last executing test programs: 10.61326486s ago: executing program 0 (id=99): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000000)=0x1) 9.32790792s ago: executing program 0 (id=106): socket$inet6(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000050000000600000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 9.148208553s ago: executing program 2 (id=110): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 9.001117135s ago: executing program 0 (id=112): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002d8000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r7, 0x9012}], 0x1, 0x0) unshare(0x2a020480) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r7, 0x1000}], 0x1, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.400683427s ago: executing program 2 (id=115): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 6.327330479s ago: executing program 0 (id=117): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, 0x0, 0x0) 6.109732422s ago: executing program 2 (id=119): creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6.109463562s ago: executing program 0 (id=120): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a80)="04e98406cc", 0x5}], 0x1}, 0x1) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) 4.890457221s ago: executing program 4 (id=125): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getrlimit(0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0xffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 4.796927023s ago: executing program 0 (id=126): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002000000", @ANYRES32, @ANYBLOB="0000e2ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002d8000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000140)={0xa, 0xea0, 0x0, @mcast1}, 0x1c) r5 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r5, 0x9012}], 0x1, 0x0) unshare(0x2a020480) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r5, 0x1000}], 0x1, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.795511864s ago: executing program 2 (id=127): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x10243, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_names='batadv0\x00'}) 3.76050009s ago: executing program 1 (id=128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200e2f7ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) eventfd2(0x0, 0x80001) 3.670620631s ago: executing program 4 (id=129): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000003c0)=0x4, 0x4) 3.529889544s ago: executing program 1 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0xc, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xd, 0x9, 0x5, 0x9, 0x80, 0x1, 0x5e, 0xc5c9, [{0x2, 0x3ff, 0x4, 0xfffffffd}, {0x9, 0x1, 0x200, 0x8}, {0x3, 0x80, 0xae, 0x9}, {0x4, 0xe, 0x2, 0x6}, {0x8, 0x8001, 0x9, 0x1ff}]}}]}}]}, 0x94}}, 0x24040084) 3.333106707s ago: executing program 1 (id=131): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) 3.16477073s ago: executing program 1 (id=132): pipe2$9p(0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) setresgid(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x406f413, 0x0) 2.917782334s ago: executing program 1 (id=133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) 2.861878335s ago: executing program 3 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r0], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000080)=0x1ff, 0x18af, 0x2) 2.688469347s ago: executing program 4 (id=135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r3}, &(0x7f0000000780), &(0x7f0000000840)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xc, @mcast1, 0x8}, 0x7f) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)={@local, @remote, 0x0, 0x2, [@local, @private=0xa010102]}, 0x18) 2.614483168s ago: executing program 1 (id=136): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x50000002, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe13) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 2.592148338s ago: executing program 3 (id=137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, r2, 0x309, 0x70bd22, 0x25dfdc01, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x24040804) 2.057741528s ago: executing program 3 (id=138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002d8000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0xc001, 0x0, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300) poll(&(0x7f00000020c0)=[{r7, 0x9012}], 0x1, 0x0) unshare(0x2a020480) read$FUSE(r7, &(0x7f0000000040)={0x2020}, 0x2020) poll(&(0x7f00000021c0)=[{r7, 0x1000}], 0x1, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.497285106s ago: executing program 4 (id=139): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x3c0, 0x250, 0x1a8, 0xfeffffff, 0x0, 0xa8, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0xc8, 0x100, 0x0, {0x0, 0x7}, [@common=@inet=@length={{0x28}, {0x7ff, 0x9}}, @common=@ah={{0x30}, {[0x0, 0x4]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0xa0, 0xd8, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x260, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) 1.24473057s ago: executing program 2 (id=140): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x1000000000000}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) 495.230383ms ago: executing program 4 (id=141): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r2, 0x0) 404.226474ms ago: executing program 3 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 226.074217ms ago: executing program 2 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r2) 129.963268ms ago: executing program 3 (id=144): r0 = socket$kcm(0x10, 0x2, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002001500050004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 93.979439ms ago: executing program 4 (id=145): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='cgroup\x00', 0x408, &(0x7f00000003c0)='-\xc5\\%-+\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) creat(&(0x7f0000000480)='./file0\x00', 0x18a) close_range(r2, r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x8800, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="39feffff1000000400"/18, @ANYRES32=0x0, @ANYBLOB="2000000025000000300012800e00010069929e6772657461700000001c00028008001b0008000000080004001000000600180004000000"], 0x50}}, 0x0) 0s ago: executing program 3 (id=146): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='fdinfo\x00') fchdir(r0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='timer_start\x00', r3}, 0x18) syz_clone3(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r4 = syz_open_pts(r2, 0x0) r5 = dup(r4) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r5, 0x0) dup3(r4, r2, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00'}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0x5013, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getegid() getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), &(0x7f00000005c0)=0xc) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) syz_init_net_socket$x25(0x9, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. syzkaller login: [ 66.105604][ T4156] cgroup: Unknown subsys name 'net' [ 66.241397][ T4156] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.736083][ T4156] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.175394][ T4167] chnl_net:caif_netlink_parms(): no params data found [ 69.327305][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 69.341065][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 69.380594][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 69.444080][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.452550][ T4167] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.461912][ T4167] device bridge_slave_0 entered promiscuous mode [ 69.479913][ T4179] chnl_net:caif_netlink_parms(): no params data found [ 69.510041][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.517303][ T4167] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.525807][ T4167] device bridge_slave_1 entered promiscuous mode [ 69.561813][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.569127][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.577948][ T4176] device bridge_slave_0 entered promiscuous mode [ 69.610144][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.617656][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.626783][ T4176] device bridge_slave_1 entered promiscuous mode [ 69.659094][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.666676][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.674892][ T4169] device bridge_slave_0 entered promiscuous mode [ 69.695617][ T4167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.710749][ T4167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.737870][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.745507][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.753568][ T4169] device bridge_slave_1 entered promiscuous mode [ 69.781075][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.789744][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.798085][ T4168] device bridge_slave_0 entered promiscuous mode [ 69.816386][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.831146][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.843527][ T4167] team0: Port device team_slave_0 added [ 69.850569][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.858224][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.867165][ T4168] device bridge_slave_1 entered promiscuous mode [ 69.897804][ T4167] team0: Port device team_slave_1 added [ 69.920471][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.951254][ T4176] team0: Port device team_slave_0 added [ 69.968682][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.979792][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.989225][ T4179] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.996717][ T4179] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.005052][ T4179] device bridge_slave_0 entered promiscuous mode [ 70.021302][ T4176] team0: Port device team_slave_1 added [ 70.029008][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.046320][ T4179] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.053514][ T4179] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.061784][ T4179] device bridge_slave_1 entered promiscuous mode [ 70.069888][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.076913][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.102832][ T4167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.147788][ T4167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.155006][ T4167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.182471][ T4167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.217838][ T4169] team0: Port device team_slave_0 added [ 70.245636][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.252758][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.279934][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.293933][ T4168] team0: Port device team_slave_0 added [ 70.301492][ T4169] team0: Port device team_slave_1 added [ 70.309786][ T4179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.328016][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.335462][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.362353][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.376048][ T4168] team0: Port device team_slave_1 added [ 70.395492][ T4179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.409124][ T4167] device hsr_slave_0 entered promiscuous mode [ 70.416335][ T4167] device hsr_slave_1 entered promiscuous mode [ 70.470606][ T4179] team0: Port device team_slave_0 added [ 70.485823][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.492976][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.519463][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.532315][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.539566][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.566770][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.588992][ T4179] team0: Port device team_slave_1 added [ 70.610058][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.617964][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.644359][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.656036][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.663081][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.690348][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.719412][ T4176] device hsr_slave_0 entered promiscuous mode [ 70.726798][ T4176] device hsr_slave_1 entered promiscuous mode [ 70.733476][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.741808][ T4176] Cannot create hsr debugfs directory [ 70.771785][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.779459][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.806105][ T4179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.819384][ T4179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.826901][ T4179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.853357][ T4179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.918850][ T4169] device hsr_slave_0 entered promiscuous mode [ 70.926530][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.934380][ T4169] device hsr_slave_1 entered promiscuous mode [ 70.936205][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.947337][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.949843][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.953551][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 70.961143][ T4169] Cannot create hsr debugfs directory [ 70.974423][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 71.006655][ T4179] device hsr_slave_0 entered promiscuous mode [ 71.013780][ T4179] device hsr_slave_1 entered promiscuous mode [ 71.021125][ T4179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.029134][ T4179] Cannot create hsr debugfs directory [ 71.053821][ T4168] device hsr_slave_0 entered promiscuous mode [ 71.060982][ T4168] device hsr_slave_1 entered promiscuous mode [ 71.067806][ T4168] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.075714][ T4168] Cannot create hsr debugfs directory [ 71.371412][ T4167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.409079][ T4167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.418291][ T4167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.433689][ T4167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.463717][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.479838][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.486563][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.495141][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.507448][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.520379][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.576278][ T4169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.597651][ T4169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.607728][ T4169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.635473][ T4169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.737651][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.751895][ T4179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.778047][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.788828][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.799220][ T4179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.811560][ T4179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.822039][ T4179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.839500][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.858913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.868050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.878486][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.886105][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.902692][ T4167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.928329][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.957201][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.969222][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.979801][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.987365][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.018132][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.029989][ T4167] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.037427][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.047788][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.057164][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.066617][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.076165][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.085182][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.095349][ T4168] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.119857][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.128810][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.138857][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.148229][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.157619][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.166616][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.173676][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.182246][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.192120][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.203159][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.210326][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.218739][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.230907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.240204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.250107][ T4168] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.281722][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.289731][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.298761][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.309469][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.318908][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.328622][ T4168] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.340163][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.351491][ T4176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.367335][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.378062][ T4168] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.402788][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.412079][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.421405][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.428687][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.436912][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.447745][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.456610][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.463690][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.472925][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.483809][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.497970][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.507009][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.520467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.535807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.551608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.582840][ T4167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.594840][ T4167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.617737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.628621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.637684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.649882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.661084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.716002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.731087][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.742807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.754101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.763034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.771158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.795862][ T4179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.806163][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.817955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.827321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.872962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.883459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.898053][ T4179] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.917939][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.929873][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.939034][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.948046][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.957016][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.966197][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.975259][ T739] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.982533][ T739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.990794][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.001219][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.004870][ T4216] Bluetooth: hci3: command 0x041b tx timeout [ 73.010193][ T739] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.022738][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 73.022830][ T739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.029628][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 73.038227][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.050884][ T4216] Bluetooth: hci1: command 0x041b tx timeout [ 73.054752][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.064786][ T4216] Bluetooth: hci4: command 0x041b tx timeout [ 73.100893][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.111491][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.121701][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.134596][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.143649][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.151797][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.190488][ T4167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.203068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.220767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.232180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.247620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.257242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.266866][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.275979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.285142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.293771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.303348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.315719][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.323185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.332767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.341864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.353503][ T4176] device veth0_vlan entered promiscuous mode [ 73.391083][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.415952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.423567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.433479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.442654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.451684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.462920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.472555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.483598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.494743][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.502090][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.511107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.520238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.529204][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.536540][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.547313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.561412][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.596555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.607297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.625013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.642794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.652235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.670285][ T4176] device veth1_vlan entered promiscuous mode [ 73.690859][ T4167] device veth0_vlan entered promiscuous mode [ 73.699640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.709044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.719752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.729506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.738886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.747847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.757007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.766085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.791733][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.803247][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.818157][ T4167] device veth1_vlan entered promiscuous mode [ 73.831382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.840046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.848914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.856882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.865001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.873593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.892505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.901873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.956181][ T4169] device veth0_vlan entered promiscuous mode [ 73.975816][ T4179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.985826][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.997754][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.011089][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.023274][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.039929][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.050050][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.072598][ T4169] device veth1_vlan entered promiscuous mode [ 74.081181][ T4176] device veth0_macvtap entered promiscuous mode [ 74.103456][ T4167] device veth0_macvtap entered promiscuous mode [ 74.125859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.144764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.156409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.173915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.183316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.192621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.207177][ T4176] device veth1_macvtap entered promiscuous mode [ 74.226847][ T4167] device veth1_macvtap entered promiscuous mode [ 74.245157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.253787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.269781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.280195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.291773][ T4169] device veth0_macvtap entered promiscuous mode [ 74.311888][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.333761][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.348332][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.361180][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.370371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.379067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.386872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.394659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.403326][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.412802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.422352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.435239][ T4169] device veth1_macvtap entered promiscuous mode [ 74.454840][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.463986][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.483728][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.494745][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.508141][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.516601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.526333][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.535830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.544803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.553565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.562673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.582802][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.593713][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.605247][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.615869][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.627441][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.640423][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.649972][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.659421][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.670153][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.686126][ T4167] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.699780][ T4167] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.709306][ T4167] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.718803][ T4167] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.740760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.753077][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.764131][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.775142][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.786439][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.798730][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.829761][ T4179] device veth0_vlan entered promiscuous mode [ 74.837449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.847443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.856746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.865874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.874882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.882885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.895017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.903950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.932207][ T4169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941870][ T4169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.957735][ T4169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.967695][ T4169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.007685][ T4179] device veth1_vlan entered promiscuous mode [ 75.085269][ T4158] Bluetooth: hci4: command 0x040f tx timeout [ 75.091685][ T4158] Bluetooth: hci1: command 0x040f tx timeout [ 75.106746][ T4158] Bluetooth: hci0: command 0x040f tx timeout [ 75.112920][ T4158] Bluetooth: hci2: command 0x040f tx timeout [ 75.121501][ T4168] device veth0_vlan entered promiscuous mode [ 75.123048][ T4158] Bluetooth: hci3: command 0x040f tx timeout [ 75.136972][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.146906][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.158888][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.168133][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.177246][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.186217][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.223031][ T4168] device veth1_vlan entered promiscuous mode [ 75.236980][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.246772][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.261283][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.276482][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.312078][ T4179] device veth0_macvtap entered promiscuous mode [ 75.330201][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.333724][ T4179] device veth1_macvtap entered promiscuous mode [ 75.346256][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.360305][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.372569][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.381834][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.393120][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.402188][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.434868][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.443521][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.458124][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.472965][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.486659][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.497350][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.510478][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.520671][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.531349][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.542950][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.552226][ T4168] device veth0_macvtap entered promiscuous mode [ 75.574646][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.575303][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.583195][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.601817][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.611035][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.615447][ T4168] device veth1_macvtap entered promiscuous mode [ 75.630642][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.641955][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.653250][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.664194][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.675158][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.686389][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.698431][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.723769][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.733305][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.742645][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.762443][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.773059][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.783420][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.797144][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.807050][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.817640][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.828918][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.839494][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.851011][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.886007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.896182][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.909138][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.929312][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.940362][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.952930][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.963469][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.976958][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.987263][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.998202][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.010090][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.019038][ T4179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.028387][ T4179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.038789][ T4179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.049163][ T4179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.076938][ T739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.085338][ T739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.100919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.111160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.122837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.135141][ T4168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.143963][ T4168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.153612][ T4168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.169224][ T4168] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.199798][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.213596][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.263735][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.295378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.296904][ T4248] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 76.323951][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.363005][ T739] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.391613][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.403709][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.426915][ T4248] device syzkaller1 entered promiscuous mode [ 76.482010][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.515075][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.532815][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.616150][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.702216][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.730312][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.743299][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.760769][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.774779][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.806417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.134629][ T26] audit: type=1326 audit(1745381903.150:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.141576][ T4267] xt_hashlimit: max too large, truncated to 1048576 [ 77.164965][ T4158] Bluetooth: hci3: command 0x0419 tx timeout [ 77.171786][ T4158] Bluetooth: hci2: command 0x0419 tx timeout [ 77.212825][ T4158] Bluetooth: hci0: command 0x0419 tx timeout [ 77.237619][ T4158] Bluetooth: hci1: command 0x0419 tx timeout [ 77.239712][ T26] audit: type=1326 audit(1745381903.150:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.264340][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 77.322538][ T26] audit: type=1326 audit(1745381903.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.351919][ T4275] device wireguard0 entered promiscuous mode [ 77.360350][ T26] audit: type=1326 audit(1745381903.150:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.382836][ T26] audit: type=1326 audit(1745381903.150:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4268 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.408638][ T26] audit: type=1326 audit(1745381903.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4272 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.431792][ T26] audit: type=1326 audit(1745381903.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4272 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.456186][ T26] audit: type=1326 audit(1745381903.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4272 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.502605][ T26] audit: type=1326 audit(1745381903.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4272 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.550815][ T26] audit: type=1326 audit(1745381903.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4272 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 77.626876][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 77.651150][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.667520][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.688528][ T4281] device bridge_slave_0 left promiscuous mode [ 77.701814][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.712126][ T4279] loop3: detected capacity change from 0 to 512 [ 77.752048][ T4281] device bridge_slave_1 left promiscuous mode [ 77.766685][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.801030][ T4281] bond0: (slave bond_slave_0): Releasing backup interface [ 77.831896][ T4279] EXT4-fs (loop3): Ignoring removed oldalloc option [ 77.860266][ T4281] bond0: (slave bond_slave_1): Releasing backup interface [ 77.893957][ T4279] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.12: Parent and EA inode have the same ino 15 [ 77.948736][ T4281] team0: Port device team_slave_0 removed [ 77.962447][ T4279] EXT4-fs (loop3): Remounting filesystem read-only [ 77.981688][ T4281] team0: Port device team_slave_1 removed [ 77.991383][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.992592][ T4279] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.999429][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.020974][ T4279] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.12: Parent and EA inode have the same ino 15 [ 78.037852][ T4281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.046381][ T4281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.065379][ T4279] EXT4-fs (loop3): Remounting filesystem read-only [ 78.073075][ T4279] EXT4-fs (loop3): 1 orphan inode deleted [ 78.089508][ T4279] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,abort,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsdgroups,oldalloc,mb_optimize_scan=0x0000000000000001,. Quota mode: none. [ 78.443063][ T4279] syz.3.12 (4279) used greatest stack depth: 19040 bytes left [ 78.521220][ T4281] syz.2.13 (4281) used greatest stack depth: 18744 bytes left [ 78.751447][ T4288] loop4: detected capacity change from 0 to 512 [ 80.284251][ C0] sched: RT throttling activated [ 80.315219][ T4288] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.318506][ T4288] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 82.589333][ T4301] loop2: detected capacity change from 0 to 256 [ 82.855978][ T4301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17'. [ 82.940502][ T4314] xt_recent: hitcount (456) is larger than allowed maximum (255) [ 82.956636][ T4311] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.977240][ T4301] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 83.132264][ T4311] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 84.038179][ T4301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.072609][ T4301] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.280831][ T4332] x_tables: ip_tables: ah match: only valid for protocol 51 [ 84.298576][ T4333] loop1: detected capacity change from 0 to 128 [ 84.312287][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 84.312302][ T26] audit: type=1326 audit(1745381910.330:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 84.367395][ T4334] syz.4.24 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 84.394641][ T26] audit: type=1326 audit(1745381910.360:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 84.624357][ T26] audit: type=1326 audit(1745381910.360:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 84.966877][ T26] audit: type=1326 audit(1745381910.360:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.474947][ T26] audit: type=1326 audit(1745381910.360:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.531411][ T26] audit: type=1326 audit(1745381910.360:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.586335][ T26] audit: type=1326 audit(1745381910.360:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.589649][ T4337] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 85.678764][ T26] audit: type=1326 audit(1745381910.360:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.713918][ T4337] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 85.784088][ T4337] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 85.784455][ T26] audit: type=1326 audit(1745381910.370:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 85.910828][ T26] audit: type=1326 audit(1745381910.370:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4328 comm="syz.4.