last executing test programs: 9.384183939s ago: executing program 2 (id=484): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 7.484467652s ago: executing program 0 (id=494): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 6.284114305s ago: executing program 0 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = dup(r0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x10000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) 6.098529203s ago: executing program 0 (id=497): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x402, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f0000005d80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000850000009e00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) 5.488722769s ago: executing program 3 (id=501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca"], 0x0) 4.964271072s ago: executing program 2 (id=504): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) 4.937941203s ago: executing program 2 (id=505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x4, &(0x7f0000000100)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x2) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) 4.410931737s ago: executing program 1 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x884) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX]) 4.349951519s ago: executing program 1 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) getgroups(0x3, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff]) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x4000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}], [], 0x6b}}) 4.300266311s ago: executing program 0 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) 4.224170614s ago: executing program 1 (id=513): io_setup(0x239f, &(0x7f0000000380)=0x0) r1 = eventfd2(0x5, 0x1) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x405, r1, 0x0, 0x0, 0x6, 0x0, 0x1, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, r1}]) 4.1032368s ago: executing program 1 (id=514): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 3.957411747s ago: executing program 4 (id=515): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 3.748077176s ago: executing program 4 (id=516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r4, 0xd, 0x1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmmsg(r2, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) 2.838756835s ago: executing program 4 (id=517): r0 = add_key(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x20002) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000001c0)={0x0, 0x3, 0x9, 0x6, 0x0, 0xd5, 0x0}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xecc0, 0x1000000}) fcntl$addseals(r3, 0x409, 0xb) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x6c0, [0x0, 0x200000000400, 0x20000000081c, 0x20000000097a], 0x0, &(0x7f0000000300), &(0x7f0000000400)=ANY=[@ANYBLOB]}, 0x78) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x208004, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRESOCT=r0], 0x1, 0x277, &(0x7f0000000000)="$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") 2.831877056s ago: executing program 0 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711090000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.828261996s ago: executing program 3 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_emit_ethernet(0xd82, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0xd4c, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x1a7, "a57f50efcc48763b0a8af3cf9d86f7e4c11e4cff500bd3941c41137b3166165daeb57e5b6263affa1faff7e34295c98cf2d3a63b6a918012980123d4a22db60e1104cfd91882adbf22ecbb0871722bcc6d10a421dd20a0198d179889616710d9fab21b7a7c072efc5ab2e99bd2b7c307d5501423c17d2e1a183a186077086894c860bf80c74c39223b2e25c0d3a1d0b1e16f11241a99ba55128e265b967d8dadce3e0c910221ca828ad6ce7a3d92e00a5104e5eb0c6d18ad39aa2d35e6c778994bbd0b06617574451d2a2f48028246f07cf649417902ee329cc4f6d3b6dd0bf91f072a6ddd73b9f6a5746a0cfe4db6ba03e782e5bfda0a212967de46d7c378753824d700e45eee8dc82e325fbf3773788b43383be21a9469dd4fefdd7f436d6f2c3cf3de6577fefc1885c38b98809f832afc4605157b113dd61e4ac0e40cb0b31a4b2a579c4d95442c02564704604aa47f0bf2928cdf9881663a70dd1fd490dd16698757789cba01eec35d6457ba077d278860ea3ed15906b0ea1cb90b20e532c4b552f6de8c4bc6b111f3ec4a259966c91ee6832d814c5dc30667a100c1c3d0c469131371efe7993324fa4a50c08c57f7f13aff64e3637906fc14c62ecc55a611d67b7c234a42790afdc89488da642a63e344ebca2ac02511a3106c753534871eb5017fb873ea8dd7c6021855e228f1838e5d79c4d632ab02c3b46df12782c6052c8222037c11e1b40ee4779f7b2efdd7512bfca3f83d892b0cd078c076412e02e541cb7278a6a86a91916daaf4cbde5064def62b2b67fd8798ebc1be714835d6c6983756a6183f346bbe17153ee4f303cf2d873926c71df52b65cf61bf28ef23d0fbbfda021aa20b5a090e6416b952fb6368d8634b31d642023e8ecb6d17b533a5e4c34dedcc78b5a8cd5f4fd5add8066bf0bc885e9ee4c7d5e696190034ab6a98f7fe06db416e497f0fd9142b8d30e1698af033120875b0ccae5bb2609a8709126cb60693e0be2bf098e77ef1d32bf626fa3cfa52655ab3225d3f9cf16f2c8b23630b38044cfc543764e40d46e715f62fd91c1973c8fc1cfd219996e28ff72f8f1f609b8f58bd81d03df2ffd232d3caeb188f901c2a4b8be244cb3e171479bae3588c72183e5ab45b54d2fa0766bd254c26bbcd60aa426d6164484bb5edebe57ad2bb6ae4220c72f2a5ea0f742b4c1c58ab581160c742a612b295db8eb31d17dbd011e527b38f4b288b2407d537b4335b0bded96e6bf7f1fb378952d186e68eef41ce506148495b068ed70f6bf041b279aaf93e5f2ba2960068b26c0088c72331c38d0a1ea2cbe61d1deaf664a4b4b65d2b83dd9e5ca8a9ba5d2fada409a49a69c1028ded14f7380d310515badec10f6afdaa885f9990a848aaa307632498e0481cd8c94618176ca70ea7653657384a71a6918d84621002bcd964a5d117ab7e0a434b0b010cfc2117487159233a87e9698e8443fe085fb996976bbe557843aa46683cd9d29534485476cca6a342785cffcf23b6323e4ffec4c7ca082e8e857226cbdf2eb7ee82086f7aba2a74a6717a43f496919c8f24cf27609611913b31789f7bafd523427c518b8951110a8c8b6f42d7730a23b1df9c1ca04c9b4803399974277d577f17d6898368e27d1eb0d64a6ce56dfab75ed0e247c74c4857a0c7084ab1019f579e5f0e55187ef051f38b9650b8fdb3d13b98f74bed7faa1f54c884b21c0585f8406802b2c9c14567f604080341244ebec456f9779cfc722d6f1167f32d4a9854d84f3876a8f978b43b2a04d004a537672ae0ec523d28a899e1c2d1426fac6ccff3ab901295ed903302f81508fa765d1376bcc9cf73fbd2f4aa43995520941824bd344f517d155d92806e69a482638e3f2d4857a69413bd15d0cd9bc00b0727032e928762a8d510ef4485b54c42e552f7b30a802908109dba6bd6009aa39025ea5a11f40d1960694365051c902e0bcbff6ece5e9557c8692583476ec7cf4a8c487d663bf1ee9a5302062885c030f4de01c28437eeccb4976b0a95511d2850521cc3d1c38832d7c173a3bd20b4a2c36267994571c0ebf40da46e0a6767629e25676187c18270f554e1d387249090f673f1f032633a3b1c93cc4d85f34ad292869708205c874eab67636f228b12ec6baac3f76e50a12814f9007c5e5bc75e0fc3d93311fe0a3d348c4d4e9820fcc64d4ac9779c66ed41439199d79d61d70b8864710aafcafad489b5b0b6b9ad9600a8f4b1b4657dfaf58578812a61b7867c4ca9a75699f0664efa49154e1a3f4152988b8914314e60c64da6279bc28ff8984ee65ef3d522c89b6233d74154408f1ee78e2e4914a88b79d7b5e1870f4b84cd08dd6034b723d461fd6bab9de0463dea867cca987b2a02bbf7c8e187794f519f5eabcd84cbf4b1a8f6283edc84d845b4baede14093f8231f4468fca51c5d9b6377e6a5e3ead1fb12fcfe992fdd4d3fda6cc1d646fda361ce0b3e581b6cfb4b0de8768bc779b6cc1cb83a43a298f1d9b7cc49e567eb6824d39603082b776c3d138cc3492305c469201866ec8c13af13c511e0ff722a5dec89e753e115d24b3d014c458b31794e2fae87aa889de0a0a3fc594729c8042767f647b625c21daddae198fdcc01eddb26f36e3ab3ab2e32bc2cb4b3d48743ec2d8ff7942bd81f5daeedbf677f35a444e44d5780a81fb1cb8a6ff6615d1bbca495c36d56de1adbaa6024370b4c63996625a0d66a3650f1b4cee75b480aa98b5eb8e81f133b7939a151451289ab5d1fded3d7cce70d663cc69136f1555fd704f5fcc245b19314dc1e7cd5daa447f335a111838887ce02c1ad8ba72f775574428028c37b2282e09ea51c8966b53f3c81ef92fb220d4580a02c2c3fecea3810ff678280b42444d9f3b51a2909e80db62b739afb950aa7c54b2b0e0076f45c8f94c6af5d2ebcd4f7f47a11b2ea78418633accde1ddc926683a62dc33753e35bd95b38a4b4154f70d912a733582f04f49258b75125eab25474d2f9a468c5cf43b518f033bed6eb61107f690cbf08de7e5864d2a611c44e2c4f81c24fc3888de1b9b918627def058458188d612d3686c0de6b7791e791d0c97c871aa0918e8c0b1e1935baa195894980777311a91039ea499f2acb231356156b87af4ead19b9edcac7fa4217ef383cff6345edf1d504934facc905ff51cf2e8546b3d646408ee5b9bc01ae9396a0fdd4e467a94848fab0d9716e1262f27c06327db8fa206314dbb6784aa89c40395bfd0f2cc8aeab96e0304b11079a8f200c9b13969d416eb29a1ae4e92de6491afc323e68f86e61bd8476090d8ac5bc7ecb24433557e73c1bf3f2a957bd92035e493648570c4a90106af7361d0438685f78ffe6be13f7f67583bb14a5f0c1666d69cb38a43260ad57ff9ffbbaf1ca1dafbcac11bbba1abef00114372d611b5fd5ab50f361d7042c3ba586acb3f0ed1668e38e625843059fc3070344dadc1d49edf2a45a3534306e5eaae8d0787c9e5cc03c3cac3a3e5ce658be291c781a3465d0d81b46768b35250d1422090cdfca12713349b80a355417a6c06d88f90fdb6d437cd92b5907470b06c87c2c161f05370ba00921d2ed6dc8f39376b50fe01396aa0f9057821a22cb18e6d993a5c7671d16ad1856229bde0499172f80173552a3c07dde82e0e43795ede5e42c0d21b6633947171ae8ebefd3c901ac7895354cedea88a5761bdbc34b2fd412ebc919de765b685bf90c55daee2110517f6e28467cb5eea451994ea288c1e83ae4c46f417bd2c21c8c28ab91b676414c0af18ded975d1ef44d2cda61aed7634bd1054b4dadb659418eb6993af78804f0cf4178162c97320635a5a0720a94656fcaa600c6cf9e52d59dfeadf9ffb203b3d914274389bde0bb95a8e9372b54b112fbb299de82921069dd863a03c306c6cd3a7b8acecfa6d95bd729277bdae8753bd52ad091bc36bff3f3cbfa85d30624d1b1d6c7a49e808c278c338c0d97b34d329180230369bc15873f962f23dca8d3bed3e5cdb6af4a16006e442460e2a7e8b3f896169721d245b492592734c67ba7a1f5caa0c857611e2b8ec43124ea8492831a9af827b8e41cf65e703c3ed816e65c5d94555a07c2486778b1ab0171ce615b6276f8a7767941024afedabd5512dcdd2412aaa86c6814f08574871d5f4afc5a4985b74a5c528162399514167d92ca0c938ea74eabf6ec91a89af1394b527f4b1dd379d065959728b4499d96e78e4f7a05bb77673439699b79d06f4b51ff420f6edade34e34669f2675fc3a8373c68e8306cdde9a42de303cbb49a563f689d63813b58a137b3354ba41a2ec73ee1fbca06b1381a8fbedb0a3937fc68d47dfef55a2e751474cabd3851ba80625645dc59aaabc498e441c75bfdbacb4430f0caecbba3afd027d293de1a93983c07b30561ad087173da9eab611d99a0224b9ee7c3b814dfe7d3f76a300e6c21fa287dfb57830aae8ed1c88464887892f747cee07a02250b7270b4ea9e8a049fbfaa88fdf17297c9ac77e457c3e33f3660ab4af6f8da55c91de1a38f2fe961646ad650e764ef8ed29524e4f8077e05585f3651b5b5c5ad5d2d9a1442e59e0e65df6a5bb3eea93619f6864449f8c202fc2668dfc9343e650ce349f645e5b4257215b1a34b5cf0fcc87592024aa72f31b1627faa7849fd8bba8baffd6f61ca64ff81ee44696cb4f941853879b96ae1549c295ba441b6601777f7b8d2847908d721fc1ae831d81981720ec2558652d14af1bbc71758d81c447a472af4aba4e237ce9e5af7c"}]}}}}}}, 0x0) 2.660074043s ago: executing program 3 (id=520): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.659822073s ago: executing program 0 (id=521): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) 2.598942726s ago: executing program 3 (id=522): rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f00000000c0)={0x103f, 0x2, 0x1}) 2.50862067s ago: executing program 3 (id=523): socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 1.909332477s ago: executing program 3 (id=524): pipe(0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r0, 0x0, 0x2144}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) 1.802195351s ago: executing program 4 (id=525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="ec00000021000100feffffff000000000000000000000000000000000000000000000000007c0000000000000000000000000000000000001700a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe8000000000000000000000000000bbac14142100000000000000000000000020010000000000000000000000000000000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb"], 0xec}}, 0x0) 1.801534491s ago: executing program 2 (id=526): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 1.632079939s ago: executing program 4 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x5}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.59864359s ago: executing program 2 (id=528): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/94, 0x5e, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f0000000b00)={'syz1\x00', {0x10, 0x4, 0x5, 0x4}, 0xe, [0x1000, 0xa, 0x5, 0x5, 0x3, 0x9, 0xf1, 0x51, 0xc, 0x9, 0x80000000, 0x8, 0x3800, 0x8, 0xf4a9, 0x101, 0x10000, 0x6, 0xa, 0x1, 0x8, 0x8, 0x870, 0x3, 0x7, 0x0, 0x1, 0x1, 0x5, 0x18, 0x0, 0x8, 0x77, 0x401, 0x52, 0x1, 0xffffffff, 