 129.688385][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 129.902446][ T5912] usb 6-1: USB disconnect, device number 2 [ 129.974850][ T6724] 9p: Bad value for 'wfdno' [ 132.104718][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 132.104737][ T31] audit: type=1326 audit(1767747511.671:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 132.170554][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.187669][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.227892][ T6768] loop3: detected capacity change from 0 to 128 [ 132.280736][ T6768] vfat: Unknown parameter 'ut' [ 132.384257][ T9] hid_parser_main: 8 callbacks suppressed [ 132.384281][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.433959][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.459620][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.498076][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.537880][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.565216][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.596912][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.631525][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.659647][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.683301][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 132.757797][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.5.258'. [ 132.988999][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 133.560490][ T31] audit: type=1326 audit(1767747513.131:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b47865e7 code=0x7fc00000 [ 133.631238][ T31] audit: type=1326 audit(1767747513.131:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b472b829 code=0x7fc00000 [ 133.678994][ T31] audit: type=1326 audit(1767747513.131:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f84b472b8ef code=0x7fc00000 [ 133.754129][ T31] audit: type=1326 audit(1767747513.131:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 133.805654][ T6790] random: crng reseeded on system resumption [ 133.863002][ T31] audit: type=1326 audit(1767747513.431:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 133.891151][ T31] audit: type=1326 audit(1767747513.431:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 133.914196][ T31] audit: type=1326 audit(1767747513.431:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 134.539833][ T31] audit: type=1326 audit(1767747513.431:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 134.629720][ T31] audit: type=1326 audit(1767747513.431:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.2.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc426b8f749 code=0x7ffc0000 [ 135.019740][ T6824] loop5: detected capacity change from 0 to 128 [ 135.026814][ T6824] vfat: Unknown parameter 'ut' [ 135.310320][ T6831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 135.927646][ T6840] warning: `syz.2.278' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.087186][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 136.720433][ T6842] loop4: detected capacity change from 0 to 1024 [ 136.862802][ T6842] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 136.911619][ T6842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.959810][ T6842] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.279: bg 0: block 88: padding at end of block bitmap is not set [ 137.334259][ T6842] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 137.758426][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.029434][ T9] hid_parser_main: 54 callbacks suppressed [ 139.029457][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.043513][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.050956][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.058331][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.073915][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.082927][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.090354][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.097722][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.106669][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.128458][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 139.142757][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 139.142773][ T31] audit: type=1326 audit(1767747518.701:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7fc00000 [ 139.258183][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 139.289982][ T31] audit: type=1326 audit(1767747518.851:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6881 comm="syz.5.