last executing test programs: 3.663415583s ago: executing program 1 (id=41): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000003b00090000000000cd000000010000001800038034"], 0x2c}}, 0x0) 3.609168638s ago: executing program 1 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") socket(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x103382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000c00)={r4, 0x1275, {0x0, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x6, 0x1b, 0x8, "e7be1a9edff60f0a961a1d5f33079eb98000c1378f4832ac567602f7abe07131f47c6fe1c3aa31aaa97985a5a70ea788ebcd71d18aa07ed069b1cb79ac7c2dc9", "8085d0df4f7469a6f582b4955c0a3a7bbde6aa0aa4f18c8070568bd06b392ff4ad96169d39485545b41e4cb871267dc8e94faf71143b589ac9dd000000000002", "c8366410c80ad1bbbf9fd978d55fa79ce0707d9ec20a1464dcb3a5554d49a3cf", [0x5, 0x4]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'sit0\x00', r8, 0x8000, 0x1, 0x7ff, 0x5, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x66, 0x0, 0x10, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_addr={0x44, 0x4, 0x68}]}}}}}) socket$inet6(0xa, 0x1, 0x39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000782e00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b70300005232000085000000100000009500000000000000b0fcf0993af5baf3bda1bfbb17f0e062b9ec56a001ac279cf5587c1d38724a5b6fcee4032364d2593305368b68b590441458c37821bcd8635305ea61e3b0eba1fba2db8ef2b1d6c2dca74179fc20c968cfa7b7cd263df7821b6a249eaac508a4d4e5c83460e1c2db20b00f4537a39fd9b4cc0c596f80e5e476399f58d6035943bee4d94edeb9c21f88"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000edffffff0807000002000000"], 0x8201) socket$nl_netfilter(0x10, 0x3, 0xc) 2.74325618s ago: executing program 1 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 2.527696158s ago: executing program 1 (id=52): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000004c0)={0x3d17, 0x0, 0x0, 0x3, 0x0, "7e12105588f633bbb1df022dace17a32d211ee"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) write$eventfd(r4, &(0x7f0000000080), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.43808091s ago: executing program 2 (id=65): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x1000}, 0x0, 0x0, 0x7, 0x7fffffffffffffff, 0x3, 0x8000, 0x4e, 0x9}}], 0x58, 0x800}, 0x0) 1.280043893s ago: executing program 2 (id=66): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000046, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) syz_open_dev$usbmon(&(0x7f00000002c0), 0x2, 0x101642) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r5 = dup(r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) 1.208922829s ago: executing program 0 (id=69): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d20680d7fdfe4b88942a31f48597e36e03b9d6579b1c599db6e466049c2d4c830345305135e65d3a895c50f80200f6c0aba61f6304000000ff"], 0xdd12}], 0x1}, 0x0) 1.055459242s ago: executing program 0 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) shmdt(0x0) 924.661273ms ago: executing program 0 (id=74): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") 923.942833ms ago: executing program 4 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x10000a006) 731.046459ms ago: executing program 0 (id=78): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) 730.728439ms ago: executing program 4 (id=79): r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000200)=0x2, 0x4) r1 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 695.017942ms ago: executing program 3 (id=80): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000a108000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000004bb9cbd5de04003a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYRESOCT=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@cgroup, 0xffffffffffffffff, 0x8, 0x10, 0x0, @void, @value, @void, @void, r6}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x589000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r2, 0xffffffffffffffff, 0x0, 0x2c, 0x0, @void, @void, @void, @value, r6}, 0x20) open_by_handle_at(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000020000000e000000cd0000007300000049000000bb5900002e000000f021c44134a5dd7113ff2058dacf57030000c7a0c0393cc4839e1f25d4e1f9825f7e719d717c59bc27a5f682ccfe2ef9f19adcb4ef38e00fdc373f85c62941d2bdbea360fee716e86579241eaccb3dd71691eea75744b43f66d8923261448e2c2aa42d2ebdba8308afe11a9357754a08d9f736e7e44a2dee85a2fe92809fd6fe3118178b3d224e895113fcdf2f16a3ff56124a52ad2db28ddb89384056e0684e89f4b6969fd527cd59967dbda930b0273f19c6bed2e54e175142111b07f0245b57e1ebc226555a"], 0x4142) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r8, 0x1, 0x800000, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 631.619247ms ago: executing program 0 (id=81): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) 492.122909ms ago: executing program 1 (id=82): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0), 0x11, 0x4be, &(0x7f0000000540)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file3\x00', 0x4) 491.78597ms ago: executing program 4 (id=83): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 439.715603ms ago: executing program 3 (id=84): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 413.831856ms ago: executing program 0 (id=85): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x11fd, &(0x7f0000001b80)="$eJzs3E2LW1UYB/CncWrHqfOi1mq70INuXF06s3AlyCBTkAkotRFaQbh1bjTkmoTcMBARa1du/Rzi0p0gfoHZ+BnczcZlF+IVb/o2NbW66ETa32+RPOQ8/9x7CAROOCeHb337eb9bZd18Eq0TJ6I1ikg3U6RoRUTUfz28shuNK1d3t9vtnUspXdy+vPlmSmnt1Z8++vL7136enP7wh7UfT8XBxseHv239enD24NzhH5c/61WpV6XBcJLydG04nOTXyiLt9ap+ltL7ZZFXReoNqmJ8ZLxbDkejacoHe6sro3FRVSkfTFO/mKbJME3G05R/mvcGKcuytLoSPNDJh7d0vrtZ13VEXZ+Mp6Ou6/qZWInT8Wysxlp8HRHPxfPxQpyJF+NsvBQvx7mm6zhuHwAAAAAAAAAAAAAAAAAAAJ4c/3T+fz02nP8HAAAAAAAAAAAAAAAAAACAY/DBlau72+32zqWUliPKb/Y7+53Z82z8xu3GC7Eev0dz+n9mVl98t71zITU24kZ5/Vb++n7nqSa23Y1elFHEZvN3ArfyS83Y7fzmLJ+O5k/Fyr35rViPM/OvvzU3vxxvvH5PPov1+OWTGEYZe8217+a/2kzpnffa9+XPN30AAADwOMjSHXPX71n2oPFZ/s76+uG/D9y3vl6K80uLnTsR1fSLfl6Wxfhosfy3VxT/vmg9onduxf9kgorHv1j0NxPH4e6Hvug7AQAAAAAAAAAA4L94xLsIl2LOzrK3FzNVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/ZgWMBAAAAAGH+1ml0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFQAA//9Rj8zp") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x2) 368.10513ms ago: executing program 2 (id=86): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r3, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) 367.94044ms ago: executing program 4 (id=87): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) futimesat(r0, 0x0, &(0x7f0000001380)) 354.779701ms ago: executing program 3 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x1200, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x6) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 340.057322ms ago: executing program 2 (id=89): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000008800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="7efe3124c05f1ed6", 0x8}], 0x1}}], 0x1, 0x9001) 260.279108ms ago: executing program 4 (id=90): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='stack\x00') pread64(r0, &(0x7f000001a240)=""/102386, 0x18ff2, 0x0) 259.865329ms ago: executing program 3 (id=91): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x434, @mcast1}]}, &(0x7f0000000180)=0x10) 239.31497ms ago: executing program 3 (id=92): recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/240, 0xf0}, 0x14040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@delchain={0x50, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffee, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xf}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x50}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 216.909152ms ago: executing program 2 (id=93): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) 67.770825ms ago: executing program 4 (id=94): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) 67.514195ms ago: executing program 2 (id=95): syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 42.683477ms ago: executing program 3 (id=96): socket(0x18, 0x0, 0x2) 0s ago: executing program 1 (id=97): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 42.374030][ T3558] cgroup: Unknown subsys name 'net' [ 42.514115][ T3558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.681458][ T3558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 45.291877][ T3580] chnl_net:caif_netlink_parms(): no params data found [ 45.376490][ T3569] chnl_net:caif_netlink_parms(): no params data found [ 45.437625][ T3580] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.445357][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.453227][ T3580] device bridge_slave_0 entered promiscuous mode [ 45.479481][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.486528][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.494598][ T3580] device bridge_slave_1 entered promiscuous mode [ 45.501839][ T3570] chnl_net:caif_netlink_parms(): no params data found [ 45.565766][ T3580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.584002][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.591581][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.599209][ T3569] device bridge_slave_0 entered promiscuous mode [ 45.608699][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.616120][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.624055][ T3569] device bridge_slave_1 entered promiscuous mode [ 45.637180][ T3580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.653998][ T3571] chnl_net:caif_netlink_parms(): no params data found [ 45.697630][ T3569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.708956][ T3580] team0: Port device team_slave_0 added [ 45.725757][ T3569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.735847][ T3580] team0: Port device team_slave_1 added [ 45.741831][ T3568] chnl_net:caif_netlink_parms(): no params data found [ 45.804574][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.811591][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.837611][ T3580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.853220][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.860382][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.867911][ T3570] device bridge_slave_0 entered promiscuous mode [ 45.877369][ T3569] team0: Port device team_slave_0 added [ 45.891868][ T3580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.898804][ T3580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.924830][ T3580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.938234][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.945445][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.953562][ T3570] device bridge_slave_1 entered promiscuous mode [ 45.961537][ T3569] team0: Port device team_slave_1 added [ 46.019493][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.026516][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.034598][ T3571] device bridge_slave_0 entered promiscuous mode [ 46.048861][ T3570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.071540][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.078588][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.087543][ T3571] device bridge_slave_1 entered promiscuous mode [ 46.094724][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.101729][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.127611][ T3569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.139967][ T3570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.161782][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.168823][ T3568] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.176937][ T3568] device bridge_slave_0 entered promiscuous mode [ 46.198363][ T3569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.205345][ T3569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.231520][ T3569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.253145][ T3580] device hsr_slave_0 entered promiscuous mode [ 46.259922][ T3580] device hsr_slave_1 entered promiscuous mode [ 46.266699][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.274269][ T3568] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.282427][ T3568] device bridge_slave_1 entered promiscuous mode [ 46.291736][ T3571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.306170][ T3570] team0: Port device team_slave_0 added [ 46.327074][ T3571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.357171][ T3570] team0: Port device team_slave_1 added [ 46.381401][ T3571] team0: Port device team_slave_0 added [ 46.388734][ T3568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.422209][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.429350][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.455336][ T3570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.467355][ T3571] team0: Port device team_slave_1 added [ 46.474490][ T3568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.494113][ T3570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.501157][ T3570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.527056][ T3570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.555214][ T3569] device hsr_slave_0 entered promiscuous mode [ 46.561845][ T3569] device hsr_slave_1 entered promiscuous mode [ 46.568319][ T3569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.576504][ T3569] Cannot create hsr debugfs directory [ 46.607782][ T3568] team0: Port device team_slave_0 added [ 46.622892][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.629990][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.656403][ T3571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.670964][ T3571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.677901][ T3571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.703828][ T3571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.719503][ T3568] team0: Port device team_slave_1 added [ 46.760370][ T3570] device hsr_slave_0 entered promiscuous mode [ 46.766813][ T3570] device hsr_slave_1 entered promiscuous mode [ 46.773638][ T3570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.781459][ T3570] Cannot create hsr debugfs directory [ 46.827659][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.834710][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.861172][ T3568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.883703][ T3571] device hsr_slave_0 entered promiscuous mode [ 46.890324][ T3571] device hsr_slave_1 entered promiscuous mode [ 46.896688][ T3571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.904364][ T3571] Cannot create hsr debugfs directory [ 46.916551][ T3568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.926385][ T3568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.952375][ T3568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.039782][ T3574] Bluetooth: hci0: command 0x0409 tx timeout [ 47.046376][ T3574] Bluetooth: hci1: command 0x0409 tx timeout [ 47.053255][ T3574] Bluetooth: hci2: command 0x0409 tx timeout [ 47.063880][ T3568] device hsr_slave_0 entered promiscuous mode [ 47.070681][ T3568] device hsr_slave_1 entered promiscuous mode [ 47.077030][ T3568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.084733][ T3568] Cannot create hsr debugfs directory [ 47.119139][ T3587] Bluetooth: hci3: command 0x0409 tx timeout [ 47.119828][ T3574] Bluetooth: hci4: command 0x0409 tx timeout [ 47.236644][ T3580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.255208][ T3580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.267608][ T3580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.282899][ T3580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.302061][ T3570] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.311494][ T3570] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.328112][ T3570] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.337185][ T3570] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.382264][ T3569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.410645][ T3569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.427501][ T3569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.466424][ T3569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.477052][ T3571] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.512556][ T3571] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.537634][ T3571] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.546708][ T3571] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.563907][ T3570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.574490][ T3580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.606549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.616315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.624550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.633524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.645487][ T3580] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.667268][ T3568] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.676173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.685690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.694726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.701887][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.711461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.720214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.728448][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.735637][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.748484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.757869][ T3570] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.769549][ T3568] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.791292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.802392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.812448][ T3568] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.826919][ T3568] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.845857][ T3580] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.856747][ T3580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.868211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.877599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.886311][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.893390][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.901912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.910707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.918906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.928133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.936726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.945285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.953839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.962123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.970624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.978573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.986434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.034261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.045099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.054326][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.061418][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.088500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.102956][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.113122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.123287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.137167][ T3569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.153733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.162369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.170833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.192610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.201679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.214651][ T3569] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.224329][ T3571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.235771][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.244887][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.277770][ T3570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.290987][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.300146][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.307555][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.315545][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.324004][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.332794][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.342235][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.350889][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.357928][ T891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.365552][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.374706][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.383281][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.390356][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.398133][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.410360][ T3580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.434903][ T3568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.461258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.471425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.485683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.493778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.502711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.513045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.526015][ T3571] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.546475][ T3580] device veth0_vlan entered promiscuous mode [ 48.558540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.568201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.583893][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.592959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.604134][ T3568] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.619736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.627782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.635727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.645443][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.654268][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.661352][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.668913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.677648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.686365][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.693431][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.702876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.711701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.720222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.728631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.736988][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.744040][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.751860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.760062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.767884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.779281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.788543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.806485][ T3580] device veth1_vlan entered promiscuous mode [ 48.815118][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.823808][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.858122][ T3570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.865807][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.882009][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.895745][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.906640][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.915080][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.923643][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.933628][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.942149][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.949219][ T891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.956858][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.966091][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.974934][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.983272][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.992029][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.999495][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.006878][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.022831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.047808][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.064367][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.073411][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.084258][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.093117][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.102209][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.111446][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.119455][ T3616] Bluetooth: hci2: command 0x041b tx timeout [ 49.119938][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.126089][ T3616] Bluetooth: hci1: command 0x041b tx timeout [ 49.134355][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.144918][ T3616] Bluetooth: hci0: command 0x041b tx timeout [ 49.152324][ T3568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.165141][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.174658][ T3580] device veth0_macvtap entered promiscuous mode [ 49.191277][ T3580] device veth1_macvtap entered promiscuous mode [ 49.199414][ T3616] Bluetooth: hci4: command 0x041b tx timeout [ 49.199469][ T3617] Bluetooth: hci3: command 0x041b tx timeout [ 49.211814][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.223808][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.234179][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.245916][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.254827][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.265871][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.274587][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.304204][ T3571] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.321059][ T3571] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.339336][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.348352][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.357562][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.366730][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.376020][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.391088][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.405902][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.430098][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.442614][ T3580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.457580][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.481626][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.490353][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.502648][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.514858][ T3580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.532267][ T3580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541110][ T3580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.550105][ T3580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.583780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.594640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.603889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.612926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.646921][ T3570] device veth0_vlan entered promiscuous mode [ 49.656821][ T3569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.664370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.672307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.681160][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.688518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.718421][ T3568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.738319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.746041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.760627][ T3570] device veth1_vlan entered promiscuous mode [ 49.777121][ T3571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.784352][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.792909][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.801519][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.828763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.830178][ T891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.837119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.852193][ T891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.862314][ T3569] device veth0_vlan entered promiscuous mode [ 49.876012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.884560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.893373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.901185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.915304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.926677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.947152][ T3569] device veth1_vlan entered promiscuous mode [ 49.967928][ T3571] device veth0_vlan entered promiscuous mode [ 49.983752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.992316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.001865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.011965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.020592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.028688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.037068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.054078][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.065294][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.073563][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.076870][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.092028][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.111260][ T3568] device veth0_vlan entered promiscuous mode [ 50.120881][ T3571] device veth1_vlan entered promiscuous mode [ 50.130732][ T3569] device veth0_macvtap entered promiscuous mode [ 50.138077][ T3570] device veth0_macvtap entered promiscuous mode [ 50.151855][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.160699][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.170590][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.178416][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.187353][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.195829][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.204712][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.213997][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.222031][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.230464][ T891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.241028][ T3568] device veth1_vlan entered promiscuous mode [ 50.256536][ T3570] device veth1_macvtap entered promiscuous mode [ 50.265925][ T3569] device veth1_macvtap entered promiscuous mode [ 50.329974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.349776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.370129][ T25] audit: type=1326 audit(1729382092.182:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.375456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.399887][ T25] audit: type=1326 audit(1729382092.202:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.402383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.424531][ T25] audit: type=1326 audit(1729382092.202:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.436825][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.452900][ T25] audit: type=1326 audit(1729382092.202:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.465499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.496949][ T25] audit: type=1326 audit(1729382092.262:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.499250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.521932][ T25] audit: type=1326 audit(1729382092.262:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.532650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.551545][ T25] audit: type=1326 audit(1729382092.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.574057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.588862][ T25] audit: type=1326 audit(1729382092.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.606150][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.629866][ T25] audit: type=1326 audit(1729382092.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.632004][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.664010][ T25] audit: type=1326 audit(1729382092.302:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3648 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 50.669990][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.695114][ T3571] device veth0_macvtap entered promiscuous mode [ 50.703604][ T3568] device veth0_macvtap entered promiscuous mode [ 50.723006][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.742718][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.758683][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.775603][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.794078][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.805225][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.824807][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.840689][ T3570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.851936][ T3570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.863177][ T3570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.871185][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.880119][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.888749][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.897647][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.907385][ T3571] device veth1_macvtap entered promiscuous mode [ 50.920715][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.931336][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.941817][ T3569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.952518][ T3569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.965505][ T3569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.973532][ T3568] device veth1_macvtap entered promiscuous mode [ 50.982966][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.992664][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.001451][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.010230][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.029753][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.038191][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.048960][ T3569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.057863][ T3569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.066672][ T3569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.075643][ T3569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.111218][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.123675][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.134062][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.144560][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.155150][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.165854][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.176641][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.196953][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.207817][ T3615] Bluetooth: hci0: command 0x040f tx timeout [ 51.208587][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.214251][ T3615] Bluetooth: hci1: command 0x040f tx timeout [ 51.224870][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.235925][ T3615] Bluetooth: hci2: command 0x040f tx timeout [ 