0x5, 0x7fff, 0x1241, 0x4, 0x3599f3ab, 0x4000000, 0x1, 0x52f, 0x201, 0x1, 0xfffffffe, 0x40, 0x416f, 0x18, 0x5, 0x8, 0xf, 0x953d, 0x80, 0x1, 0x7, 0x7, 0x3, 0x1, 0x7fffffff, 0x81, 0x1], [0x5, 0x0, 0x6, 0x410, 0x4, 0x9a40, 0x2, 0x5, 0x78, 0x2, 0x6, 0x4, 0x6, 0x81, 0x36a7, 0x4, 0x8000, 0x9, 0x1, 0xff, 0x4, 0x500, 0x9, 0x8, 0x200, 0x1ff, 0x8e, 0x40, 0x7, 0x6, 0xf7, 0x6, 0xfd5, 0x6, 0xc4e, 0x4, 0x1, 0x3, 0x9, 0x1, 0x2, 0x1, 0x200, 0x5, 0x5, 0x6a, 0x93, 0x7ff, 0x7ff, 0x7, 0x4, 0x10001, 0x8, 0x5, 0xfffffffb, 0xfffffff8, 0x9, 0x5, 0x8001, 0x80000001, 0x1, 0x40, 0x2, 0x1], [0x5, 0x6, 0x6, 0x401, 0xd1f, 0x4, 0x2, 0x8000, 0x7, 0x47c0, 0x96bd, 0x9, 0xffffffe1, 0x8, 0x10001, 0x6, 0x3, 0xd, 0x2, 0xd78ed347, 0x8, 0x2, 0xffffffff, 0x6c3, 0x57b6d056, 0x100, 0x80, 0xfffffffb, 0x1, 0x6f25, 0x5, 0x10001, 0x6, 0x0, 0x40, 0x1, 0x7ff, 0x8, 0x8, 0xd65e, 0x0, 0x1, 0x893c, 0xfffffffe, 0x4, 0x1511, 0x3c2, 0x2, 0x0, 0x4, 0xe, 0x7, 0x7, 0x17, 0x5e, 0x7, 0xa, 0x9, 0x4, 0x200, 0x7f, 0x9, 0x3, 0x2], [0x2, 0xd3f8, 0x6, 0xdd20, 0xffffffff, 0x9, 0x5, 0x6, 0xb, 0x5d, 0xfff, 0xfb, 0x3, 0x1, 0x9, 0xcb7b, 0xdfa, 0x1ff, 0x8b9, 0x1, 0x6, 0x2, 0x81, 0x1, 0x1, 0x4d58, 0x8, 0x9, 0x1, 0x31, 0x7, 0x6, 0x2, 0x2, 0x0, 0xfffffff9, 0x1, 0x8, 0xea5, 0x0, 0x5, 0x2, 0x0, 0x9, 0x6, 0xd, 0x9, 0x6, 0x5, 0x2, 0x0, 0xb, 0x0, 0x1, 0x40, 0x4, 0xfffffff8, 0x5, 0x9, 0xf2, 0x4, 0x4, 0xffff, 0x1]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@cgroup=r4, 0xd, 0x1, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) sendmmsg(r2, 0x0, 0x0, 0x0) fsopen(0x0, 0x1) 897.532571ms ago: executing program 1 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0xcd}]}, 0x24}], 0x1, 0x0, 0x0, 0x40040}, 0x8016) 404.074092ms ago: executing program 4 (id=530): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 75.978526ms ago: executing program 2 (id=531): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 1 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtaction={0x494, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x201, 0x1, 0xff, 0xbd, 0x3, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x5, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x3ff, 0x5f24, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0x10, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x0, 0x3, 0x401, 0xfffffffb, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x6f41, 0x6, 0x2, 0xa, 0x2, 0xec6f, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x9, 0x6, 0x5, 0x6, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xfbd6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x64a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x7, 0x8, 0x8000, 0x40, 0x4, 0x4, 0x4, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0xfffffffd, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x40, 0x1, 0x80000001, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x1, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x40041}, 0x2400c800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 47.864238][ T4172] cgroup: Unknown subsys name 'net' [ 47.967130][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.146849][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.766371][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.874213][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.881879][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.890107][ T4188] device bridge_slave_0 entered promiscuous mode [ 50.931560][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.938623][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.947267][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.004517][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 51.018196][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.039322][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.085284][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 51.148494][ T4188] team0: Port device team_slave_0 added [ 51.179289][ T4188] team0: Port device team_slave_1 added [ 51.195508][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.202721][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.211004][ T4196] device bridge_slave_0 entered promiscuous mode [ 51.228152][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 51.244705][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.251980][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.260227][ T4196] device bridge_slave_1 entered promiscuous mode [ 51.276754][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.283888][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.310102][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.342574][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.349544][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.375707][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.403771][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.411177][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.418752][ T4194] device bridge_slave_0 entered promiscuous mode [ 51.439434][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.449137][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 51.458760][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.465991][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.474531][ T4194] device bridge_slave_1 entered promiscuous mode [ 51.488810][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.555582][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.562639][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.571181][ T4196] team0: Port device team_slave_0 added [ 51.586869][ T4196] team0: Port device team_slave_1 added [ 51.594866][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.606051][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.643331][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.650585][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.658179][ T4182] device bridge_slave_0 entered promiscuous mode [ 51.684497][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.691646][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.699774][ T4182] device bridge_slave_1 entered promiscuous mode [ 51.715067][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.722094][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.748166][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.761148][ T4194] team0: Port device team_slave_0 added [ 51.767832][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.774849][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.800871][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.846567][ T4194] team0: Port device team_slave_1 added [ 51.860656][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.871766][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.889042][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.897151][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.905029][ T4183] device bridge_slave_0 entered promiscuous mode [ 51.913422][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.920696][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.928620][ T4183] device bridge_slave_1 entered promiscuous mode [ 51.964125][ T4182] team0: Port device team_slave_0 added [ 51.977331][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.984452][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.010473][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.033660][ T4182] team0: Port device team_slave_1 added [ 52.049839][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.056798][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.083025][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.115650][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.131400][ T4196] device hsr_slave_0 entered promiscuous mode [ 52.138240][ T4196] device hsr_slave_1 entered promiscuous mode [ 52.144962][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.153053][ T4196] Cannot create hsr debugfs directory [ 52.169256][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.187354][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.194898][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.220968][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.236009][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.243168][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.269158][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.309458][ T4183] team0: Port device team_slave_0 added [ 52.319194][ T4183] team0: Port device team_slave_1 added [ 52.340805][ T4194] device hsr_slave_0 entered promiscuous mode [ 52.347438][ T4194] device hsr_slave_1 entered promiscuous mode [ 52.354049][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.361640][ T4194] Cannot create hsr debugfs directory [ 52.408215][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.415280][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.441299][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.453606][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.460667][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.486629][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.539200][ T4182] device hsr_slave_0 entered promiscuous mode [ 52.546455][ T4182] device hsr_slave_1 entered promiscuous mode [ 52.553042][ T4182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.560727][ T4182] Cannot create hsr debugfs directory [ 52.590332][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 52.590338][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 52.616414][ T4183] device hsr_slave_0 entered promiscuous mode [ 52.623730][ T4183] device hsr_slave_1 entered promiscuous mode [ 52.630422][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.637972][ T4183] Cannot create hsr debugfs directory [ 52.669958][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.679759][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 52.685795][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 52.757607][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.770732][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.782078][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.802507][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.880987][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.896357][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.906317][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.916946][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.997338][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.023907][ T4196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.033928][ T4196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.048026][ T4196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.058913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.070256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.082525][ T4196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.097520][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.112398][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.132092][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.141457][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.152492][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.167582][ T4182] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.184435][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.193411][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.203216][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.210454][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.218779][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.230807][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.239084][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.246156][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.254109][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.262305][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.271792][ T4182] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.280837][ T4182] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.304703][ T4182] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.321124][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.334058][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.343071][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.350164][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.358570][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.367320][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.375734][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.382822][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.417267][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.426140][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.435253][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.445418][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.454335][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.464915][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.473768][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.482619][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.491232][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.500110][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.508733][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.517299][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.550817][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.561251][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.577930][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.586792][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.595316][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.603734][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.613382][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.621789][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.630462][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.638705][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.647334][ T1267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.670853][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.681489][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.692856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.701291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.719161][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.729935][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.739120][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.750243][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.827352][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.838945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.847013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.876627][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.893800][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.913605][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.926855][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.934007][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.957971][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.974433][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.984758][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.993326][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.000418][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.008504][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.017516][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.032058][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.059741][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.067475][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.075794][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.084108][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.093554][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.103029][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.111822][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.120604][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.128848][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.136627][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.144183][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.153725][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.162242][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.170847][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.178996][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.190812][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.198509][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.207963][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.216759][ T889] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.223833][ T889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.234738][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.254673][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.268331][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.284231][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.295248][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.308111][ T889] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.315225][ T889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.324868][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.333490][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.355713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.375375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.388163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.403086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.426571][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.446091][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.465429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.474804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.483610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.493748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.502698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.511278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.520122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.547649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.557831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.581806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.621831][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.633421][ T4188] device veth0_vlan entered promiscuous mode [ 54.642058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.653791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.669818][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 54.675990][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 54.688679][ T4188] device veth1_vlan entered promiscuous mode [ 54.708934][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.726333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.734614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.743318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.750843][ T4185] Bluetooth: hci1: command 0x041b tx timeout [ 54.757245][ T4185] Bluetooth: hci3: command 0x041b tx timeout [ 54.761923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.763850][ T4185] Bluetooth: hci4: command 0x041b tx timeout [ 54.777643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.796788][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.816687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.825286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.833222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.841899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.850543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.858786][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.865847][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.873802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.882770][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.891375][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.898437][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.912166][ T4188] device veth0_macvtap entered promiscuous mode [ 54.925304][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.941416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.949388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.958305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.967112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.975894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.984617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.994554][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.009074][ T4188] device veth1_macvtap entered promiscuous mode [ 55.042434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.051662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.062803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.071695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.081822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.090255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.098427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.106775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.125978][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.137647][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.165222][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.176549][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.193784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.203232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.211882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.220607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.228802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.237913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.246641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.255748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.264986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.273607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.282626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.291119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.300942][ T4194] device veth0_vlan entered promiscuous mode [ 55.325654][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.335038][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.345671][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.354632][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.366038][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.376256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.385717][ T4194] device veth1_vlan entered promiscuous mode [ 55.416389][ T4196] device veth0_vlan entered promiscuous mode [ 55.424020][ T4182] device veth0_vlan entered promiscuous mode [ 55.431304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.439227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.447743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.456514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.464838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.488131][ T4196] device veth1_vlan entered promiscuous mode [ 55.499692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.507836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.516915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.524895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.533704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.541570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.590802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.598858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.607901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.619095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.627683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.637637][ T4194] device veth0_macvtap entered promiscuous mode [ 55.647502][ T4182] device veth1_vlan entered promiscuous mode [ 55.662462][ T4196] device veth0_macvtap entered promiscuous mode [ 55.676527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.684775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.693269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.701626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.709072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.723635][ T4196] device veth1_macvtap entered promiscuous mode [ 55.732718][ T4194] device veth1_macvtap entered promiscuous mode [ 55.772593][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.785027][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.785040][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.806201][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.817562][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.830576][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.841179][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.851903][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.862868][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.875838][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.887533][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.899238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.911072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.918968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.927392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.936112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.945077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.954830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.963681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.974651][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.985752][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.996870][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.025933][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.036079][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.053808][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.068313][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.078269][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.088969][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.105034][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.116537][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.125517][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.135285][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.144255][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.154904][ T4196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.164505][ T4196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.173564][ T4196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.182528][ T4196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.206968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.215788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.232790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.243121][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.265666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.274725][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.282647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.285108][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.318399][ T4182] device veth0_macvtap entered promiscuous mode [ 56.342957][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.351966][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.381849][ T4182] device veth1_macvtap entered promiscuous mode [ 56.420066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.428158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.447115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.465813][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.477119][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.477923][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.485074][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.502577][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.514176][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.524270][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.537761][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.548798][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.559217][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.575515][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.585722][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.604248][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.618296][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.629089][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.641636][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.655476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.659762][ T26] audit: type=1326 audit(1763618622.123:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.676929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.699467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.706962][ T26] audit: type=1326 audit(1763618622.173:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.709124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.743476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.750042][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 56.760191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.760721][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 56.769237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.788950][ T26] audit: type=1326 audit(1763618622.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.818223][ T4183] device veth0_vlan entered promiscuous mode [ 56.825935][ T26] audit: type=1326 audit(1763618622.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.850240][ T4182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.858948][ T4182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.874507][ T26] audit: type=1326 audit(1763618622.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.875826][ T4182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.905339][ T26] audit: type=1326 audit(1763618622.263:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.907836][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 56.934576][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 56.936329][ T26] audit: type=1326 audit(1763618622.263:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.940927][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 56.968873][ T26] audit: type=1326 audit(1763618622.263:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4292 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 56.969791][ T4182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.009097][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.028836][ T4183] device veth1_vlan entered promiscuous mode [ 57.035130][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.063901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.072004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.092421][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.100974][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.113672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.141181][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.149177][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.234116][ T4300] loop3: detected capacity change from 0 to 512 [ 57.241151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.241726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.271904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.280026][ T4300] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 57.312276][ T4183] device veth0_macvtap entered promiscuous mode [ 57.330185][ T4300] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.377101][ T4183] device veth1_macvtap entered promiscuous mode [ 57.410250][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.418232][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.455114][ T4305] loop4: detected capacity change from 0 to 512 [ 57.463228][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.473997][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.482608][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.493117][ T4300] EXT4-fs (loop3): 1 truncate cleaned up [ 57.503915][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.504484][ T4300] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 57.533107][ T4305] EXT4-fs (loop4): Ignoring removed orlov option [ 57.551762][ T4305] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 57.565132][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.575450][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.586080][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.596161][ T4305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 57.599097][ T4305] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.5: corrupted in-inode xattr [ 57.633157][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.641910][ T4305] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 57.644881][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.666423][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.670169][ T4305] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none. [ 57.677271][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.708997][ T26] audit: type=1800 audit(1763618623.183:10): pid=4300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 57.786671][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.815374][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.833157][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.843067][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.849716][ T3831] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 57.854116][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.871705][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.882388][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.893406][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.904251][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.916027][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.928181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.930067][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.937422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.951029][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.953945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.974680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.028462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.042649][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.059628][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.068341][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.077434][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.126920][ T3831] usb 2-1: Using ep0 maxpacket: 32 [ 58.162692][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.181771][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.226031][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.241994][ T4318] loop2: detected capacity change from 0 to 256 [ 58.251245][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.269941][ T3831] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 58.273652][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.279086][ T3831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.293773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.302684][ T3831] usb 2-1: config 0 has no interface number 0 [ 58.329776][ T3831] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 58.360954][ T3831] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.363528][ T4318] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 58.376355][ T3831] usb 2-1: config 0 interface 196 has no altsetting 0 [ 58.395673][ T4309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 58.529467][ T4321] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.660139][ T3831] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 58.679424][ T3831] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 58.689534][ T3831] usb 2-1: Product: syz [ 58.694050][ T4309] usb 4-1: Using ep0 maxpacket: 16 [ 58.708489][ T3831] usb 2-1: Manufacturer: syz [ 58.713824][ T3831] usb 2-1: SerialNumber: syz [ 58.734602][ T3831] usb 2-1: config 0 descriptor?? [ 58.831940][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 58.844400][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 58.849524][ T4309] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 58.870616][ T4309] usb 4-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 58.895915][ T4309] usb 4-1: config 0 has no interface number 0 [ 58.990864][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 59.012745][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 59.032975][ T3831] ipheth 2-1:0.196: Unable to find endpoints [ 59.058228][ T3831] usb 2-1: USB disconnect, device number 2 [ 59.071161][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 59.081138][ T4309] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 59.103959][ T4309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 59.140766][ T4309] usb 4-1: Product: syz [ 59.150595][ T4309] usb 4-1: Manufacturer: syz [ 59.155223][ T4309] usb 4-1: SerialNumber: syz [ 59.192449][ T4309] usb 4-1: config 0 descriptor?? [ 59.242228][ T4309] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 59.248648][ T4309] usb 4-1: No valid video chain found. [ 59.473107][ T3831] usb 4-1: USB disconnect, device number 2 [ 60.664945][ T4348] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 61.348858][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 62.218709][ T4359] loop1: detected capacity change from 0 to 256 [ 62.354797][ T4359] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 62.984598][ T4381] loop1: detected capacity change from 0 to 256 [ 63.052890][ T4381] FAT-fs (loop1): Directory bread(block 64) failed [ 63.060324][ T4381] FAT-fs (loop1): Directory bread(block 65) failed [ 63.066902][ T4381] FAT-fs (loop1): Directory bread(block 66) failed [ 63.073775][ T4381] FAT-fs (loop1): Directory bread(block 67) failed [ 63.080409][ T4381] FAT-fs (loop1): Directory bread(block 68) failed [ 63.086942][ T4381] FAT-fs (loop1): Directory bread(block 69) failed [ 63.093567][ T4381] FAT-fs (loop1): Directory bread(block 70) failed [ 63.100131][ T4381] FAT-fs (loop1): Directory bread(block 71) failed [ 63.106717][ T4381] FAT-fs (loop1): Directory bread(block 72) failed [ 63.113341][ T4381] FAT-fs (loop1): Directory bread(block 73) failed [ 64.670633][ T26] audit: type=1326 audit(1763618630.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 64.771832][ T26] audit: type=1326 audit(1763618630.183:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8180b2cf90 code=0x7ffc0000 [ 64.804247][ T26] audit: type=1326 audit(1763618630.183:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8180b2cf90 code=0x7ffc0000 [ 64.852815][ T26] audit: type=1326 audit(1763618630.183:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 64.969691][ T26] audit: type=1326 audit(1763618630.183:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.046827][ T4417] device syzkaller0 entered promiscuous mode [ 65.059289][ T26] audit: type=1326 audit(1763618630.223:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.118504][ T26] audit: type=1326 audit(1763618630.223:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.153761][ T26] audit: type=1326 audit(1763618630.223:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.178057][ T26] audit: type=1326 audit(1763618630.223:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.226444][ T26] audit: type=1326 audit(1763618630.223:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4410 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8180b2e749 code=0x7ffc0000 [ 65.485594][ T4429] netlink: 'syz.3.42': attribute type 32 has an invalid length. [ 65.493620][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 66.422762][ T4443] loop4: detected capacity change from 0 to 256 [ 66.549086][ T4443] FAT-fs (loop4): Directory bread(block 64) failed [ 66.555783][ T4443] FAT-fs (loop4): Directory bread(block 65) failed [ 66.562435][ T4443] FAT-fs (loop4): Directory bread(block 66) failed [ 66.568972][ T4443] FAT-fs (loop4): Directory bread(block 67) failed [ 66.575568][ T4443] FAT-fs (loop4): Directory bread(block 68) failed [ 66.582141][ T4443] FAT-fs (loop4): Directory bread(block 69) failed [ 66.588708][ T4443] FAT-fs (loop4): Directory bread(block 70) failed [ 66.595428][ T4443] FAT-fs (loop4): Directory bread(block 71) failed [ 66.602617][ T4443] FAT-fs (loop4): Directory bread(block 72) failed [ 66.609147][ T4443] FAT-fs (loop4): Directory bread(block 73) failed [ 66.629591][ C0] sched: RT throttling activated [ 67.371424][ T4452] device syzkaller0 entered promiscuous mode [ 67.379346][ T4456] loop3: detected capacity change from 0 to 512 [ 67.424566][ T4458] netlink: 156 bytes leftover after parsing attributes in process `syz.1.52'. [ 67.536487][ T4456] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.51: inode has both inline data and extents flags [ 67.593981][ T4456] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.51: couldn't read orphan inode 15 (err -117) [ 67.619868][ T4185] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.628695][ T4456] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 68.009785][ T4185] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 68.013098][ T4468] device bridge0 entered promiscuous mode [ 68.160185][ T4472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 68.601659][ T4185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.612604][ T4185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.622405][ T4185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 68.637302][ T4468] device macsec1 entered promiscuous mode [ 68.680177][ T4468] bridge0: port 3(macsec1) entered blocking state [ 68.709924][ T4185] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 68.749181][ T4468] bridge0: port 3(macsec1) entered disabled state [ 68.756049][ T4185] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 68.756073][ T4185] usb 5-1: Manufacturer: syz [ 68.771716][ T4185] usb 5-1: config 0 descriptor?? [ 68.821483][ T4468] device bridge0 left promiscuous mode [ 69.737561][ T4185] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 69.824902][ T4185] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 69.824917][ T4490] netlink: 'syz.0.63': attribute type 4 has an invalid length. [ 69.849372][ T4185] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 69.927226][ T4490] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.63'. [ 70.085882][ T4491] device syzkaller0 entered promiscuous mode [ 71.044008][ T4252] usb 5-1: USB disconnect, device number 2 [ 71.153664][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.160374][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365989][ T4518] capability: warning: `syz.1.70' uses deprecated v2 capabilities in a way that may be insecure [ 71.936689][ T4540] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 71.999181][ T4543] xt_hashlimit: size too large, truncated to 1048576 [ 72.794028][ T4550] loop4: detected capacity change from 0 to 4096 [ 73.189911][ T4550] EXT4-fs (loop4): Test dummy encryption mode enabled [ 73.544532][ T4550] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 73.685533][ T4550] System zones: 0-5 [ 73.899693][ T4550] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000004,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 74.001768][ T4570] device syzkaller0 entered promiscuous mode [ 74.134250][ T4577] loop2: detected capacity change from 0 to 512 [ 74.191096][ T4577] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.251883][ T4577] EXT4-fs (loop2): 1 truncate cleaned up [ 74.257571][ T4577] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001df,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 74.338182][ T4550] fscrypt (loop4): Error allocating 'cts(cbc(aes))' transform: -4 [ 74.376634][ T4579] overlayfs: failed to resolve './bus': -2 [ 75.162464][ T4603] xt_CT: You must specify a L4 protocol and not use inversions on it [ 75.227018][ T4607] loop2: detected capacity change from 0 to 256 [ 75.321340][ T4607] FAT-fs (loop2): Directory bread(block 64) failed [ 75.327972][ T4607] FAT-fs (loop2): Directory bread(block 65) failed [ 75.334702][ T4607] FAT-fs (loop2): Directory bread(block 66) failed [ 75.341398][ T4607] FAT-fs (loop2): Directory bread(block 67) failed [ 75.348043][ T4607] FAT-fs (loop2): Directory bread(block 68) failed [ 75.354675][ T4607] FAT-fs (loop2): Directory bread(block 69) failed [ 75.361389][ T4607] FAT-fs (loop2): Directory bread(block 70) failed [ 75.367982][ T4607] FAT-fs (loop2): Directory bread(block 71) failed [ 75.374641][ T4607] FAT-fs (loop2): Directory bread(block 72) failed [ 75.381312][ T4607] FAT-fs (loop2): Directory bread(block 73) failed [ 76.274548][ T2123] cfg80211: failed to load regulatory.db [ 78.276881][ T4654] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 80.003741][ T4674] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.081141][ T4689] loop0: detected capacity change from 0 to 256 [ 81.192500][ T4689] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 81.252218][ T4695] loop2: detected capacity change from 0 to 256 [ 81.285042][ T4698] loop3: detected capacity change from 0 to 256 [ 81.393649][ T4698] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.442702][ T4698] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 81.443663][ T4699] loop1: detected capacity change from 0 to 256 [ 81.515404][ T4698] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62d793a, utbl_chksum : 0xe619d30d) [ 81.561907][ T4699] FAT-fs (loop1): Directory bread(block 64) failed [ 81.568486][ T4699] FAT-fs (loop1): Directory bread(block 65) failed [ 81.575094][ T4699] FAT-fs (loop1): Directory bread(block 66) failed [ 81.581643][ T4699] FAT-fs (loop1): Directory bread(block 67) failed [ 81.588245][ T4699] FAT-fs (loop1): Directory bread(block 68) failed [ 81.594822][ T4699] FAT-fs (loop1): Directory bread(block 69) failed [ 81.601434][ T4699] FAT-fs (loop1): Directory bread(block 70) failed [ 81.607963][ T4699] FAT-fs (loop1): Directory bread(block 71) failed [ 81.614578][ T4699] FAT-fs (loop1): Directory bread(block 72) failed [ 81.621161][ T4699] FAT-fs (loop1): Directory bread(block 73) failed [ 82.836908][ T4719] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 84.768009][ T4737] loop2: detected capacity change from 0 to 1024 [ 84.986076][ T4737] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 85.019790][ T4737] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.034970][ T4740] loop3: detected capacity change from 0 to 256 [ 85.082515][ T4737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 85.104234][ T4740] FAT-fs (loop3): Directory bread(block 64) failed [ 85.111032][ T4740] FAT-fs (loop3): Directory bread(block 65) failed [ 85.117810][ T4740] FAT-fs (loop3): Directory bread(block 66) failed [ 85.124390][ T4740] FAT-fs (loop3): Directory bread(block 67) failed [ 85.131077][ T4740] FAT-fs (loop3): Directory bread(block 68) failed [ 85.134729][ T4737] System zones: 0-1, 3-36 [ 85.138175][ T4740] FAT-fs (loop3): Directory bread(block 69) failed [ 85.149338][ T4740] FAT-fs (loop3): Directory bread(block 70) failed [ 85.156023][ T4740] FAT-fs (loop3): Directory bread(block 71) failed [ 85.162730][ T4740] FAT-fs (loop3): Directory bread(block 72) failed [ 85.169271][ T4740] FAT-fs (loop3): Directory bread(block 73) failed [ 85.292171][ T4737] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 85.412508][ T4737] overlayfs: missing 'lowerdir' [ 85.956655][ T4765] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.346449][ T4796] bridge: RTM_NEWNEIGH with invalid ether address [ 90.283576][ T4825] loop3: detected capacity change from 0 to 256 [ 90.423595][ T4825] exFAT-fs (loop3): failed to load alloc-bitmap [ 90.430664][ T4825] exFAT-fs (loop3): failed to recognize exfat type [ 90.503229][ T4838] loop0: detected capacity change from 0 to 256 [ 90.567564][ T4838] FAT-fs (loop0): Directory bread(block 64) failed [ 90.574490][ T4838] FAT-fs (loop0): Directory