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 86.043895][ T4362] loop3: detected capacity change from 0 to 1024 [ 86.139442][ T4364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32'. [ 86.300219][ T4362] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.442976][ T4362] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.597825][ T23] cfg80211: failed to load regulatory.db [ 87.938631][ T4386] EXT4-fs (loop3): shut down requested (2) [ 88.022696][ T4392] x_tables: ip_tables: ah match: only valid for protocol 51 [ 90.490930][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 90.490947][ T26] audit: type=1326 audit(1745381916.510:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 90.742346][ T26] audit: type=1326 audit(1745381916.560:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 90.801764][ T4417] loop3: detected capacity change from 0 to 128 [ 90.851126][ T26] audit: type=1326 audit(1745381916.570:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 90.874945][ T26] audit: type=1326 audit(1745381916.570:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 90.908414][ T26] audit: type=1326 audit(1745381916.570:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4408 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 91.784184][ T4424] loop4: detected capacity change from 0 to 1024 [ 92.050688][ T4424] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.089198][ T4424] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.038601][ T4435] loop0: detected capacity change from 0 to 512 [ 93.097952][ T4436] EXT4-fs (loop4): shut down requested (2) [ 93.181088][ T4435] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.227729][ T4435] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.390646][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.484649][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.493044][ T4435] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.533163][ T4435] device bridge_slave_0 left promiscuous mode [ 93.550676][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.586598][ T4435] device bridge_slave_1 left promiscuous mode [ 93.609275][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.622245][ T4444] x_tables: ip_tables: ah match: only valid for protocol 51 [ 93.649407][ T4435] bond0: (slave bond_slave_0): Releasing backup interface [ 93.686493][ T4435] bond0: (slave bond_slave_1): Releasing backup interface [ 93.785757][ T4446] xt_hashlimit: max too large, truncated to 1048576 [ 93.803091][ T4435] team0: Port device team_slave_0 removed [ 93.816280][ T4446] Cannot find set identified by id 0 to match [ 93.838362][ T4435] team0: Port device team_slave_1 removed [ 93.898960][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.921179][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.943400][ T4435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.972216][ T4435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.159805][ T26] audit: type=1326 audit(1745381920.180:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 94.182489][ T26] audit: type=1326 audit(1745381920.200:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 94.380309][ T26] audit: type=1326 audit(1745381920.200:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4452 comm="syz.2.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2c87d169 code=0x7ffc0000 [ 94.986422][ T26] audit: type=1326 audit(1745381921.000:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 95.043948][ T26] audit: type=1326 audit(1745381921.000:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4456 comm="syz.3.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 95.083495][ T4463] loop1: detected capacity change from 0 to 128 [ 95.293980][ T4468] loop2: detected capacity change from 0 to 128 [ 97.540446][ T4491] xt_hashlimit: max too large, truncated to 1048576 [ 97.584534][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 97.584554][ T26] audit: type=1326 audit(1745381923.590:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 97.590993][ T4491] Cannot find set identified by id 0 to match [ 97.656897][ T26] audit: type=1326 audit(1745381923.590:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 97.706610][ T26] audit: type=1326 audit(1745381923.590:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 97.745284][ T4495] x_tables: ip_tables: ah match: only valid for protocol 51 [ 97.792997][ T26] audit: type=1326 audit(1745381923.590:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 97.866072][ T26] audit: type=1326 audit(1745381923.590:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4490 comm="syz.0.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 97.968086][ T26] audit: type=1326 audit(1745381923.860:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4498 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 98.040325][ T26] audit: type=1326 audit(1745381923.860:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4498 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 98.139246][ T26] audit: type=1326 audit(1745381923.860:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4498 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 98.165077][ T26] audit: type=1326 audit(1745381923.860:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4498 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 98.222680][ T26] audit: type=1326 audit(1745381923.860:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4498 comm="syz.0.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6584b47169 code=0x7ffc0000 [ 99.953324][ T4530] xt_hashlimit: max too large, truncated to 1048576 [ 100.005153][ T4530] Cannot find set identified by id 0 to match [ 100.956931][ T4540] atomic_op ffff88802be99198 conn xmit_atomic 0000000000000000 [ 101.132036][ T4546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 101.486040][ T4561] loop2: detected capacity change from 0 to 128 [ 101.617372][ T4563] netlink: 'syz.3.97': attribute type 4 has an invalid length. [ 101.671366][ T4563] netlink: 17 bytes leftover after parsing attributes in process `syz.3.97'. [ 101.797145][ T4565] Zero length message leads to an empty skb [ 102.181517][ T4573] xt_hashlimit: max too large, truncated to 1048576 [ 102.212205][ T4573] Cannot find set identified by id 0 to match [ 103.108076][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 103.108092][ T26] audit: type=1326 audit(1745381929.130:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.240863][ T26] audit: type=1326 audit(1745381929.160:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.303934][ T26] audit: type=1326 audit(1745381929.160:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.417062][ T26] audit: type=1326 audit(1745381929.160:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.528575][ T26] audit: type=1326 audit(1745381929.160:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.621675][ T4604] x_tables: ip_tables: ah match: only valid for protocol 51 [ 103.685770][ T26] audit: type=1326 audit(1745381929.160:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 103.709414][ T26] audit: type=1326 audit(1745381929.160:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 104.117681][ T26] audit: type=1326 audit(1745381929.160:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 105.264819][ T26] audit: type=1326 audit(1745381929.160:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 105.868166][ T26] audit: type=1326 audit(1745381929.160:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.4.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32a2ecc169 code=0x7ffc0000 [ 106.004468][ T4623] loop3: detected capacity change from 0 to 128 [ 106.389559][ T4623] process 'syz.3.114' launched '/dev/fd/4' with NULL argv: empty string added [ 106.420050][ T4630] xt_hashlimit: max too large, truncated to 1048576 [ 106.461527][ T4630] Cannot find set identified by id 0 to match [ 106.877061][ T4648] loop3: detected capacity change from 0 to 128 [ 107.980020][ T4661] x_tables: ip_tables: ah match: only valid for protocol 51 [ 109.380959][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 109.380983][ T26] audit: type=1326 audit(1745381935.400:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c90fe2169 code=0x7ffc0000 [ 109.500275][ T26] audit: type=1326 audit(1745381935.450:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8c90fe2169 code=0x7ffc0000 [ 109.610141][ T26] audit: type=1326 audit(1745381935.450:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c90fe2169 code=0x7ffc0000 [ 109.722299][ T26] audit: type=1326 audit(1745381935.450:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4676 comm="syz.1.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c90fe2169 code=0x7ffc0000 [ 109.779390][ T4682] xt_hashlimit: max too large, truncated to 1048576 [ 109.808235][ T4682] Cannot find set identified by id 0 to match [ 109.964614][ T26] audit: type=1326 audit(1745381935.990:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 110.074356][ T26] audit: type=1326 audit(1745381936.010:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 110.223884][ T26] audit: type=1326 audit(1745381936.010:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 110.258653][ T4692] loop1: detected capacity change from 0 to 1024 [ 110.294333][ T26] audit: type=1326 audit(1745381936.010:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 110.758182][ T4692] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 111.034496][ T26] audit: type=1326 audit(1745381936.010:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4684 comm="syz.3.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65122f0169 code=0x7ffc0000 [ 111.060374][ T4692] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.322799][ T4703] x_tables: ip_tables: ah match: only valid for protocol 51 [ 112.175909][ T4707] xt_hashlimit: max too large, truncated to 1048576 [ 112.258221][ T4709] loop4: detected capacity change from 0 to 512 [ 112.450869][ T4709] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.463355][ T4709] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.754490][ C0] ------------[ cut here ]------------ [ 112.754490][ C1] ------------[ cut here ]------------ [ 112.756423][ C0] [ 112.756430][ C0] ====================================================== [ 112.756435][ C0] WARNING: possible circular locking dependency detected [ 112.756440][ C0] 5.15.180-syzkaller #0 Not tainted [ 112.756450][ C0] ------------------------------------------------------ [ 112.756455][ C0] syz.3.146/4723 is trying to acquire lock: [ 112.756464][ C0] ffffffff8cb14060 (console_owner){-.-.}-{0:0}, at: console_trylock_spinning+0x185/0x3f0 [ 112.756535][ C0] [ 112.756535][ C0] but task is already holding lock: [ 112.756540][ C0] ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 112.756583][ C0] [ 112.756583][ C0] which lock already depends on the new lock. [ 112.756583][ C0] [ 112.756588][ C0] [ 112.756588][ C0] the existing dependency chain (in reverse order) is: [ 112.756594][ C0] [ 112.756594][ C0] -> #5 (&base->lock){-.-.