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f820f3865e7 code=0x7fc00000 [ 139.360393][ T6904] netlink: 8 bytes leftover after parsing attributes in process `ÿ'. [ 139.710964][ T31] audit: type=1326 audit(1767747519.281:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 139.747388][ T31] audit: type=1326 audit(1767747519.301:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.368847][ T31] audit: type=1326 audit(1767747519.301:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.424093][ T31] audit: type=1326 audit(1767747519.301:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.491762][ T31] audit: type=1326 audit(1767747519.301:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.534933][ T31] audit: type=1326 audit(1767747519.301:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.601689][ T31] audit: type=1326 audit(1767747519.301:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.658202][ T31] audit: type=1326 audit(1767747519.301:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7ffc0000 [ 140.768903][ T6939] bridge0: port 3(gretap0) entered blocking state [ 140.829796][ T6939] bridge0: port 3(gretap0) entered disabled state [ 140.838551][ T6939] gretap0: entered allmulticast mode [ 140.867890][ T6742] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 140.869347][ T6939] gretap0: entered promiscuous mode [ 140.921551][ T6939] bridge0: port 3(gretap0) entered blocking state [ 140.928159][ T6939] bridge0: port 3(gretap0) entered forwarding state [ 141.028037][ T6947] gretap0: left allmulticast mode [ 141.043608][ T6947] gretap0: left promiscuous mode [ 141.085441][ T6947] bridge0: port 3(gretap0) entered disabled state [ 142.270449][ T6973] hub 2-0:1.0: USB hub found [ 142.275915][ T6973] hub 2-0:1.0: 1 port detected [ 143.577346][ T5912] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 143.656339][ T6998] netlink: 'syz.0.333': attribute type 3 has an invalid length. [ 144.389968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 144.398313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 144.426608][ T7009] loop5: detected capacity change from 0 to 128 [ 144.437312][ T7009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.444061][ T7009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.610319][ T7009] EXT4-fs (loop5): Test dummy encryption mode enabled [ 145.663447][ T7009] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.676573][ T7009] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.812011][ T5828] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 146.133274][ T31] kauditd_printk_skb: 89 callbacks suppressed [ 146.133295][ T31] audit: type=1326 audit(1767747525.701:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 146.477611][ T7035] netlink: 'syz.0.348': attribute type 3 has an invalid length. [ 146.528936][ T5971] hid_parser_main: 86 callbacks suppressed [ 146.528959][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.553824][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.574087][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.600236][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.627261][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.655149][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.674417][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.690152][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.731984][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.739389][ T5971] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 146.787372][ T5971] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 146.831602][ T31] audit: type=1326 audit(1767747526.401:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b47865e7 code=0x7fc00000 [ 146.875355][ T31] audit: type=1326 audit(1767747526.431:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b472b829 code=0x7fc00000 [ 146.932068][ T31] audit: type=1326 audit(1767747526.431:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f84b472b8ef code=0x7fc00000 [ 147.004181][ T31] audit: type=1326 audit(1767747526.431:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7020 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 147.036491][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.353'. [ 147.295733][ T31] audit: type=1326 audit(1767747526.861:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 147.358796][ T31] audit: type=1326 audit(1767747526.861:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 147.410266][ T31] audit: type=1326 audit(1767747526.861:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 147.536980][ T31] audit: type=1326 audit(1767747526.861:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 147.641518][ T31] audit: type=1326 audit(1767747526.861:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7059 comm="syz.5.