last executing test programs: 50.921920198s ago: executing program 0 (id=1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 35.691220665s ago: executing program 32 (id=1): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) 19.476227251s ago: executing program 1 (id=72): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket(0x28, 0x801, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0xfffffffffffffef4) 15.294861472s ago: executing program 2 (id=82): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 13.771221752s ago: executing program 2 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 10.987591806s ago: executing program 1 (id=89): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={0x0, 0x80}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000000200)=""/143, 0x8f}], 0x2, 0x7, 0x562) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) fsopen(0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 10.015311265s ago: executing program 3 (id=90): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.537799924s ago: executing program 3 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x280008a, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c696f636861727365743d64656661756c742c756e695f786c6174653d302c6e6f6e756d7461696c3d302c757466383d302c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030322c726f6469722c73686f72866e616d653d6d697865642c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=0,shortname=mixed,uni_xlate=0,shortname=winnt,\x00'], 0x96, 0x2a9, &(0x7f0000000500)="$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") 9.184947721s ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='syz', 0xfffffffffffffff8) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000540)="31f4ab74", 0x4, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r4, @ANYBLOB="050000000000000000", @ANYRES32=r5, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100040008010400440008004b000100000018004c000bac0f0001ac0f000fac0f0014ac0f000dac0f0004001e013400fe005b4b2efefbd21e89ebe44fed4ccafef683d6d2b615eaae470d346b912171f3b7964aa23b2b1cebf9b5e719d408580a7b08"], 0xe8}}, 0x0) r6 = socket(0x1e, 0x1, 0x0) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x100}) 9.153727852s ago: executing program 2 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x122d, &(0x7f0000003540)="$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") ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x64000600) 6.205612029s ago: executing program 3 (id=96): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@auto_da_alloc}, {@nodioread_nolock}, {@barrier}, {@noquota}, {@auto_da_alloc}, {@grpquota}, {@bh}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.205356099s ago: executing program 4 (id=97): io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 5.066970911s ago: executing program 4 (id=98): io_cancel(0x0, 0xfffffffffffffffe, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40894) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 4.908059144s ago: executing program 2 (id=99): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000500000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.882532384s ago: executing program 1 (id=100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 4.683323859s ago: executing program 3 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe, 0x0, 0x0, 0x0, 0x18}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f0000000040)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r3}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x40fd) ioprio_get$pid(0x2, 0x0) syz_usb_connect(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904100002e51de5000b2402010302057ff49bfd052406000105240002000d240f010500000009000700080624037f000109050602ff0300000009"], 0x0) 4.551844291s ago: executing program 2 (id=102): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x5452, &(0x7f0000000a00)={'veth0_to_bridge\x00', @dev}) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xc0c8, &(0x7f0000000240)=ANY=[], 0x3c, 0x2e2, &(0x7f0000000b40)="$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") syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 4.476743322s ago: executing program 1 (id=103): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, 0x0) 4.08456474s ago: executing program 2 (id=104): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.360011824s ago: executing program 1 (id=105): syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000007c0)='./file0\x00', 0x22000402, &(0x7f00000006c0)={[{@dioread_lock}, {@noblock_validity}, {@data_err_abort}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@usrjquota}, {@mb_optimize_scan}, {@noinit_itable}, {@jqfmt_vfsold}], [], 0x2c}, 0x85, 0x4e6, &(0x7f00000001c0)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x101, 0x1000}}) 3.338301475s ago: executing program 4 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) close(r2) 2.908250063s ago: executing program 4 (id=107): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0xe501, 0x3, 0x338, 0x1a0, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x2a0, 0x230, 0x230, 0x2a0, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4, [], @ipv6=@private2, [], @ipv6=@dev, [], @ipv6=@empty}}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 2.631975419s ago: executing program 1 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$cdc_ncm(0x3, 0x87, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) r7 = fsmount(r5, 0x0, 0x0) fchdir(r7) ftruncate(0xffffffffffffffff, 0x2007ffb) open_tree(0xffffffffffffffff, &(0x7f0000000540)='./bus\x00', 0x8900) openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) openat(r7, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) 1.702615626s ago: executing program 4 (id=109): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000240)=""/42, 0x2a, 0x0, &(0x7f0000000480)=""/125, 0x7d}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000440)='./file1\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 701.302876ms ago: executing program 3 (id=110): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=111): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 59.890202][ T4172] cgroup: Unknown subsys name 'net' [ 60.002163][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.486986][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.039595][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.057838][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.077977][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 63.140239][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 63.204370][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 63.235291][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.242559][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.252018][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.291260][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.298834][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.307500][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.362728][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.369927][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.378974][ T4185] device bridge_slave_0 entered promiscuous mode [ 63.386699][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.393910][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.402741][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.413907][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.421344][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.429762][ T4193] device bridge_slave_0 entered promiscuous mode [ 63.444866][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.452742][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.460792][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.467972][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.475421][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.483343][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.493593][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.500752][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.509010][ T4193] device bridge_slave_1 entered promiscuous mode [ 63.519351][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.530888][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.600235][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.627901][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.639582][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.656671][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.667851][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.680235][ T4184] team0: Port device team_slave_0 added [ 63.688264][ T4184] team0: Port device team_slave_1 added [ 63.700925][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.708657][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.716750][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.734278][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.761530][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.768806][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.777265][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.809965][ T4185] team0: Port device team_slave_0 added [ 63.818657][ T4185] team0: Port device team_slave_1 added [ 63.833836][ T4183] team0: Port device team_slave_0 added [ 63.848912][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.856092][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.882250][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.914665][ T4183] team0: Port device team_slave_1 added [ 63.922991][ T4193] team0: Port device team_slave_0 added [ 63.930257][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.937375][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.964014][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.986621][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.005800][ T4193] team0: Port device team_slave_1 added [ 64.021092][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.028617][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.055069][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.068797][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.104193][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.111760][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.137813][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.156861][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.164026][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.197175][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.243115][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.250903][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.277465][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.289696][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.297030][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.323314][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.337928][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.344974][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.363824][ T4192] team0: Port device team_slave_0 added [ 64.371970][ T4192] team0: Port device team_slave_1 added [ 64.381730][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.389021][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.415473][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.433226][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.440815][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.447623][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.455649][ T4185] Cannot create hsr debugfs directory [ 64.506485][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.513552][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.539816][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.587489][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.594470][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.620732][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.646958][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.654077][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.661049][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.669522][ T4183] Cannot create hsr debugfs directory [ 64.669550][ T1325] Bluetooth: hci4: command 0x0409 tx timeout [ 64.676110][ T4188] Bluetooth: hci0: command 0x0409 tx timeout [ 64.688305][ T4188] Bluetooth: hci3: command 0x0409 tx timeout [ 64.688462][ T1325] Bluetooth: hci2: command 0x0409 tx timeout [ 64.694358][ T4188] Bluetooth: hci1: command 0x0409 tx timeout [ 64.710883][ T4193] device hsr_slave_0 entered promiscuous mode [ 64.718263][ T4193] device hsr_slave_1 entered promiscuous mode [ 64.724865][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.733270][ T4193] Cannot create hsr debugfs directory [ 64.832842][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.839990][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.847093][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.854675][ T4192] Cannot create hsr debugfs directory [ 65.092715][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.104617][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.115592][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.125856][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.191194][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.201209][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.220967][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.248181][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.309577][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.333536][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.347939][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.367547][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.384190][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.405912][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.416487][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.442928][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.493943][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.510510][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.526836][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.551859][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.562808][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.580713][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.591066][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.604975][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.632932][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.652054][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.661166][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.671028][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.678333][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.711597][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.720411][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.729652][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.739413][ T3097] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.746567][ T3097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.754956][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.768070][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.794819][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.813227][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.824108][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.834091][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.843409][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.851527][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.862952][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.872019][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.909122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.918009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.927637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.938343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.947154][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.954261][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.962170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.971197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.980351][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.987489][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.002162][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.013901][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.036062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.044225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.053246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.062298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.087829][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.113839][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.142329][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.150468][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.162267][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.172009][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.182302][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.197504][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.206964][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.219214][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.228313][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.243262][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.261608][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.281905][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.313207][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.339063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.349182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.363766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.373918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.383903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.392482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.400795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.409329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.417409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.434541][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.456529][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.468535][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.484732][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.491906][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.506736][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.518016][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.526901][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.533981][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.542487][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.551606][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.560473][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.567695][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.599740][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.610193][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.619022][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.628180][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.638112][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.647433][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.654543][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.663162][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.672263][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.681497][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.688641][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.698252][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.708238][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.717731][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.727130][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.736091][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.743197][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.745662][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 66.751972][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.764166][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.764336][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 66.773649][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.784433][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 66.787599][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.792086][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 66.828574][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.835567][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 