Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. 2024/04/05 10:38:31 fuzzer started 2024/04/05 10:38:31 dialing manager at 10.128.0.169:30002 [ 101.627296][ T5071] cgroup: Unknown subsys name 'net' [ 101.781391][ T5071] cgroup: Unknown subsys name 'rlimit' [ 101.873989][ T7] cfg80211: failed to load regulatory.db 2024/04/05 10:38:34 syscalls: 3744 2024/04/05 10:38:34 code coverage: enabled 2024/04/05 10:38:34 comparison tracing: enabled 2024/04/05 10:38:34 extra coverage: enabled 2024/04/05 10:38:34 delay kcov mmap: enabled 2024/04/05 10:38:34 setuid sandbox: enabled 2024/04/05 10:38:34 namespace sandbox: enabled 2024/04/05 10:38:34 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/05 10:38:34 fault injection: enabled 2024/04/05 10:38:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/05 10:38:34 net packet injection: enabled 2024/04/05 10:38:34 net device setup: enabled 2024/04/05 10:38:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/05 10:38:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/05 10:38:34 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/05 10:38:34 USB emulation: enabled 2024/04/05 10:38:34 hci packet injection: enabled 2024/04/05 10:38:34 wifi device emulation: enabled 2024/04/05 10:38:34 802.15.4 emulation: enabled 2024/04/05 10:38:34 swap file: enabled [ 103.994795][ T5071] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/05 10:38:34 starting 6 executor processes [ 105.790361][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 105.815660][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 105.830431][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 105.838165][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 105.848386][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 105.855470][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 105.864609][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 105.874281][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 105.882097][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.892430][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.903146][ T4465] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 105.921019][ T4465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 105.931252][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 105.934482][ T4465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 105.939540][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 105.953138][ T4465] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 105.960535][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 105.970542][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 105.979340][ T4465] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 105.979483][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 105.994846][ T4465] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.995663][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 106.004033][ T4465] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 106.022807][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 106.024125][ T4465] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 106.042359][ T4465] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 106.043900][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.086611][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 106.105194][ T5091] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 106.112973][ T5091] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 106.172047][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 106.180563][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 106.188621][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 106.197736][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 106.216864][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 106.225119][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.444265][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 107.510739][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 107.684021][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 107.856764][ T5105] chnl_net:caif_netlink_parms(): no params data found [ 107.871805][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 107.944495][ T52] Bluetooth: hci0: command tx timeout [ 108.103683][ T52] Bluetooth: hci1: command tx timeout [ 108.129855][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.138289][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.145755][ T5089] bridge_slave_0: entered allmulticast mode [ 108.154006][ T5089] bridge_slave_0: entered promiscuous mode [ 108.184733][ T52] Bluetooth: hci4: command tx timeout [ 108.185025][ T5091] Bluetooth: hci3: command tx timeout [ 108.190443][ T52] Bluetooth: hci2: command tx timeout [ 108.264448][ T52] Bluetooth: hci5: command tx timeout [ 108.281451][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.288869][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.296248][ T5089] bridge_slave_1: entered allmulticast mode [ 108.304984][ T5089] bridge_slave_1: entered promiscuous mode [ 108.337561][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.344997][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.352192][ T5088] bridge_slave_0: entered allmulticast mode [ 108.361455][ T5088] bridge_slave_0: entered promiscuous mode [ 108.440455][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 108.480936][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.488628][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.496740][ T5088] bridge_slave_1: entered allmulticast mode [ 108.505959][ T5088] bridge_slave_1: entered promiscuous mode [ 108.583221][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.591461][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.598852][ T5096] bridge_slave_0: entered allmulticast mode [ 108.607677][ T5096] bridge_slave_0: entered promiscuous mode [ 108.621486][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.629004][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.636380][ T5096] bridge_slave_1: entered allmulticast mode [ 108.645144][ T5096] bridge_slave_1: entered promiscuous mode [ 108.669532][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.727815][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.735415][ T5105] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.742624][ T5105] bridge_slave_0: entered allmulticast mode [ 108.751058][ T5105] bridge_slave_0: entered promiscuous mode [ 108.763249][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.770717][ T5105] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.778291][ T5105] bridge_slave_1: entered allmulticast mode [ 108.786815][ T5105] bridge_slave_1: entered promiscuous mode [ 108.879180][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.918116][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.935714][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.993654][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.000944][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.008671][ T5098] bridge_slave_0: entered allmulticast mode [ 109.017666][ T5098] bridge_slave_0: entered promiscuous mode [ 109.057172][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.167751][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.175302][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.182506][ T5098] bridge_slave_1: entered allmulticast mode [ 109.191898][ T5098] bridge_slave_1: entered promiscuous mode [ 109.206816][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.230944][ T5089] team0: Port device team_slave_0 added [ 109.244166][ T5089] team0: Port device team_slave_1 added [ 109.256282][ T5088] team0: Port device team_slave_0 added [ 109.267897][ T5105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.391173][ T5088] team0: Port device team_slave_1 added [ 109.401525][ T5105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.466930][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.503349][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.510972][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.537605][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.631433][ T5096] team0: Port device team_slave_0 added [ 109.645408][ T5096] team0: Port device team_slave_1 added [ 109.658692][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.692370][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.699984][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.726059][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.738356][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.745771][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.771748][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.786513][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.793595][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.819614][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.864114][ T5105] team0: Port device team_slave_0 added [ 109.992537][ T5105] team0: Port device team_slave_1 added [ 110.024761][ T52] Bluetooth: hci0: command tx timeout [ 110.030097][ T5098] team0: Port device team_slave_0 added [ 110.042498][ T5098] team0: Port device team_slave_1 added [ 110.049551][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.057224][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.064716][ T5097] bridge_slave_0: entered allmulticast mode [ 110.072697][ T5097] bridge_slave_0: entered promiscuous mode [ 110.083964][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.091233][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.098526][ T5097] bridge_slave_1: entered allmulticast mode [ 110.107174][ T5097] bridge_slave_1: entered promiscuous mode [ 110.138698][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.145860][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.171945][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.183808][ T52] Bluetooth: hci1: command tx timeout [ 110.193106][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.200161][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.226163][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.263569][ T52] Bluetooth: hci2: command tx timeout [ 110.273481][ T52] Bluetooth: hci3: command tx timeout [ 110.273862][ T5091] Bluetooth: hci4: command tx timeout [ 110.343505][ T5091] Bluetooth: hci5: command tx timeout [ 110.436462][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.443669][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.469609][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.486957][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.522447][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.530056][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.556293][ T5105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.571446][ T5105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.578852][ T5105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.605600][ T5105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.646089][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.653070][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.680552][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.695723][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.720650][ T5088] hsr_slave_0: entered promiscuous mode [ 110.729698][ T5088] hsr_slave_1: entered promiscuous mode [ 110.799206][ T5089] hsr_slave_0: entered promiscuous mode [ 110.806334][ T5089] hsr_slave_1: entered promiscuous mode [ 110.813069][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.821675][ T5089] Cannot create hsr debugfs directory [ 111.066796][ T5097] team0: Port device team_slave_0 added [ 111.141683][ T5105] hsr_slave_0: entered promiscuous mode [ 111.149785][ T5105] hsr_slave_1: entered promiscuous mode [ 111.156968][ T5105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.164807][ T5105] Cannot create hsr debugfs directory [ 111.199847][ T5097] team0: Port device team_slave_1 added [ 111.237933][ T5096] hsr_slave_0: entered promiscuous mode [ 111.245831][ T5096] hsr_slave_1: entered promiscuous mode [ 111.252518][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.260444][ T5096] Cannot create hsr debugfs directory [ 111.391747][ T5098] hsr_slave_0: entered promiscuous mode [ 111.399169][ T5098] hsr_slave_1: entered promiscuous mode [ 111.407086][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.415576][ T5098] Cannot create hsr debugfs directory [ 111.440736][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.447752][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.474105][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.490824][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.497946][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.524754][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.062612][ T5097] hsr_slave_0: entered promiscuous mode [ 112.070365][ T5097] hsr_slave_1: entered promiscuous mode [ 112.078709][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.086377][ T5097] Cannot create hsr debugfs directory [ 112.103611][ T5091] Bluetooth: hci0: command tx timeout [ 112.263862][ T5091] Bluetooth: hci1: command tx timeout [ 112.343783][ T5091] Bluetooth: hci3: command tx timeout [ 112.343802][ T52] Bluetooth: hci2: command tx timeout [ 112.354655][ T52] Bluetooth: hci4: command tx timeout [ 112.423539][ T5091] Bluetooth: hci5: command tx timeout [ 112.653759][ T5089] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.681909][ T5089] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.697140][ T5089] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 112.747300][ T5089] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.913241][ T5088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.944472][ T5088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.958607][ T5088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.975915][ T5088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.117567][ T5096] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.150525][ T5096] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.178841][ T5096] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.193064][ T5096] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.368100][ T5105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.388026][ T5105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.408962][ T5105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.457603][ T5105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.552667][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.641045][ T5098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.663040][ T5098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.691701][ T5098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.716953][ T5098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.909717][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.921246][ T5097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.937777][ T5097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.969789][ T5097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.037701][ T5097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.109811][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.117525][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.189526][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.196886][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.208885][ T5091] Bluetooth: hci0: command tx timeout [ 114.227606][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.354245][ T5091] Bluetooth: hci1: command tx timeout [ 114.392386][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.423998][ T5091] Bluetooth: hci4: command tx timeout [ 114.424244][ T52] Bluetooth: hci2: command tx timeout [ 114.434118][ T5091] Bluetooth: hci3: command tx timeout [ 114.480916][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.488251][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.513691][ T52] Bluetooth: hci5: command tx timeout [ 114.550325][ T781] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.557634][ T781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.650524][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.668714][ T5105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.906385][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.932756][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.952582][ T5105] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.022067][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.029412][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.143343][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.150689][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.175880][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.183153][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.247494][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.254836][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.388765][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.527319][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.541376][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.548702][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.641161][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.648461][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.818007][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.861399][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.868763][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.899294][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.940408][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.977662][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.984998][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.558777][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.581889][ T5088] veth0_vlan: entered promiscuous mode [ 116.690053][ T5089] veth0_vlan: entered promiscuous mode [ 116.806476][ T5088] veth1_vlan: entered promiscuous mode [ 116.901893][ T5089] veth1_vlan: entered promiscuous mode [ 117.057771][ T5088] veth0_macvtap: entered promiscuous mode [ 117.081272][ T5105] veth0_vlan: entered promiscuous mode [ 117.107574][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.170234][ T5088] veth1_macvtap: entered promiscuous mode [ 117.229277][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.260350][ T5105] veth1_vlan: entered promiscuous mode [ 117.420903][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.457498][ T5089] veth0_macvtap: entered promiscuous mode [ 117.517133][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.548723][ T5105] veth0_macvtap: entered promiscuous mode [ 117.568103][ T5089] veth1_macvtap: entered promiscuous mode [ 117.650892][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.717398][ T5088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.742019][ T5088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.763087][ T5088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.775463][ T5088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.819817][ T5105] veth1_macvtap: entered promiscuous mode [ 117.887413][ T5098] veth0_vlan: entered promiscuous mode [ 117.997363][ T5098] veth1_vlan: entered promiscuous mode [ 118.013116][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.031878][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.046441][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.145684][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.163989][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.181706][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.235013][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.262680][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.274528][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.286724][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.300225][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.320995][ T5089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.333827][ T5089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.342923][ T5089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.352038][ T5089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.421880][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.433218][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.449632][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.460128][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.472354][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.548962][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.562816][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.601086][ T5096] veth0_vlan: entered promiscuous mode [ 118.669843][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.678796][ T5096] veth1_vlan: entered promiscuous mode [ 118.689435][ T5105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.699504][ T5105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.705788][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.711760][ T5105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.727335][ T5105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.890811][ T5098] veth0_macvtap: entered promiscuous mode 10:38:49 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x6, 0x10001, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r1, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pI4 \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) [ 119.119561][ T5098] veth1_macvtap: entered promiscuous mode [ 119.167623][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.178410][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000740)='mm_page_free_batched\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file2\x00', 0x200800f, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x32, 0x4f7, &(0x7f0000000d00)="$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") [ 119.333074][ T5097] veth0_vlan: entered promiscuous mode [ 119.483258][ T5195] loop0: detected capacity change from 0 to 512 [ 119.569950][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.574015][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.603540][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.626311][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.631528][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:49 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="5ab0e8751e59914c934ade5ff09954e42087fbc3118cc513e487656f3b1dcd37324286013bbce38007cf887941bfc95a6671a27bb6e5b1c6e9fde6d7ffdbeaccfe19374dc0bafcae10f52328be490fa16e212560e055b25559159b65a4c31d93e853772064834b84fad9330c35b5b7e23fb70a6036245010486713b14d4ebdd2a8362ba7e38bdf110e6a09ff4bb5813dcc", 0x91}, {&(0x7f00000001c0)="648f9120e9b04b4b821d9a41a0ec04e8b7b6ca40234af47c7c060f6e2b1aa73f4c5251241c71102dbc8a94e4294d6e797e1c1bdccaacc91e3922b18c58f10eb6facb059ec63a580e18a2ac38ba75159e134312cdfb7f83c1cf9c6b5dbb8c1e522d6a5686840673977c20fc54168af2", 0x6f}, {&(0x7f0000000580)="8236ba29313cb7d190ad9f66dc7f5371cd76996d97b4e24c2c3e19e4291d329a7ecfea4e6e208b1e7c08f6b95b479d76a68e2e8e6cae18cf1b0bcf4409c2f3813e0e13480982c2b8d3eee02b78c43e8d9be0cca2fa3e923bebe42ffc7fb9f75290fb46ed27dfe128dab637d25a1c889310", 0x71}], 0x3}, 0x0) read(r0, 0x0, 0x0) [ 119.672222][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.705324][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.749863][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.771278][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 10:38:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000010c0)={{r0}, &(0x7f0000001040), &(0x7f0000001080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setfsuid(0x0) [ 119.903730][ T5096] veth0_macvtap: entered promiscuous mode [ 119.929303][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.970597][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.999157][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.011161][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.056084][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.088294][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:38:50 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/176}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r2, 0x0, &(0x7f00000003c0)=""/219}, 0x20) [ 120.126962][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.196279][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.205903][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.236790][ T5097] veth1_vlan: entered promiscuous mode [ 120.268020][ T5096] veth1_macvtap: entered promiscuous mode 10:38:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)={0xb0, 0x0, 0x0, [{{}, {0x0, 0x0, 0x1, 0x0, '/'}}]}, 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) getresuid(&(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000280)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./file1,lowerdir=./file0,upperdir=./bus,index=on']) 10:38:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) [ 120.348036][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.367463][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.384076][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.413548][ T5098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:38:50 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1eb142, 0x0) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50}, 0x50) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6612, 0x0) [ 120.649396][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.678629][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:51 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000100)) [ 120.702397][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.726439][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.748833][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.770964][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.789449][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.810108][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.824233][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.835503][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.849845][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.958993][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.970721][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.981960][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.010970][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.030856][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.042604][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.050554][ T28] audit: type=1804 audit(1712313531.312:2): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1485680651/syzkaller.jFDroz/1/bus" dev="sda1" ino=1956 res=1 errno=0 [ 121.058114][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.101473][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.122901][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 10:38:51 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000017bc207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ext4_mballoc_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='ext4_mballoc_alloc\x00', r1}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 10:38:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)='Z', 0x1}], 0x1}, 0x0) read(r0, 0x0, 0x49) [ 121.230203][ T5097] veth0_macvtap: entered promiscuous mode [ 121.262717][ T5096] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 10:38:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = accept4$inet(r0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) [ 121.337258][ T5096] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.373461][ T5096] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.382223][ T5096] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:38:51 executing program 3: open(&(0x7f0000000280)='./file0\x00', 0x8610, 0x0) [ 121.497940][ T5097] veth1_macvtap: entered promiscuous mode 10:38:51 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchmod(r2, 0x0) [ 121.614123][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. 