}-{2:2}: [ 112.756620][ C0] lock_acquire+0x1db/0x4f0 [ 112.756641][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.756660][ C0] lock_timer_base+0x120/0x260 [ 112.756680][ C0] __mod_timer+0x1d6/0xeb0 [ 112.756698][ C0] queue_delayed_work_on+0x156/0x250 [ 112.756717][ C0] enqueue_task+0x28d/0x2e0 [ 112.756738][ C0] wake_up_new_task+0x515/0xb60 [ 112.756755][ C0] kernel_clone+0x44e/0x960 [ 112.756771][ C0] kernel_thread+0x12e/0x1a0 [ 112.756788][ C0] rest_init+0x21/0x330 [ 112.756807][ C0] start_kernel+0x48c/0x540 [ 112.756829][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 112.756850][ C0] [ 112.756850][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 112.756875][ C0] lock_acquire+0x1db/0x4f0 [ 112.756903][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 112.756922][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 112.756942][ C0] task_fork_fair+0x5d/0x350 [ 112.756959][ C0] sched_cgroup_fork+0x2d3/0x330 [ 112.756978][ C0] copy_process+0x224a/0x3ef0 [ 112.756996][ C0] kernel_clone+0x210/0x960 [ 112.757013][ C0] kernel_thread+0x12e/0x1a0 [ 112.757030][ C0] rest_init+0x21/0x330 [ 112.757048][ C0] start_kernel+0x48c/0x540 [ 112.757067][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 112.757088][ C0] [ 112.757088][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 112.757113][ C0] lock_acquire+0x1db/0x4f0 [ 112.757134][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.757153][ C0] try_to_wake_up+0xae/0x12c0 [ 112.757173][ C0] __wake_up_common+0x2a0/0x4e0 [ 112.757193][ C0] __wake_up+0x112/0x1c0 [ 112.757212][ C0] tty_ldisc_hangup+0x1f6/0x4b0 [ 112.757235][ C0] __tty_hangup+0x47a/0x6b0 [ 112.757252][ C0] tty_ioctl+0x608/0xc50 [ 112.757269][ C0] __se_sys_ioctl+0xf1/0x160 [ 112.757287][ C0] do_syscall_64+0x3b/0x80 [ 112.757308][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.757329][ C0] [ 112.757329][ C0] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 112.757354][ C0] lock_acquire+0x1db/0x4f0 [ 112.757375][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.757394][ C0] __wake_up+0xf5/0x1c0 [ 112.757412][ C0] tty_port_default_wakeup+0xa8/0x100 [ 112.757434][ C0] serial8250_tx_chars+0x60d/0x800 [ 112.757451][ C0] serial8250_handle_irq+0x505/0x600 [ 112.757470][ C0] serial8250_default_handle_irq+0xc8/0x1e0 [ 112.757490][ C0] serial8250_interrupt+0xa1/0x1e0 [ 112.757511][ C0] __handle_irq_event_percpu+0x292/0xa70 [ 112.757531][ C0] handle_irq_event+0xff/0x2b0 [ 112.757551][ C0] handle_edge_irq+0x245/0xbf0 [ 112.757571][ C0] __common_interrupt+0xd7/0x1f0 [ 112.757589][ C0] common_interrupt+0xae/0xd0 [ 112.757606][ C0] asm_common_interrupt+0x22/0x40 [ 112.757626][ C0] _raw_spin_unlock_irqrestore+0xd4/0x130 [ 112.757645][ C0] uart_write+0x6af/0x930 [ 112.757663][ C0] n_tty_write+0xd7e/0x1280 [ 112.757681][ C0] file_tty_write+0x561/0x920 [ 112.757698][ C0] vfs_write+0xacd/0xe50 [ 112.757715][ C0] ksys_write+0x1a2/0x2c0 [ 112.757734][ C0] do_syscall_64+0x3b/0x80 [ 112.757754][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.757775][ C0] [ 112.757775][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 112.757801][ C0] lock_acquire+0x1db/0x4f0 [ 112.757821][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 112.757840][ C0] serial8250_console_write+0x19d/0x1180 [ 112.757859][ C0] console_unlock+0xced/0x12b0 [ 112.757876][ C0] vprintk_emit+0xbf/0x150 [ 112.757892][ C0] _printk+0xd1/0x120 [ 112.757917][ C0] register_console+0x65a/0x940 [ 112.757934][ C0] univ8250_console_init+0x41/0x50 [ 112.757953][ C0] console_init+0x18c/0x660 [ 112.757972][ C0] start_kernel+0x301/0x540 [ 112.757993][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 112.758014][ C0] [ 112.758014][ C0] -> #0 (console_owner){-.-.}-{0:0}: [ 112.758039][ C0] validate_chain+0x1649/0x5930 [ 112.758056][ C0] __lock_acquire+0x1295/0x1ff0 [ 112.758077][ C0] lock_acquire+0x1db/0x4f0 [ 112.758097][ C0] console_trylock_spinning+0x1a5/0x3f0 [ 112.758116][ C0] vprintk_emit+0xa6/0x150 [ 112.758132][ C0] _printk+0xd1/0x120 [ 112.758149][ C0] report_bug+0x1e5/0x2e0 [ 112.758166][ C0] handle_bug+0x3d/0x70 [ 112.758181][ C0] exc_invalid_op+0x16/0x40 [ 112.758197][ C0] asm_exc_invalid_op+0x16/0x20 [ 112.758217][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 112.758240][ C0] bpf_probe_read_compat+0xe4/0x180 [ 112.758262][ C0] bpf_prog_a9d1eab64edc2dc9+0x56/0x318 [ 112.758280][ C0] bpf_trace_run3+0x1d1/0x380 [ 112.758297][ C0] enqueue_timer+0x3ae/0x540 [ 112.758316][ C0] __mod_timer+0xa60/0xeb0 [ 112.758334][ C0] lapb_t1timer_expiry+0x779/0xae0 [ 112.758357][ C0] call_timer_fn+0x16d/0x560 [ 112.758377][ C0] __run_timers+0x67c/0x890 [ 112.758396][ C0] run_timer_softirq+0x63/0xf0 [ 112.758416][ C0] handle_softirqs+0x3a7/0x930 [ 112.758434][ C0] __irq_exit_rcu+0x157/0x240 [ 112.758450][ C0] irq_exit_rcu+0x5/0x20 [ 112.758466][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 112.758486][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.758530][ C0] __sanitizer_cov_trace_pc+0x4/0x60 [ 112.758550][ C0] copy_page_range+0x1b19/0x4420 [ 112.758569][ C0] copy_mm+0xc64/0x1370 [ 112.758587][ C0] copy_process+0x1816/0x3ef0 [ 112.758604][ C0] kernel_clone+0x210/0x960 [ 112.758622][ C0] __se_sys_clone3+0x3db/0x430 [ 112.758639][ C0] do_syscall_64+0x3b/0x80 [ 112.758659][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.758681][ C0] [ 112.758681][ C0] other info that might help us debug this: [ 112.758681][ C0] [ 112.758686][ C0] Chain exists of: [ 112.758686][ C0] console_owner --> &rq->__lock --> &base->lock [ 112.758686][ C0] [ 112.758715][ C0] Possible unsafe locking scenario: [ 112.758715][ C0] [ 112.758719][ C0] CPU0 CPU1 [ 112.758724][ C0] ---- ---- [ 112.758729][ C0] lock(&base->lock); [ 112.758740][ C0] lock(&rq->__lock); [ 112.758752][ C0] lock(&base->lock); [ 112.758765][ C0] lock(console_owner); [ 112.758776][ C0] [ 112.758776][ C0] *** DEADLOCK *** [ 112.758776][ C0] [ 112.758780][ C0] 9 locks held by syz.3.146/4723: [ 112.758791][ C0] #0: ffffffff8cbab0f0 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x223/0x1370 [ 112.758837][ C0] #1: ffff888017469d28 (&mm->mmap_lock){++++}-{3:3}, at: copy_mm+0x242/0x1370 [ 112.758882][ C0] #2: ffff888017469628 (&mm->mmap_lock/1){+.+.}-{3:3}, at: copy_mm+0x35c/0x1370 [ 112.758940][ C0] #3: ffff88801c3910d8 (ptlock_ptr(page)#2){+.+.}-{2:2}, at: copy_page_range+0xfe5/0x4420 [ 112.758992][ C0] #4: ffff8880246bd2b8 (ptlock_ptr(page)#2/1){+.+.}-{2:2}, at: copy_page_range+0x10e0/0x4420 [ 112.759047][ C0] #5: ffffc90000007be0 ((&lapb->t1timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 112.759096][ C0] #6: ffff88807c8a41c0 (&lapb->lock){+.-.}-{2:2}, at: lapb_t1timer_expiry+0x2f/0xae0 [ 112.759146][ C0] #7: ffff8880b8e28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 112.759193][ C0] #8: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 112.759238][ C0] [ 112.759238][ C0] stack backtrace: [ 112.759249][ C0] CPU: 0 PID: 4723 Comm: syz.3.146 Not tainted 5.15.180-syzkaller #0 [ 112.759268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.759285][ C0] Call Trace: [ 112.759292][ C0] [ 112.759299][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 112.759324][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 112.759353][ C0] ? print_circular_bug+0x12b/0x1a0 [ 112.759374][ C0] check_noncircular+0x2f8/0x3b0 [ 112.759397][ C0] ? add_chain_block+0x850/0x850 [ 112.759415][ C0] ? queued_spin_lock_slowpath+0x42/0x50 [ 112.759435][ C0] ? lockdep_lock+0x1a7/0x2a0 [ 112.759461][ C0] ? _find_first_zero_bit+0xcf/0xf0 [ 112.759484][ C0] validate_chain+0x1649/0x5930 [ 112.759512][ C0] ? __pv_queued_spin_unlock_slowpath+0x2e0/0x2e0 [ 112.759534][ C0] ? reacquire_held_locks+0x660/0x660 [ 112.759554][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 112.759576][ C0] ? reacquire_held_locks+0x660/0x660 [ 112.759603][ C0] ? lockdep_unlock+0x166/0x300 [ 112.759632][ C0] ? mark_lock+0x98/0x340 [ 112.759651][ C0] __lock_acquire+0x1295/0x1ff0 [ 112.759682][ C0] lock_acquire+0x1db/0x4f0 [ 112.759704][ C0] ? console_trylock_spinning+0x185/0x3f0 [ 112.759728][ C0] ? read_lock_is_recursive+0x10/0x10 [ 112.759753][ C0] ? __lock_acquire+0x1ff0/0x1ff0 [ 112.759775][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 112.759799][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 112.759822][ C0] console_trylock_spinning+0x1a5/0x3f0 [ 112.759842][ C0] ? console_trylock_spinning+0x185/0x3f0 [ 112.759862][ C0] ? vprintk_emit+0x150/0x150 [ 112.759880][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 112.759914][ C0] ? reacquire_held_locks+0x660/0x660 [ 112.759941][ C0] vprintk_emit+0xa6/0x150 [ 112.759962][ C0] _printk+0xd1/0x120 [ 112.759983][ C0] ? report_bug+0x16e/0x2e0 [ 112.760001][ C0] ? panic+0x860/0x860 [ 112.760019][ C0] ? __lock_acquire+0x1295/0x1ff0 [ 112.760045][ C0] ? find_bug+0x9c/0x350 [ 112.760064][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 112.760087][ C0] report_bug+0x1e5/0x2e0 [ 112.760109][ C0] handle_bug+0x3d/0x70 [ 112.760127][ C0] exc_invalid_op+0x16/0x40 [ 112.760145][ C0] asm_exc_invalid_op+0x16/0x20 [ 112.760166][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 112.760193][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 112.760210][ C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010046 [ 112.760226][ C0] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff888026a65940 [ 112.760241][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.760254][ C0] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: ffffed1004d4cb29 [ 112.760270][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 112.760283][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc900000078a8 [ 112.760299][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 112.760321][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 112.760349][ C0] bpf_probe_read_compat+0xe4/0x180 [ 112.760376][ C0] bpf_prog_a9d1eab64edc2dc9+0x56/0x318 [ 112.760393][ C0] bpf_trace_run3+0x1d1/0x380 [ 112.760414][ C0] ? bpf_trace_run2+0x340/0x340 [ 112.760431][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 112.760454][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 112.760475][ C0] ? _raw_spin_lock+0x40/0x40 [ 112.760496][ C0] ? debug_object_assert_init+0x2bf/0x420 [ 112.760521][ C0] enqueue_timer+0x3ae/0x540 [ 112.760546][ C0] __mod_timer+0xa60/0xeb0 [ 112.760571][ C0] ? mod_timer_pending+0x20/0x20 [ 112.760592][ C0] ? del_timer+0x183/0x310 [ 112.760614][ C0] ? lock_timer_base+0x260/0x260 [ 112.760636][ C0] ? lapb_data_transmit+0x85/0xa0 [ 112.760655][ C0] ? lapb_transmit_buffer+0x178/0x1e0 [ 112.760680][ C0] lapb_t1timer_expiry+0x779/0xae0 [ 112.760708][ C0] call_timer_fn+0x16d/0x560 [ 112.760731][ C0] ? lapb_start_t1timer+0x100/0x100 [ 112.760754][ C0] ? __run_timers+0x890/0x890 [ 112.760780][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 112.760801][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 112.760820][ C0] ? lapb_start_t1timer+0x100/0x100 [ 112.760873][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 112.760900][ C0] ? lapb_start_t1timer+0x100/0x100 [ 112.760928][ C0] __run_timers+0x67c/0x890 [ 112.760968][ C0] ? detach_timer+0x2f0/0x2f0 [ 112.760988][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 