66.853017][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.860739][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.871644][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.881266][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.890343][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.899761][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.909536][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.918659][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.927803][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.937493][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.949937][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.959257][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.968604][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.977310][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.986734][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.995617][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.003968][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.012580][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.020459][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.029214][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.040101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.053344][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.073195][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.091379][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.101607][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.116672][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.144556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.154308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.199171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.217283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.236738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.255946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.277288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.298441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.314244][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.336504][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.348209][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.375857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.392164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.411167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.437205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.448380][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.458835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.483641][ T4184] device veth0_vlan entered promiscuous mode [ 67.516217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.538549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.563794][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.591924][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.599953][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.609933][ T4184] device veth1_vlan entered promiscuous mode [ 67.624270][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.633895][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.646485][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.667700][ T4193] device veth0_vlan entered promiscuous mode [ 67.681671][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.690784][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.699279][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.708328][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.716703][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.743701][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.754842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.768608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.778279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.786665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.799242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.808441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.832533][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.843374][ T4184] device veth0_macvtap entered promiscuous mode [ 67.854968][ T4184] device veth1_macvtap entered promiscuous mode [ 67.870508][ T4193] device veth1_vlan entered promiscuous mode [ 67.881928][ T4192] device veth0_vlan entered promiscuous mode [ 67.890704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.899010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.907951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.916582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.925957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.934646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.942959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.993726][ T4192] device veth1_vlan entered promiscuous mode [ 68.003252][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.013151][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.021658][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.031875][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.048391][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.070401][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.080758][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.091492][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.101921][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.112775][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.122559][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.131117][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.140014][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.149416][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.159092][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.167452][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.178755][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.188212][ T4193] device veth0_macvtap entered promiscuous mode [ 68.208778][ T4193] device veth1_macvtap entered promiscuous mode [ 68.219856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.228291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.238300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.247602][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.259632][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271083][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.280833][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.290415][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.301207][ T4183] device veth0_vlan entered promiscuous mode [ 68.312223][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.321271][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.351610][ T4192] device veth0_macvtap entered promiscuous mode [ 68.377719][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.387197][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.398195][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.409078][ T4183] device veth1_vlan entered promiscuous mode [ 68.421376][ T4185] device veth0_vlan entered promiscuous mode [ 68.430428][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.442368][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.454303][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.464902][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.473525][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.482203][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.491599][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.536415][ T4185] device veth1_vlan entered promiscuous mode [ 68.544430][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.560705][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.572105][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.596912][ T4192] device veth1_macvtap entered promiscuous mode [ 68.614217][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.623305][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.632038][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.642471][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.651449][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.679714][ T4183] device veth0_macvtap entered promiscuous mode [ 68.691273][ T4183] device veth1_macvtap entered promiscuous mode [ 68.701070][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.711857][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.721005][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.730243][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.747532][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.764234][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.773711][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.790431][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.801962][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.812067][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.823551][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.825454][ T4243] Bluetooth: hci4: command 0x040f tx timeout [ 68.838973][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.847671][ T4243] Bluetooth: hci3: command 0x040f tx timeout [ 68.854205][ T4243] Bluetooth: hci2: command 0x040f tx timeout [ 68.860650][ T4243] Bluetooth: hci1: command 0x040f tx timeout [ 68.864522][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.878255][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.888271][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.901190][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.905357][ T1325] Bluetooth: hci0: command 0x040f tx timeout [ 68.911824][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.928961][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.941260][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.964246][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.977399][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.986678][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.995664][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.004404][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.013465][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.022482][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.034723][ T4185] device veth0_macvtap entered promiscuous mode [ 69.062767][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.074422][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.084921][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.096104][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.108221][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.119569][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.130545][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.140697][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.151470][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.162772][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.173564][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.185064][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.200958][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.211166][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.220270][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.231153][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.243629][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.254785][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263860][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.272799][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.282551][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.294306][ T4185] device veth1_macvtap entered promiscuous mode [ 