Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. 2024/04/23 09:52:03 fuzzer started 2024/04/23 09:52:03 dialing manager at 10.128.0.169:30006 [ 55.224598][ T5065] cgroup: Unknown subsys name 'net' [ 55.361019][ T5065] cgroup: Unknown subsys name 'rlimit' 2024/04/23 09:52:05 code coverage: enabled 2024/04/23 09:52:05 comparison tracing: enabled 2024/04/23 09:52:05 extra coverage: enabled 2024/04/23 09:52:05 delay kcov mmap: enabled 2024/04/23 09:52:05 setuid sandbox: enabled 2024/04/23 09:52:05 namespace sandbox: enabled 2024/04/23 09:52:05 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/23 09:52:05 fault injection: enabled 2024/04/23 09:52:05 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/23 09:52:05 net packet injection: enabled 2024/04/23 09:52:05 net device setup: enabled 2024/04/23 09:52:05 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/23 09:52:05 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/23 09:52:05 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/23 09:52:05 USB emulation: enabled 2024/04/23 09:52:05 hci packet injection: enabled 2024/04/23 09:52:05 wifi device emulation: enabled 2024/04/23 09:52:05 802.15.4 emulation: enabled 2024/04/23 09:52:05 swap file: enabled [ 56.800721][ T5065] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/23 09:52:05 starting 5 executor processes [ 57.724346][ T5080] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.734266][ T5080] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.756021][ T5080] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.776193][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.784392][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.793834][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.811969][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.819033][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.828485][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.837345][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.848354][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.868496][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.869123][ T4465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.878306][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.884270][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.898692][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.906498][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.910148][ T4465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.914475][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.921374][ T4465] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.935012][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.944464][ T4465] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.952008][ T5080] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.962499][ T4465] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.965713][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.977386][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.988635][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.997290][ T5080] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.017991][ T5080] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.026321][ T5080] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.461383][ T5081] chnl_net:caif_netlink_parms(): no params data found [ 58.471092][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 58.633986][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 58.646282][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 58.758322][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 58.786588][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.794545][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.801862][ T5078] bridge_slave_0: entered allmulticast mode [ 58.809090][ T5078] bridge_slave_0: entered promiscuous mode [ 58.820061][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.827641][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.835427][ T5078] bridge_slave_1: entered allmulticast mode [ 58.842109][ T5078] bridge_slave_1: entered promiscuous mode [ 58.849737][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.857419][ T5081] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.864948][ T5081] bridge_slave_0: entered allmulticast mode [ 58.871643][ T5081] bridge_slave_0: entered promiscuous mode [ 58.879671][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.887045][ T5081] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.894693][ T5081] bridge_slave_1: entered allmulticast mode [ 58.901414][ T5081] bridge_slave_1: entered promiscuous mode [ 58.971575][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.032138][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.053065][ T5081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.062452][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.071921][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.080388][ T5089] bridge_slave_0: entered allmulticast mode [ 59.088071][ T5089] bridge_slave_0: entered promiscuous mode [ 59.118098][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.127592][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.135847][ T5088] bridge_slave_0: entered allmulticast mode [ 59.142575][ T5088] bridge_slave_0: entered promiscuous mode [ 59.166656][ T5078] team0: Port device team_slave_0 added [ 59.175984][ T5081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.197671][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.205239][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.212449][ T5089] bridge_slave_1: entered allmulticast mode [ 59.219463][ T5089] bridge_slave_1: entered promiscuous mode [ 59.248488][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.255805][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.262977][ T5088] bridge_slave_1: entered allmulticast mode [ 59.270820][ T5088] bridge_slave_1: entered promiscuous mode [ 59.279342][ T5078] team0: Port device team_slave_1 added [ 59.313193][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.320657][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.327958][ T5085] bridge_slave_0: entered allmulticast mode [ 59.334901][ T5085] bridge_slave_0: entered promiscuous mode [ 59.372580][ T5081] team0: Port device team_slave_0 added [ 59.381175][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.394057][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.403212][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.410473][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.417876][ T5085] bridge_slave_1: entered allmulticast mode [ 59.425265][ T5085] bridge_slave_1: entered promiscuous mode [ 59.440169][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.447307][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.474214][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.487851][ T5081] team0: Port device team_slave_1 added [ 59.529859][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.540331][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.547983][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.574012][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.617294][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.630375][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.641932][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.676221][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.683226][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.710699][ T5081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.725408][ T5081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.732367][ T5081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.758685][ T5081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.773083][ T5089] team0: Port device team_slave_0 added [ 59.783953][ T5089] team0: Port device team_slave_1 added [ 59.825904][ T5088] team0: Port device team_slave_0 added [ 59.864135][ T5085] team0: Port device team_slave_0 added [ 59.871966][ T5088] team0: Port device team_slave_1 added [ 59.881345][ T5078] hsr_slave_0: entered promiscuous mode [ 59.889250][ T5078] hsr_slave_1: entered promiscuous mode [ 59.910468][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.917550][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.943719][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.954607][ T5080] Bluetooth: hci0: command tx timeout [ 59.961998][ T5085] team0: Port device team_slave_1 added [ 60.021351][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.028454][ T5080] Bluetooth: hci4: command tx timeout [ 60.034127][ T5080] Bluetooth: hci1: command tx timeout [ 60.039439][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.065984][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.091931][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.098924][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.109154][ T52] Bluetooth: hci3: command tx timeout [ 60.125298][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.130984][ T5080] Bluetooth: hci2: command tx timeout [ 60.145377][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.155359][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.181614][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.224404][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.231384][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.258336][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.270386][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.277735][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.304348][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.324941][ T5081] hsr_slave_0: entered promiscuous mode [ 60.331343][ T5081] hsr_slave_1: entered promiscuous mode [ 60.338200][ T5081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.346204][ T5081] Cannot create hsr debugfs directory [ 60.452980][ T5089] hsr_slave_0: entered promiscuous mode [ 60.459488][ T5089] hsr_slave_1: entered promiscuous mode [ 60.466123][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.473809][ T5089] Cannot create hsr debugfs directory [ 60.512278][ T5085] hsr_slave_0: entered promiscuous mode [ 60.518552][ T5085] hsr_slave_1: entered promiscuous mode [ 60.525033][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.532592][ T5085] Cannot create hsr debugfs directory [ 60.572942][ T5088] hsr_slave_0: entered promiscuous mode [ 60.579580][ T5088] hsr_slave_1: entered promiscuous mode [ 60.585899][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.593973][ T5088] Cannot create hsr debugfs directory [ 60.918476][ T5078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.937163][ T5078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.949564][ T5078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.964831][ T5078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.038836][ T5081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.053032][ T5081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.081530][ T5081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.093519][ T5081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.178455][ T5089] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.206837][ T5089] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.232821][ T5089] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.242876][ T5089] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.272025][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.299347][ T5085] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.318457][ T5085] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.345362][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.352472][ T5085] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.362345][ T5085] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.391563][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.398874][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.438430][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.445620][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.532092][ T5088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.543958][ T5088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.566892][ T5081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.578846][ T5078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.601931][ T5088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.632865][ T5081] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.642159][ T5088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.686423][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.693838][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.726463][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.733696][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.845902][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.876208][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.899157][ T5081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.909905][ T5081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.970525][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.009399][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.025058][ T5080] Bluetooth: hci0: command tx timeout [ 62.042543][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.049752][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.062616][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.085664][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.092828][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.103771][ T5080] Bluetooth: hci4: command tx timeout [ 62.104350][ T52] Bluetooth: hci1: command tx timeout [ 62.161445][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.168660][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.181759][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.187358][ T5080] Bluetooth: hci3: command tx timeout [ 62.188917][ T5124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.194415][ T52] Bluetooth: hci2: command tx timeout [ 62.254413][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.335939][ T5078] veth0_vlan: entered promiscuous mode [ 62.367911][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.389563][ T5085] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.417268][ T5081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.434606][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.441768][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.465336][ T5078] veth1_vlan: entered promiscuous mode [ 62.505716][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.512897][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.589396][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.655063][ T5078] veth0_macvtap: entered promiscuous mode [ 62.671922][ T5081] veth0_vlan: entered promiscuous mode [ 62.711942][ T5081] veth1_vlan: entered promiscuous mode [ 62.763195][ T5078] veth1_macvtap: entered promiscuous mode [ 62.818186][ T5081] veth0_macvtap: entered promiscuous mode [ 62.840291][ T5081] veth1_macvtap: entered promiscuous mode [ 62.868970][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.919712][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.944377][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.981583][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.000492][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.012583][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.021126][ T5078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.030749][ T5078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.040096][ T5078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.049287][ T5078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.099465][ T5081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.113002][ T5081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.130190][ T5081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.142417][ T5081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.151516][ T5081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.160899][ T5081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.171120][ T5081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.261863][ T5085] veth0_vlan: entered promiscuous mode [ 63.285878][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.310856][ T5089] veth0_vlan: entered promiscuous mode [ 63.334082][ T5085] veth1_vlan: entered promiscuous mode [ 63.361638][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.376489][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.392100][ T5089] veth1_vlan: entered promiscuous mode [ 63.445386][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.453245][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.498335][ T5085] veth0_macvtap: entered promiscuous mode [ 63.521783][ T5088] veth0_vlan: entered promiscuous mode [ 63.549920][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.554818][ T5085] veth1_macvtap: entered promiscuous mode [ 63.558607][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.582942][ T5088] veth1_vlan: entered promiscuous mode [ 63.599868][ T5089] veth0_macvtap: entered promiscuous mode [ 63.631890][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.645227][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.655769][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.666323][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.678555][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.692018][ T5089] veth1_macvtap: entered promiscuous mode [ 63.698774][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.707938][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0xce, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x9) [ 63.744696][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.761516][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.781151][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.814611][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.834236][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.845044][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.858228][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.873219][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.884926][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895928][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r0) [ 63.907735][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.919550][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.942676][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.955315][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.967429][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.990376][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_request_inode\x00', r2}, 0x10) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) [ 64.007754][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.019666][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.032982][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.056235][ T5085] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.070610][ T5085] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.089973][ T5085] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.110112][ T52] Bluetooth: hci0: command tx timeout executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) [ 64.121513][ T5085] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) [ 64.168595][ T5089] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.177412][ T5089] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.187597][ T52] Bluetooth: hci4: command tx timeout [ 64.193067][ T5089] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.197628][ T52] Bluetooth: hci1: command tx timeout [ 64.205426][ T5089] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='ext4_evict_inode\x00', r1}, 0x10) unlink(&(0x7f00000001c0)='./cgroup\x00') executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) [ 64.264346][ T52] Bluetooth: hci2: command tx timeout [ 64.267828][ T5080] Bluetooth: hci3: command tx timeout [ 64.316436][ T5088] veth0_macvtap: entered promiscuous mode [ 64.369632][ T5172] syz-executor.3[5172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) close(r2) [ 64.370280][ T5172] syz-executor.3[5172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 64.412486][ T5088] veth1_macvtap: entered promiscuous mode executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c1100db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) [ 64.534610][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.573593][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.583754][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.595137][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.607935][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.620209][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.630428][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.641172][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.653079][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x1c, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query, @snprintf, @printk={@x}]}, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) [ 64.692707][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.705842][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.717298][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.728555][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.748822][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.759919][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.770907][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.788895][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.800749][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0189436, 0x0) [ 64.849931][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.862959][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.893958][ T5088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.902693][ T5088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 executing program 0: perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) [ 64.938237][ T5088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.951188][ T5088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, 0x0, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, 0x0, 0x0) [ 64.991054][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.010525][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) [ 