51.241562][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.256412][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.267040][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.277179][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 51.287814][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.287989][ T3615] Bluetooth: hci3: command 0x040f tx timeout [ 51.300818][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.309879][ T3615] Bluetooth: hci4: command 0x040f tx timeout [ 51.318063][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.327938][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.337940][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.347392][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.358087][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.371172][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.382014][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.392593][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.403115][ T3571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.413619][ T3571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.425014][ T3571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.435155][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.444759][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.453957][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.463335][ T3571] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.482636][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.493507][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.523241][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.535683][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.545820][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.556748][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.566926][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.577465][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.587416][ T3568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 51.598152][ T3568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 51.611382][ T3568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.629446][ T3644] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.637819][ T3644] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.650033][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.658959][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.672159][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.699882][ T3568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.716172][ T3568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.724914][ T3568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.733625][ T3568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.811460][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.837049][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.872107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.886508][ T891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.886545][ T891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.941487][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.994361][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.011309][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.019619][ T891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.027537][ T891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.056545][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.088213][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.123197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.153033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.161411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.176471][ T1240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.199903][ T3644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.205176][ T1240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.224756][ T3644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.226111][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.245362][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.480221][ T3671] Falling back ldisc for ttyS3. [ 52.598987][ T3687] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 52.705567][ T3694] ptrace attach of "./syz-executor exec"[3568] was attempted by "./syz-executor exec"[3694] [ 52.859984][ T3704] netlink: 552 bytes leftover after parsing attributes in process `syz.1.22'. [ 52.957130][ T3710] syz.3.24[3710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.957225][ T3710] syz.3.24[3710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.996068][ T3716] process 'syz.1.26' launched './file1' with NULL argv: empty string added [ 53.247311][ T3735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 53.264345][ T1074] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 53.279880][ T3574] Bluetooth: hci2: command 0x0419 tx timeout [ 53.290810][ T3574] Bluetooth: hci1: command 0x0419 tx timeout [ 53.327601][ T3574] Bluetooth: hci0: command 0x0419 tx timeout [ 53.359891][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 53.370045][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 53.387827][ T3742] 9pnet: Insufficient options for proto=fd [ 53.489139][ T1074] usb 3-1: device descriptor read/64, error -71 [ 53.589615][ T3760] loop1: detected capacity change from 0 to 1024 [ 53.630779][ T3765] syz.0.43[3765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.630861][ T3765] syz.0.43[3765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.647933][ T3768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.44'. [ 53.683232][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.698806][ T3760] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 53.737101][ T3760] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 53.773058][ T3760] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: comm syz.1.42: inode #1: comm syz.1.42: iget: illegal inode # [ 53.786126][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.802290][ T3768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.835411][ T3772] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 53.874987][ T3768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.876228][ T3760] EXT4-fs (loop1): no journal found [ 53.887744][ T3760] EXT4-fs (loop1): can't get journal size [ 53.929628][ T1074] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 53.961349][ T3760] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,nouid32,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 54.033452][ T3781] loop3: detected capacity change from 0 to 512 [ 54.066220][ T3782] loop5: detected capacity change from 0 to 16385 [ 54.096590][ T3781] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 54.119249][ T3760] loop5: detected capacity change from 16385 to 16321 [ 54.159277][ T1074] usb 3-1: device descriptor read/64, error -71 [ 54.279319][ T1074] usb usb3-port1: attempt power cycle [ 54.306670][ T3789] loop3: detected capacity change from 0 to 128 [ 54.532878][ T3794] sock: sock_timestamping_bind_phc: sock not bind to device [ 54.709117][ T1074] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 54.839388][ T1074] usb 3-1: device descriptor read/8, error -71 [ 55.139078][ T1074] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 55.239358][ T1074] usb 3-1: device descriptor read/8, error -71 [ 55.369490][ T1074] usb usb3-port1: unable to enumerate USB device [ 55.437402][ T25] kauditd_printk_skb: 65 callbacks suppressed [ 55.437415][ T25] audit: type=1326 audit(1729382097.242:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3812 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.489127][ T25] audit: type=1326 audit(1729382097.242:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3812 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.551790][ T25] audit: type=1326 audit(1729382097.282:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3812 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.604020][ T25] audit: type=1326 audit(1729382097.282:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3812 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.678115][ T25] audit: type=1326 audit(1729382097.282:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3812 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.793496][ T25] audit: type=1326 audit(1729382097.592:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3822 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 55.879771][ T25] audit: type=1326 audit(1729382097.592:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3822 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e05b6cff9 code=0x7ffc0000 [ 56.049834][ T3841] loop4: detected capacity change from 0 to 1764 [ 56.108000][ T3843] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 56.384916][ T25] audit: type=1326 audit(1729382098.192:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 56.466977][ T25] audit: type=1326 audit(1729382098.212:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 56.528049][ T3865] raw_sendmsg: syz.4.79 forgot to set AF_INET. Fix it! [ 56.547693][ T25] audit: type=1326 audit(1729382098.222:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3854 comm="syz.3.