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820f38f749 code=0x7ffc0000 [ 147.955114][ T7080] mmap: syz.4.357 (7080) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.104012][ T7129] loop1: detected capacity change from 0 to 1024 [ 150.127806][ T7129] EXT4-fs: Ignoring removed bh option [ 150.148369][ T7129] EXT4-fs: inline encryption not supported [ 150.179765][ T7129] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 150.227880][ T7129] EXT4-fs (loop1): group descriptors corrupted! [ 150.269792][ T7135] IPv6: NLM_F_CREATE should be specified when creating new route [ 150.305814][ T7135] binfmt_misc: register: failed to install interpreter file ./file0 [ 150.491158][ T7141] loop1: detected capacity change from 0 to 1024 [ 150.510618][ T7141] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.564262][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.601311][ T7138] loop5: detected capacity change from 0 to 8192 [ 150.615637][ T7138] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.898722][ T7146] cgroup: fork rejected by pids controller in /syz0 [ 152.236909][ T8487] loop2: detected capacity change from 0 to 16 [ 152.275597][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.296200][ T8487] erofs (device loop2): mounted with root inode @ nid 36. [ 153.271306][ T31] kauditd_printk_skb: 2 callbacks suppressed [ 153.271327][ T31] audit: type=1326 audit(1767747532.841:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 154.142524][ T31] audit: type=1326 audit(1767747533.711:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f84b47865e7 code=0x7fc00000 [ 154.227766][ T31] audit: type=1326 audit(1767747533.741:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f84b472b829 code=0x7fc00000 [ 154.346786][ T31] audit: type=1326 audit(1767747533.741:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f84b472b8ef code=0x7fc00000 [ 154.521303][ T31] audit: type=1326 audit(1767747533.741:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8494 comm="syz.4.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84b478f749 code=0x7fc00000 [ 155.072745][ T31] audit: type=1326 audit(1767747534.641:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9378f749 code=0x7ffc0000 [ 155.139320][ T31] audit: type=1326 audit(1767747534.661:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f5b9378f749 code=0x7ffc0000 [ 155.683614][ T31] audit: type=1326 audit(1767747534.661:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9378f749 code=0x7ffc0000 [ 155.764168][ T31] audit: type=1326 audit(1767747534.661:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9378f749 code=0x7ffc0000 [ 155.853531][ T31] audit: type=1326 audit(1767747534.671:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8546 comm="syz.1.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9378f749 code=0x7ffc0000 [ 155.898207][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'. [ 156.422805][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 157.240264][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.435'. [ 157.909450][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 157.918627][ T8606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.434'. [ 158.086371][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 158.211877][ T8618] loop0: detected capacity change from 0 to 16 [ 158.256974][ T8618] erofs (device loop0): mounted with root inode @ nid 36. [ 158.394042][ T9] hid_parser_main: 22 callbacks suppressed [ 158.394064][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x4 [ 158.449626][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x2 [ 158.459286][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 158.461949][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.502414][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.522659][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.544803][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.565016][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.599509][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.622693][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.645601][ T9] hid-generic 0000:3000000:0000.0009: unknown main item tag 0x0 [ 158.670768][ T9] hid-generic 0000:3000000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 158.701388][ T8633] loop2: detected capacity change from 0 to 256 [ 158.709163][ T8633] FAT-fs (loop2): bogus number of FAT sectors [ 158.715447][ T8633] FAT-fs (loop2): Can't find a valid FAT filesystem [ 158.988004][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.450'. [ 159.193086][ T8646] netlink: 28 bytes leftover after parsing attributes in process `syz.4.451'. [ 159.629520][ T8651] netlink: 16 bytes leftover after parsing attributes in process `syz.2.454'. [ 160.070298][ T5834] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 161.115743][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.139649][ T5834] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.158284][ T5834] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.171826][ T5834] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 161.180033][ T5834] usb 6-1: Manufacturer: syz [ 161.195216][ T5834] usb 6-1: config 0 descriptor?? [ 162.128091][ T5834] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 162.163539][ T30] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.184541][ T5834] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 