65.119120][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.135852][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_remove_blocks\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) [ 65.204112][ T5127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.211978][ T5127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.298880][ T5130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.312039][ T5130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000100000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) [ 65.433233][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.442063][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x3, 0x6}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000000)=0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00'}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='ext4_allocate_blocks\x00', r6}, 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1e031800dd5c980128854d"], 0xffdd) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00'}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) [ 65.762379][ T5210] syz-executor.2[5210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0xe, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="3daa0000000000007910a80000000000181000", @ANYRES32], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0ccb7907081175f37538e486dd"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f00000001c0)="372c979854ca2c", 0x0, 0x0, 0x0}, 0x38) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x240) [ 65.762533][ T5210] syz-executor.2[5210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.810900][ T5207] syz-executor.2[5207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! executing program 2: r0 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440c0511b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xf9, 0x60000000, 0x0, 0xfffffffe}, 0x11) executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x2000) [ 65.847828][ T5207] syz-executor.2[5207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.014140][ T28] audit: type=1800 audit(1713865934.198:2): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x82}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) [ 66.085722][ T28] audit: type=1800 audit(1713865934.208:3): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000480), 0x0}, 0x20) [ 66.187487][ T5080] Bluetooth: hci0: command tx timeout executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 66.264811][ T5080] Bluetooth: hci1: command tx timeout [ 66.271551][ T52] Bluetooth: hci4: command tx timeout [ 66.344432][ T52] Bluetooth: hci2: command tx timeout [ 66.347869][ T5080] Bluetooth: hci3: command tx timeout executing program 0: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f0000000000), 0x4) [ 66.409259][ T5217] syzkaller0: entered promiscuous mode [ 66.427166][ T5217] syzkaller0: entered allmulticast mode [ 66.481671][ C0] hrtimer: interrupt took 77600 ns executing program 4: unlink(&(0x7f0000000000)='./cgroup\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x3) executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='skb_copy_datagram_iovec\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000b0770018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='workqueue_activate_work\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x1, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x6d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100004b028ee7000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) [ 66.815639][ T5235] [ 66.818010][ T5235] ===================================================== [ 66.820570][ T5195] ------------[ cut here ]------------ [ 66.824927][ T5235] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 66.824938][ T5235] 6.8.0-syzkaller-05236-g443574b03387 #0 Not tainted [ 66.824948][ T5235] ----------------------------------------------------- [ 66.824953][ T5235] syz-executor.2/5235 [HC0[0]:SC0[2]:HE0:SE0] is trying to acquire: [ 66.824970][ T5235] ffff88802bfea868 (&htab->buckets[i].lock){+...}-{2:2} [ 66.830425][ T5195] raw_local_irq_restore() called with IRQs enabled [ 66.836481][ T5195] WARNING: CPU: 0 PID: 5195 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x29/0x40 [ 66.837863][ T5235] , at: sock_hash_delete_elem+0xb0/0x300 [ 66.844563][ T5195] Modules linked in: [ 66.851444][ T5235] [ 66.851444][ T5235] and this task is already holding: [ 66.851451][ T5235] ffff8880b953d8d8 [ 66.859409][ T5195] [ 66.866291][ T5235] (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x6ec/0xec0 [ 66.872782][ T5195] CPU: 0 PID: 5195 Comm: udevd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 66.883336][ T5235] which would create a new lock dependency: [ 66.883342][ T5235] (&pool->lock){-.-.}-{2:2} -> (&htab->buckets[i].lock){+...}-{2:2} [ 66.883380][ T5235] [ 66.883380][ T5235] but this new dependency connects a HARDIRQ-irq-safe lock: [ 66.883386][ T5235] (&pool->lock){-.-.}-{2:2} [ 66.883400][ T5235] [ 66.883400][ T5235] ... which became HARDIRQ-irq-safe at: [ 66.883406][ T5235] lock_acquire+0x1e4/0x530 [ 66.883422][ T5235] _raw_spin_lock+0x2e/0x40 [ 66.883446][ T5235] __queue_work+0x6ec/0xec0 [ 66.883462][ T5235] queue_work_on+0x14f/0x250 [ 66.883476][ T5235] hrtimer_run_queues+0x154/0x460 [ 66.883495][ T5235] update_process_times+0x80/0x230 [ 66.883508][ T5235] tick_periodic+0x190/0x220 [ 66.883523][ T5235] tick_handle_periodic+0x4a/0x160 [ 66.883537][ T5235] __sysvec_apic_timer_interrupt+0x107/0x3a0 [ 66.883561][ T5235] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 66.883577][ T5235] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.883602][ T5235] trace_event_eval_update+0x7ea/0xf90 [ 66.883618][ T5235] process_scheduled_works+0xa00/0x1770 [ 66.883634][ T5235] worker_thread+0x86d/0xd70 [ 66.883649][ T5235] kthread+0x2f0/0x390 [ 66.883667][ T5235] ret_from_fork+0x4b/0x80 [ 66.883689][ T5235] ret_from_fork_asm+0x1a/0x30 [ 66.883707][ T5235] [ 66.883707][ T5235] to a HARDIRQ-irq-unsafe lock: [ 66.883712][ T5235] (&htab->buckets[i].lock){+...