10:38:51 executing program 0: shmget(0x3, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000001a80), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffcdd) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') sendfile(r1, r2, 0x0, 0x37) 10:38:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r3}) 10:38:52 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000080)) timer_create(0x3, 0x0, &(0x7f0000003500)) [ 121.822027][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.875141][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.050650][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.081088][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:38:52 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1eb142, 0x0) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50}, 0x50) r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x6612, 0x0) [ 122.091710][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.102689][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.120022][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.142096][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.156565][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.167696][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.178210][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.192829][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.209628][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.321747][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.342601][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 10:38:52 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x10042, 0x0) pwrite64(r0, &(0x7f0000000100)="1d06322d5964373db9c764414c456f48173b82a7d643e95e8c49590b111f65892f6e00dda6329378ef42480a52b61bf1de404dc073cefc7f306e11861f13318ac621f76bd941de2a450a799b556a67d06c4e3d25acd316014af302414a86a64071a48b94990090f74ecd08e96e07c2a53e70561d604d09f8f8121dde126770fc8dd38580844b8c49a36d4092820ed84843f0cb7521c7119a616dc163d80c63b5172cbd1df0662cd60c252bc39a9dcabe05da3502b6336f4c0f18e2f03adabe30", 0xfffffd1d, 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffff, 0x0, 0x0, 0x2000006, 0x0, "1a5a4c00"}) sendfile(r1, r0, 0x0, 0x1000000000006) gettid() uname(&(0x7f0000000b40)=""/4096) [ 122.372907][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.406874][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.420229][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.433236][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.449302][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.483499][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.506772][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 10:38:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(0x0, 0x0, 0x0, &(0x7f0000000080)) rt_sigtimedwait(&(0x7f0000000240), 0x0, 0x0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) syz_open_procfs(0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) [ 122.526256][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.547122][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.566848][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.590420][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.695473][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.707505][ T5097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.719164][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.720402][ T28] audit: type=1804 audit(1712313532.992:3): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3820428019/syzkaller.5NmyKv/3/bus" dev="sda1" ino=1956 res=1 errno=0 [ 122.736664][ T5097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.801766][ T5097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.813332][ T5097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 10:38:53 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setstatus(r0, 0x4, 0x42800) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000240)) 10:38:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000200018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file1\x00') renameat(r2, &(0x7f00000002c0)='./file1\x00', r2, &(0x7f0000000300)='./file0\x00') readlinkat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000a40)=""/4096, 0x1000) 10:38:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 10:38:53 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0x10, 0x1001, 0x0) 10:38:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000001200)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfa) [ 123.249507][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.276640][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:53 executing program 2: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) utimensat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 10:38:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='ext4_writepages\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) [ 123.529997][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.565542][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ioperm(0x0, 0x4, 0x7) 10:38:53 executing program 0: munlockall() socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) 10:38:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000240)='./bus\x00', r3, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 10:38:54 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x25b45}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x10) [ 123.884390][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.892268][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 10:38:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x2}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) 10:38:54 executing program 0: mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, 0x12, 0xffffffffffffffff, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) 10:38:54 