162.206909][ T5834] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 162.227103][ T5834] usb 6-1: USB disconnect, device number 3 [ 162.473337][ T8683] __nla_validate_parse: 1 callbacks suppressed [ 162.473357][ T8683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 162.521665][ T8687] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.055462][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 163.064421][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 165.441576][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.464'. [ 165.523099][ T8721] netlink: '+}[@': attribute type 30 has an invalid length. [ 165.671276][ T8725] loop5: detected capacity change from 0 to 16 [ 165.703176][ T8725] erofs (device loop5): mounted with root inode @ nid 36. [ 166.285673][ T8743] loop3: detected capacity change from 0 to 512 [ 166.309200][ T8743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.322832][ T8743] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.334038][ T8744] netlink: 'syz.2.486': attribute type 10 has an invalid length. [ 166.351940][ T8743] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 166.367826][ T8743] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 166.384295][ T8743] EXT4-fs (loop3): This should not happen!! Data will be lost [ 166.384295][ T8743] [ 166.396019][ T8743] EXT4-fs (loop3): Total free blocks count 0 [ 166.402176][ T8743] EXT4-fs (loop3): Free/Dirty block details [ 166.408081][ T8743] EXT4-fs (loop3): free_blocks=65280 [ 166.413145][ T8744] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 166.414117][ T8743] EXT4-fs (loop3): dirty_blocks=1 [ 166.426867][ T8743] EXT4-fs (loop3): Block reservation details [ 166.432955][ T8743] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 166.513257][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.649688][ T8755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 167.508629][ T8769] netlink: 'syz.0.493': attribute type 39 has an invalid length. [ 167.652868][ T8776] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 167.700198][ T8776] team0: Failed to send options change via netlink (err -105) [ 167.722979][ T8776] team0: Port device dummy0 added [ 167.977110][ T8786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 168.000374][ T8786] IPVS: Error connecting to the multicast addr [ 168.010933][ T8787] tipc: Started in network mode [ 168.015806][ T8787] tipc: Node identity 468049c40bd, cluster identity 4711 [ 168.043729][ T8787] tipc: Enabled bearer , priority 0 [ 168.065686][ T8795] syzkaller0: entered promiscuous mode [ 168.132737][ T8795] syzkaller0: entered allmulticast mode [ 168.168521][ T8787] tipc: Resetting bearer [ 168.210960][ T8782] tipc: Resetting bearer [ 168.255936][ T8782] tipc: Disabling bearer [ 168.362707][ T8807] netlink: 20 bytes leftover after parsing attributes in process `syz.1.506'. [ 169.240921][ T8818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.514'. [ 169.613408][ T8838] tipc: Started in network mode [ 169.635442][ T8838] tipc: Node identity 0200c117562a, cluster identity 4711 [ 169.654647][ T8838] tipc: Enabled bearer , priority 0 [ 169.683422][ T8845] syzkaller0: entered promiscuous mode [ 169.705489][ T8845] syzkaller0: entered allmulticast mode [ 169.725739][ T8844] tipc: New replicast peer: 255.255.255.255 [ 169.740638][ T8844] tipc: Enabled bearer , priority 10 [ 169.755643][ T8838] tipc: Resetting bearer [ 169.814009][ T8836] tipc: Resetting bearer [ 169.920461][ T8836] tipc: Disabling bearer [ 170.248096][ T8866] syzkaller0: entered promiscuous mode [ 170.265639][ T8866] syzkaller0: entered allmulticast mode [ 170.513235][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 170.819117][ T8881] ------------[ cut here ]------------ [ 170.825076][ T8881] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 170.845426][ T8881] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.0.542/8881 [ 170.856732][ T8881] Modules linked in: [ 170.860916][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 170.861155][ T789] tipc: Node number set to 1297107396 [ 170.870143][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 170.870164][ T8881] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 170.870198][ T8881] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 170.870220][ T8881] RSP: 0018:ffffc9001dcc6ed0 EFLAGS: 00010246 [ 170.870245][ T8881] RAX: dffffc0000000000 RBX: 1ffff110052cfe04 RCX: 0000000000000000 [ 170.870263][ T8881] RDX: ffffffff8b71cde0 RSI: ffffffff8b725580 RDI: ffffffff8f8615e0 [ 170.870284][ T8881] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 170.941955][ T8881] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88802967f020 [ 170.949964][ T8881] R13: 0000000000000000 R14: 1ffff110052cfe03 R15: 0000000000000000 [ 170.957961][ T8881] FS: 00007f902d2f66c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 170.966940][ T8881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.973629][ T8881] CR2: 0000001b30e1bff8 CR3: 000000003f83b000 CR4: 0000000000350ef0 [ 170.981650][ T8881] Call Trace: [ 170.984929][ T8881] [ 170.987894][ T8881] reg_set_min_max+0x28c/0x340 [ 170.992721][ T8881] check_cond_jmp_op+0x19c6/0x2e20 [ 170.997866][ T8881] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 171.003374][ T8881] ? incomplete_read_marks+0xc4/0x1f0 [ 171.008791][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.014475][ T8881] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 171.020562][ T8881] ? incomplete_read_marks+0x15e/0x1f0 [ 171.026068][ T8881] do_check+0x58f5/0xeba0 [ 171.030464][ T8881] ? __pfx_stack_trace_save+0x10/0x10 [ 171.035945][ T8881] ? __pfx_do_check+0x10/0x10 [ 171.040679][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.046325][ T8881] ? init_func_state+0x1ab2/0x28d0 [ 171.051506][ T8881] do_check_common+0x19cc/0x25b0 [ 171.056585][ T8881] bpf_check+0x5e7a/0x1c300 [ 171.061191][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.066144][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.071822][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.076813][ T8881] ? __mutex_trylock_common+0x153/0x260 [ 171.082408][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.088057][ T8881] ? __mutex_trylock_common+0x153/0x260 [ 171.093676][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.099333][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.104680][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.110417][ T8881] ? pcpu_block_update+0x3c6/0x8d0 [ 171.115666][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.121414][ T8881] ? css_rstat_updated+0x239/0x520 [ 171.126728][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.132469][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.138159][ T8881] ? __pfx_bpf_check+0x10/0x10 [ 171.143021][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.148723][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.154564][ T8881] ? ktime_get_with_offset+0x93/0x2a0 [ 171.160037][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.165747][ T8881] ? __asan_memset+0x22/0x50 [ 171.170485][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.176215][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.182229][ T8881] ? security_bpf_prog_load+0x125/0x3f0 [ 171.187858][ T8881] bpf_prog_load+0x13ba/0x1a10 [ 171.192744][ T8881] ? __pfx_bpf_prog_load+0x10/0x10 [ 171.197909][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.203702][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.209400][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.215147][ T8881] ? security_bpf+0x7e/0x300 [ 171.219818][ T8881] __sys_bpf+0x507/0x860 [ 171.224193][ T8881] ? __pfx___sys_bpf+0x10/0x10 [ 171.229134][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.234907][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.240729][ T8881] ? rcu_is_watching+0x15/0xb0 [ 171.245576][ T8881] __x64_sys_bpf+0x7c/0x90 [ 171.250092][ T8881] do_syscall_64+0xec/0xf80 [ 171.254653][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.260824][ T8881] ? trace_irq_disable+0x37/0x100 [ 171.265913][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.271938][ T8881] RIP: 0033:0x7f902c38f749 [ 171.276401][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.296115][ T8881] RSP: 002b:00007f902d2f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.304629][ T8881] RAX: ffffffffffffffda RBX: 00007f902c5e5fa0 RCX: 00007f902c38f749 [ 171.312748][ T8881] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 171.320813][ T8881] RBP: 00007f902c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.328841][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.336899][ T8881] R13: 00007f902c5e6038 R14: 00007f902c5e5fa0 R15: 00007ffcffb28058 [ 171.345009][ T8881] [ 171.348081][ T8881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.355356][ T8881] CPU: 0 UID: 0 PID: 8881 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT(full) [ 171.364540][ T8881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.374581][ T8881] Call Trace: [ 171.377845][ T8881] [ 171.380760][ T8881] vpanic+0x1e0/0x670 [ 171.384742][ T8881] panic+0xb9/0xc0 [ 171.388458][ T8881] ? __pfx_panic+0x10/0x10 [ 171.392884][ T8881] __warn+0x317/0x4b0 [ 171.396859][ T8881] ? reg_bounds_sanity_check+0x201/0xc30 [ 171.402483][ T8881] ? reg_bounds_sanity_check+0x201/0xc30 [ 171.408107][ T8881] __report_bug+0x288/0x500 [ 171.412601][ T8881] ? __pfx_stack_trace_save+0x10/0x10 [ 171.417971][ T8881] ? reg_bounds_sanity_check+0x201/0xc30 [ 171.423597][ T8881] ? __pfx___report_bug+0x10/0x10 [ 171.428615][ T8881] ? check_cond_jmp_op+0x1840/0x2e20 [ 171.433883][ T8881] ? do_check+0x58f5/0xeba0 [ 171.438382][ T8881] ? do_check_common+0x19cc/0x25b0 [ 171.443489][ T8881] ? bpf_check+0x5e7a/0x1c300 [ 171.448156][ T8881] ? bpf_prog_load+0x13ba/0x1a10 [ 