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fd7d69eaff9 code=0x7ffc0000 [ 56.666078][ T3867] loop1: detected capacity change from 0 to 512 [ 56.886565][ T3867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 56.949896][ T3867] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.109134][ C0] ------------[ cut here ]------------ [ 57.109193][ C0] [ 57.109197][ C0] ====================================================== [ 57.109202][ C0] WARNING: possible circular locking dependency detected [ 57.109207][ C0] 5.15.168-syzkaller #0 Not tainted [ 57.109215][ C0] ------------------------------------------------------ [ 57.109219][ C0] syz.4.94/3895 is trying to acquire lock: [ 57.109227][ C0] ffffffff8c7fc478 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 57.109286][ C0] [ 57.109286][ C0] but task is already holding lock: [ 57.109289][ C0] ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 57.109324][ C0] [ 57.109324][ C0] which lock already depends on the new lock. [ 57.109324][ C0] [ 57.109328][ C0] [ 57.109328][ C0] the existing dependency chain (in reverse order) is: [ 57.109332][ C0] [ 57.109332][ C0] -> #3 (&base->lock){-.-.}-{2:2}: [ 57.109351][ C0] lock_acquire+0x1db/0x4f0 [ 57.109364][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 57.109380][ C0] lock_timer_base+0x120/0x260 [ 57.109395][ C0] __mod_timer+0x1d6/0xeb0 [ 57.109408][ C0] queue_delayed_work_on+0x156/0x250 [ 57.109423][ C0] enqueue_task+0x2fe/0x3a0 [ 57.109437][ C0] wake_up_new_task+0x515/0xb60 [ 57.109452][ C0] kernel_clone+0x44e/0x960 [ 57.109466][ C0] kernel_thread+0x168/0x1e0 [ 57.109478][ C0] rest_init+0x21/0x330 [ 57.109493][ C0] start_kernel+0x48c/0x540 [ 57.109505][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 57.109521][ C0] [ 57.109521][ C0] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 57.109540][ C0] lock_acquire+0x1db/0x4f0 [ 57.109553][ C0] _raw_spin_lock_nested+0x2d/0x40 [ 57.109569][ C0] raw_spin_rq_lock_nested+0x26/0x140 [ 57.109584][ C0] task_fork_fair+0x5d/0x350 [ 57.109597][ C0] sched_cgroup_fork+0x2d3/0x330 [ 57.109613][ C0] copy_process+0x224a/0x3ef0 [ 57.109626][ C0] kernel_clone+0x210/0x960 [ 57.109639][ C0] kernel_thread+0x168/0x1e0 [ 57.109652][ C0] rest_init+0x21/0x330 [ 57.109667][ C0] start_kernel+0x48c/0x540 [ 57.109679][ C0] secondary_startup_64_no_verify+0xb1/0xbb [ 57.109694][ C0] [ 57.109694][ C0] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 57.109714][ C0] lock_acquire+0x1db/0x4f0 [ 57.109726][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 57.109741][ C0] try_to_wake_up+0xae/0x1300 [ 57.109756][ C0] up+0x6e/0x90 [ 57.109769][ C0] __up_console_sem+0x11a/0x1e0 [ 57.109783][ C0] console_unlock+0x1145/0x12b0 [ 57.109796][ C0] vprintk_emit+0xbf/0x150 [ 57.109808][ C0] _printk+0xd1/0x120 [ 57.109824][ C0] addrconf_notify+0xa80/0xf30 [ 57.109837][ C0] raw_notifier_call_chain+0xd0/0x170 [ 57.109852][ C0] netdev_state_change+0x1a3/0x250 [ 57.109867][ C0] linkwatch_do_dev+0x10c/0x160 [ 57.109884][ C0] __linkwatch_run_queue+0x4ca/0x7f0 [ 57.109899][ C0] linkwatch_event+0x48/0x50 [ 57.109914][ C0] process_one_work+0x8a1/0x10c0 [ 57.109929][ C0] worker_thread+0xaca/0x1280 [ 57.109943][ C0] kthread+0x3f6/0x4f0 [ 57.109955][ C0] ret_from_fork+0x1f/0x30 [ 57.109969][ C0] [ 57.109969][ C0] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 57.109990][ C0] validate_chain+0x1649/0x5930 [ 57.110003][ C0] __lock_acquire+0x1295/0x1ff0 [ 57.110016][ C0] lock_acquire+0x1db/0x4f0 [ 57.110027][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 57.110042][ C0] down_trylock+0x1c/0xa0 [ 57.110056][ C0] __down_trylock_console_sem+0x105/0x250 [ 57.110070][ C0] console_trylock_spinning+0x8a/0x3f0 [ 57.110084][ C0] vprintk_emit+0xa6/0x150 [ 57.110096][ C0] _printk+0xd1/0x120 [ 57.110111][ C0] report_bug+0x1e5/0x2e0 [ 57.110126][ C0] handle_bug+0x3d/0x70 [ 57.110139][ C0] exc_invalid_op+0x16/0x40 [ 57.110152][ C0] asm_exc_invalid_op+0x16/0x20 [ 57.110167][ C0] copy_from_user_nofault+0x15c/0x1c0 [ 57.110182][ C0] bpf_probe_read_user+0x26/0x70 [ 57.110195][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xb68 [ 57.110208][ C0] bpf_trace_run3+0x1d1/0x380 [ 57.110221][ C0] enqueue_timer+0x3ae/0x540 [ 57.110233][ C0] __mod_timer+0xa60/0xeb0 [ 57.110247][ C0] mrp_join_timer+0x14b/0x180 [ 57.110261][ C0] call_timer_fn+0x16d/0x560 [ 57.110279][ C0] __run_timers+0x67c/0x890 [ 57.110290][ C0] run_timer_softirq+0x63/0xf0 [ 57.110305][ C0] handle_softirqs+0x3a7/0x930 [ 57.110319][ C0] __irq_exit_rcu+0x157/0x240 [ 57.110332][ C0] irq_exit_rcu+0x5/0x20 [ 57.110344][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 57.110360][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 57.110376][ C0] __jump_label_update+0x0/0x3a0 [ 57.110389][ C0] static_key_disable_cpuslocked+0xca/0x1b0 [ 57.110403][ C0] static_key_disable+0x16/0x20 [ 57.110416][ C0] tracepoint_probe_unregister+0x6e6/0x980 [ 57.110430][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 57.110444][ C0] bpf_link_put+0x234/0x2c0 [ 57.110459][ C0] bpf_link_release+0x37/0x40 [ 57.110474][ C0] __fput+0x3fe/0x8e0 [ 57.110489][ C0] task_work_run+0x129/0x1a0 [ 57.110505][ C0] exit_to_user_mode_loop+0x106/0x130 [ 57.110518][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 57.110532][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 57.110548][ C0] do_syscall_64+0x47/0xb0 [ 57.110561][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.110578][ C0] [ 57.110578][ C0] other info that might help us debug this: [ 57.110578][ C0] [ 57.110582][ C0] Chain exists of: [ 57.110582][ C0] (console_sem).lock --> &rq->__lock --> &base->lock [ 57.110582][ C0] [ 57.110606][ C0] Possible unsafe locking scenario: [ 57.110606][ C0] [ 57.110610][ C0] CPU0 CPU1 [ 57.110614][ C0] ---- ---- [ 57.110617][ C0] lock(&base->lock); [ 57.110626][ C0] lock(&rq->__lock); [ 57.110637][ C0] lock(&base->lock); [ 57.110647][ C0] lock((console_sem).lock); [ 57.110656][ C0] [ 57.110656][ C0] *** DEADLOCK *** [ 57.110656][ C0] [ 57.110659][ C0] 7 locks held by syz.4.94/3895: [ 57.110668][ C0] #0: ffffffff8c95f9c8 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_unregister+0x2e/0x980 [ 57.110704][ C0] #1: ffffffff8c7bd490 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_disable+0xe/0x20 [ 57.110739][ C0] #2: ffffffff8c9acde8 (jump_label_mutex){+.+.}-{3:3}, at: static_key_disable_cpuslocked+0x97/0x1b0 [ 57.110775][ C0] #3: ffffc90000007be0 ((&app->join_timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 57.110809][ C0] #4: ffff8880638b6cc8 (&app->lock){+.-.}-{2:2}, at: mrp_join_timer+0xc8/0x180 [ 57.110841][ C0] #5: ffff8880b9028098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 57.110875][ C0] #6: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 57.110908][ C0] [ 57.110908][ C0] stack backtrace: [ 57.110922][ C0] CPU: 0 PID: 3895 Comm: syz.4.94 Not tainted 5.15.168-syzkaller #0 [ 57.110937][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.110948][ C0] Call Trace: [ 57.110953][ C0] [ 57.110958][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 57.110974][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 57.110993][ C0] ? print_circular_bug+0x12b/0x1a0 [ 57.111009][ C0] check_noncircular+0x2f8/0x3b0 [ 57.111024][ C0] ? mark_lock+0x98/0x340 [ 57.111039][ C0] ? add_chain_block+0x850/0x850 [ 57.111052][ C0] ? lockdep_lock+0x11f/0x2a0 [ 57.111070][ C0] validate_chain+0x1649/0x5930 [ 57.111086][ C0] ? unwind_get_return_address+0x49/0x80 [ 57.111110][ C0] ? reacquire_held_locks+0x660/0x660 [ 57.111128][ C0] ? lockdep_lock+0x11f/0x2a0 [ 57.111142][ C0] ? lockdep_unlock+0x166/0x300 [ 57.111155][ C0] ? lockdep_lock+0x2a0/0x2a0 [ 57.111171][ C0] ? mark_lock+0x98/0x340 [ 57.111186][ C0] __lock_acquire+0x1295/0x1ff0 [ 57.111206][ C0] lock_acquire+0x1db/0x4f0 [ 57.111219][ C0] ? down_trylock+0x1c/0xa0 [ 57.111235][ C0] ? vsnprintf+0x1c70/0x1c70 [ 57.111253][ C0] ? read_lock_is_recursive+0x10/0x10 [ 57.111268][ C0] ? memcpy+0x3c/0x60 [ 57.111289][ C0] ? vsnprintf+0x1b93/0x1c70 [ 57.111306][ C0] ? _prb_commit+0x30a/0x3e0 [ 57.111322][ C0] ? prb_reserve+0x1240/0x1240 [ 57.111338][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 57.111355][ C0] ? down_trylock+0x1c/0xa0 [ 57.111370][ C0] ? _raw_spin_lock+0x40/0x40 [ 57.111386][ C0] ? vprintk_store+0xf1b/0x1300 [ 57.111402][ C0] down_trylock+0x1c/0xa0 [ 57.111418][ C0] __down_trylock_console_sem+0x105/0x250 [ 57.111433][ C0] ? printk_parse_prefix+0x2c0/0x2c0 [ 57.111448][ C0] ? vprintk_emit+0xa6/0x150 [ 57.111461][ C0] ? console_trylock+0x70/0x70 [ 57.111480][ C0] ? vprintk_emit+0xa6/0x150 [ 57.111493][ C0] console_trylock_spinning+0x8a/0x3f0 [ 57.111508][ C0] ? vprintk_emit+0x150/0x150 [ 57.111521][ C0] ? validate_chain+0x112/0x5930 [ 57.111535][ C0] ? reacquire_held_locks+0x660/0x660 [ 57.111551][ C0] ? validate_chain+0x112/0x5930 [ 57.111565][ C0] ? reacquire_held_locks+0x660/0x660 [ 57.111579][ C0] ? validate_chain+0x112/0x5930 [ 57.111593][ C0] ? deref_stack_reg+0xbe/0x110 [ 57.111610][ C0] vprintk_emit+0xa6/0x150 [ 57.111624][ C0] _printk+0xd1/0x120 [ 57.111641][ C0] ? report_bug+0x16e/0x2e0 [ 57.111658][ C0] ? panic+0x860/0x860 [ 57.111674][ C0] ? find_bug+0x9c/0x350 [ 57.111689][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 57.111702][ C0] report_bug+0x1e5/0x2e0 [ 57.111720][ C0] handle_bug+0x3d/0x70 [ 57.111734][ C0] exc_invalid_op+0x16/0x40 [ 57.111749][ C0] asm_exc_invalid_op+0x16/0x20 [ 57.111765][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 57.111781][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 fb c7 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 c7 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 57.111794][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 57.111806][ C0] RAX: ffffffff81aaab4c RBX: 0000000000000000 RCX: ffff888021003b80 [ 57.111817][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 57.111827][ C0] RBP: dffffc0000000000 R08: ffffffff81aaaa5d R09: fffffbfff20ec621 [ 57.111838][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 57.111848][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc900000078c8 [ 57.111860][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 57.111874][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 57.111892][ C0] bpf_probe_read_user+0x26/0x70 [ 57.111907][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xb68 [ 57.111921][ C0] bpf_trace_run3+0x1d1/0x380 [ 57.111937][ C0] ? bpf_trace_run2+0x340/0x340 [ 57.111951][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 57.111967][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 57.111982][ C0] ? _raw_spin_lock+0x40/0x40 [ 57.112000][ C0] enqueue_timer+0x3ae/0x540 [ 57.112015][ C0] __mod_timer+0xa60/0xeb0 [ 57.112033][ C0] ? mod_timer_pending+0x20/0x20 [ 57.112052][ C0] ? prandom_u32+0x218/0x260 [ 57.112070][ C0] mrp_join_timer+0x14b/0x180 [ 57.112085][ C0] call_timer_fn+0x16d/0x560 [ 57.112099][ C0] ? mrp_init_applicant+0x500/0x500 [ 57.112113][ C0] ? __run_timers+0x890/0x890 [ 57.112128][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 57.112144][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 57.112159][ C0] ? mrp_init_applicant+0x500/0x500 [ 57.112172][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 57.112188][ C0] ? mrp_init_applicant+0x500/0x500 [ 57.112202][ C0] __run_timers+0x67c/0x890 [ 57.112218][ C0] ? detach_timer+0x2f0/0x2f0 [ 57.112230][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 57.112247][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 57.112264][ C0] run_timer_softirq+0x63/0xf0 [ 57.112290][ C0] handle_softirqs+0x3a7/0x930 [ 57.112306][ C0] ? __irq_exit_rcu+0x157/0x240 [ 57.112322][ C0] ? do_softirq+0x240/0x240 [ 57.112335][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 57.112349][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 57.112367][ C0] __irq_exit_rcu+0x157/0x240 [ 57.112381][ C0] ? irq_exit_rcu+0x20/0x20 [ 57.112398][ C0] irq_exit_rcu+0x5/0x20 [ 57.112411][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 57.112428][ C0] [ 57.112432][ C0] [ 57.112437][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 57.112454][ C0] RIP: 0010:__jump_label_update+0x0/0x3a0 [ 57.112470][ C0] Code: 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 76 fa ff ff 48 89 df e8 10 ff 22 00 e9 69 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 28 89 4c 24 14 48 89 d5 48 [ 57.112481][ C0] RSP: 0018:ffffc90003037cb0 EFLAGS: 00000292 [ 57.112494][ C0] RAX: ffffffff81a71999 RBX: 0000000000000000 RCX: 0000000000000000 [ 57.112504][ C0] RDX: ffffffff8c426960 RSI: ffffffff8c3c26b0 RDI: ffffffff8dd61458 [ 57.112515][ C0] RBP: 0000000000000001 R08: ffffffff81a7198e R09: fffffbfff1bac28c [ 57.112525][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8dd61490 [ 57.112535][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8dd61458 [ 57.112548][ C0] ? jump_label_update+0x32e/0x410 [ 57.112561][ C0] ? jump_label_update+0x339/0x410 [ 57.112577][ C0] static_key_disable_cpuslocked+0xca/0x1b0 [ 57.112593][ C0] static_key_disable+0x16/0x20 [ 57.112606][ C0] tracepoint_probe_unregister+0x6e6/0x980 [ 57.112622][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 57.112641][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 57.112657][ C0] bpf_link_put+0x234/0x2c0 [ 57.112674][ C0] bpf_link_release+0x37/0x40 [ 57.112689][ C0] ? local_lock_release+0x170/0x170 [ 57.112706][ C0] __fput+0x3fe/0x8e0 [ 57.112727][ C0] task_work_run+0x129/0x1a0 [ 57.112746][ C0] exit_to_user_mode_loop+0x106/0x130 [ 57.112761][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 57.112776][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 57.112795][ C0] do_syscall_64+0x47/0xb0 [ 57.112808][ C0] ? clear_bhb_loop+0x15/0x70 [ 57.112822][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 57.112839][ C0] RIP: 0033:0x7f3e05b6cff9 [ 57.112851][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.112863][ C0] RSP: 002b:00007ffe98785688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 57.112879][ C0] RAX: 0000000000000000 RBX: 000000000000dedb RCX: 00007f3e05b6cff9 [ 57.112889][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 57.112898][ C0] RBP: 00007f3e05d26a80 R08: 0000000000000001 R09: 00007ffe9878597f [ 57.112907][ C0] R10: 00007f3e059ef000 R11: 0000000000000246 R12: 000000000000df32 [ 57.112915][ C0] R13: 00007ffe98785790 R14: 0000000000000032 R15: ffffffffffffffff [ 57.112931][ C0] [ 57.123444][ T3899] capability: warning: `syz.2.95' uses deprecated v2 capabilities in a way that may be insecure [ 57.127706][ C0] WARNING: CPU: 0 PID: 3895 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 57.127736][ C0] Modules linked in: [ 57.157222][ T3899] program syz.2.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.161668][ C0] [ 57.161676][ C0] CPU: 0 PID: 3895 Comm: syz.4.94 Not tainted 5.15.168-syzkaller #0 [ 57.161693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.161701][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 57.161721][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 fb c7 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 c7 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 58.659152][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 58.665192][ C0] RAX: ffffffff81aaab4c RBX: 0000000000000000 RCX: ffff888021003b80 [ 58.673133][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.681074][ C0] RBP: dffffc0000000000 R08: ffffffff81aaaa5d R09: fffffbfff20ec621 [ 58.689013][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 58.696961][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc900000078c8 [ 58.704915][ C0] FS: 0000555578881500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 58.713816][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.720369][ C0] CR2: 000000110c2b3c9f CR3: 00000000283fa000 CR4: 00000000003506f0 [ 58.728314][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.736256][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.744198][ C0] Call Trace: [ 58.747450][ C0] [ 58.750269][ C0] ? __warn+0x15b/0x300 [ 58.754401][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 58.759918][ C0] ? report_bug+0x1b7/0x2e0 [ 58.764395][ C0] ? handle_bug+0x3d/0x70 [ 58.768694][ C0] ? exc_invalid_op+0x16/0x40 [ 58.773339][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 58.778338][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 58.783768][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 58.789286][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 58.794800][ C0] bpf_probe_read_user+0x26/0x70 [ 58.799708][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xb68 [ 58.805223][ C0] bpf_trace_run3+0x1d1/0x380 [ 58.809872][ C0] ? bpf_trace_run2+0x340/0x340 [ 58.814690][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 58.820551][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 58.825981][ C0] ? _raw_spin_lock+0x40/0x40 [ 58.830628][ C0] enqueue_timer+0x3ae/0x540 [ 58.835185][ C0] __mod_timer+0xa60/0xeb0 [ 58.839573][ C0] ? mod_timer_pending+0x20/0x20 [ 58.844484][ C0] ? prandom_u32+0x218/0x260 [ 58.849043][ C0] mrp_join_timer+0x14b/0x180 [ 58.853690][ C0] call_timer_fn+0x16d/0x560 [ 58.858251][ C0] ? mrp_init_applicant+0x500/0x500 [ 58.863417][ C0] ? __run_timers+0x890/0x890 [ 58.868061][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 58.873228][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 58.878395][ C0] ? mrp_init_applicant+0x500/0x500 [ 58.883560][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 58.888731][ C0] ? mrp_init_applicant+0x500/0x500 [ 58.893900][ C0] __run_timers+0x67c/0x890 [ 58.898378][ C0] ? detach_timer+0x2f0/0x2f0 [ 58.903023][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 58.908971][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 