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896297546e791449ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53044aa21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6b7520bbba0a4bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d1631180400e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f7609794e94421a215e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba8300000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0ddb9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a413d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff6a2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec46067c90216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c70000000000000000ed23661779d6a391b708fee5462b38dd4fedb864e71705f44c6ab330ce1e774a9425e03da1c3573fac8af5e419a89191e17a59f3aa60fbc4f9f1920a9e52af0241b6fe94046813c93402913138b8e2ba399405b9c0429d2f12a2a6bfe2e7cc2d2ad4eca6c0e8127a5a1423ccc343485188d4c90d3fed4b6ef33f973b830e8983e2a7a90fb420867b7685c37df3761d9143933baa"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000940)={0x0, 0x3938700}, 0x0) 10:38:54 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 10:38:54 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f00000017c0), 0x10, 0x0) 10:38:54 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 10:38:54 executing program 0: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0) linkat(r0, &(0x7f0000000180)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 10:38:54 executing program 3: munmap(&(0x7f0000ff7000/0x3000)=nil, 0x3000) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 10:38:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) ioperm(0x0, 0x4, 0x7) 10:38:54 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:38:55 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_io_uring_setup(0x785a, &(0x7f00000000c0), &(0x7f0000ffc000), &(0x7f0000ffc000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000640)={0x0, 0x3, r1}) 10:38:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 10:38:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c40)='ext4_writepages\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r4}, 0x10) write$cgroup_pid(r3, &(0x7f0000000980), 0x12) 10:38:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) 10:38:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000100000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) 10:38:55 executing program 1: r0 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0) [ 125.146652][ T5296] ------------[ cut here ]------------ [ 125.147101][ T5065] [ 125.147111][ T5065] ================================ [ 125.147122][ T5065] WARNING: inconsistent lock state [ 125.147132][ T5065] 6.8.0-syzkaller-08951-gfe46a7dd189e #0 Not tainted [ 125.147154][ T5065] -------------------------------- [ 125.147165][ T5065] inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage. [ 125.147183][ T5065] syz-fuzzer/5065 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 125.152663][ T5296] WARNING: CPU: 1 PID: 5296 at kernel/softirq.c:362 __local_bh_enable_ip+0xc3/0x120 [ 125.154980][ T5065] ffff8880b943e6d8 ( [ 125.160068][ T5296] Modules linked in: [ 125.165156][ T5065] &rq->__lock){?.-.}-{2:2} [ 125.171804][ T5296] [ 125.171816][ T5296] CPU: 1 PID: 5296 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 125.176889][ T5065] , at: raw_spin_rq_lock_nested+0x29/0x130 [ 125.183716][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 125.190017][ T5065] {IN-HARDIRQ-W} state was registered at: [ 125.199358][ T5296] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 125.203227][ T5065] lock_acquire+0x1b1/0x540 [ 125.207100][ T5296] Code: 00 e8 b1 6c 0b 00 e8 cc 68 42 00 fb 65 8b 05 0c f1 b0 7e 85 c0 74 52 5b 5d e9 d9 44 84 09 65 8b 05 4e a5 af 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 f3 66 42 00 eb 99 48 89 ef e8 29 e0 19 00 eb a2 [ 125.211492][ T5065] _raw_spin_lock_nested+0x31/0x40 [ 125.213801][ T5296] RSP: 0018:ffffc90008eb7510 EFLAGS: 00010046 [ 125.223749][ T5065] raw_spin_rq_lock_nested+0x29/0x130 [ 125.229532][ T5296] [ 125.229541][ T5296] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3eed7 [ 125.239564][ T5065] scheduler_tick+0xa2/0x650 [ 125.245259][ T5296] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cc0674 [ 125.251128][ T5065] update_process_times+0x199/0x220 [ 125.255691][ T5296] RBP: ffffffff88cc0674 R08: 0000000000000000 R09: ffffed100bd55049 [ 125.275276][ T5065] tick_periodic+0x7e/0x230 [ 125.280461][ T5296] R10: ffff88805eaa824b R11: ffffffff934a0480 R12: fffffffffffffffe [ 125.286508][ T5065] tick_handle_periodic+0x45/0x120 [ 125.291946][ T5296] R13: ffff88805eaa8248 R14: ffff88805eaa8240 R15: 00000000049396b8 [ 125.294255][ T5065] timer_interrupt+0x4e/0x80 [ 125.302209][ T5296] FS: 00007fb6add126c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 125.306861][ T5065] __handle_irq_event_percpu+0x22c/0x750 [ 125.314902][ T5296] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.320161][ T5065] handle_irq_event+0xab/0x1e0 [ 125.328115][ T5296] CR2: 0000555594084938 CR3: 0000000021f08000 CR4: 0000000000350ef0 [ 125.332682][ T5065] handle_edge_irq+0x263/0xd10 [ 125.340658][ T5296] Call Trace: [ 125.340675][ T5296] [ 125.345828][ T5065] __common_interrupt+0xe1/0x250 [ 125.353796][ T5296] ? show_regs+0x8c/0xa0 [ 125.358446][ T5065] common_interrupt+0xab/0xd0 [ 125.367356][ T5296] ? __warn+0xe5/0x390 [ 125.373048][ T5065] asm_common_interrupt+0x26/0x40 [ 125.379645][ T5296] ? __local_bh_enable_ip+0xc3/0x120 [ 125.384469][ T5065] console_flush_all+0xa19/0xd70 [ 125.392421][ T5296] ? report_bug+0x3c0/0x580 [ 125.397245][ T5065] console_unlock+0xae/0x290 [ 125.400515][ T5296] ? handle_bug+0x3d/0x70 [ 125.403424][ T5065] vprintk_emit+0x11a/0x5a0 [ 125.408426][ T5296] ? exc_invalid_op+0x17/0x50 [ 125.412641][ T5065] vprintk+0x7f/0xa0 [ 125.417384][ T5296] ? asm_exc_invalid_op+0x1a/0x20 [ 125.421426][ T5065] _printk+0xc8/0x100 [ 125.426518][ T5296] ? sock_hash_delete_elem+0x1f4/0x260 [ 125.431774][ T5065] cpu_select_mitigations+0x1223/0x4020 [ 125.436782][ T5296] ? sock_hash_delete_elem+0x1f4/0x260 [ 125.441254][ T5065] arch_cpu_finalize_init+0xe8/0x170 [ 125.445909][ T5296] ? __local_bh_enable_ip+0xc3/0x120 [ 125.450214][ T5065] start_kernel+0x32b/0x490 [ 125.454786][ T5296] sock_hash_delete_elem+0x1f4/0x260 [ 125.459432][ T5065] x86_64_start_reservations+0x18/0x30 [ 125.463398][ T5296] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 125.468386][ T5065] x86_64_start_kernel+0xb2/0xc0 [ 125.472434][ T5296] bpf_trace_run2+0x154/0x420 [ 125.477862][ T5065] common_startup_64+0x13e/0x148 [ 125.483477][ T5296] ? __pfx_bpf_trace_run2+0x10/0x10 [ 125.488904][ T5065] irq event stamp: 30384 [ 125.488918][ T5065] hardirqs last enabled at (30381): [] _raw_spin_unlock_irqrestore+0x52/0x80 [ 125.494265][ T5296] __bpf_trace_tlb_flush+0xd2/0x110 [ 125.499516][ T5065] hardirqs last disabled at (30382): [] __schedule+0x2644/0x5c70 [ 125.504091][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.509344][ T5065] softirqs last enabled at (30384): [] sock_hash_delete_elem+0x1f4/0x260 [ 125.514875][ T5296] ? trace_tlb_flush+0x51/0x150 [ 125.520303][ T5065] softirqs last disabled at (30383): [] sock_hash_delete_elem+0xcb/0x260 [ 125.525308][ T5296] trace_tlb_flush+0xeb/0x150 [ 125.529953][ T5065] [ 125.529953][ T5065] other info that might help us debug this: [ 125.529966][ T5065] Possible unsafe locking scenario: [ 125.529966][ T5065] [ 125.534962][ T5296] switch_mm_irqs_off+0x68b/0xbc0 [ 125.540132][ T5065] CPU0 [ 125.540140][ T5065] ---- [ 125.544354][ T5296] ? trace_tlb_flush+0x6/0x150 [ 125.554728][ T5065] lock(&rq->__lock [ 125.559925][ T5296] ? srso_return_thunk+0x5/0x5f [ 125.569193][ T5065] ); [ 125.569201][ T5065] [ 125.574977][ T5296] ? trace_tlb_flush+0x6/0x150 [ 125.585006][ T5065] lock(&rq->__lock [ 125.589834][ T5296] __text_poke+0x543/0xcb0 [ 125.599865][ T5065] ); [ 125.599873][ T5065] [ 125.599873][ T5065] *** DEADLOCK *** [ 125.599873][ T5065] [ 125.604536][ T5296] ? __pfx_text_poke_memcpy+0x10/0x10 [ 125.612576][ T5065] 2 locks held by syz-fuzzer/5065: [ 125.620011][ T5296] ? __pfx___text_poke+0x10/0x10 [ 125.625000][ T5065] #0: ffff8880b943e6d8 [ 125.628268][ T5296] ? trace_tlb_flush+0x6/0x150 [ 125.631530][ T5065] (&rq->__lock [ 125.636274][ T5296] ? trace_tlb_flush+0x6/0x150 [ 125.640144][ T5065] ){?.