bread(block 65) failed [ 90.581127][ T4838] FAT-fs (loop0): Directory bread(block 66) failed [ 90.587653][ T4838] FAT-fs (loop0): Directory bread(block 67) failed [ 90.595094][ T4838] FAT-fs (loop0): Directory bread(block 68) failed [ 90.601669][ T4838] FAT-fs (loop0): Directory bread(block 69) failed [ 90.608243][ T4838] FAT-fs (loop0): Directory bread(block 70) failed [ 90.614828][ T4838] FAT-fs (loop0): Directory bread(block 71) failed [ 90.621423][ T4838] FAT-fs (loop0): Directory bread(block 72) failed [ 90.627938][ T4838] FAT-fs (loop0): Directory bread(block 73) failed [ 90.926850][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 90.926863][ T26] audit: type=1326 audit(2000000025.969:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 91.026962][ T26] audit: type=1326 audit(2000000026.009:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 91.104222][ T26] audit: type=1326 audit(2000000026.009:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4842 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 91.439545][ T4845] loop2: detected capacity change from 0 to 32768 [ 91.916965][ T2123] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 92.015808][ T4845] Dev loop2 SGI disklabel: csum bad, label corrupted [ 92.076207][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 92.134208][ T4852] loop4: detected capacity change from 0 to 2048 [ 92.176154][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 92.216706][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 92.680648][ T2123] usb 2-1: not running at top speed; connect to a high speed hub [ 92.857373][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 92.861801][ T2123] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 92.878832][ T4852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.923058][ T4850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 92.984294][ T2123] usb 2-1: language id specifier not provided by device, defaulting to English [ 93.216905][ T4870] process 'syz.2.189' launched '/dev/fd/6' with NULL argv: empty string added [ 93.240035][ T2123] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.259544][ T2123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.276878][ T2123] usb 2-1: Product: syz [ 93.306346][ T2123] usb 2-1: Manufacturer: ቍ컁㮔讈볡똲佳Ԙ檘廊䘬㹿៰싯擦ェᕮ訃쿪䋕Ｂᬅ咮יִ椭ｙㄜ㾋引ޏ픨藒评锊윓 [ 93.919778][ T2123] usb 2-1: can't set config #1, error -71 [ 93.948149][ T2123] usb 2-1: USB disconnect, device number 3 [ 93.992118][ T26] audit: type=1326 audit(2000000029.039:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 94.028462][ T26] audit: type=1326 audit(2000000029.059:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ce83d6f90 code=0x7ffc0000 [ 94.140705][ T26] audit: type=1326 audit(2000000029.059:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ce83d6f90 code=0x7ffc0000 [ 94.177391][ T26] audit: type=1326 audit(2000000029.059:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 94.227532][ T26] audit: type=1326 audit(2000000029.059:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 94.256977][ T4894] netlink: 44 bytes leftover after parsing attributes in process `syz.2.196'. [ 94.378351][ T26] audit: type=1326 audit(2000000029.069:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 94.468655][ T26] audit: type=1326 audit(2000000029.069:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4887 comm="syz.3.195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ce83d8749 code=0x7ffc0000 [ 94.936915][ T4899] loop4: detected capacity change from 0 to 512 [ 95.006561][ T4899] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.040241][ T4901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.200'. [ 95.050222][ T4899] EXT4-fs (loop4): inline encryption not supported [ 95.080509][ T4899] EXT4-fs (loop4): Test dummy encryption mode enabled [ 95.101622][ T4899] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 95.136154][ T4899] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.218748][ T4899] EXT4-fs (loop4): 1 truncate cleaned up [ 95.225554][ T4899] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 96.149990][ T4916] loop3: detected capacity change from 0 to 512 [ 96.190382][ T4916] ======================================================= [ 96.190382][ T4916] WARNING: The mand mount option has been deprecated and [ 96.190382][ T4916] and is ignored by this kernel. Remove the mand [ 96.190382][ T4916] option from the mount to silence this warning. [ 96.190382][ T4916] ======================================================= [ 96.300515][ T4916] EXT4-fs (loop3): Ignoring removed oldalloc option [ 96.312898][ T4916] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.378149][ T4899] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 96.419312][ T4916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.204: Parent and EA inode have the same ino 15 [ 96.463095][ T4916] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.522861][ T4935] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 96.605371][ T4916] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.204: Parent and EA inode have the same ino 15 [ 96.941413][ T4916] EXT4-fs (loop3): 1 orphan inode deleted [ 97.082661][ T4916] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,debug_want_extra_isize=0x000000000000005c,dioread_nolock,usrjquota=,oldalloc,sysvgroups,,errors=continue. Quota mode: none. [ 97.286361][ T4916] EXT4-fs error (device loop3): ext4_lookup:1862: inode #2: comm syz.3.204: deleted inode referenced: 15 [ 97.603162][ T4943] loop0: detected capacity change from 0 to 512 [ 97.805840][ T4943] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.998029][ T4943] EXT4-fs (loop0): 1 truncate cleaned up [ 98.003816][ T4943] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 99.059801][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 99.059817][ T26] audit: type=1326 audit(2000000004.879:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.212444][ T26] audit: type=1326 audit(2000000004.889:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.262795][ T26] audit: type=1326 audit(2000000004.889:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.285730][ T26] audit: type=1326 audit(2000000004.889:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.308147][ T26] audit: type=1326 audit(2000000004.889:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.331266][ T26] audit: type=1326 audit(2000000004.889:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.379669][ T26] audit: type=1326 audit(2000000004.889:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4952 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7b3f8749 code=0x7ffc0000 [ 99.800981][ T4963] loop0: detected capacity change from 0 to 256 [ 99.844299][ T4967] loop3: detected capacity change from 0 to 512 [ 99.921009][ T4963] FAT-fs (loop0): Directory bread(block 64) failed [ 99.969127][ T4963] FAT-fs (loop0): Directory bread(block 65) failed [ 100.022923][ T4963] FAT-fs (loop0): Directory bread(block 66) failed [ 100.029490][ T4963] FAT-fs (loop0): Directory bread(block 67) failed [ 100.061187][ T4967] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.121580][ T4967] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.217: bad orphan inode 131083 [ 100.169163][ T4967] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 100.194496][ T4963] FAT-fs (loop0): Directory bread(block 68) failed [ 100.253628][ T4963] FAT-fs (loop0): Directory bread(block 69) failed [ 100.344946][ T4963] FAT-fs (loop0): Directory bread(block 70) failed [ 100.387657][ T4963] FAT-fs (loop0): Directory bread(block 71) failed [ 100.395372][ T4963] FAT-fs (loop0): Directory bread(block 72) failed [ 100.402129][ T4963] FAT-fs (loop0): Directory bread(block 73) failed [ 101.319045][ T4991] syz.4.224[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.319154][ T4991] syz.4.224[4991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.946324][ T4998] mmap: syz.4.227 (4998) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 102.016300][ T4996] loop2: detected capacity change from 0 to 40427 [ 102.045647][ T4996] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 102.060165][ T4996] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 102.084928][ T4996] F2FS-fs (loop2): invalid crc value [ 102.143552][ T4996] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 102.308952][ T4996] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 102.336743][ T4996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 105.074010][ T5076] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 107.030653][ T5110] loop4: detected capacity change from 0 to 256 [ 107.180192][ T5110] FAT-fs (loop4): Directory bread(block 64) failed [ 107.186795][ T5110] FAT-fs (loop4): Directory bread(block 65) failed [ 107.193618][ T5110] FAT-fs (loop4): Directory bread(block 66) failed [ 107.200203][ T5110] FAT-fs (loop4): Directory bread(block 67) failed [ 107.206787][ T5110] FAT-fs (loop4): Directory bread(block 68) failed [ 107.213387][ T5110] FAT-fs (loop4): Directory bread(block 69) failed [ 107.220035][ T5110] FAT-fs (loop4): Directory bread(block 70) failed [ 107.226555][ T5110] FAT-fs (loop4): Directory bread(block 71) failed [ 107.233140][ T5110] FAT-fs (loop4): Directory bread(block 72) failed [ 107.239725][ T5110] FAT-fs (loop4): Directory bread(block 73) failed [ 108.593708][ T5118] ptrace attach of "./syz-executor exec"[5119] was attempted by "./syz-executor exec"[5118] [ 108.807242][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.274'. [ 108.817297][ T5114] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.851532][ T5127] netlink: 'syz.4.274': attribute type 8 has an invalid length. [ 109.924606][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.946816][ T5158] device syzkaller0 entered promiscuous mode [ 110.380635][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.411958][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.455433][ T21] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccb, bcdDevice= 0.00 [ 110.489795][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.527958][ T21] usb 5-1: config 0 descriptor?? [ 111.221365][ T21] usbhid 5-1:0.0: can't add hid device: -71 [ 111.233805][ T21] usbhid: probe of 5-1:0.0 failed with error -71 [ 111.549291][ T21] usb 5-1: USB disconnect, device number 3 [ 111.737818][ T5189] netem: change failed [ 111.847057][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 112.206739][ T5207] device syzkaller0 entered promiscuous mode [ 112.340084][ T4185] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.201994][ T5216] netlink: 152 bytes leftover after parsing attributes in process `syz.2.310'. [ 113.239828][ T4185] usb 5-1: Using ep0 maxpacket: 32 [ 113.359998][ T4185] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 113.371984][ T5223] syz.3.313 uses obsolete (PF_INET,SOCK_PACKET) [ 113.398641][ T4185] usb 5-1: config 0 has no interface number 0 [ 113.579864][ T4185] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 113.609641][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.651955][ T4185] usb 5-1: Product: syz [ 113.656171][ T4185] usb 5-1: Manufacturer: syz [ 113.679959][ T4185] usb 5-1: SerialNumber: syz [ 113.720407][ T4185] usb 5-1: config 0 descriptor?? [ 113.787097][ T4185] smsc95xx v2.0.0 [ 113.933125][ T5240] binder: 5239:5240 ioctl c018620b 0 returned -14 [ 113.989929][ T4185] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 114.070803][ T5244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.127902][ T4185] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 115.143891][ T4185] usb 5-1: USB disconnect, device number 4 [ 115.394662][ T5251] syz.0.324 (5251) used greatest stack depth: 18560 bytes left [ 115.668443][ T5269] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 115.789964][ T4185] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.039652][ T4185] usb 5-1: Using ep0 maxpacket: 32 [ 116.160118][ T4185] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 116.193169][ T4185] usb 5-1: config 0 has no interface number 0 [ 116.216772][ T4185] usb 5-1: config 0 interface 184 has no altsetting 0 [ 116.390153][ T4185] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.431709][ T4185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.459759][ T4185] usb 5-1: Product: syz [ 116.471177][ T4185] usb 5-1: Manufacturer: syz [ 116.479869][ T4185] usb 5-1: SerialNumber: syz [ 116.493274][ T4185] usb 5-1: config 0 descriptor?? [ 116.561347][ T4185] smsc75xx v1.0.0 [ 116.565353][ T4185] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 116.620744][ T4185] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 116.798071][ T4230] usb 5-1: USB disconnect, device number 5 [ 116.848440][ T5312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.352'. [ 116.879741][ T5312] tipc: Enabling of bearer rejected, failed to enable media [ 117.562658][ T5337] bridge0: port 3(erspan0) entered blocking state [ 117.598911][ T5337] bridge0: port 3(erspan0) entered disabled state [ 117.663070][ T5337] device erspan0 entered promiscuous mode [ 117.701791][ T5337] bridge0: port 3(erspan0) entered blocking state [ 117.708686][ T5337] bridge0: port 3(erspan0) entered forwarding state [ 120.032158][ T5386] syz.3.379[5386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.032932][ T5386] syz.3.379[5386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.358268][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 121.425787][ T5400] loop3: detected capacity change from 0 to 512 [ 121.463290][ T5405] loop0: detected capacity change from 0 to 512 [ 121.554232][ T5400] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.387: inode has both inline data and extents flags [ 121.605916][ T5405] EXT4-fs (loop0): Ignoring removed nobh option [ 121.651251][ T5400] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.387: couldn't read orphan inode 15 (err -117) [ 121.656814][ T5405] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 121.672322][ T5400] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 121.693176][ T5405] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.389: attempt to clear invalid blocks 1 len 1 [ 121.813487][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 121.830076][ T5405] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 121.859316][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 121.871543][ T5405] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.389: invalid indirect mapped block 1819239214 (level 0) [ 121.901861][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 121.908856][ T5405] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.389: invalid indirect mapped block 1819239214 (level 1) [ 121.912340][ T5417] loop1: detected capacity change from 0 to 512 [ 121.928405][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 121.984663][ T5405] EXT4-fs (loop0): 1 truncate cleaned up [ 121.995860][ T5405] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000100000,resuid=0x0000000000000000,jqfmt=vfsv1,errors=remount-ro,nobh,usrjquota=... Quota mode: writeback. [ 122.105396][ T5417] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 122.116941][ T5405] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.389: corrupted in-inode xattr [ 122.152647][ T5417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002] [ 122.183889][ T5405] EXT4-fs (loop0): Remounting filesystem read-only [ 122.199933][ T5417] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2229: inode #15: comm syz.1.394: corrupted in-inode xattr [ 122.244594][ T5417] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.394: couldn't read orphan inode 15 (err -117) [ 122.289729][ T5417] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,max_batch_time=0x0000000000000001,debug,noload,jqfmt=vfsv1,noblock_validity,init_itable=0x0000000000000601,max_dir_size_kb=0x0000000000000002,usrjquota=,,errors=continue. Quota mode: none. [ 122.374603][ T5433] netlink: 'syz.0.399': attribute type 32 has an invalid length. [ 122.806791][ T5453] futex_wake_op: syz.1.410 tries to shift op by -1; fix this program [ 122.829907][ T4204] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.100272][ T4204] usb 3-1: Using ep0 maxpacket: 8 [ 123.400185][ T4204] usb 3-1: unable to get BOS descriptor or descriptor too short [ 123.500427][ T5457] loop4: detected capacity change from 0 to 256 [ 123.529796][ T4204] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 123.549117][ T5461] 9pnet: Insufficient options for proto=fd [ 123.564249][ T4204] usb 3-1: can't read configurations, error -71 [ 123.656007][ T5457] FAT-fs (loop4): Directory bread(block 64) failed [ 123.726671][ T5457] FAT-fs (loop4): Directory bread(block 65) failed [ 123.769524][ T5457] FAT-fs (loop4): Directory bread(block 66) failed [ 123.799831][ T5457] FAT-fs (loop4): Directory bread(block 67) failed [ 123.849410][ T5457] FAT-fs (loop4): Directory bread(block 68) failed [ 123.893196][ T5457] FAT-fs (loop4): Directory bread(block 69) failed [ 123.937458][ T5457] FAT-fs (loop4): Directory bread(block 70) failed [ 123.985722][ T5457] FAT-fs (loop4): Directory bread(block 71) failed [ 124.012570][ T5457] FAT-fs (loop4): Directory bread(block 72) failed [ 124.047514][ T5457] FAT-fs (loop4): Directory bread(block 73) failed [ 124.589353][ T5490] loop3: detected capacity change from 0 to 256 [ 124.699655][ T5490] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae1814, utbl_chksum : 0xe619d30d) [ 124.749845][ T5490] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 125.245229][ T5516] loop3: detected capacity change from 0 to 512 [ 125.411274][ T5518] syz.0.433[5518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.411819][ T5518] syz.0.433[5518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.753914][ T5516] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 125.875460][ T5516] EXT4-fs (loop3): Ignoring removed oldalloc option [ 125.896972][ T5516] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.968608][ T5516] EXT4-fs (loop3): failed to initialize system zone (-117) [ 126.024219][ T5516] EXT4-fs (loop3): mount failed [ 126.957886][ T5548] fuse: Bad value for 'fd' [ 129.368662][ T5577] overlayfs: missing 'lowerdir' [ 130.711719][ T5592] syz.1.464 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 130.769796][ T5596] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 131.267817][ T5606] tipc: Failed to remove unknown binding: 66,1,1/0:3932458993/3932458995 [ 131.954024][ T5623] loop0: detected capacity change from 0 to 512 [ 132.113917][ T5623] EXT4-fs (loop0): 1 orphan inode deleted [ 132.249635][ T5623] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.299190][ T5623] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.600155][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.606503][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301739][ T5638] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 133.901642][ T5651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 134.102421][ T26] audit: type=1326 audit(2000000039.959:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 134.335317][ T26] audit: type=1326 audit(2000000039.959:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 134.458653][ T26] audit: type=1326 audit(2000000039.979:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13c9fff90 code=0x7ffc0000 [ 134.593037][ T26] audit: type=1326 audit(2000000039.979:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa13c9fff90 code=0x7ffc0000 [ 134.727388][ T26] audit: type=1326 audit(2000000039.979:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 134.879596][ T26] audit: type=1326 audit(2000000039.979:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 135.509850][ T26] audit: type=1326 audit(2000000039.979:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 135.629706][ T26] audit: type=1326 audit(2000000039.979:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 135.789306][ T26] audit: type=1326 audit(2000000039.979:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 135.865887][ T26] audit: type=1326 audit(2000000039.979:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.2.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa13ca01749 code=0x7ffc0000 [ 136.008481][ T5680] loop3: detected capacity change from 0 to 256 [ 136.129695][ T5680] FAT-fs (loop3): Directory bread(block 64) failed [ 136.136880][ T5680] FAT-fs (loop3): Directory bread(block 65) failed [ 136.144076][ T5680] FAT-fs (loop3): Directory bread(block 66) failed [ 136.150782][ T5680] FAT-fs (loop3): Directory bread(block 67) failed [ 136.157798][ T5680] FAT-fs (loop3): Directory bread(block 68) failed [ 136.164461][ T5680] FAT-fs (loop3): Directory bread(block 69) failed [ 136.171435][ T5680] FAT-fs (loop3): Directory bread(block 70) failed [ 136.178087][ T5680] FAT-fs (loop3): Directory bread(block 71) failed [ 136.185143][ T5680] FAT-fs (loop3): Directory bread(block 72) failed [ 136.191815][ T5680] FAT-fs (loop3): Directory bread(block 73) failed [ 136.957366][ T5684] loop1: detected capacity change from 0 to 512 [ 137.065185][ T5684] EXT4-fs (loop1): Ignoring removed oldalloc option [ 137.195353][ T5684] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.495: inode has both inline data and extents flags [ 137.262871][ T5684] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.495: couldn't read orphan inode 15 (err -117) [ 137.368993][ T5684] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,oldalloc,discard,,errors=continue. Quota mode: writeback. [ 138.128873][ T5702] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 138.310918][ T5704] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.373511][ T5704] bridge0: port 3(erspan0) entered disabled state [ 138.381255][ T5704] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.389508][ T5704] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.554210][ T5710] loop1: detected capacity change from 0 to 128 [ 138.638727][ T5690] loop0: detected capacity change from 0 to 40427 [ 138.669319][ T5710] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 138.681057][ T5710] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.713797][ T4255] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.765295][ T5690] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.879753][ T5690] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.959624][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 139.037776][ T5726] 9pnet: Insufficient options for proto=fd [ 139.079863][ T4255] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.105467][ T4255] usb 4-1: config 0 has no interfaces? [ 139.106390][ T4183] attempt to access beyond end of device [ 139.106390][ T4183] loop0: rw=2049, want=45104, limit=40427 [ 139.289850][ T4255] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.303184][ T4255] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.368552][ T4255] usb 4-1: Product: syz [ 139.373550][ T4255] usb 4-1: Manufacturer: syz [ 139.383572][ T4255] usb 4-1: SerialNumber: syz [ 139.394332][ T4255] usb 4-1: config 0 descriptor?? [ 139.417379][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 139.417393][ T26] audit: type=1326 audit(2000000004.959:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 139.489516][ T26] audit: type=1326 audit(2000000004.959:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 139.615296][ T26] audit: type=1326 audit(2000000004.989:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40da15bf90 code=0x7ffc0000 [ 139.649635][ T26] audit: type=1326 audit(2000000004.989:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40da15bf90 code=0x7ffc0000 [ 139.719707][ T26] audit: type=1326 audit(2000000004.989:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 139.739401][ T1107] usb 4-1: USB disconnect, device number 3 [ 139.767348][ T26] audit: type=1326 audit(2000000004.989:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 140.263365][ T26] audit: type=1326 audit(2000000004.989:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 140.480205][ T26] audit: type=1326 audit(2000000004.989:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 140.502884][ T26] audit: type=1326 audit(2000000004.989:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 140.531403][ T26] audit: type=1326 audit(2000000004.989:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.1.