69.306468][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.317114][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.326213][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.334938][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.378593][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.389023][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.424120][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.434906][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.446987][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.457959][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.469663][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.480635][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.491703][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.502306][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.513509][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.521313][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.529443][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.538990][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.568907][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.585561][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.596295][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.607058][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.617189][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.629247][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.639866][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.650583][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.661994][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.698124][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.710645][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.728902][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.738114][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.747448][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.758170][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.785545][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.794302][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.804229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.833787][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.844560][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.861479][ T3097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.875569][ T3097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.896244][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.904157][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.931243][ T1229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.950846][ T1229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.983099][ T161] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.048945][ T3097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.060653][ T1229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.061238][ T3097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.080447][ T1229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.112083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.123336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.350192][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.421088][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.637992][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.683568][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.876127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.889142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.906402][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 70.914009][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 70.949099][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 71.004813][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 71.018248][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.030194][ T1325] Bluetooth: hci0: command 0x0419 tx timeout [ 71.137704][ T1108] cfg80211: failed to load regulatory.db [ 71.149916][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.179643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.206355][ T4304] futex_wake_op: syz.3.6 tries to shift op by 32; fix this program [ 71.267717][ T4304] loop3: detected capacity change from 0 to 256 [ 71.345166][ T4307] loop4: detected capacity change from 0 to 512 [ 71.483800][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.493882][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.055144][ C0] sched: RT throttling activated [ 73.086055][ T4307] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 73.099279][ T4307] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.577462][ T4307] EXT4-fs: error -4 creating inode table initialization thread [ 74.586609][ T4307] EXT4-fs (loop4): mount failed [ 79.689148][ T4369] loop3: detected capacity change from 0 to 512 [ 82.389715][ T4369] ======================================================= [ 82.389715][ T4369] WARNING: The mand mount option has been deprecated and [ 82.389715][ T4369] and is ignored by this kernel. Remove the mand [ 82.389715][ T4369] option from the mount to silence this warning. [ 82.389715][ T4369] ======================================================= [ 82.563126][ T4377] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.566139][ T4369] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 84.843166][ T4369] EXT4-fs: failed to create workqueue [ 84.848805][ T4369] EXT4-fs (loop3): mount failed [ 84.905819][ T4389] loop1: detected capacity change from 0 to 512 [ 85.047758][ T4390] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.796362][ T4389] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 85.856801][ T4389] ext4 filesystem being mounted at /bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.104600][ T4404] loop3: detected capacity change from 0 to 512 [ 87.266468][ T4404] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 87.413895][ T4404] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.440883][ T4404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.22: bg 0: block 248: padding at end of block bitmap is not set [ 87.467007][ T4404] Quota error (device loop3): write_blk: dquota write failed [ 87.475054][ T4404] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 87.485363][ T4404] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.22: Failed to acquire dquot type 1 [ 87.513563][ T4404] EXT4-fs (loop3): 1 truncate cleaned up [ 88.877092][ T4404] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 89.048898][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.057314][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.452711][ T4418] loop1: detected capacity change from 0 to 40427 [ 91.588810][ T4435] loop2: detected capacity change from 0 to 512 [ 91.606707][ T4418] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 91.625310][ T4418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 91.727071][ T4435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.30: inode #1: comm syz.2.30: iget: illegal inode # [ 91.759491][ T4435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.30: error while reading EA inode 1 err=-117 [ 91.773333][ T4435] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 91.788563][ T4435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.30: inode #1: comm syz.2.30: iget: illegal inode # [ 91.848266][ T4435] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.30: error while reading EA inode 1 err=-117 [ 91.863453][ T4435] EXT4-fs (loop2): 1 orphan inode deleted [ 91.869962][ T4435] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback. [ 91.913745][ T4418] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.794295][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.491133][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.163370][ T4342] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.172726][ T4342] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.181761][ T4342] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.191126][ T4236] Bluetooth: hci5: command 0x0409 tx timeout [ 94.191912][ T4342] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.745989][ T26] audit: type=1326 audit(1757528971.865:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 95.204635][ T26] audit: type=1326 audit(1757528971.875:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 95.282717][ T26] audit: type=1326 audit(1757528971.875:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff78ecc9510 code=0x7ffc0000 [ 95.365214][ T26] audit: type=1326 audit(1757528971.885:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff78eccc3d7 code=0x7ffc0000 [ 95.417047][ T26] audit: type=1326 audit(1757528971.885:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 95.449802][ T26] audit: type=1326 audit(1757528971.885:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff78eccc3d7 code=0x7ffc0000 [ 95.565560][ T26] audit: type=1326 audit(1757528971.885:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff78ecc980a code=0x7ffc0000 [ 95.618999][ T26] audit: type=1326 audit(1757528971.885:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 95.641785][ T26] audit: type=1326 audit(1757528971.885:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 95.667341][ T26] audit: type=1326 audit(1757528971.895:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4461 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff78eccaba9 code=0x7ffc0000 [ 96.266196][ T4263] Bluetooth: hci5: command 0x041b tx timeout [ 96.309428][ T4490] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.023227][ T4436] chnl_net:caif_netlink_parms(): no params data found [ 97.338949][ T4502] loop3: detected capacity change from 0 to 256 [ 97.426087][ T4502] exfat: Deprecated parameter 'utf8' [ 97.432651][ T4502] exfat: Deprecated parameter 'utf8' [ 97.646182][ T4502] exfat: Deprecated parameter 'utf8' [ 98.185563][ T4502] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 98.287243][ T4436] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.326614][ T4436] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.346588][ T4236] Bluetooth: hci5: command 0x040f tx timeout [ 98.353501][ T4436] device bridge_slave_0 entered promiscuous mode [ 98.380081][ T4436] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.398197][ T4436] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.416874][ T4436] device bridge_slave_1 entered promiscuous mode [ 98.439722][ T4518] netlink: 92 bytes leftover after parsing attributes in process `syz.2.54'. [ 98.579645][ T4518] netlink: 72 bytes leftover after parsing attributes in process `syz.2.54'. [ 98.741724][ T4436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.832143][ T4436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.950767][ T4436] team0: Port device team_slave_0 added [ 99.102032][ T4529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.827430][ T4532] loop4: detected capacity