171.453087][ T8881] ? __sys_bpf+0x507/0x860 [ 171.457498][ T8881] ? __x64_sys_bpf+0x7c/0x90 [ 171.462079][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.468139][ T8881] report_bug_entry+0x19a/0x290 [ 171.472984][ T8881] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 171.478611][ T8881] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 171.484235][ T8881] handle_bug+0xca/0x200 [ 171.488480][ T8881] exc_invalid_op+0x1a/0x50 [ 171.492976][ T8881] asm_exc_invalid_op+0x1a/0x20 [ 171.497813][ T8881] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 171.504042][ T8881] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 171.523638][ T8881] RSP: 0018:ffffc9001dcc6ed0 EFLAGS: 00010246 [ 171.529698][ T8881] RAX: dffffc0000000000 RBX: 1ffff110052cfe04 RCX: 0000000000000000 [ 171.537655][ T8881] RDX: ffffffff8b71cde0 RSI: ffffffff8b725580 RDI: ffffffff8f8615e0 [ 171.545615][ T8881] RBP: 00000000ffffffff R08: 0000007800000000 R09: 0000000000000000 [ 171.553577][ T8881] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88802967f020 [ 171.561539][ T8881] R13: 0000000000000000 R14: 1ffff110052cfe03 R15: 0000000000000000 [ 171.569545][ T8881] reg_set_min_max+0x28c/0x340 [ 171.574315][ T8881] check_cond_jmp_op+0x19c6/0x2e20 [ 171.579429][ T8881] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 171.584878][ T8881] ? incomplete_read_marks+0xc4/0x1f0 [ 171.590258][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.595888][ T8881] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 171.601860][ T8881] ? incomplete_read_marks+0x15e/0x1f0 [ 171.607322][ T8881] do_check+0x58f5/0xeba0 [ 171.611650][ T8881] ? __pfx_stack_trace_save+0x10/0x10 [ 171.617095][ T8881] ? __pfx_do_check+0x10/0x10 [ 171.621776][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.627402][ T8881] ? init_func_state+0x1ab2/0x28d0 [ 171.632522][ T8881] do_check_common+0x19cc/0x25b0 [ 171.637476][ T8881] bpf_check+0x5e7a/0x1c300 [ 171.641974][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.646906][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.652530][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.657476][ T8881] ? __mutex_trylock_common+0x153/0x260 [ 171.663021][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.668644][ T8881] ? __mutex_trylock_common+0x153/0x260 [ 171.674189][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.679812][ T8881] ? __lock_acquire+0x6b6/0x2cf0 [ 171.684745][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.690367][ T8881] ? pcpu_block_update+0x3c6/0x8d0 [ 171.695469][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.701091][ T8881] ? css_rstat_updated+0x239/0x520 [ 171.706215][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.711847][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.717559][ T8881] ? __pfx_bpf_check+0x10/0x10 [ 171.722318][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.727949][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.733574][ T8881] ? ktime_get_with_offset+0x93/0x2a0 [ 171.738951][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.744576][ T8881] ? __asan_memset+0x22/0x50 [ 171.749168][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.754793][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.760421][ T8881] ? security_bpf_prog_load+0x125/0x3f0 [ 171.765964][ T8881] bpf_prog_load+0x13ba/0x1a10 [ 171.770739][ T8881] ? __pfx_bpf_prog_load+0x10/0x10 [ 171.775849][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.781493][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.787117][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.792739][ T8881] ? security_bpf+0x7e/0x300 [ 171.797326][ T8881] __sys_bpf+0x507/0x860 [ 171.801570][ T8881] ? __pfx___sys_bpf+0x10/0x10 [ 171.806349][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.811973][ T8881] ? srso_alias_return_thunk+0x5/0xfbef5 [ 171.817597][ T8881] ? rcu_is_watching+0x15/0xb0 [ 171.822371][ T8881] __x64_sys_bpf+0x7c/0x90 [ 171.826782][ T8881] do_syscall_64+0xec/0xf80 [ 171.831363][ T8881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.837416][ T8881] ? trace_irq_disable+0x37/0x100 [ 171.842444][ T8881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.848330][ T8881] RIP: 0033:0x7f902c38f749 [ 171.852733][ T8881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.872331][ T8881] RSP: 002b:00007f902d2f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.880742][ T8881] RAX: ffffffffffffffda RBX: 00007f902c5e5fa0 RCX: 00007f902c38f749 [ 171.888704][ T8881] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 171.896660][ T8881] RBP: 00007f902c413f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.904619][ T8881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.912662][ T8881] R13: 00007f902c5e6038 R14: 00007f902c5e5fa0 R15: 00007ffcffb28058 [ 171.920646][ T8881] [ 171.923932][ T8881] Kernel Offset: disabled [ 171.928246][ T8881] Rebooting in 86400 seconds..