58.914226][ C0] run_timer_softirq+0x63/0xf0 [ 58.918959][ C0] handle_softirqs+0x3a7/0x930 [ 58.923693][ C0] ? __irq_exit_rcu+0x157/0x240 [ 58.928513][ C0] ? do_softirq+0x240/0x240 [ 58.932984][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 58.938063][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 58.943229][ C0] __irq_exit_rcu+0x157/0x240 [ 58.947877][ C0] ? irq_exit_rcu+0x20/0x20 [ 58.952357][ C0] irq_exit_rcu+0x5/0x20 [ 58.956567][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 58.962173][ C0] [ 58.965076][ C0] [ 58.967983][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 58.973937][ C0] RIP: 0010:__jump_label_update+0x0/0x3a0 [ 58.979627][ C0] Code: 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 76 fa ff ff 48 89 df e8 10 ff 22 00 e9 69 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 28 89 4c 24 14 48 89 d5 48 [ 58.999200][ C0] RSP: 0018:ffffc90003037cb0 EFLAGS: 00000292 [ 59.005238][ C0] RAX: ffffffff81a71999 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.013196][ C0] RDX: ffffffff8c426960 RSI: ffffffff8c3c26b0 RDI: ffffffff8dd61458 [ 59.021138][ C0] RBP: 0000000000000001 R08: ffffffff81a7198e R09: fffffbfff1bac28c [ 59.029079][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8dd61490 [ 59.037018][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8dd61458 [ 59.044960][ C0] ? jump_label_update+0x32e/0x410 [ 59.050040][ C0] ? jump_label_update+0x339/0x410 [ 59.055122][ C0] static_key_disable_cpuslocked+0xca/0x1b0 [ 59.060985][ C0] static_key_disable+0x16/0x20 [ 59.065804][ C0] tracepoint_probe_unregister+0x6e6/0x980 [ 59.071580][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 59.077011][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 59.082264][ C0] bpf_link_put+0x234/0x2c0 [ 59.086739][ C0] bpf_link_release+0x37/0x40 [ 59.091388][ C0] ? local_lock_release+0x170/0x170 [ 59.096555][ C0] __fput+0x3fe/0x8e0 [ 59.100510][ C0] task_work_run+0x129/0x1a0 [ 59.105072][ C0] exit_to_user_mode_loop+0x106/0x130 [ 59.110413][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 59.115929][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 59.121443][ C0] do_syscall_64+0x47/0xb0 [ 59.125828][ C0] ? clear_bhb_loop+0x15/0x70 [ 59.130481][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.136346][ C0] RIP: 0033:0x7f3e05b6cff9 [ 59.140730][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.160307][ C0] RSP: 002b:00007ffe98785688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 59.168686][ C0] RAX: 0000000000000000 RBX: 000000000000dedb RCX: 00007f3e05b6cff9 [ 59.176629][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 59.184571][ C0] RBP: 00007f3e05d26a80 R08: 0000000000000001 R09: 00007ffe9878597f [ 59.192512][ C0] R10: 00007f3e059ef000 R11: 0000000000000246 R12: 000000000000df32 [ 59.200454][ C0] R13: 00007ffe98785790 R14: 0000000000000032 R15: ffffffffffffffff [ 59.208399][ C0] [ 59.211397][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 59.218645][ C0] CPU: 0 PID: 3895 Comm: syz.4.94 Not tainted 5.15.168-syzkaller #0 [ 59.226604][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 59.236626][ C0] Call Trace: [ 59.239884][ C0] [ 59.242700][ C0] dump_stack_lvl+0x1e3/0x2d0 [ 59.247347][ C0] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 59.252948][ C0] ? panic+0x860/0x860 [ 59.256986][ C0] ? panic+0x860/0x860 [ 59.261026][ C0] ? copy_from_user_nofault+0x110/0x1c0 [ 59.266541][ C0] ? copy_from_user_nofault+0x110/0x1c0 [ 59.272053][ C0] panic+0x318/0x860 [ 59.275918][ C0] ? __warn+0x16a/0x300 [ 59.280045][ C0] ? fb_is_primary_device+0xd0/0xd0 [ 59.285213][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 59.290727][ C0] __warn+0x2b2/0x300 [ 59.294678][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 59.300190][ C0] report_bug+0x1b7/0x2e0 [ 59.304490][ C0] handle_bug+0x3d/0x70 [ 59.308615][ C0] exc_invalid_op+0x16/0x40 [ 59.313086][ C0] asm_exc_invalid_op+0x16/0x20 [ 59.317908][ C0] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 59.324032][ C0] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 fb c7 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e4 c7 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 59.343605][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 59.349642][ C0] RAX: ffffffff81aaab4c RBX: 0000000000000000 RCX: ffff888021003b80 [ 59.357584][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.365526][ C0] RBP: dffffc0000000000 R08: ffffffff81aaaa5d R09: fffffbfff20ec621 [ 59.373465][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 59.381404][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: ffffc900000078c8 [ 59.389347][ C0] ? copy_from_user_nofault+0x6d/0x1c0 [ 59.394777][ C0] ? copy_from_user_nofault+0x15c/0x1c0 [ 59.400293][ C0] bpf_probe_read_user+0x26/0x70 [ 59.405199][ C0] bpf_prog_02073d59a3c0f06f+0x3d/0xb68 [ 59.410718][ C0] bpf_trace_run3+0x1d1/0x380 [ 59.415364][ C0] ? bpf_trace_run2+0x340/0x340 [ 59.420185][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 59.426058][ C0] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 59.431500][ C0] ? _raw_spin_lock+0x40/0x40 [ 59.436150][ C0] enqueue_timer+0x3ae/0x540 [ 59.440713][ C0] __mod_timer+0xa60/0xeb0 [ 59.445102][ C0] ? mod_timer_pending+0x20/0x20 [ 59.450010][ C0] ? prandom_u32+0x218/0x260 [ 59.454570][ C0] mrp_join_timer+0x14b/0x180 [ 59.459215][ C0] call_timer_fn+0x16d/0x560 [ 59.463774][ C0] ? mrp_init_applicant+0x500/0x500 [ 59.468941][ C0] ? __run_timers+0x890/0x890 [ 59.473587][ C0] ? do_raw_spin_unlock+0x137/0x8b0 [ 59.478754][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 59.483920][ C0] ? mrp_init_applicant+0x500/0x500 [ 59.489087][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 59.494254][ C0] ? mrp_init_applicant+0x500/0x500 [ 59.499418][ C0] __run_timers+0x67c/0x890 [ 59.503890][ C0] ? detach_timer+0x2f0/0x2f0 [ 59.508541][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.514489][ C0] ? ktime_get_real_ts64+0x460/0x460 [ 59.519742][ C0] run_timer_softirq+0x63/0xf0 [ 59.524477][ C0] handle_softirqs+0x3a7/0x930 [ 59.529215][ C0] ? __irq_exit_rcu+0x157/0x240 [ 59.534034][ C0] ? do_softirq+0x240/0x240 [ 59.538506][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 59.543592][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 59.548761][ C0] __irq_exit_rcu+0x157/0x240 [ 59.553406][ C0] ? irq_exit_rcu+0x20/0x20 [ 59.557878][ C0] irq_exit_rcu+0x5/0x20 [ 59.562088][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 59.567693][ C0] [ 59.570600][ C0] [ 59.573504][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 59.579454][ C0] RIP: 0010:__jump_label_update+0x0/0x3a0 [ 59.585147][ C0] Code: 5d c3 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 76 fa ff ff 48 89 df e8 10 ff 22 00 e9 69 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 28 89 4c 24 14 48 89 d5 48 [ 59.604731][ C0] RSP: 0018:ffffc90003037cb0 EFLAGS: 00000292 [ 59.610772][ C0] RAX: ffffffff81a71999 RBX: 0000000000000000 RCX: 0000000000000000 [ 59.618719][ C0] RDX: ffffffff8c426960 RSI: ffffffff8c3c26b0 RDI: ffffffff8dd61458 [ 59.626662][ C0] RBP: 0000000000000001 R08: ffffffff81a7198e R09: fffffbfff1bac28c [ 59.634604][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff8dd61490 [ 59.642549][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8dd61458 [ 59.650496][ C0] ? jump_label_update+0x32e/0x410 [ 59.655577][ C0] ? jump_label_update+0x339/0x410 [ 59.660659][ C0] static_key_disable_cpuslocked+0xca/0x1b0 [ 59.666522][ C0] static_key_disable+0x16/0x20 [ 59.671344][ C0] tracepoint_probe_unregister+0x6e6/0x980 [ 59.677121][ C0] ? __bpf_trace_timer_class+0x20/0x20 [ 59.682551][ C0] bpf_raw_tp_link_release+0x5f/0x80 [ 59.687806][ C0] bpf_link_put+0x234/0x2c0 [ 59.692287][ C0] bpf_link_release+0x37/0x40 [ 59.696935][ C0] ? local_lock_release+0x170/0x170 [ 59.702102][ C0] __fput+0x3fe/0x8e0 [ 59.706059][ C0] task_work_run+0x129/0x1a0 [ 59.710623][ C0] exit_to_user_mode_loop+0x106/0x130 [ 59.715966][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 59.721482][ C0] syscall_exit_to_user_mode+0x5d/0x240 [ 59.727000][ C0] do_syscall_64+0x47/0xb0 [ 59.731387][ C0] ? clear_bhb_loop+0x15/0x70 [ 59.736032][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 59.741896][ C0] RIP: 0033:0x7f3e05b6cff9 [ 59.746282][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.765855][ C0] RSP: 002b:00007ffe98785688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 59.774236][ C0] RAX: 0000000000000000 RBX: 000000000000dedb RCX: 00007f3e05b6cff9 [ 59.782176][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 59.790116][ C0] RBP: 00007f3e05d26a80 R08: 0000000000000001 R09: 00007ffe9878597f [ 59.798058][ C0] R10: 00007f3e059ef000 R11: 0000000000000246 R12: 000000000000df32 [ 59.805999][ C0] R13: 00007ffe98785790 R14: 0000000000000032 R15: ffffffffffffffff [ 59.813945][ C0] [ 60.902531][ C0] Shutting down cpus with NMI [ 60.907437][ C0] Kernel Offset: disabled [ 60.911743][ C0] Rebooting in 86400 seconds..