change from 0 to 256 [ 99.852385][ T4436] team0: Port device team_slave_1 added [ 100.425227][ T21] Bluetooth: hci5: command 0x0419 tx timeout [ 101.230194][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.324721][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.377226][ T4554] loop4: detected capacity change from 0 to 256 [ 101.404230][ T4436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.430402][ T4436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.439814][ T4436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.467263][ T4554] exfat: Deprecated parameter 'utf8' [ 101.472722][ T4554] exfat: Deprecated parameter 'utf8' [ 101.595463][ T4331] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.615456][ T4554] exfat: Deprecated parameter 'utf8' [ 101.654432][ T4436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.707283][ T4554] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 101.777843][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 101.780399][ T26] audit: type=1804 audit(1757528979.025:39): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.61" name="/newroot/14/file1/bus" dev="loop4" ino=1048591 res=1 errno=0 [ 102.651787][ T4331] usb 3-1: Using ep0 maxpacket: 32 [ 102.826276][ T4331] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 102.843448][ T4331] usb 3-1: config 0 has no interface number 0 [ 102.853470][ T4331] usb 3-1: config 0 interface 184 has no altsetting 0 [ 102.913065][ T4564] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.921000][ T4564] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.036878][ T4331] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.054160][ T4331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.062935][ T4331] usb 3-1: Product: syz [ 103.074925][ T4331] usb 3-1: Manufacturer: syz [ 103.080575][ T4331] usb 3-1: SerialNumber: syz [ 103.119140][ T4331] usb 3-1: config 0 descriptor?? [ 103.189580][ T4331] smsc75xx v1.0.0 [ 103.512009][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.534088][ T4564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.672896][ T4564] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.689588][ T4564] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.702049][ T4564] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.718748][ T4564] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.888866][ T4436] device hsr_slave_0 entered promiscuous mode [ 103.905858][ T4436] device hsr_slave_1 entered promiscuous mode [ 103.912980][ T4436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.922244][ T4436] Cannot create hsr debugfs directory [ 105.175602][ T4331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 105.190002][ T4331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 105.199838][ T4331] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 105.211599][ T4331] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 105.226156][ T4331] usb 3-1: USB disconnect, device number 2 [ 106.151980][ T4599] xt_CT: You must specify a L4 protocol and not use inversions on it [ 107.272269][ T4620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 107.443111][ T4436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.557731][ T4436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.583866][ T4625] device wg2 entered promiscuous mode [ 107.646808][ T4436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.719436][ T4436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.924654][ T4349] device hsr_slave_0 left promiscuous mode [ 108.972914][ T4349] device hsr_slave_1 left promiscuous mode [ 108.993359][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.002514][ T4349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.010907][ T4349] device bridge_slave_1 left promiscuous mode [ 109.018893][ T4349] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.040788][ T4349] device bridge_slave_0 left promiscuous mode [ 109.074871][ T4349] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.067783][ T4349] team0 (unregistering): Port device team_slave_1 removed [ 112.029139][ T4660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 112.272058][ T4349] team0 (unregistering): Port device team_slave_0 removed [ 112.365552][ T4349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.406998][ T4349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.788807][ T4675] syz.4.87[4675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.788934][ T4675] syz.4.87[4675] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.814904][ T26] audit: type=1326 audit(1757528990.515:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 114.642464][ T26] audit: type=1326 audit(1757528990.515:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 115.059772][ T26] audit: type=1326 audit(1757528990.525:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 115.084910][ T26] audit: type=1326 audit(1757528990.525:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 115.616916][ T4349] bond0 (unregistering): Released all slaves [ 116.060578][ T26] audit: type=1326 audit(1757528990.525:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 116.371836][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 116.455902][ T26] audit: type=1326 audit(1757528990.535:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 116.539149][ T26] audit: type=1326 audit(1757528990.535:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 116.630626][ T4755] loop3: detected capacity change from 0 to 256 [ 116.661941][ T26] audit: type=1326 audit(1757528990.535:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 116.693280][ T4755] FAT-fs (loop3): Unrecognized mount option "shor†name=mixed" or missing value [ 116.713352][ T26] audit: type=1326 audit(1757528990.545:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 116.896347][ T4436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.992900][ T26] audit: type=1326 audit(1757528990.555:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 118.115381][ T4766] loop2: detected capacity change from 0 to 8192 [ 118.329714][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.723508][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.598969][ T4436] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.650602][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.715996][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.767538][ T26] audit: type=1326 audit(1757528990.555:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 119.975644][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.982802][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.990952][ T4776] loop3: detected capacity change from 0 to 1024 [ 120.069649][ T26] audit: type=1326 audit(1757528990.565:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 120.091857][ T26] audit: type=1326 audit(1757528990.565:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 120.526973][ T4781] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 120.651949][ T26] audit: type=1326 audit(1757528990.565:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 120.915322][ T4776] EXT4-fs (loop3): Ignoring removed bh option [ 121.007693][ T26] audit: type=1326 audit(1757528990.575:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.035640][ T26] audit: type=1326 audit(1757528990.575:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.086047][ T4776] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc,nodioread_nolock,barrier,noquota,auto_da_alloc,grpquota,bh,,errors=continue. Quota mode: writeback. [ 121.124199][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 121.143916][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 121.163813][ T4776] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.180400][ T26] audit: type=1326 audit(1757528990.585:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.245905][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 121.294690][ T4793] capability: warning: `syz.1.100' uses deprecated v2 capabilities in a way that may be insecure [ 121.310249][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.317495][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.317845][ T26] audit: type=1326 audit(1757528990.595:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.399509][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 121.442559][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 121.510120][ T26] audit: type=1326 audit(1757528990.595:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.533276][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 121.582921][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 121.635756][ T4800] loop2: detected capacity change from 0 to 128 [ 121.648761][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 121.694926][ T26] audit: type=1326 audit(1757528990.605:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4665 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c3b0ba9 code=0x7ffc0000 [ 121.700486][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.005170][ T4244] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.112839][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.179838][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.250370][ T4436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.262292][ T4436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.265169][ T4244] usb 4-1: Using ep0 maxpacket: 32 [ 122.282853][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.291993][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.301904][ T4815] loop2: detected capacity change from 0 to 512 [ 122.309767][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.356303][ T4815] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 122.415531][ T4244] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 122.433547][ T4244] usb 4-1: config 0 has no interface number 0 [ 122.469094][ T4244] usb 4-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 122.489077][ T4815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 122.552203][ T4815] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.104: bg 0: block 248: padding at end of block bitmap is not set [ 122.566806][ T4244] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.644028][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.686332][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.734773][ T4436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.763566][ T4815] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.104: Failed to acquire dquot type 1 [ 122.788606][ T4826] loop1: detected capacity change from 0 to 512 [ 122.795486][ T4244] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 122.804601][ T4244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.854116][ T4244] usb 4-1: Product: syz [ 122.862334][ T4826] EXT4-fs (loop1): Mount option "dioread_lock" incompatible with ext2 [ 122.868688][ T4244] usb 4-1: Manufacturer: syz [ 122.872989][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 122.896913][ T4244] usb 4-1: SerialNumber: syz [ 122.902602][ T4815] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 122.933423][ T4244] usb 4-1: config 0 descriptor?? [ 122.985641][ T4807] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.018895][ T4244] usb 4-1: invalid MIDI in EP 0 [ 123.412569][ T4244] snd-usb-audio: probe of 4-1:0.16 failed with error -22 [ 124.389839][ T4844] udevd[4844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.325628][ T7] usb 4-1: USB disconnect, device number 2 [ 125.496927][ T4856] overlayfs: failed to resolve './file0': -2 [ 126.040966][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.052615][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.075867][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.101455][ T4735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.115187][ C1] ------------[ cut here ]------------ [ 126.115187][ C0] ------------[ cut here ]------------ [ 126.116387][ C0] [ 126.116393][ C0] ====================================================== [ 126.116398][ C0] WARNING: possible circular locking dependency detected [ 126.116412][ C0] syzkaller #0 Not tainted [ 126.116421][ C0] ------------------------------------------------------ [ 126.116426][ C0] sed/4862 is trying to acquire lock: [ 126.116436][ C0] ffffffff8c110ec0 (console_owner){-...