-.}-{2:2} [ 125.644972][ T5296] text_poke_bp_batch+0x1cd/0x760 [ 125.647451][ T5065] , at: raw_spin_rq_lock_nested+0x29/0x130 [ 125.650893][ T5296] ? arch_jump_label_transform_apply+0x17/0x30 [ 125.655629][ T5065] #1: ffffffff8d7b49e0 [ 125.659768][ T5296] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 125.664156][ T5065] (rcu_read_lock [ 125.666640][ T5296] ? __jump_label_patch+0x1db/0x400 [ 125.674771][ T5065] ){....}-{1:2} [ 125.680117][ T5296] ? srso_safe_ret+0xc/0x20 [ 125.685205][ T5065] , at: bpf_trace_run2+0xe4/0x420 [ 125.690155][ T5296] ? srso_return_thunk+0x5/0x5f [ 125.694281][ T5065] [ 125.694281][ T5065] stack backtrace: [ 125.694293][ T5065] CPU: 0 PID: 5065 Comm: syz-fuzzer Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 125.699022][ T5296] ? arch_jump_label_transform_queue+0xc0/0x120 [ 125.702476][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 125.707225][ T5296] text_poke_finish+0x30/0x40 [ 125.710654][ T5065] Call Trace: [ 125.710670][ T5065] [ 125.715654][ T5296] arch_jump_label_transform_apply+0x1c/0x30 [ 125.721432][ T5065] dump_stack_lvl+0x116/0x1f0 [ 125.727561][ T5296] jump_label_update+0x1d7/0x400 [ 125.731699][ T5065] mark_lock+0x923/0xc60 [ 125.737220][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.740836][ T5065] ? __pfx_mark_lock+0x10/0x10 [ 125.746004][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.749446][ T5065] ? __local_bh_enable_ip+0xc3/0x120 [ 125.753929][ T5296] static_key_enable_cpuslocked+0x1b7/0x270 [ 125.758926][ T5065] ? srso_return_thunk+0x5/0x5f [ 125.763755][ T5296] static_key_enable+0x1a/0x20 [ 125.769619][ T5065] ? disable_trace_on_warning+0x19/0x70 [ 125.779227][ T5296] tracepoint_add_func+0xa4c/0xe50 [ 125.785441][ T5065] ? srso_return_thunk+0x5/0x5f [ 125.795570][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.800220][ T5065] ? report_bug+0xf4/0x580 [ 125.803482][ T5296] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 125.806401][ T5065] ? srso_return_thunk+0x5/0x5f [ 125.812352][ T5296] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 125.817000][ T5065] ? handle_bug+0x3d/0x70 [ 125.821915][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.826133][ T5065] ? srso_return_thunk+0x5/0x5f [ 125.831913][ T5296] ? bpf_link_prime+0x8a/0x460 [ 125.836652][ T5065] ? exc_invalid_op+0x17/0x50 [ 125.842434][ T5296] ? __local_bh_enable_ip+0xa4/0x120 [ 125.847787][ T5065] mark_held_locks+0x9f/0xe0 [ 125.853654][ T5296] bpf_probe_register+0x164/0x1d0 [ 125.858476][ T5065] ? sock_hash_delete_elem+0x1f4/0x260 [ 125.863220][ T5296] bpf_raw_tp_link_attach+0x2e5/0x610 [ 125.868830][ T5065] lockdep_hardirqs_on_prepare+0x137/0x420 [ 125.873919][ T5296] ? srso_return_thunk+0x5/0x5f [ 125.878750][ T5065] ? sock_hash_delete_elem+0x1f4/0x260 [ 125.884531][ T5296] ? find_held_lock+0x2d/0x110 [ 125.888927][ T5065] trace_hardirqs_on+0x36/0x40 [ 125.895757][ T5296] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 125.900588][ T5065] __local_bh_enable_ip+0xa4/0x120 [ 125.908023][ T5296] ? __might_fault+0x13b/0x190 [ 125.912333][ T5065] sock_hash_delete_elem+0x1f4/0x260 [ 125.918178][ T5296] ? srso_return_thunk+0x5/0x5f [ 125.923010][ T5065] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 125.927748][ T5296] ? fput+0x32/0x390 [ 125.932407][ T5065] bpf_trace_run2+0x154/0x420 [ 125.937668][ T5296] ? srso_return_thunk+0x5/0x5f [ 125.942237][ T5065] ? __pfx_bpf_trace_run2+0x10/0x10 [ 125.947237][ T5296] ? __bpf_prog_get+0xa0/0x2f0 [ 125.952682][ T5065] __bpf_trace_tlb_flush+0xd2/0x110 [ 125.958028][ T5296] __sys_bpf+0x3a0/0x4b40 [ 125.963811][ T5065] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 125.968637][ T5296] ? find_held_lock+0x2d/0x110 [ 125.974078][ T5065] ? trace_tlb_flush+0x51/0x150 [ 125.978825][ T5296] ? __pfx___sys_bpf+0x10/0x10 [ 125.983581][ T5065] trace_tlb_flush+0xeb/0x150 [ 125.989436][ T5296] ? __might_fault+0x13b/0x190 [ 125.994528][ T5065] switch_mm_irqs_off+0x68b/0xbc0 [ 125.999265][ T5296] ? __pfx_lock_release+0x10/0x10 [ 126.004524][ T5065] ? cpu_attach_domain+0xce0/0x14f0 [ 126.009351][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.014787][ T5065] ? srso_return_thunk+0x5/0x5f [ 126.018663][ T5296] ? __pfx___might_resched+0x10/0x10 [ 126.023318][ T5065] __schedule+0xd2b/0x5c70 [ 126.028144][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.033321][ T5065] ? __pfx___lock_acquire+0x10/0x10 [ 126.038084][ T5296] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 126.043237][ T5065] ? __pfx_debug_object_activate+0x10/0x10 [ 126.047542][ T5296] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 126.053334][ T5065] ? srso_return_thunk+0x5/0x5f [ 126.058076][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.062906][ T5065] ? __pfx___schedule+0x10/0x10 [ 126.067654][ T5296] __x64_sys_bpf+0x78/0xc0 [ 126.072302][ T5065] ? srso_return_thunk+0x5/0x5f [ 126.077045][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.082049][ T5065] ? schedule+0x298/0x350 [ 126.087060][ T5296] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.092257][ T5065] ? __pfx_lock_release+0x10/0x10 [ 126.097089][ T5296] do_syscall_64+0xd5/0x260 [ 126.101919][ T5065] ? hrtimer_start_range_ns+0x428/0xde0 [ 126.107182][ T5296] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 126.111579][ T5065] ? futex_wait_queue+0x41/0x1f0 [ 126.116401][ T5296] RIP: 0033:0x7fb6ad07de69 [ 126.121578][ T5065] schedule+0xe7/0x350 [ 126.127882][ T5296] Code: Unable to access opcode bytes at 0x7fb6ad07de3f. [ 126.133666][ T5065] futex_wait_queue+0xfc/0x1f0 [ 126.139965][ T5296] RSP: 002b:00007fb6add120c8 EFLAGS: 00000246 [ 126.144802][ T5065] __futex_wait+0x291/0x3c0 [ 126.149625][ T5296] ORIG_RAX: 0000000000000141 [ 126.154460][ T5065] ? __pfx___futex_wait+0x10/0x10 [ 126.158849][ T5296] RAX: ffffffffffffffda RBX: 00007fb6ad1abf80 RCX: 00007fb6ad07de69 [ 126.163683][ T5065] ? __pfx_futex_wake_mark+0x10/0x10 [ 126.168502][ T5296] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 126.172818][ T5065] ? srso_return_thunk+0x5/0x5f [ 126.178077][ T5296] RBP: 00007fb6ad0ca47a R08: 0000000000000000 R09: 0000000000000000 [ 126.183077][ T5065] ? ktime_add_safe+0x60/0x70 [ 126.187557][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.193088][ T5065] futex_wait+0xe9/0x380 [ 126.198952][ T5296] R13: 000000000000000b R14: 00007fb6ad1abf80 R15: 00007ffcb62a0688 [ 126.203874][ T5065] ? __pfx_futex_wait+0x10/0x10 [ 126.208280][ T5296] [ 126.212317][ T5065] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 126.219318][ T5296] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.219337][ T5296] CPU: 1 PID: 5296 Comm: syz-executor.0 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 126.219382][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 126.219405][ T5296] Call Trace: [ 126.219420][ T5296] [ 126.219434][ T5296] dump_stack_lvl+0x3d/0x1f0 [ 126.219484][ T5296] panic+0x6f5/0x7a0 [ 126.219529][ T5296] ? __pfx_panic+0x10/0x10 [ 126.219571][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.219628][ T5296] ? show_trace_log_lvl+0x363/0x500 [ 126.219708][ T5296] ? __local_bh_enable_ip+0xc3/0x120 [ 126.219768][ T5296] check_panic_on_warn+0xab/0xb0 [ 126.219816][ T5296] __warn+0xf1/0x390 [ 126.219861][ T5296] ? __local_bh_enable_ip+0xc3/0x120 [ 126.219921][ T5296] report_bug+0x3c0/0x580 [ 126.219968][ T5296] handle_bug+0x3d/0x70 [ 126.220004][ T5296] exc_invalid_op+0x17/0x50 [ 126.220043][ T5296] asm_exc_invalid_op+0x1a/0x20 [ 126.220108][ T5296] RIP: 0010:__local_bh_enable_ip+0xc3/0x120 [ 126.220169][ T5296] Code: 00 e8 b1 6c 0b 00 e8 cc 68 42 00 fb 65 8b 05 0c f1 b0 7e 85 c0 74 52 5b 5d e9 d9 44 84 09 65 8b 05 4e a5 af 7e 85 c0 75 9e 90 <0f> 0b 90 eb 98 e8 f3 66 42 00 eb 99 48 89 ef e8 29 e0 19 00 eb a2 [ 126.220208][ T5296] RSP: 0018:ffffc90008eb7510 EFLAGS: 00010046 [ 126.220239][ T5296] RAX: 0000000000000000 RBX: 0000000000000201 RCX: 1ffffffff1f3eed7 [ 126.220265][ T5296] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff88cc0674 [ 126.220292][ T5296] RBP: ffffffff88cc0674 R08: 0000000000000000 R09: ffffed100bd55049 [ 126.220318][ T5296] R10: ffff88805eaa824b R11: ffffffff934a0480 R12: fffffffffffffffe [ 126.220346][ T5296] R13: ffff88805eaa8248 R14: ffff88805eaa8240 R15: 00000000049396b8 [ 126.220376][ T5296] ? sock_hash_delete_elem+0x1f4/0x260 [ 126.220425][ T5296] ? sock_hash_delete_elem+0x1f4/0x260 [ 126.220474][ T5296] sock_hash_delete_elem+0x1f4/0x260 [ 126.220522][ T5296] bpf_prog_2c29ac5cdc6b1842+0x42/0x4a [ 126.220558][ T5296] bpf_trace_run2+0x154/0x420 [ 126.220612][ T5296] ? __pfx_bpf_trace_run2+0x10/0x10 [ 126.220674][ T5296] __bpf_trace_tlb_flush+0xd2/0x110 [ 126.220737][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 126.220804][ T5296] ? trace_tlb_flush+0x51/0x150 [ 126.220853][ T5296] trace_tlb_flush+0xeb/0x150 [ 126.220898][ T5296] switch_mm_irqs_off+0x68b/0xbc0 [ 126.220948][ T5296] ? trace_tlb_flush+0x6/0x150 [ 126.220989][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.221047][ T5296] ? trace_tlb_flush+0x6/0x150 [ 126.221095][ T5296] __text_poke+0x543/0xcb0 [ 126.221140][ T5296] ? __pfx_text_poke_memcpy+0x10/0x10 [ 126.221194][ T5296] ? __pfx___text_poke+0x10/0x10 [ 126.221242][ T5296] ? trace_tlb_flush+0x6/0x150 [ 126.221287][ T5296] ? trace_tlb_flush+0x6/0x150 [ 126.221330][ T5296] text_poke_bp_batch+0x1cd/0x760 [ 126.221383][ T5296] ? arch_jump_label_transform_apply+0x17/0x30 [ 126.221445][ T5296] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 126.221494][ T5296] ? __jump_label_patch+0x1db/0x400 [ 126.221547][ T5296] ? srso_safe_ret+0xc/0x20 [ 126.221607][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.221664][ T5296] ? arch_jump_label_transform_queue+0xc0/0x120 [ 126.221729][ T5296] text_poke_finish+0x30/0x40 [ 126.221780][ T5296] arch_jump_label_transform_apply+0x1c/0x30 [ 126.221838][ T5296] jump_label_update+0x1d7/0x400 [ 126.221880][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 126.221940][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 126.222002][ T5296] static_key_enable_cpuslocked+0x1b7/0x270 [ 126.222047][ T5296] static_key_enable+0x1a/0x20 [ 126.222092][ T5296] tracepoint_add_func+0xa4c/0xe50 [ 126.222143][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 126.222204][ T5296] tracepoint_probe_register_prio_may_exist+0xbd/0x110 [ 126.222254][ T5296] ? __pfx_tracepoint_probe_register_prio_may_exist+0x10/0x10 [ 126.222304][ T5296] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 126.222366][ T5296] ? bpf_link_prime+0x8a/0x460 [ 126.222424][ T5296] ? __local_bh_enable_ip+0xa4/0x120 [ 126.222487][ T5296] bpf_probe_register+0x164/0x1d0 [ 126.222552][ T5296] bpf_raw_tp_link_attach+0x2e5/0x610 [ 126.222611][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.222668][ T5296] ? find_held_lock+0x2d/0x110 [ 126.222724][ T5296] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 126.222786][ T5296] ? __might_fault+0x13b/0x190 [ 126.222846][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.222903][ T5296] ? fput+0x32/0x390 [ 126.222942][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.222998][ T5296] ? __bpf_prog_get+0xa0/0x2f0 [ 126.223046][ T5296] __sys_bpf+0x3a0/0x4b40 [ 126.223107][ T5296] ? find_held_lock+0x2d/0x110 [ 126.223165][ T5296] ? __pfx___sys_bpf+0x10/0x10 [ 126.223220][ T5296] ? __might_fault+0x13b/0x190 [ 126.223268][ T5296] ? __pfx_lock_release+0x10/0x10 [ 126.223310][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.223370][ T5296] ? __pfx___might_resched+0x10/0x10 [ 126.223423][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.223497][ T5296] ? __pfx_restore_fpregs_from_fpstate+0x10/0x10 [ 126.223552][ T5296] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 126.223606][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.223670][ T5296] __x64_sys_bpf+0x78/0xc0 [ 126.223729][ T5296] ? srso_return_thunk+0x5/0x5f [ 126.223785][ T5296] ? lockdep_hardirqs_on+0x7c/0x110 [ 126.223841][ T5296] do_syscall_64+0xd5/0x260 [ 126.223904][ T5296] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 126.223965][ T5296] RIP: 0033:0x7fb6ad07de69 [ 126.223992][ T5296] Code: Unable to access opcode bytes at 0x7fb6ad07de3f. [ 126.224010][ T5296] RSP: 002b:00007fb6add120c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 126.224047][ T5296] RAX: ffffffffffffffda RBX: 00007fb6ad1abf80 RCX: 00007fb6ad07de69 [ 126.851945][ T5296] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011 [ 126.859929][ T5296] RBP: 00007fb6ad0ca47a R08: 0000000000000000 R09: 0000000000000000 [ 126.867926][ T5296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.875902][ T5296] R13: 000000000000000b R14: 00007fb6ad1abf80 R15: 00007ffcb62a0688 [ 126.883896][ T5296] [ 128.020581][ T5296] Shutting down cpus with NMI [ 128.025552][ T5296] Kernel Offset: disabled [ 128.029895][ T5296] Rebooting in 86400 seconds..