112.761016][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 112.761039][ C0] run_timer_softirq+0x63/0xf0 [ 112.761061][ C0] handle_softirqs+0x3a7/0x930 [ 112.761083][ C0] ? __irq_exit_rcu+0x157/0x240 [ 112.761104][ C0] ? do_softirq+0x240/0x240 [ 112.761125][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 112.761149][ C0] __irq_exit_rcu+0x157/0x240 [ 112.761168][ C0] ? irq_exit_rcu+0x20/0x20 [ 112.761192][ C0] irq_exit_rcu+0x5/0x20 [ 112.761209][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 112.761230][ C0] [ 112.761237][ C0] [ 112.761243][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 112.761266][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 112.761288][ C0] Code: 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d a8 65 8a 0c 48 89 de 5b e9 77 19 49 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 74 2d 82 7e 65 8b 15 75 2d 82 7e 81 e2 00 01 ff 00 74 [ 112.761304][ C0] RSP: 0018:ffffc9000337f538 EFLAGS: 00000282 [ 112.761319][ C0] RAX: ffffffff81b83049 RBX: 00007f6511378000 RCX: 0000000000000000 [ 112.761334][ C0] RDX: ffffc9000cf01000 RSI: 0000000000009ae4 RDI: 0000000000009ae5 [ 112.761348][ C0] RBP: ffffc9000337f8b0 R08: ffffffff81b82f61 R09: fffff9400033d729 [ 112.761363][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802c1b7a50 [ 112.761377][ C0] R13: 00fff00000000000 R14: 0000000000000008 R15: ffff88802c1b7aa0 [ 112.761396][ C0] ? copy_page_range+0x1a31/0x4420 [ 112.761415][ C0] ? copy_page_range+0x1b19/0x4420 [ 112.761438][ C0] copy_page_range+0x1b19/0x4420 [ 112.761483][ C0] ? pfn_valid+0x380/0x380 [ 112.761504][ C0] ? read_lock_is_recursive+0x10/0x10 [ 112.761530][ C0] ? up_write+0x19d/0x580 [ 112.761556][ C0] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 112.761579][ C0] copy_mm+0xc64/0x1370 [ 112.761606][ C0] ? copy_signal+0x630/0x630 [ 112.761626][ C0] ? __init_rwsem+0x11e/0x160 [ 112.761647][ C0] ? copy_signal+0x529/0x630 [ 112.761668][ C0] copy_process+0x1816/0x3ef0 [ 112.761703][ C0] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 112.761726][ C0] ? _copy_from_user+0x10f/0x170 [ 112.761749][ C0] kernel_clone+0x210/0x960 [ 112.761772][ C0] ? create_io_thread+0x1c0/0x1c0 [ 112.761801][ C0] __se_sys_clone3+0x3db/0x430 [ 112.761823][ C0] ? __x64_sys_clone3+0x60/0x60 [ 112.761857][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 112.761878][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 112.761905][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 112.761929][ C0] do_syscall_64+0x3b/0x80 [ 112.761951][ C0] ? clear_bhb_loop+0x15/0x70 [ 112.761973][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 112.761995][ C0] RIP: 0033:0x7f65122f0169 [ 112.762012][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.762029][ C0] RSP: 002b:00007f6510157f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 112.762047][ C0] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f65122f0169 [ 112.762060][ C0] RDX: 00007f6510157f20 RSI: 0000000000000058 RDI: 00007f6510157f20 [ 112.762073][ C0] RBP: 00007f6512372a68 R08: 0000000000000000 R09: 0000000000000058 [ 112.762070][ C1] WARNING: CPU: 1 PID: 4722 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 112.762084][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.762095][ C0] R13: 0000000000000000 R14: 00007f6512517fa0 R15: 00007ffe7043df68 [ 112.762104][ C1] Modules linked in: [ 112.762115][ C0] [ 112.762115][ C1] CPU: 1 PID: 4722 Comm: syz.4.145 Not tainted 5.15.180-syzkaller #0 [ 112.767844][ C0] WARNING: CPU: 0 PID: 4723 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 112.770164][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.777341][ C0] Modules linked in: [ 112.784428][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 112.789612][ C0] CPU: 0 PID: 4723 Comm: syz.3.146 Not tainted 5.15.180-syzkaller #0 [ 112.796624][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 112.802804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.812762][ C1] RSP: 0018:ffffc90000dd0890 EFLAGS: 00010046 [ 112.820314][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 112.829458][ C1] [ 112.829468][ C1] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff88801c71d940 [ 112.839888][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 112.849125][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.856481][ C0] RSP: 0018:ffffc90000007830 EFLAGS: 00010046 [ 112.861746][ C1] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: ffffed10038e3b29 [ 112.867715][ C0] [ 112.867722][ C0] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff888026a65940 [ 112.873159][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 112.878555][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.884381][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0908 [ 112.889398][ C0] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: ffffed1004d4cb29 [ 112.894864][ C1] FS: 00007f32a0d346c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 112.899972][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 112.905064][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.909745][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc900000078a8 [ 112.914857][ C1] CR2: 000000110c32d0be CR3: 00000000543d3000 CR4: 00000000003506e0 [ 112.924383][ C0] FS: 00007f65101586c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 112.931944][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.937070][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.942871][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.949195][ C0] CR2: 000000110c384311 CR3: 0000000060b10000 CR4: 00000000003506f0 [ 112.954375][ C1] Call Trace: [ 112.954386][ C1] [ 112.959906][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.965391][ C1] bpf_probe_read_compat+0xe4/0x180 [ 112.970851][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.975958][ C1] bpf_prog_a9d1eab64edc2dc9+0x56/0x318 [ 112.980629][ C0] Call Trace: [ 112.985778][ C1] bpf_trace_run3+0x1d1/0x380 [ 112.992179][ C0] [ 112.999624][ C1] ? bpf_trace_run2+0x340/0x340 [ 113.005299][ C0] bpf_probe_read_compat+0xe4/0x180 [ 113.011365][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 113.016552][ C0] bpf_prog_a9d1eab64edc2dc9+0x56/0x318 [ 113.021901][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 113.026654][ C0] bpf_trace_run3+0x1d1/0x380 [ 113.032300][ C1] ? _raw_spin_lock+0x40/0x40 [ 113.037307][ C0] ? bpf_trace_run2+0x340/0x340 [ 113.042228][ C1] enqueue_timer+0x3ae/0x540 [ 113.047713][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 113.052771][ C1] __mod_timer+0xa60/0xeb0 [ 113.059351][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 113.068107][ C1] ? mod_timer_pending+0x20/0x20 [ 113.073406][ C0] ? _raw_spin_lock+0x40/0x40 [ 113.079440][ C1] ? estimation_timer+0x769/0x7b0 [ 113.084100][ C0] ? debug_object_assert_init+0x2bf/0x420 [ 113.090081][ C1] call_timer_fn+0x16d/0x560 [ 113.096365][ C0] enqueue_timer+0x3ae/0x540 [ 113.102534][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 113.109044][ C0] __mod_timer+0xa60/0xeb0 [ 113.114876][ C1] ? __run_timers+0x890/0x890 [ 113.121013][ C0] ? mod_timer_pending+0x20/0x20 [ 113.126280][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 113.131543][ C0] ? del_timer+0x183/0x310 [ 113.137076][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 113.142449][ C0] ? lock_timer_base+0x260/0x260 [ 113.148055][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 113.154537][ C0] ? lapb_data_transmit+0x85/0xa0 [ 113.159572][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 113.164660][ C0] ? lapb_transmit_buffer+0x178/0x1e0 [ 113.170100][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 113.174946][ C0] lapb_t1timer_expiry+0x779/0xae0 [ 113.179861][ C1] __run_timers+0x67c/0x890 [ 113.184963][ C0] call_timer_fn+0x16d/0x560 [ 113.191800][ C1] ? detach_timer+0x2f0/0x2f0 [ 113.199419][ C0] ? lapb_start_t1timer+0x100/0x100 [ 113.204524][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 113.210427][ C0] ? __run_timers+0x890/0x890 [ 113.216564][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 113.221844][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 113.226776][ C1] run_timer_softirq+0x63/0xf0 [ 113.231257][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 113.236699][ C1] handle_softirqs+0x3a7/0x930 [ 113.242743][ C0] ? lapb_start_t1timer+0x100/0x100 [ 113.247843][ C1] ? __irq_exit_rcu+0x157/0x240 [ 113.252845][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 113.259370][ C1] ? do_softirq+0x240/0x240 [ 113.267253][ C0] ? lapb_start_t1timer+0x100/0x100 [ 113.272733][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 113.278096][ C0] __run_timers+0x67c/0x890 [ 113.283103][ C1] __irq_exit_rcu+0x157/0x240 [ 113.289155][ C0] ? detach_timer+0x2f0/0x2f0 [ 113.294102][ C1] ? irq_exit_rcu+0x20/0x20 [ 113.298888][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 113.303743][ C1] irq_exit_rcu+0x5/0x20 [ 113.308410][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 113.313441][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.318795][ C0] run_timer_softirq+0x63/0xf0 [ 113.324703][ C1] [ 113.330410][ C0] handle_softirqs+0x3a7/0x930 [ 113.336723][ C1] [ 113.336739][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.341921][ C0] ? __irq_exit_rcu+0x157/0x240 [ 113.347026][ C1] RIP: 0010:lock_is_held_type+0x137/0x180 [ 113.352075][ C0] ? do_softirq+0x240/0x240 [ 113.357792][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 113.363136][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 113.368153][ C1] RSP: 0018:ffffc900032cf590 EFLAGS: 00000206 [ 113.373423][ C0] __irq_exit_rcu+0x157/0x240 [ 113.378918][ C1] [ 113.378928][ C1] RAX: 46545bac436a4a00 RBX: 0000000000000003 RCX: ffff88801c71d940 [ 113.384115][ C0] ? irq_exit_rcu+0x20/0x20 [ 113.388895][ C1] RDX: ffff88801c71d940 RSI: ffffffff8aab2b80 RDI: ffffffff8af9e940 [ 113.395127][ C0] irq_exit_rcu+0x5/0x20 [ 113.401966][ C1] RBP: 0000000000000000 R08: ffffffff81a80a75 R09: fffff940002d3b77 [ 113.408029][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 113.413471][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 113.418486][ C0] [ 113.423945][ C1] R13: ffff88801c71d940 R14: 00000000ffffffff R15: ffff888022df60b8 [ 113.429172][ C0] [ 113.434715][ C1] ? xas_next_entry+0x1d5/0x3d0 [ 113.439749][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 113.446417][ C1] xas_next_entry+0x1ea/0x3d0 [ 113.456718][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 113.468876][ C1] filemap_map_pages+0xf90/0x15c0 [ 113.476934][ C0] Code: 00 00 00 0f 1f 00 53 48 89 fb e8 17 00 00 00 48 8b 3d a8 65 8a 0c 48 89 de 5b e9 77 19 49 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 74 2d 82 7e 65 8b 15 75 2d 82 7e 81 e2 00 01 ff 00 74 [ 113.482329][ C1] ? filemap_read_page+0x4b0/0x4b0 [ 113.487696][ C0] RSP: 0018:ffffc9000337f538 EFLAGS: 00000282 [ 113.491846][ C1] ? count_memcg_event_mm+0x385/0x3e0 [ 113.498568][ C0] [ 113.505335][ C1] handle_mm_fault+0x341b/0x5960 [ 113.509548][ C0] RAX: ffffffff81b83049 RBX: 00007f6511378000 RCX: 0000000000000000 [ 113.517719][ C1] ? numa_migrate_prep+0x1a0/0x1a0 [ 113.522710][ C0] RDX: ffffc9000cf01000 RSI: 0000000000009ae4 RDI: 0000000000009ae5 [ 113.531576][ C1] ? follow_page_mask+0xb59/0x13f0 [ 113.540490][ C0] RBP: ffffc9000337f8b0 R08: ffffffff81b82f61 R09: fffff9400033d729 [ 113.549617][ C1] ? find_vma+0xd3/0x230 [ 113.560173][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802c1b7a50 [ 113.571743][ C1] ? check_vma_flags+0x407/0x490 [ 113.581427][ C0] R13: 00fff00000000000 R14: 0000000000000008 R15: ffff88802c1b7aa0 [ 113.591158][ C1] __get_user_pages+0x4ed/0x11d0 [ 113.600542][ C0] ? copy_page_range+0x1a31/0x4420 [ 113.609902][ C1] ? populate_vma_page_range+0x2a0/0x2a0 [ 113.616033][ C0] ? copy_page_range+0x1b19/0x4420 [ 113.624179][ C1] ? vm_mmap_pgoff+0x1e5/0x2d0 [ 113.634420][ C0] copy_page_range+0x1b19/0x4420 [ 113.638097][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 113.640961][ C0] ? pfn_valid+0x380/0x380 [ 113.645688][ C1] populate_vma_page_range+0x215/0x2a0 [ 113.651504][ C0] ? read_lock_is_recursive+0x10/0x10 [ 113.656784][ C1] __mm_populate+0x2a5/0x4a0 [ 113.662054][ C0] ? up_write+0x19d/0x580 [ 113.667066][ C1] ? check_vma_flags+0x490/0x490 [ 113.672681][ C0] ? vma_gap_callbacks_rotate+0x1e4/0x1f0 [ 113.677346][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 113.682697][ C0] copy_mm+0xc64/0x1370 [ 113.687532][ C1] ? account_locked_vm+0xe0/0xe0 [ 113.694030][ C0] ? copy_signal+0x630/0x630 [ 113.699485][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 113.704490][ C0] ? __init_rwsem+0x11e/0x160 [ 113.709844][ C1] ksys_mmap_pgoff+0x13e/0x780 [ 113.714670][ C0] ? copy_signal+0x529/0x630 [ 113.718980][ C1] ? print_irqtrace_events+0x210/0x210 [ 113.723932][ C0] copy_process+0x1816/0x3ef0 [ 113.728609][ C1] ? mmap_region+0x1870/0x1870 [ 113.734359][ C0] ? pidfd_show_fdinfo+0x2e0/0x2e0 [ 113.739709][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 113.744812][ C0] ? _copy_from_user+0x10f/0x170 [ 113.749852][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 113.755039][ C0] kernel_clone+0x210/0x960 [ 113.760580][ C1] do_syscall_64+0x3b/0x80 [ 113.766737][ C0] ? create_io_thread+0x1c0/0x1c0 [ 113.771538][ C1] ? clear_bhb_loop+0x15/0x70 [ 113.777634][ C0] __se_sys_clone3+0x3db/0x430 [ 113.783166][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.787658][ C0] ? __x64_sys_clone3+0x60/0x60 [ 113.791760][ C1] RIP: 0033:0x7f32a2ecc169 [ 113.796458][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 113.800676][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.805684][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 113.809932][ C1] RSP: 002b:00007f32a0d34038 EFLAGS: 00000246 [ 113.815465][ C0] ? syscall_enter_from_user_mode+0x2e/0x240 [ 113.819824][ C1] ORIG_RAX: 0000000000000009 [ 113.824070][ C0] do_syscall_64+0x3b/0x80 [ 113.828766][ C1] RAX: ffffffffffffffda RBX: 00007f32a30f3fa0 RCX: 00007f32a2ecc169 [ 113.833614][ C0] ? clear_bhb_loop+0x15/0x70 [ 113.839839][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 113.860802][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.867033][ C1] RBP: 00007f32a2f4ea68 R08: ffffffffffffffff R09: 0000000000000000 [ 113.875169][ C0] RIP: 0033:0x7f65122f0169 [ 113.883129][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 113.891274][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.899407][ C1] R13: 0000000000000000 R14: 00007f32a30f3fa0 R15: 00007ffc2412bf28 [ 113.907365][ C0] RSP: 002b:00007f6510157f08 EFLAGS: 00000246 [ 113.912835][ C1] [ 113.920744][ C0] ORIG_RAX: 00000000000001b3 [ 113.926976][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 113.932606][ C0] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f65122f0169 [ 113.937260][ C1] CPU: 1 PID: 4722 Comm: syz.4.145 Not tainted 5.15.180-syzkaller #0 [ 113.942462][ C0] RDX: 00007f6510157f20 RSI: 0000000000000058 RDI: 00007f6510157f20 [ 113.948349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.953798][ C0] RBP: 00007f6512372a68 R08: 0000000000000000 R09: 0000000000000058 [ 113.958487][ C1] Call Trace: [ 113.964186][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.968796][ C1] [ 113.973374][ C0] R13: 0000000000000000 R14: 00007f6512517fa0 R15: 00007ffe7043df68 [ 113.978401][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 113.982892][ C0] [ 113.987806][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 113.993193][ C0] irq event stamp: 3317 [ 113.998809][ C1] ? panic+0x860/0x860 [ 114.004007][ C0] hardirqs last enabled at (3316): [] _raw_spin_unlock_irqrestore+0x8b/0x130 [ 114.008765][ C1] ? copy_from_user_nofault+0x140/0x1c0 [ 114.014039][ C0] hardirqs last disabled at (3317): [] _raw_spin_lock_irqsave+0xac/0x120 [ 114.018699][ C1] ? copy_from_user_nofault+0x140/0x1c0 [ 114.023879][ C0] softirqs last enabled at (3028): [] local_bh_enable+0x5/0x20 [ 114.029304][ C1] panic+0x318/0x860 [ 114.034506][ C0] softirqs last disabled at (3287): [] __irq_exit_rcu+0x157/0x240 [ 114.039783][ C1] ? __warn+0x16a/0x300 [ 114.045131][ C0] ---[ end trace 2cd5272e978a7e71 ]--- [ 114.049616][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 115.792335][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 115.798236][ C1] __warn+0x2b2/0x300 [ 115.802307][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 115.807958][ C1] report_bug+0x1b7/0x2e0 [ 115.812489][ C1] handle_bug+0x3d/0x70 [ 115.816743][ C1] exc_invalid_op+0x16/0x40 [ 115.821248][ C1] asm_exc_invalid_op+0x16/0x20 [ 115.826092][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 115.832642][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 3b b1 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 24 b1 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 115.852851][ C1] RSP: 0018:ffffc90000dd0890 EFLAGS: 00010046 [ 115.859114][ C1] RAX: ffffffff81aa911c RBX: 0000000000000000 RCX: ffff88801c71d940 [ 115.867192][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.875248][ C1] RBP: dffffc0000000000 R08: ffffffff81aa902d R09: ffffed10038e3b29 [ 115.883434][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 115.891577][ C1] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc90000dd0908 [ 115.899649][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 115.905110][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 115.910660][ C1] bpf_probe_read_compat+0xe4/0x180 [ 115.916259][ C1] bpf_prog_a9d1eab64edc2dc9+0x56/0x318 [ 115.926310][ C1] bpf_trace_run3+0x1d1/0x380 [ 115.931135][ C1] ? bpf_trace_run2+0x340/0x340 [ 115.936000][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 115.942088][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 115.947557][ C1] ? _raw_spin_lock+0x40/0x40 [ 115.952458][ C1] enqueue_timer+0x3ae/0x540 [ 115.957423][ C1] __mod_timer+0xa60/0xeb0 [ 115.961967][ C1] ? mod_timer_pending+0x20/0x20 [ 115.967346][ C1] ? estimation_timer+0x769/0x7b0 [ 115.972811][ C1] call_timer_fn+0x16d/0x560 [ 115.977413][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 115.983062][ C1] ? __run_timers+0x890/0x890 [ 115.988015][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 115.993399][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 115.998725][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 116.005644][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 116.010941][ C1] ? ip_vs_estimator_net_init+0xe0/0xe0 [ 116.016935][ C1] __run_timers+0x67c/0x890 [ 116.021624][ C1] ? detach_timer+0x2f0/0x2f0 [ 116.026496][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 116.032767][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 116.038226][ C1] run_timer_softirq+0x63/0xf0 [ 116.043759][ C1] handle_softirqs+0x3a7/0x930 [ 116.048981][ C1] ? __irq_exit_rcu+0x157/0x240 [ 116.054183][ C1] ? do_softirq+0x240/0x240 [ 116.059185][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 116.064735][ C1] __irq_exit_rcu+0x157/0x240 [ 116.069882][ C1] ? irq_exit_rcu+0x20/0x20 [ 116.074755][ C1] irq_exit_rcu+0x5/0x20 [ 116.079009][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 116.084647][ C1] [ 116.087570][ C1] [ 116.090576][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 116.096669][ C1] RIP: 0010:lock_is_held_type+0x137/0x180 [ 116.102381][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 116.122823][ C1] RSP: 0018:ffffc900032cf590 EFLAGS: 00000206 [ 116.129251][ C1] RAX: 46545bac436a4a00 RBX: 0000000000000003 RCX: ffff88801c71d940 [ 116.137210][ C1] RDX: ffff88801c71d940 RSI: ffffffff8aab2b80 RDI: ffffffff8af9e940 [ 116.145538][ C1] RBP: 0000000000000000 R08: ffffffff81a80a75 R09: fffff940002d3b77 [ 116.153722][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000246 [ 116.161697][ C1] R13: ffff88801c71d940 R14: 00000000ffffffff R15: ffff888022df60b8 [ 116.170215][ C1] ? xas_next_entry+0x1d5/0x3d0 [ 116.175077][ C1] xas_next_entry+0x1ea/0x3d0 [ 116.179779][ C1] filemap_map_pages+0xf90/0x15c0 [ 116.185522][ C1] ? filemap_read_page+0x4b0/0x4b0 [ 116.191180][ C1] ? count_memcg_event_mm+0x385/0x3e0 [ 116.197121][ C1] handle_mm_fault+0x341b/0x5960 [ 116.202081][ C1] ? numa_migrate_prep+0x1a0/0x1a0 [ 116.207670][ C1] ? follow_page_mask+0xb59/0x13f0 [ 116.213032][ C1] ? find_vma+0xd3/0x230 [ 116.217369][ C1] ? check_vma_flags+0x407/0x490 [ 116.222328][ C1] __get_user_pages+0x4ed/0x11d0 [ 116.227639][ C1] ? populate_vma_page_range+0x2a0/0x2a0 [ 116.233383][ C1] ? vm_mmap_pgoff+0x1e5/0x2d0 [ 116.238339][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 116.243553][ C1] populate_vma_page_range+0x215/0x2a0 [ 116.249604][ C1] __mm_populate+0x2a5/0x4a0 [ 116.254584][ C1] ? check_vma_flags+0x490/0x490 [ 116.259609][ C1] vm_mmap_pgoff+0x22b/0x2d0 [ 116.264198][ C1] ? account_locked_vm+0xe0/0xe0 [ 116.269126][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 116.274146][ C1] ksys_mmap_pgoff+0x13e/0x780 [ 116.279003][ C1] ? print_irqtrace_events+0x210/0x210 [ 116.284453][ C1] ? mmap_region+0x1870/0x1870 [ 116.289260][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 116.295428][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 116.300747][ C1] do_syscall_64+0x3b/0x80 [ 116.305477][ C1] ? clear_bhb_loop+0x15/0x70 [ 116.310260][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.316383][ C1] RIP: 0033:0x7f32a2ecc169 [ 116.321160][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.341584][ C1] RSP: 002b:00007f32a0d34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 116.350771][ C1] RAX: ffffffffffffffda RBX: 00007f32a30f3fa0 RCX: 00007f32a2ecc169 [ 116.359168][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 116.367721][ C1] RBP: 00007f32a2f4ea68 R08: ffffffffffffffff R09: 0000000000000000 [ 116.376154][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 116.384227][ C1] R13: 0000000000000000 R14: 00007f32a30f3fa0 R15: 00007ffc2412bf28 [ 116.392493][ C1] [ 117.503062][ C1] Shutting down cpus with NMI [ 117.508022][ C1] Kernel Offset: disabled [ 117.512560][ C1] Rebooting in 86400 seconds..