}-{0:0}, at: console_trylock_spinning+0x150/0x350 [ 126.116510][ C0] [ 126.116510][ C0] but task is already holding lock: [ 126.116514][ C0] ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 126.116559][ C0] [ 126.116559][ C0] which lock already depends on the new lock. [ 126.116559][ C0] [ 126.116565][ C0] [ 126.116565][ C0] the existing dependency chain (in reverse order) is: [ 126.116571][ C0] [ 126.116571][ C0] -> #6 (hrtimer_bases.lock){-.-.}-{2:2}: [ 126.116595][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 126.116621][ C0] hrtimer_start_range_ns+0xff/0xc20 [ 126.116644][ C0] enqueue_task_rt+0x60c/0xc00 [ 126.116662][ C0] enqueue_task+0x182/0x2b0 [ 126.116681][ C0] ttwu_do_activate+0x1b7/0x370 [ 126.116700][ C0] sched_ttwu_pending+0x272/0x5d0 [ 126.116720][ C0] __sysvec_call_function_single+0x98/0x240 [ 126.116743][ C0] sysvec_call_function_single+0x98/0xc0 [ 126.116836][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 126.116855][ C0] default_idle+0xb/0x10 [ 126.116874][ C0] default_idle_call+0x81/0xc0 [ 126.116894][ C0] do_idle+0x21b/0x5b0 [ 126.116914][ C0] cpu_startup_entry+0x14/0x20 [ 126.116933][ C0] start_secondary+0x31f/0x430 [ 126.116953][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 126.116976][ C0] [ 126.116976][ C0] -> #5 (&rt_b->rt_runtime_lock){-.-.}-{2:2}: [ 126.117000][ C0] _raw_spin_lock+0x2a/0x40 [ 126.117020][ C0] rq_online_rt+0x125/0x310 [ 126.117037][ C0] sched_cpu_activate+0x4ae/0x650 [ 126.117054][ C0] cpuhp_invoke_callback+0x431/0x830 [ 126.117075][ C0] cpuhp_thread_fun+0x39a/0x7d0 [ 126.117094][ C0] smpboot_thread_fn+0x4f6/0x970 [ 126.117115][ C0] kthread+0x436/0x520 [ 126.117130][ C0] ret_from_fork+0x1f/0x30 [ 126.117149][ C0] [ 126.117149][ C0] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 126.117173][ C0] _raw_spin_lock_nested+0x2e/0x40 [ 126.117190][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 126.117209][ C0] task_fork_fair+0x5c/0x350 [ 126.117224][ C0] sched_cgroup_fork+0x2c6/0x320 [ 126.117243][ C0] copy_process+0x22d1/0x3e00 [ 126.117261][ C0] kernel_clone+0x219/0x930 [ 126.117278][ C0] kernel_thread+0xc8/0x120 [ 126.117295][ C0] rest_init+0x21/0x330 [ 126.117312][ C0] start_kernel+0x486/0x530 [ 126.117327][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 126.117349][ C0] [ 126.117349][ C0] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 126.117372][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 126.117395][ C0] try_to_wake_up+0x5c/0x1050 [ 126.117414][ C0] create_worker+0x4c3/0x630 [ 126.117431][ C0] workqueue_init+0x3cc/0x5f0 [ 126.117450][ C0] kernel_init_freeable+0x39c/0x560 [ 126.117467][ C0] kernel_init+0x19/0x1b0 [ 126.117484][ C0] ret_from_fork+0x1f/0x30 [ 126.117502][ C0] [ 126.117502][ C0] -> #2 (&pool->lock){-.-.}-{2:2}: [ 126.117526][ C0] _raw_spin_lock+0x2a/0x40 [ 126.117545][ C0] __queue_work+0x595/0xd50 [ 126.117561][ C0] queue_work_on+0x11d/0x1d0 [ 126.117577][ C0] serial8250_modem_status+0x196/0x270 [ 126.117599][ C0] serial8250_handle_irq+0x438/0x610 [ 126.117618][ C0] serial8250_default_handle_irq+0xb4/0x1a0 [ 126.117641][ C0] serial8250_interrupt+0x9b/0x1c0 [ 126.117660][ C0] __handle_irq_event_percpu+0x291/0x9b0 [ 126.117679][ C0] handle_irq_event+0xa5/0x220 [ 126.117697][ C0] handle_edge_irq+0x243/0xb20 [ 126.117716][ C0] __common_interrupt+0xd7/0x1e0 [ 126.117732][ C0] common_interrupt+0xb0/0xd0 [ 126.117756][ C0] asm_common_interrupt+0x22/0x40 [ 126.117773][ C0] lock_acquire+0xbb/0x3f0 [ 126.117792][ C0] __might_fault+0xb3/0x110 [ 126.117810][ C0] do_recvmmsg+0x36d/0x7a0 [ 126.117830][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 126.117849][ C0] do_syscall_64+0x4c/0xa0 [ 126.117866][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.117884][ C0] [ 126.117884][ C0] -> #1 (&port_lock_key){-...}-{2:2}: [ 126.117909][ C0] _raw_spin_lock_irqsave+0xa4/0xf0 [ 126.117930][ C0] serial8250_console_write+0x170/0xf80 [ 126.117950][ C0] console_unlock+0xc86/0x1200 [ 126.117972][ C0] vprintk_emit+0xc0/0x150 [ 126.117992][ C0] _printk+0xcc/0x110 [ 126.118009][ C0] register_console+0x682/0x960 [ 126.118026][ C0] univ8250_console_init+0x41/0x50 [ 126.118044][ C0] console_init+0x177/0x5d0 [ 126.118063][ C0] start_kernel+0x2f9/0x530 [ 126.118079][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 126.118099][ C0] [ 126.118099][ C0] -> #0 (console_owner){-...}-{0:0}: [ 126.118122][ C0] __lock_acquire+0x2c33/0x7c60 [ 126.118142][ C0] lock_acquire+0x197/0x3f0 [ 126.118162][ C0] console_trylock_spinning+0x170/0x350 [ 126.118183][ C0] vprintk_emit+0xa7/0x150 [ 126.118204][ C0] _printk+0xcc/0x110 [ 126.118222][ C0] report_bug+0x1e5/0x2e0 [ 126.118241][ C0] handle_bug+0x3a/0x70 [ 126.118256][ C0] exc_invalid_op+0x16/0x40 [ 126.118272][ C0] asm_exc_invalid_op+0x16/0x20 [ 126.118289][ C0] copy_from_user_nofault+0x160/0x1c0 [ 126.118308][ C0] bpf_probe_read_compat+0xdd/0x170 [ 126.118329][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x2d8 [ 126.118345][ C0] bpf_trace_run2+0x15b/0x2d0 [ 126.118365][ C0] enqueue_hrtimer+0x314/0x370 [ 126.118385][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 126.118406][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 126.118426][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 126.118445][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 126.118464][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.118483][ C0] unwind_next_frame+0xa/0x1d90 [ 126.118502][ C0] arch_stack_walk+0x10c/0x140 [ 126.118521][ C0] stack_trace_save+0x98/0xe0 [ 126.118538][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 126.118559][ C0] slab_post_alloc_hook+0x4c/0x380 [ 126.118575][ C0] kmem_cache_alloc+0x100/0x290 [ 126.118591][ C0] vm_area_dup+0x1e/0xb0 [ 126.118608][ C0] __split_vma+0xb1/0x410 [ 126.118626][ C0] __do_munmap+0x375/0xdc0 [ 126.118644][ C0] mmap_region+0x8bb/0x1660 [ 126.118662][ C0] do_mmap+0x81f/0xea0 [ 126.118679][ C0] vm_mmap_pgoff+0x1b2/0x2b0 [ 126.118699][ C0] ksys_mmap_pgoff+0x542/0x780 [ 126.118718][ C0] do_syscall_64+0x4c/0xa0 [ 126.118734][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.118761][ C0] [ 126.118761][ C0] other info that might help us debug this: [ 126.118761][ C0] [ 126.118765][ C0] Chain exists of: [ 126.118765][ C0] console_owner --> &rt_b->rt_runtime_lock --> hrtimer_bases.lock [ 126.118765][ C0] [ 126.118793][ C0] Possible unsafe locking scenario: [ 126.118793][ C0] [ 126.118799][ C0] CPU0 CPU1 [ 126.118802][ C0] ---- ---- [ 126.118807][ C0] lock(hrtimer_bases.lock); [ 126.118818][ C0] lock(&rt_b->rt_runtime_lock); [ 126.118830][ C0] lock(hrtimer_bases.lock); [ 126.118843][ C0] lock(console_owner); [ 126.118854][ C0] [ 126.118854][ C0] *** DEADLOCK *** [ 126.118854][ C0] [ 126.118857][ C0] 3 locks held by sed/4862: [ 126.118867][ C0] #0: ffff888076a52b28 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x15d/0x2b0 [ 126.118917][ C0] #1: ffff8880b902a218 (hrtimer_bases.lock){-.-.}-{2:2}, at: __hrtimer_run_queues+0x5ff/0xc40 [ 126.118965][ C0] #2: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 126.119004][ C0] [ 126.119004][ C0] stack backtrace: [ 126.119018][ C0] CPU: 0 PID: 4862 Comm: sed Not tainted syzkaller #0 [ 126.119032][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.119052][ C0] Call Trace: [ 126.119059][ C0] [ 126.119067][ C0] dump_stack_lvl+0x168/0x230 [ 126.119091][ C0] ? load_image+0x3b0/0x3b0 [ 126.119112][ C0] ? show_regs_print_info+0x20/0x20 [ 126.119139][ C0] ? print_circular_bug+0x12b/0x1a0 [ 126.119160][ C0] check_noncircular+0x274/0x310 [ 126.119180][ C0] ? add_chain_block+0x940/0x940 [ 126.119197][ C0] ? lockdep_lock+0x141/0x1e0 [ 126.119224][ C0] ? mark_lock+0x94/0x320 [ 126.119248][ C0] __lock_acquire+0x2c33/0x7c60 [ 126.119283][ C0] ? verify_lock_unused+0x140/0x140 [ 126.119306][ C0] ? verify_lock_unused+0x140/0x140 [ 126.119331][ C0] ? _prb_commit+0x289/0x340 [ 126.119352][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 126.119377][ C0] ? _raw_spin_unlock+0x40/0x40 [ 126.119402][ C0] lock_acquire+0x197/0x3f0 [ 126.119424][ C0] ? console_trylock_spinning+0x150/0x350 [ 126.119449][ C0] ? console_trylock_spinning+0x150/0x350 [ 126.119474][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 126.119496][ C0] ? do_raw_spin_lock+0x11d/0x280 [ 126.119515][ C0] ? read_lock_is_recursive+0x10/0x10 [ 126.119538][ C0] ? __rwlock_init+0x140/0x140 [ 126.119559][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 126.119580][ C0] console_trylock_spinning+0x170/0x350 [ 126.119602][ C0] ? console_trylock_spinning+0x150/0x350 [ 126.119626][ C0] ? vprintk_emit+0x150/0x150 [ 126.119647][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 126.119670][ C0] ? mark_lock+0x94/0x320 [ 126.119696][ C0] vprintk_emit+0xa7/0x150 [ 126.119721][ C0] _printk+0xcc/0x110 [ 126.119744][ C0] ? load_image+0x3b0/0x3b0 [ 126.119770][ C0] ? rcu_read_lock_sched_held+0x86/0xf0 [ 126.119795][ C0] ? rcu_is_watching+0x11/0xa0 [ 126.119814][ C0] ? verify_lock_unused+0x140/0x140 [ 126.119835][ C0] ? find_bug+0xa1/0x350 [ 126.119854][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 126.119876][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 126.119898][ C0] report_bug+0x1e5/0x2e0 [ 126.119923][ C0] handle_bug+0x3a/0x70 [ 126.119941][ C0] exc_invalid_op+0x16/0x40 [ 126.119959][ C0] asm_exc_invalid_op+0x16/0x20 [ 126.119981][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 