}-{2:2} [ 66.883728][ T5235] [ 66.883728][ T5235] ... which became HARDIRQ-irq-unsafe at: [ 66.883735][ T5235] ... [ 66.883738][ T5235] lock_acquire+0x1e4/0x530 [ 66.883752][ T5235] _raw_spin_lock_bh+0x35/0x50 [ 66.883769][ T5235] sock_hash_update_common+0x20c/0xa30 [ 66.883785][ T5235] sock_map_update_elem_sys+0x5a4/0x910 [ 66.883800][ T5235] map_update_elem+0x53a/0x6f0 [ 66.883816][ T5235] __sys_bpf+0x76f/0x810 [ 66.883831][ T5235] __x64_sys_bpf+0x7c/0x90 [ 66.883846][ T5235] do_syscall_64+0xfb/0x240 [ 66.883865][ T5235] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 66.883887][ T5235] [ 66.883887][ T5235] other info that might help us debug this: [ 66.883887][ T5235] [ 66.883893][ T5235] Possible interrupt unsafe locking scenario: [ 66.883893][ T5235] [ 66.883898][ T5235] CPU0 CPU1 [ 66.883903][ T5235] ---- ---- [ 66.883908][ T5235] lock(&htab->buckets[i].lock); [ 66.883921][ T5235] local_irq_disable(); [ 66.883926][ T5235] lock(&pool->lock); [ 66.883938][ T5235] lock(&htab->buckets[i].lock); [ 66.883950][ T5235] [ 66.883954][ T5235] lock(&pool->lock); [ 66.883966][ T5235] [ 66.883966][ T5235] *** DEADLOCK *** [ 66.883966][ T5235] [ 66.883970][ T5235] 3 locks held by syz-executor.2/5235: [ 66.883981][ T5235] #0: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: __queue_work+0x198/0xec0 [ 66.884027][ T5235] #1: ffff8880b953d8d8 (&pool->lock){-.-.}-{2:2}, at: __queue_work+0x6ec/0xec0 [ 66.884066][ T5235] #2: ffffffff8e131920 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run1+0xf0/0x3f0 [ 66.884109][ T5235] [ 66.884109][ T5235] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 66.884117][ T5235] -> (&pool->lock){-.-.}-{2:2} { [ 66.884142][ T5235] IN-HARDIRQ-W at: [ 66.884152][ T5235] lock_acquire+0x1e4/0x530 [ 66.884167][ T5235] _raw_spin_lock+0x2e/0x40 [ 66.884184][ T5235] __queue_work+0x6ec/0xec0 [ 66.884201][ T5235] queue_work_on+0x14f/0x250 [ 66.884218][ T5235] hrtimer_run_queues+0x154/0x460 [ 66.884237][ T5235] update_process_times+0x80/0x230 [ 66.884252][ T5235] tick_periodic+0x190/0x220 [ 66.884268][ T5235] tick_handle_periodic+0x4a/0x160 [ 66.884284][ T5235] __sysvec_apic_timer_interrupt+0x107/0x3a0 [ 66.884309][ T5235] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 66.884325][ T5235] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.884344][ T5235] trace_event_eval_update+0x7ea/0xf90 [ 66.884359][ T5235] process_scheduled_works+0xa00/0x1770 [ 66.884374][ T5235] worker_thread+0x86d/0xd70 [ 66.884389][ T5235] kthread+0x2f0/0x390 [ 66.889999][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.893868][ T5235] ret_from_fork+0x4b/0x80 [ 66.893890][ T5235] ret_from_fork_asm+0x1a/0x30 [ 66.893911][ T5235] IN-SOFTIRQ-W at: [ 66.893920][ T5235] lock_acquire+0x1e4/0x530 [ 66.893935][ T5235] _raw_spin_lock+0x2e/0x40 [ 66.893953][ T5235] __queue_work+0x6ec/0xec0 [ 66.893970][ T5235] call_timer_fn+0x17e/0x600 [ 66.893987][ T5235] __run_timer_base+0x695/0x8e0 [ 66.901324][ T5195] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 66.905018][ T5235] run_timer_softirq+0xb7/0x170 [ 66.905034][ T5235] __do_softirq+0x2bc/0x943 [ 66.907345][ T5195] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 66.914510][ T5235] __irq_exit_rcu+0xf2/0x1c0 [ 66.914527][ T5235] irq_exit_rcu+0x9/0x30 [ 66.923733][ T5195] RSP: 0018:ffffc90004c7fd18 EFLAGS: 00010246 [ 66.929567][ T5235] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 66.938070][ T5195] [ 66.947051][ T5235] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 66.947080][ T5235] default_idle+0x13/0x20 [ 66.947099][ T5235] default_idle_call+0x74/0xb0 [ 66.947116][ T5235] do_idle+0x22f/0x5d0 [ 66.947129][ T5235] cpu_startup_entry+0x42/0x60 [ 66.947141][ T5235] rest_init+0x2e0/0x300 [ 66.947161][ T5235] arch_call_rest_init+0xe/0x10 [ 66.947177][ T5235] start_kernel+0x47a/0x500 [ 66.947192][ T5235] x86_64_start_reservations+0x2a/0x30 [ 66.951762][ T5195] RAX: ba5530ebde238900 RBX: 0000000000000200 RCX: ffff888019fc5a00 [ 66.959448][ T5235] x86_64_start_kernel+0x99/0xa0 [ 66.959467][ T5235] common_startup_64+0x13e/0x147 [ 66.964046][ T5195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 66.968593][ T5235] INITIAL USE [ 66.973150][ T5195] RBP: ffffc90004c7fdf0 R08: ffffffff8157cc12 R09: 1ffff110172851a2 [ 66.977796][ T5235] at: [ 66.977803][ T5235] lock_acquire+0x1e4/0x530 [ 66.977820][ T5235] _raw_spin_lock+0x2e/0x40 [ 66.982915][ T5195] R10: dffffc0000000000 R11: ffffed10172851a3 R12: 0000000000000200 [ 66.988087][ T5235] __queue_work+0x6ec/0xec0 [ 66.988105][ T5235] queue_work_on+0x14f/0x250 [ 66.988121][ T5235] start_poll_synchronize_rcu_expedited+0xf7/0x150 [ 66.988140][ T5235] rcu_init+0xea/0x140 [ 66.988155][ T5235] start_kernel+0x1f7/0x500 [ 66.988169][ T5235] x86_64_start_reservations+0x2a/0x30 [ 66.988189][ T5235] x86_64_start_kernel+0x99/0xa0 [ 66.988206][ T5235] common_startup_64+0x13e/0x147 [ 66.988224][ T5235] } [ 66.988229][ T5235] ... key at: [] init_worker_pool.__key+0x0/0x20 [ 66.988250][ T5235] [ 66.988250][ T5235] the dependencies between the lock to be acquired [ 66.988256][ T5235] and HARDIRQ-irq-unsafe lock: [ 66.988279][ T5235] -> (&htab->buckets[i].lock){+...