126.120004][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 126.120022][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00010006 [ 126.120038][ C0] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff88807b5ad940 [ 126.120052][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.120065][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6b5b29 [ 126.120078][ C0] R10: ffffed100f6b5b29 R11: 1ffff1100f6b5b28 R12: ffff88807b5af0c8 [ 126.120094][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 126.120112][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 126.120140][ C0] bpf_probe_read_compat+0xdd/0x170 [ 126.120165][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x2d8 [ 126.120181][ C0] bpf_trace_run2+0x15b/0x2d0 [ 126.120205][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 126.120229][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 126.120252][ C0] ? debug_object_activate+0x2d2/0x480 [ 126.120276][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 126.120303][ C0] enqueue_hrtimer+0x314/0x370 [ 126.120326][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 126.120353][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 126.120380][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 126.120403][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 126.120427][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 126.120463][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 126.120485][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 126.120506][ C0] [ 126.120512][ C0] [ 126.120518][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.120538][ C0] RIP: 0010:unwind_next_frame+0xa/0x1d90 [ 126.120560][ C0] Code: d9 80 e1 07 80 c1 03 38 c1 7c 97 48 89 df e8 8d ba 87 00 eb 8d 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 <48> 81 ec 88 00 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 8d [ 126.120576][ C0] RSP: 0018:ffffc9000307f670 EFLAGS: 00000202 [ 126.120592][ C0] RAX: 0000000000000001 RBX: ffffc9000307f760 RCX: 0000000080000001 [ 126.120605][ C0] RDX: dffffc0000000000 RSI: ffffffff81bb867c RDI: ffffc9000307f6a8 [ 126.120620][ C0] RBP: ffffc9000307f730 R08: ffffc9000307f770 R09: 0000000000000001 [ 126.120633][ C0] R10: fffff5200060fee1 R11: 1ffff9200060fedf R12: ffff88807b5ad940 [ 126.120649][ C0] R13: ffff888140007a00 R14: ffffffff816678c0 R15: ffffc9000307f6a8 [ 126.120663][ C0] ? stack_trace_save+0xe0/0xe0 [ 126.120686][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.120708][ C0] ? stack_trace_save+0xe0/0xe0 [ 126.120726][ C0] arch_stack_walk+0x10c/0x140 [ 126.120756][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.120778][ C0] stack_trace_save+0x98/0xe0 [ 126.120797][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 126.120815][ C0] ? mark_lock+0x94/0x320 [ 126.120837][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 126.120862][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 126.120881][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 126.120900][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.120946][ C0] slab_post_alloc_hook+0x4c/0x380 [ 126.120965][ C0] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 126.120999][ C0] ? vm_area_dup+0x1e/0xb0 [ 126.121017][ C0] kmem_cache_alloc+0x100/0x290 [ 126.121039][ C0] vm_area_dup+0x1e/0xb0 [ 126.121056][ C0] __split_vma+0xb1/0x410 [ 126.121077][ C0] ? find_vma+0x1df/0x230 [ 126.121098][ C0] __do_munmap+0x375/0xdc0 [ 126.121124][ C0] mmap_region+0x8bb/0x1660 [ 126.121154][ C0] do_mmap+0x81f/0xea0 [ 126.121180][ C0] vm_mmap_pgoff+0x1b2/0x2b0 [ 126.121207][ C0] ? account_locked_vm+0xe0/0xe0 [ 126.121229][ C0] ? __fget_files+0x40f/0x480 [ 126.121253][ C0] ksys_mmap_pgoff+0x542/0x780 [ 126.121278][ C0] ? mmap_region+0x1660/0x1660 [ 126.121300][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 126.121321][ C0] do_syscall_64+0x4c/0xa0 [ 126.121339][ C0] ? clear_bhb_loop+0x30/0x80 [ 126.121357][ C0] ? clear_bhb_loop+0x30/0x80 [ 126.121378][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.121398][ C0] RIP: 0033:0x7f98bafd1242 [ 126.121415][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 126.121430][ C0] RSP: 002b:00007ffd2a632398 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 126.121449][ C0] RAX: ffffffffffffffda RBX: 00007f98baca4000 RCX: 00007f98bafd1242 [ 126.121464][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f98baca4000 [ 126.121478][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000005f000 [ 126.121489][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd2a632458 [ 126.121501][ C0] R13: 00007f98bacb06b0 R14: 00007ffd2a6327d0 R15: 00000fffa54c6476 [ 126.121525][ C0] [ 126.122112][ C1] WARNING: CPU: 1 PID: 4859 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 126.127605][ C0] WARNING: CPU: 0 PID: 4862 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 126.129960][ C1] Modules linked in: [ 126.136967][ C0] Modules linked in: [ 126.144091][ C1] [ 126.144102][ C1] CPU: 1 PID: 4859 Comm: syz.3.110 Not tainted syzkaller #0 [ 126.148524][ C0] CPU: 0 PID: 4862 Comm: sed Not tainted syzkaller #0 [ 126.155549][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.160922][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.170713][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 126.178076][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 126.187982][ C1] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 126.198378][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 126.207559][ C1] RSP: 0018:ffffc90000dd0b90 EFLAGS: 00010006 [ 126.215982][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00010006 [ 126.221713][ C1] [ 126.221719][ C1] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff88807b5a9dc0 [ 126.227663][ C0] [ 126.227669][ C0] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff88807b5ad940 [ 126.233373][ C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.238408][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.238424][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6b5b29 [ 126.243891][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6b53b9 [ 126.249443][ C0] R10: ffffed100f6b5b29 R11: 1ffff1100f6b5b28 R12: ffff88807b5af0c8 [ 126.255853][ C1] R10: ffffed100f6b53b9 R11: 1ffff1100f6b53b8 R12: ffff88807b5ab548 [ 126.262084][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 126.268588][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0bc8 R15: 0000000020000000 [ 126.273343][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 126.278708][ C1] FS: 00007fe77a5f76c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 126.283403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.288765][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.294230][ C0] CR2: 0000200000174030 CR3: 000000007db71000 CR4: 00000000003506f0 [ 126.300726][ C1] CR2: 0000200000033030 CR3: 000000001e1e3000 CR4: 00000000003506e0 [ 126.300742][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.300751][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.300761][ C1] Call Trace: [ 126.300770][ C1] [ 126.309119][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.314246][ C1] bpf_probe_read_compat+0xdd/0x170 [ 126.319369][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 126.324926][ C1] bpf_prog_8fc34fd13f997abc+0x3d/0x2d8 [ 126.330816][ C0] Call Trace: [ 126.330825][ C0] [ 126.336188][ C1] bpf_trace_run2+0x15b/0x2d0 [ 126.341729][ C0] bpf_probe_read_compat+0xdd/0x170 [ 126.346340][ C1] ? posix_cpu_timers_work+0x1120/0x1120 [ 126.351272][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x2d8 [ 126.358668][ C1] ? bpf_trace_run1+0x2d0/0x2d0 [ 126.364302][ C0] bpf_trace_run2+0x15b/0x2d0 [ 126.370222][ C1] ? debug_object_activate+0x2d2/0x480 [ 126.375421][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 126.380985][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 126.386178][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 126.391195][ C1] enqueue_hrtimer+0x314/0x370 [ 126.396316][ C0] ? debug_object_activate+0x2d2/0x480 [ 126.400988][ C1] __hrtimer_run_queues+0x65a/0xc40 [ 126.406088][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 126.412757][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 126.420026][ C0] enqueue_hrtimer+0x314/0x370 [ 126.425739][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 126.430927][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 126.436036][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 126.441225][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 126.446933][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 126.451781][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 126.456720][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 126.463983][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 126.469014][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 126.474036][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 126.479141][ C1] [ 126.485131][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 126.491017][ C1] [ 126.491030][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.497438][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 126.503161][ C1] RIP: 0010:lock_is_held_type+0x13a/0x190 [ 126.509318][ C0] [ 126.514700][ C1] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 126.520059][ C0] [ 126.520069][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 126.525524][ C1] RSP: 0018:ffffc90003a9f438 EFLAGS: 00000206 [ 126.530740][ C0] RIP: 0010:unwind_next_frame+0xa/0x1d90 [ 126.536458][ C1] [ 126.536464][ C1] RAX: 9adfa8a604caef00 RBX: ffff88807b5a9dc0 RCX: 9adfa8a604caef00 [ 126.541396][ C0] Code: d9 80 e1 07 80 c1 03 38 c1 7c 97 48 89 df e8 8d ba 87 00 eb 8d 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 <48> 81 ec 88 00 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 8d [ 126.546416][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b28c0 RDI: ffffffff8a59a240 [ 126.551577][ C0] RSP: 0018:ffffc9000307f670 EFLAGS: 00000202 [ 126.557314][ C1] RBP: 0000000000000000 R08: ffffffff88881f81 R09: 0000000000000000 [ 126.562252][ C0] [ 126.562259][ C0] RAX: 0000000000000001 RBX: ffffc9000307f760 RCX: 0000000080000001 [ 126.568659][ C1] R10: fffff52000753f04 R11: 1ffff92000753f00 R12: dffffc0000000000 [ 126.576211][ C0] RDX: dffffc0000000000 RSI: ffffffff81bb867c RDI: ffffc9000307f6a8 [ 126.581944][ C1] R13: 0000000000000246 R14: ffffffff8c11c520 R15: 00000000ffffffff [ 126.588177][ C0] RBP: ffffc9000307f730 R08: ffffc9000307f770 R09: 0000000000000001 [ 126.593467][ C1] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 126.598394][ C0] R10: fffff5200060fee1 R11: 1ffff9200060fedf R12: ffff88807b5ad940 [ 126.602897][ C1] ___might_sleep+0xf2/0x600 [ 126.608249][ C0] R13: ffff888140007a00 R14: ffffffff816678c0 R15: ffffc9000307f6a8 [ 126.613881][ C1] ? mark_lock+0x94/0x320 [ 126.618892][ C0] ? stack_trace_save+0xe0/0xe0 [ 126.623916][ C1] ? __might_sleep+0xf0/0xf0 [ 126.630322][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.637772][ C1] ? __rwlock_init+0x140/0x140 [ 126.643393][ C0] ? stack_trace_save+0xe0/0xe0 [ 126.648415][ C1] ? __unix_dgram_recvmsg+0x1e1/0xd50 [ 126.654482][ C0] arch_stack_walk+0x10c/0x140 [ 126.659499][ C1] __mutex_lock_common+0xc1/0x2390 [ 126.663997][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.668933][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 126.673605][ C0] stack_trace_save+0x98/0xe0 [ 126.678640][ C1] ? _raw_spin_unlock+0x40/0x40 [ 126.684094][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 126.690074][ C1] ? mark_lock+0x94/0x320 [ 126.695866][ C0] ? mark_lock+0x94/0x320 [ 126.702030][ C1] ? mutex_lock_io_nested+0x60/0x60 [ 126.707841][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 126.713110][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 126.719170][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 126.724616][ C1] ? mutex_unlock+0x10/0x10 [ 126.731110][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 126.737251][ C1] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 126.743791][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 126.749163][ C1] mutex_lock_nested+0x17/0x20 [ 126.754470][ C0] slab_post_alloc_hook+0x4c/0x380 [ 126.759655][ C1] __unix_dgram_recvmsg+0x1e1/0xd50 [ 126.765088][ C0] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 126.770841][ C1] ? lock_chain_count+0x20/0x20 [ 126.776204][ C0] ? vm_area_dup+0x1e/0xb0 [ 126.781062][ C1] ? unix_unhash+0x10/0x10 [ 126.785998][ C0] kmem_cache_alloc+0x100/0x290 [ 126.790942][ C1] ? mark_lock+0x94/0x320 [ 126.796080][ C0] vm_area_dup+0x1e/0xb0 [ 126.800679][ C1] ? unix_dgram_recvmsg+0xb2/0xd0 [ 126.805869][ C0] __split_vma+0xb1/0x410 [ 126.811153][ C1] ? unix_dgram_sendmsg+0x1890/0x1890 [ 126.816100][ C0] ? find_vma+0x1df/0x230 [ 126.822604][ C1] ____sys_recvmsg+0x291/0x580 [ 126.832839][ C0] __do_munmap+0x375/0xdc0 [ 126.846733][ C1] ? __sys_recvmsg_sock+0x40/0x40 [ 126.854296][ C0] mmap_region+0x8bb/0x1660 [ 126.859672][ C1] ? import_iovec+0x6f/0xa0 [ 126.865036][ C0] do_mmap+0x81f/0xea0 [ 126.869697][ C1] ___sys_recvmsg+0x1af/0x4f0 [ 126.877253][ C0] vm_mmap_pgoff+0x1b2/0x2b0 [ 126.884526][ C1] ? __sys_recvmsg+0x250/0x250 [ 126.888757][ C0] ? account_locked_vm+0xe0/0xe0 [ 126.896992][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 126.901564][ C0] ? __fget_files+0x40f/0x480 [ 126.910961][ C1] ? __might_fault+0xb3/0x110 [ 126.921445][ C0] ksys_mmap_pgoff+0x542/0x780 [ 126.931057][ C1] do_recvmmsg+0x344/0x7a0 [ 126.936969][ C0] ? mmap_region+0x1660/0x1660 [ 126.943750][ C1] ? __sys_recvmmsg+0x280/0x280 [ 126.954513][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 126.957806][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 126.960662][ C0] do_syscall_64+0x4c/0xa0 [ 126.965772][ C1] __x64_sys_recvmmsg+0x18d/0x240 [ 126.970264][ C0] ? clear_bhb_loop+0x30/0x80 [ 126.975453][ C1] ? do_recvmmsg+0x7a0/0x7a0 [ 126.980676][ C0] ? clear_bhb_loop+0x30/0x80 [ 126.985610][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 126.990542][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.995231][ C1] do_syscall_64+0x4c/0xa0 [ 126.999816][ C0] RIP: 0033:0x7f98bafd1242 [ 127.004667][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.009865][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 127.015050][ C1] ? clear_bhb_loop+0x30/0x80 [ 127.019696][ C0] RSP: 002b:00007ffd2a632398 EFLAGS: 00000206 [ 127.025621][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.030465][ C0] ORIG_RAX: 0000000000000009 [ 127.034959][ C1] RIP: 0033:0x7fe77c3b0ba9 [ 127.040664][ C0] RAX: ffffffffffffffda RBX: 00007f98baca4000 RCX: 00007f98bafd1242 [ 127.046386][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.051400][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f98baca4000 [ 127.056422][ C1] RSP: 002b:00007fe77a5f7038 EFLAGS: 00000246 [ 127.061799][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000005f000 [ 127.066646][ C1] ORIG_RAX: 000000000000012b [ 127.071922][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd2a632458 [ 127.077457][ C1] RAX: ffffffffffffffda RBX: 00007fe77c5f8090 RCX: 00007fe77c3b0ba9 [ 127.083264][ C0] R13: 00007f98bacb06b0 R14: 00007ffd2a6327d0 R15: 00000fffa54c6476 [ 127.088034][ C1] RDX: 000000000400034f RSI: 0000200000000480 RDI: 0000000000000003 [ 127.093141][ C0] [ 127.097462][ C1] RBP: 00007fe77c433e19 R08: 0000000000000000 R09: 0000000000000000 [ 127.101881][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 127.105937][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 127.110431][ C0] CPU: 0 PID: 4862 Comm: sed Not tainted syzkaller #0 [ 127.115964][ C1] R13: 00007fe77c5f8128 R14: 00007fe77c5f8090 R15: 00007ffd77f4f9b8 [ 127.120720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 127.125911][ C1] [ 127.130318][ C0] Call Trace: [ 127.130328][ C0] [ 127.135860][ C1] irq event stamp: 8060 [ 127.141381][ C0] dump_stack_lvl+0x168/0x230 [ 127.145699][ C1] hardirqs last enabled at (8059): [] _raw_spin_unlock_irqrestore+0x82/0x100 [ 127.149866][ C0] ? show_regs_print_info+0x20/0x20 [ 127.154360][ C1] hardirqs last disabled at (8060): [] sysvec_apic_timer_interrupt+0xa/0xc0 [ 127.159197][ C0] ? load_image+0x3b0/0x3b0 [ 127.165339][ C1] softirqs last enabled at (6270): [] __irq_exit_rcu+0x12f/0x220 [ 127.185041][ C0] panic+0x2c9/0x7f0 [ 127.191239][ C1] softirqs last disabled at (6161): [] __irq_exit_rcu+0x12f/0x220 [ 127.199265][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 127.207314][ C1] ---[ end trace f0ee5494c8e83325 ]--- [ 127.215406][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 128.874463][ C0] __warn+0x248/0x2b0 [ 128.878459][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 128.884011][ C0] report_bug+0x1b7/0x2e0 [ 128.888348][ C0] handle_bug+0x3a/0x70 [ 128.892544][ C0] exc_invalid_op+0x16/0x40 [ 128.897047][ C0] asm_exc_invalid_op+0x16/0x20 [ 128.901895][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 128.908071][ C0] Code: 24 45 31 f6 31 ff 89 de e8 3d f7 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 128.927777][ C0] RSP: 0018:ffffc90000007b90 EFLAGS: 00010006 [ 128.933848][ C0] RAX: ffffffff819ed720 RBX: 0000000000000000 RCX: ffff88807b5ad940 [ 128.941830][ C0] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.949804][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100f6b5b29 [ 128.957968][ C0] R10: ffffed100f6b5b29 R11: 1ffff1100f6b5b28 R12: ffff88807b5af0c8 [ 128.965939][ C0] R13: 00007ffffffff000 R14: ffffc90000007bc8 R15: 0000000020000000 [ 128.973915][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 128.979591][ C0] bpf_probe_read_compat+0xdd/0x170 [ 128.984830][ C0] bpf_prog_8fc34fd13f997abc+0x3d/0x2d8 [ 128.990374][ C0] bpf_trace_run2+0x15b/0x2d0 [ 128.995059][ C0] ? posix_cpu_timers_work+0x1120/0x1120 [ 129.000957][ C0] ? bpf_trace_run1+0x2d0/0x2d0 [ 129.005813][ C0] ? debug_object_activate+0x2d2/0x480 [ 129.011277][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 129.016656][ C0] enqueue_hrtimer+0x314/0x370 [ 129.021424][ C0] __hrtimer_run_queues+0x65a/0xc40 [ 129.026649][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 129.032209][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 129.037326][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 129.043491][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 129.048450][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 129.054527][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 129.060185][ C0] [ 129.063118][ C0] [ 129.066151][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 129.072144][ C0] RIP: 0010:unwind_next_frame+0xa/0x1d90 [ 129.077959][ C0] Code: d9 80 e1 07 80 c1 03 38 c1 7c 97 48 89 df e8 8d ba 87 00 eb 8d 66 2e 0f 1f 84 00 00 00 00 00 90 55 41 57 41 56 41 55 41 54 53 <48> 81 ec 88 00 00 00 48 89 fb 49 be 00 00 00 00 00 fc ff df 48 8d [ 129.097653][ C0] RSP: 0018:ffffc9000307f670 EFLAGS: 00000202 [ 129.103731][ C0] RAX: 0000000000000001 RBX: ffffc9000307f760 RCX: 0000000080000001 [ 129.112327][ C0] RDX: dffffc0000000000 RSI: ffffffff81bb867c RDI: ffffc9000307f6a8 [ 129.120388][ C0] RBP: ffffc9000307f730 R08: ffffc9000307f770 R09: 0000000000000001 [ 129.128380][ C0] R10: fffff5200060fee1 R11: 1ffff9200060fedf R12: ffff88807b5ad940 [ 129.136448][ C0] R13: ffff888140007a00 R14: ffffffff816678c0 R15: ffffc9000307f6a8 [ 129.144422][ C0] ? stack_trace_save+0xe0/0xe0 [ 129.149289][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 129.154576][ C0] ? stack_trace_save+0xe0/0xe0 [ 129.159423][ C0] arch_stack_walk+0x10c/0x140 [ 129.164207][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 129.169761][ C0] stack_trace_save+0x98/0xe0 [ 129.174442][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 129.179664][ C0] ? mark_lock+0x94/0x320 [ 129.184011][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 129.189225][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 129.194167][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 129.199369][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 129.204694][ C0] slab_post_alloc_hook+0x4c/0x380 [ 129.209829][ C0] ? get_obj_cgroup_from_current+0x2bf/0x2f0 [ 129.215824][ C0] ? vm_area_dup+0x1e/0xb0 [ 129.220246][ C0] kmem_cache_alloc+0x100/0x290 [ 129.225115][ C0] vm_area_dup+0x1e/0xb0 [ 129.229362][ C0] __split_vma+0xb1/0x410 [ 129.233716][ C0] ? find_vma+0x1df/0x230 [ 129.238137][ C0] __do_munmap+0x375/0xdc0 [ 129.242584][ C0] mmap_region+0x8bb/0x1660 [ 129.247120][ C0] do_mmap+0x81f/0xea0 [ 129.251206][ C0] vm_mmap_pgoff+0x1b2/0x2b0 [ 129.255897][ C0] ? account_locked_vm+0xe0/0xe0 [ 129.260839][ C0] ? __fget_files+0x40f/0x480 [ 129.265539][ C0] ksys_mmap_pgoff+0x542/0x780 [ 129.270314][ C0] ? mmap_region+0x1660/0x1660 [ 129.275098][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 129.280301][ C0] do_syscall_64+0x4c/0xa0 [ 129.284716][ C0] ? clear_bhb_loop+0x30/0x80 [ 129.289651][ C0] ? clear_bhb_loop+0x30/0x80 [ 129.294333][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.300224][ C0] RIP: 0033:0x7f98bafd1242 [ 129.304642][ C0] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 129.324682][ C0] RSP: 002b:00007ffd2a632398 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 129.333095][ C0] RAX: ffffffffffffffda RBX: 00007f98baca4000 RCX: 00007f98bafd1242 [ 129.341076][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f98baca4000 [ 129.349152][ C0] RBP: 0000000000000812 R08: 0000000000000003 R09: 000000000005f000 [ 129.357212][ C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd2a632458 [ 129.365179][ C0] R13: 00007f98bacb06b0 R14: 00007ffd2a6327d0 R15: 00000fffa54c6476 [ 129.373166][ C0] [ 129.376555][ C0] Kernel Offset: disabled [ 129.380887][ C0] Rebooting in 86400 seconds..