}-{2:2} { [ 66.988306][ T5235] HARDIRQ-ON-W at: [ 66.988316][ T5235] lock_acquire+0x1e4/0x530 [ 66.988332][ T5235] _raw_spin_lock_bh+0x35/0x50 [ 66.988349][ T5235] sock_hash_update_common+0x20c/0xa30 [ 66.988366][ T5235] sock_map_update_elem_sys+0x5a4/0x910 [ 66.988382][ T5235] map_update_elem+0x53a/0x6f0 [ 66.988400][ T5235] __sys_bpf+0x76f/0x810 [ 66.988416][ T5235] __x64_sys_bpf+0x7c/0x90 [ 66.988430][ T5235] do_syscall_64+0xfb/0x240 [ 66.988447][ T5235] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 66.988468][ T5235] INITIAL USE at: [ 66.988478][ T5235] lock_acquire+0x1e4/0x530 [ 66.988492][ T5235] _raw_spin_lock_bh+0x35/0x50 [ 66.988509][ T5235] sock_hash_update_common+0x20c/0xa30 [ 66.988525][ T5235] sock_map_update_elem_sys+0x5a4/0x910 [ 66.988541][ T5235] map_update_elem+0x53a/0x6f0 [ 66.988556][ T5235] __sys_bpf+0x76f/0x810 [ 66.993209][ T5195] R13: 0000000000000000 R14: 0000000000000246 R15: 1ffff9200098ffa8 [ 66.998379][ T5235] __x64_sys_bpf+0x7c/0x90 [ 66.998393][ T5235] do_syscall_64+0xfb/0x240 [ 66.998410][ T5235] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 66.998433][ T5235] } [ 66.998437][ T5235] ... key at: [] sock_hash_alloc.__key+0x0/0x20 [ 66.998458][ T5235] ... acquired at: [ 66.998463][ T5235] lock_acquire+0x1e4/0x530 [ 66.998479][ T5235] _raw_spin_lock_bh+0x35/0x50 [ 66.998495][ T5235] sock_hash_delete_elem+0xb0/0x300 [ 67.004543][ T5195] FS: 00007fbceda96c80(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 67.010214][ T5235] bpf_prog_a8aaa52f2e199321+0x4a/0x4e [ 67.016265][ T5195] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.021763][ T5235] bpf_trace_run1+0x1e0/0x3f0 [ 67.027379][ T5195] CR2: 000055559487e8f8 CR3: 000000007bfca000 CR4: 00000000003506f0 [ 67.032010][ T5235] trace_workqueue_activate_work+0x161/0x1d0 [ 67.036231][ T5195] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.040610][ T5235] __queue_work+0xc04/0xec0 [ 67.045447][ T5195] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.052419][ T5235] queue_work_on+0x14f/0x250 [ 67.057955][ T5195] Call Trace: [ 67.065797][ T5235] bpf_prog_load+0xfef/0x20f0 [ 67.065817][ T5235] __sys_bpf+0x4ee/0x810 [ 67.068380][ T5195] [ 67.072934][ T5235] __x64_sys_bpf+0x7c/0x90 [ 67.077771][ T5195] ? __warn+0x163/0x4b0 [ 67.083268][ T5235] do_syscall_64+0xfb/0x240 [ 67.083289][ T5235] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.083311][ T5235] [ 67.083314][ T5235] [ 67.083314][ T5235] stack backtrace: [ 67.083321][ T5235] CPU: 1 PID: 5235 Comm: syz-executor.2 Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 67.083339][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 67.083349][ T5235] Call Trace: [ 67.083354][ T5235] [ 67.083361][ T5235] dump_stack_lvl+0x1e7/0x2e0 [ 67.083382][ T5235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.083402][ T5235] ? __pfx__printk+0x10/0x10 [ 67.083422][ T5235] ? print_shortest_lock_dependencies+0xf2/0x160 [ 67.089024][ T5195] ? warn_bogus_irq_restore+0x29/0x40 [ 67.093845][ T5235] validate_chain+0x4dc7/0x58e0 [ 67.093880][ T5235] ? __pfx_validate_chain+0x10/0x10 [ 67.098168][ T5195] ? report_bug+0x2b3/0x500 [ 67.102644][ T5235] ? __pfx_validate_chain+0x10/0x10 [ 67.107221][ T5195] ? warn_bogus_irq_restore+0x29/0x40 [ 67.113160][ T5235] ? __pfx_validate_chain+0x10/0x10 [ 67.123374][ T5195] ? handle_bug+0x3e/0x70 [ 67.131650][ T5235] ? __pfx_validate_chain+0x10/0x10 [ 67.137005][ T5195] ? exc_invalid_op+0x1a/0x50 [ 67.142334][ T5235] ? mark_lock+0x9a/0x350 [ 67.148985][ T5195] ? asm_exc_invalid_op+0x1a/0x20 [ 67.154077][ T5235] __lock_acquire+0x1346/0x1fd0 [ 67.154104][ T5235] lock_acquire+0x1e4/0x530 [ 67.154120][ T5235] ? sock_hash_delete_elem+0xb0/0x300 [ 67.154137][ T5235] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 67.154152][ T5235] ? __pfx_lock_acquire+0x10/0x10 [ 67.154170][ T5235] ? sock_hash_delete_elem+0xb0/0x300 [ 67.154187][ T5235] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 67.154207][ T5235] ? __pfx_lock_acquire+0x10/0x10 [ 67.154224][ T5235] ? sock_hash_delete_elem+0xb0/0x300 [ 67.154239][ T5235] _raw_spin_lock_bh+0x35/0x50 [ 67.154256][ T5235] ? sock_hash_delete_elem+0xb0/0x300 [ 67.154274][ T5235] sock_hash_delete_elem+0xb0/0x300 [ 67.154296][ T5235] bpf_prog_a8aaa52f2e199321+0x4a/0x4e [ 67.160863][ T5195] ? __warn_printk+0x292/0x360 [ 67.168376][ T5235] bpf_trace_run1+0x1e0/0x3f0 [ 67.168396][ T5235] ? bpf_trace_run1+0xf0/0x3f0 [ 67.171836][ T5195] ? warn_bogus_irq_restore+0x29/0x40 [ 67.176047][ T5235] ? __pfx_bpf_trace_run1+0x10/0x10 [ 67.176068][ T5235] ? pwq_tryinc_nr_active+0x227/0x720 [ 67.184202][ T5195] ? warn_bogus_irq_restore+0x28/0x40 [ 67.189617][ T5235] trace_workqueue_activate_work+0x161/0x1d0 [ 67.198819][ T5195] queue_work_on+0x1ea/0x250 [ 67.207766][ T5235] __queue_work+0xc04/0xec0 [ 67.207788][ T5235] ? __queue_work+0x198/0xec0 [ 67.217047][ T5195] ? __pfx_queue_work_on+0x10/0x10 [ 67.227408][ T5235] ? rcu_is_watching+0x15/0xb0 [ 67.227429][ T5235] queue_work_on+0x14f/0x250 [ 67.232335][ T5195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 67.236289][ T5235] ? __pfx_queue_work_on+0x10/0x10 [ 67.236309][ T5235] ? __pfx_free_uid+0x10/0x10 [ 67.242430][ T5195] fsnotify_put_mark+0x50f/0x710 [ 67.248547][ T5235] ? __asan_memset+0x23/0x50 [ 67.248568][ T5235] bpf_prog_load+0xfef/0x20f0 [ 67.248592][ T5235] ? __pfx_bpf_prog_load+0x10/0x10 [ 67.248610][ T5235] ? __pfx___might_resched+0x10/0x10 [ 67.248637][ T5235] ? __might_fault+0xc6/0x120 [ 67.248654][ T5235] ? bpf_lsm_bpf+0x9/0x10 [ 67.248674][ T5235] ? security_bpf+0x87/0xb0 [ 67.248692][ T5235] __sys_bpf+0x4ee/0x810 [ 67.248712][ T5235] ? __pfx___sys_bpf+0x10/0x10 [ 67.248729][ T5235] ? xfd_validate_state+0x6e/0x150 [ 67.248758][ T5235] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 67.248776][ T5235] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.248794][ T5235] ? do_syscall_64+0x10a/0x240 [ 67.248814][ T5235] __x64_sys_bpf+0x7c/0x90 [ 67.254951][ T5195] ? put_ucounts+0x6d/0x280 [ 67.261147][ T5235] do_syscall_64+0xfb/0x240 [ 67.267808][ T5195] ? __pfx_fsnotify_put_mark+0x10/0x10 [ 67.274522][ T5235] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.280744][ T5195] ? _raw_spin_unlock+0x28/0x50 [ 67.287474][ T5235] RIP: 0033:0x7f9a3367dea9 [ 67.287491][ T5235] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 67.295221][ T5195] ? dec_ucount+0x180/0x1b0 [ 67.302363][ T5235] RSP: 002b:00007f9a343ab0c8 EFLAGS: 00000246 [ 67.309990][ T5195] __se_sys_inotify_rm_watch+0xd3/0x140 [ 67.317047][ T5235] ORIG_RAX: 0000000000000141 [ 67.317056][ T5235] RAX: ffffffffffffffda RBX: 00007f9a337abf80 RCX: 00007f9a3367dea9 [ 67.317069][ T5235] RDX: 0000000000000090 RSI: 0000000020001d00 RDI: 0000000000000005 [ 67.324244][ T5195] do_syscall_64+0xfb/0x240 [ 67.330435][ T5235] RBP: 00007f9a336ca4a4 R08: 0000000000000000 R09: 0000000000000000 [ 67.336149][ T5195] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 67.346158][ T5235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.346170][ T5235] R13: 000000000000000b R14: 00007f9a337abf80 R15: 00007ffc09a5dce8 [ 67.346189][ T5235] [ 68.391289][ T5195] RIP: 0033:0x7fbcedb6ef77 [ 68.395702][ T5195] Code: 73 01 c3 48 8b 0d b1 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 ff 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 [ 68.415315][ T5195] RSP: 002b:00007fffef505d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 68.423756][ T5195] RAX: ffffffffffffffda RBX: 000055eff6054120 RCX: 00007fbcedb6ef77 [ 68.431723][ T5195] RDX: 0000000000000007 RSI: 0000000000000029 RDI: 0000000000000007 [ 68.439708][ T5195] RBP: 000055f006d06820 R08: 0000000000000006 R09: 17761b0a2f6c54b0 [ 68.447670][ T5195] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000029 [ 68.455629][ T5195] R13: 00007fffef505d48 R14: 0000000003938700 R15: 000055eff6054160 [ 68.463598][ T5195] [ 68.466597][ T5195] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.473850][ T5195] CPU: 0 PID: 5195 Comm: udevd Not tainted 6.8.0-syzkaller-05236-g443574b03387 #0 [ 68.483016][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 68.493047][ T5195] Call Trace: [ 68.496325][ T5195] [ 68.499239][ T5195] dump_stack_lvl+0x1e7/0x2e0 [ 68.503920][ T5195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.509149][ T5195] ? __pfx__printk+0x10/0x10 [ 68.513758][ T5195] ? _printk+0xd5/0x120 [ 68.517988][ T5195] ? vscnprintf+0x5d/0x90 [ 68.522332][ T5195] panic+0x349/0x860 [ 68.526258][ T5195] ? __warn+0x172/0x4b0 [ 68.530418][ T5195] ? __pfx_panic+0x10/0x10 [ 68.534838][ T5195] ? show_trace_log_lvl+0x4e6/0x520 [ 68.540061][ T5195] __warn+0x31e/0x4b0 [ 68.544028][ T5195] ? warn_bogus_irq_restore+0x29/0x40 [ 68.549381][ T5195] report_bug+0x2b3/0x500 [ 68.553688][ T5195] ? warn_bogus_irq_restore+0x29/0x40 [ 68.559034][ T5195] handle_bug+0x3e/0x70 [ 68.563179][ T5195] exc_invalid_op+0x1a/0x50 [ 68.567660][ T5195] asm_exc_invalid_op+0x1a/0x20 [ 68.572495][ T5195] RIP: 0010:warn_bogus_irq_restore+0x29/0x40 [ 68.578454][ T5195] Code: 90 f3 0f 1e fa 90 80 3d de 59 01 04 00 74 06 90 c3 cc cc cc cc c6 05 cf 59 01 04 01 90 48 c7 c7 20 ba aa 8b e8 f8 d5 e7 f5 90 <0f> 0b 90 90 90 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f [ 68.598041][ T5195] RSP: 0018:ffffc90004c7fd18 EFLAGS: 00010246 [ 68.604084][ T5195] RAX: ba5530ebde238900 RBX: 0000000000000200 RCX: ffff888019fc5a00 [ 68.612046][ T5195] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 68.620003][ T5195] RBP: ffffc90004c7fdf0 R08: ffffffff8157cc12 R09: 1ffff110172851a2 [ 68.627949][ T5195] R10: dffffc0000000000 R11: ffffed10172851a3 R12: 0000000000000200 [ 68.635940][ T5195] R13: 0000000000000000 R14: 0000000000000246 R15: 1ffff9200098ffa8 [ 68.643905][ T5195] ? __warn_printk+0x292/0x360 [ 68.648683][ T5195] ? warn_bogus_irq_restore+0x28/0x40 [ 68.654035][ T5195] queue_work_on+0x1ea/0x250 [ 68.658606][ T5195] ? __pfx_queue_work_on+0x10/0x10 [ 68.663694][ T5195] ? do_raw_spin_unlock+0x13c/0x8b0 [ 68.668872][ T5195] fsnotify_put_mark+0x50f/0x710 [ 68.673783][ T5195] ? put_ucounts+0x6d/0x280 [ 68.678262][ T5195] ? __pfx_fsnotify_put_mark+0x10/0x10 [ 68.683711][ T5195] ? _raw_spin_unlock+0x28/0x50 [ 68.688540][ T5195] ? dec_ucount+0x180/0x1b0 [ 68.693020][ T5195] __se_sys_inotify_rm_watch+0xd3/0x140 [ 68.698547][ T5195] do_syscall_64+0xfb/0x240 [ 68.703028][ T5195] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 68.708917][ T5195] RIP: 0033:0x7fbcedb6ef77 [ 68.713313][ T5195] Code: 73 01 c3 48 8b 0d b1 ce 0c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 ff 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 ce 0c 00 f7 d8 64 89 01 48 [ 68.732891][ T5195] RSP: 002b:00007fffef505d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ff [ 68.741280][ T5195] RAX: ffffffffffffffda RBX: 000055eff6054120 RCX: 00007fbcedb6ef77 [ 68.749226][ T5195] RDX: 0000000000000007 RSI: 0000000000000029 RDI: 0000000000000007 [ 68.757173][ T5195] RBP: 000055f006d06820 R08: 0000000000000006 R09: 17761b0a2f6c54b0 [ 68.765120][ T5195] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000029 [ 68.773067][ T5195] R13: 00007fffef505d48 R14: 0000000003938700 R15: 000055eff6054160 [ 68.781016][ T5195] [ 69.847423][ T5195] Shutting down cpus with NMI [ 69.852408][ T5195] Kernel Offset: disabled [ 69.856715][ T5195] Rebooting in 86400 seconds..