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f40da15d749 code=0x7ffc0000 [ 140.796495][ T5756] loop4: detected capacity change from 0 to 512 [ 140.966051][ T5755] ipt_CLUSTERIP: Please specify destination IP [ 143.389660][ C1] ------------[ cut here ]------------ [ 143.391024][ C1] [ 143.391029][ C1] ====================================================== [ 143.391033][ C1] WARNING: possible circular locking dependency detected [ 143.391044][ C1] syzkaller #0 Not tainted [ 143.391050][ C1] ------------------------------------------------------ [ 143.391054][ C1] udevd/3560 is trying to acquire lock: [ 143.391060][ C1] ffffffff8c1111c0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x2c/0x60 [ 143.391109][ C1] [ 143.391109][ C1] but task is already holding lock: [ 143.391112][ C1] ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 143.391138][ C1] [ 143.391138][ C1] which lock already depends on the new lock. [ 143.391138][ C1] [ 143.391142][ C1] [ 143.391142][ C1] the existing dependency chain (in reverse order) is: [ 143.391145][ C1] [ 143.391145][ C1] -> #5 (&base->lock){-.-.}-{2:2}: [ 143.391160][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 143.391171][ C1] lock_timer_base+0x123/0x270 [ 143.391182][ C1] __mod_timer+0x117/0xd20 [ 143.391192][ C1] queue_delayed_work_on+0x126/0x1e0 [ 143.391202][ C1] enqueue_task+0x26d/0x2b0 [ 143.391214][ C1] wake_up_new_task+0x442/0x9a0 [ 143.391224][ C1] kernel_clone+0x421/0x930 [ 143.391235][ C1] kernel_thread+0xc8/0x120 [ 143.391244][ C1] rest_init+0x21/0x330 [ 143.391256][ C1] start_kernel+0x486/0x530 [ 143.391268][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 143.391280][ C1] [ 143.391280][ C1] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 143.391294][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 143.391304][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 143.391315][ C1] task_fork_fair+0x5c/0x350 [ 143.391325][ C1] sched_cgroup_fork+0x2c6/0x320 [ 143.391336][ C1] copy_process+0x22d1/0x3e00 [ 143.391345][ C1] kernel_clone+0x219/0x930 [ 143.391354][ C1] kernel_thread+0xc8/0x120 [ 143.391364][ C1] rest_init+0x21/0x330 [ 143.391374][ C1] start_kernel+0x486/0x530 [ 143.391384][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 143.391395][ C1] [ 143.391395][ C1] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 143.391409][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 143.391418][ C1] try_to_wake_up+0x5c/0x1050 [ 143.391429][ C1] __wake_up_common+0x2a4/0x4e0 [ 143.391440][ C1] __wake_up+0x108/0x180 [ 143.391450][ C1] start_tty+0x27/0x40 [ 143.391462][ C1] n_tty_set_termios+0xa78/0x1090 [ 143.391472][ C1] tty_set_termios+0xd64/0x1760 [ 143.391481][ C1] set_termios+0x686/0x870 [ 143.391490][ C1] tty_mode_ioctl+0x667/0x870 [ 143.391499][ C1] tty_ioctl+0x8e7/0xc20 [ 143.391510][ C1] __se_sys_ioctl+0xfa/0x170 [ 143.391522][ C1] do_syscall_64+0x4c/0xa0 [ 143.391532][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.391542][ C1] [ 143.391542][ C1] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 143.391556][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 143.391565][ C1] __wake_up+0xed/0x180 [ 143.391576][ C1] tty_port_default_wakeup+0xa5/0xf0 [ 143.391586][ C1] serial8250_tx_chars+0x629/0x830 [ 143.391598][ C1] serial8250_handle_irq+0x519/0x610 [ 143.391609][ C1] serial8250_default_handle_irq+0xb4/0x1a0 [ 143.391621][ C1] serial8250_interrupt+0x9b/0x1c0 [ 143.391632][ C1] __handle_irq_event_percpu+0x291/0x9b0 [ 143.391643][ C1] handle_irq_event+0xa5/0x220 [ 143.391653][ C1] handle_edge_irq+0x243/0xb20 [ 143.391664][ C1] __common_interrupt+0xd7/0x1e0 [ 143.391674][ C1] common_interrupt+0xb0/0xd0 [ 143.391684][ C1] asm_common_interrupt+0x22/0x40 [ 143.391694][ C1] default_idle+0xb/0x10 [ 143.391703][ C1] default_idle_call+0x81/0xc0 [ 143.391712][ C1] do_idle+0x21b/0x5b0 [ 143.391723][ C1] cpu_startup_entry+0x14/0x20 [ 143.391733][ C1] start_kernel+0x486/0x530 [ 143.391743][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 143.391754][ C1] [ 143.391754][ C1] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 143.391768][ C1] _raw_spin_lock_irqsave+0xa4/0xf0 [ 143.391777][ C1] serial8250_console_write+0x170/0xf80 [ 143.391788][ C1] console_unlock+0xc86/0x1200 [ 143.391797][ C1] vprintk_emit+0xc0/0x150 [ 143.391809][ C1] _printk+0xcc/0x110 [ 143.391821][ C1] register_console+0x682/0x960 [ 143.391830][ C1] univ8250_console_init+0x41/0x50 [ 143.391842][ C1] console_init+0x177/0x5d0 [ 143.391851][ C1] start_kernel+0x2f9/0x530 [ 143.391860][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 143.391871][ C1] [ 143.391871][ C1] -> #0 (console_owner){-.-.}-{0:0}: [ 143.391885][ C1] __lock_acquire+0x2c33/0x7c60 [ 143.391896][ C1] lock_acquire+0x197/0x3f0 [ 143.391907][ C1] console_lock_spinning_enable+0x51/0x60 [ 143.391917][ C1] console_unlock+0x9f8/0x1200 [ 143.391925][ C1] vprintk_emit+0xc0/0x150 [ 143.391937][ C1] _printk+0xcc/0x110 [ 143.391947][ C1] report_bug+0x1e5/0x2e0 [ 143.391958][ C1] handle_bug+0x3a/0x70 [ 143.391967][ C1] exc_invalid_op+0x16/0x40 [ 143.391976][ C1] asm_exc_invalid_op+0x16/0x20 [ 143.391985][ C1] copy_from_user_nofault+0x160/0x1c0 [ 143.391997][ C1] bpf_probe_read_compat+0xdd/0x170 [ 143.392008][ C1] bpf_prog_63d51858d7cca270+0x3d/0xcb4 [ 143.392018][ C1] bpf_trace_run3+0x17e/0x320 [ 143.392026][ C1] enqueue_timer+0x394/0x520 [ 143.392037][ C1] __mod_timer+0x8e1/0xd20 [ 143.392054][ C1] queue_delayed_work_on+0x126/0x1e0 [ 143.392067][ C1] srcu_gp_start_if_needed+0x60d/0x960 [ 143.392080][ C1] rcu_core+0x962/0x15d0 [ 143.392090][ C1] handle_softirqs+0x328/0x820 [ 143.392100][ C1] __irq_exit_rcu+0x12f/0x220 [ 143.392109][ C1] irq_exit_rcu+0x5/0x20 [ 143.392118][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 143.392129][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.392139][ C1] unwind_next_frame+0x71e/0x1d90 [ 143.392151][ C1] arch_stack_walk+0x10c/0x140 [ 143.392163][ C1] stack_trace_save+0x98/0xe0 [ 143.392172][ C1] save_stack+0xf3/0x1e0 [ 143.392184][ C1] __set_page_owner+0x41/0x2d0 [ 143.392195][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 143.392207][ C1] __alloc_pages+0x1e1/0x470 [ 143.392217][ C1] new_slab+0xc0/0x4b0 [ 143.392227][ C1] ___slab_alloc+0x81e/0xdf0 [ 143.392236][ C1] kmem_cache_alloc+0x195/0x290 [ 143.392245][ C1] getname_flags+0xb5/0x500 [ 143.392254][ C1] user_path_at_empty+0x2a/0x190 [ 143.392264][ C1] vfs_statx+0x102/0x4d0 [ 143.392275][ C1] __x64_sys_newfstatat+0x12c/0x1b0 [ 143.392286][ C1] do_syscall_64+0x4c/0xa0 [ 143.392295][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.392306][ C1] [ 143.392306][ C1] other info that might help us debug this: [ 143.392306][ C1] [ 143.392309][ C1] Chain exists of: [ 143.392309][ C1] console_owner --> &rq->__lock --> &base->lock [ 143.392309][ C1] [ 143.392326][ C1] Possible unsafe locking scenario: [ 143.392326][ C1] [ 143.392329][ C1] CPU0 CPU1 [ 143.392331][ C1] ---- ---- [ 143.392334][ C1] lock(&base->lock); [ 143.392340][ C1] lock(&rq->__lock); [ 143.392347][ C1] lock(&base->lock); [ 143.392354][ C1] lock(console_owner); [ 143.392360][ C1] [ 143.392360][ C1] *** DEADLOCK *** [ 143.392360][ C1] [ 143.392362][ C1] 6 locks held by udevd/3560: [ 143.392369][ C1] #0: ffffffff8c11c880 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20 [ 143.392395][ C1] #1: ffffffff8c15c318 (tracepoint_srcu){....}-{0:0}, at: rcu_lock_acquire+0x0/0x20 [ 143.392422][ C1] #2: ffffffff8c15c090 (tracepoint_srcu.lock){..-.}-{2:2}, at: srcu_gp_start_if_needed+0x481/0x960 [ 143.392449][ C1] #3: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 143.392475][ C1] #4: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 143.392499][ C1] #5: ffffffff8c1112a0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0xa7/0x150 [ 143.392526][ C1] [ 143.392526][ C1] stack backtrace: [ 143.392532][ C1] CPU: 1 PID: 3560 Comm: udevd Not tainted syzkaller #0 [ 143.392544][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 143.392557][ C1] Call Trace: [ 143.392562][ C1] [ 143.392567][ C1] dump_stack_lvl+0x168/0x230 [ 143.392581][ C1] ? load_image+0x3b0/0x3b0 [ 143.392593][ C1] ? show_regs_print_info+0x20/0x20 [ 143.392609][ C1] ? print_circular_bug+0x12b/0x1a0 [ 143.392620][ C1] check_noncircular+0x274/0x310 [ 143.392631][ C1] ? add_chain_block+0x940/0x940 [ 143.392641][ C1] ? lockdep_lock+0xdc/0x1e0 [ 143.392655][ C1] ? mark_lock+0x94/0x320 [ 143.392668][ C1] __lock_acquire+0x2c33/0x7c60 [ 143.392688][ C1] ? verify_lock_unused+0x140/0x140 [ 143.392705][ C1] ? sprintf+0xd6/0x120 [ 143.392719][ C1] lock_acquire+0x197/0x3f0 [ 143.392731][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 143.392742][ C1] ? prb_read_valid+0x60/0x60 [ 143.392755][ C1] ? read_lock_is_recursive+0x10/0x10 [ 143.392767][ C1] ? do_raw_spin_lock+0x11d/0x280 [ 143.392778][ C1] ? __rwlock_init+0x140/0x140 [ 143.392790][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 143.392801][ C1] console_lock_spinning_enable+0x51/0x60 [ 143.392812][ C1] ? console_lock_spinning_enable+0x2c/0x60 [ 143.392822][ C1] console_unlock+0x9f8/0x1200 [ 143.392834][ C1] ? console_trylock_spinning+0x350/0x350 [ 143.392848][ C1] ? __down_trylock_console_sem+0x184/0x1e0 [ 143.392859][ C1] ? vprintk_emit+0xa7/0x150 [ 143.392871][ C1] ? printk_parse_prefix+0x330/0x330 [ 143.392883][ C1] ? vprintk_emit+0xa7/0x150 [ 143.392895][ C1] ? console_trylock+0x70/0x70 [ 143.392906][ C1] ? mark_lock+0x94/0x320 [ 143.392921][ C1] ? vprintk_emit+0x150/0x150 [ 143.392932][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 143.392946][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 143.392960][ C1] vprintk_emit+0xc0/0x150 [ 143.392974][ C1] _printk+0xcc/0x110 [ 143.392987][ C1] ? load_image+0x3b0/0x3b0 [ 143.393001][ C1] ? find_bug+0xa1/0x350 [ 143.393012][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 143.393024][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 143.393036][ C1] report_bug+0x1e5/0x2e0 [ 143.393050][ C1] handle_bug+0x3a/0x70 [ 143.393060][ C1] exc_invalid_op+0x16/0x40 [ 143.393075][ C1] asm_exc_invalid_op+0x16/0x20 [ 143.393089][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 143.393102][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 143.393112][ C1] RSP: 0018:ffffc90000dd0818 EFLAGS: 00010046 [ 143.393122][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88807dba3b80 [ 143.393130][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.393138][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fb74771 [ 143.393145][ C1] R10: ffffed100fb74771 R11: 1ffff1100fb74770 R12: ffff88807dba5308 [ 143.393154][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0888 R15: 0000000020000000 [ 143.393164][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 143.393178][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 143.393190][ C1] bpf_probe_read_compat+0xdd/0x170 [ 143.393204][ C1] bpf_prog_63d51858d7cca270+0x3d/0xcb4 [ 143.393214][ C1] bpf_trace_run3+0x17e/0x320 [ 143.393223][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 143.393233][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 143.393247][ C1] enqueue_timer+0x394/0x520 [ 143.393260][ C1] __mod_timer+0x8e1/0xd20 [ 143.393275][ C1] queue_delayed_work_on+0x126/0x1e0 [ 143.393287][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 143.393299][ C1] ? _raw_spin_unlock+0x24/0x40 [ 143.393309][ C1] ? srcu_gp_start+0x14a/0x210 [ 143.393323][ C1] srcu_gp_start_if_needed+0x60d/0x960 [ 143.393340][ C1] rcu_core+0x962/0x15d0 [ 143.393355][ C1] ? local_bh_disable+0x20/0x20 [ 143.393367][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 143.393381][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 143.393395][ C1] ? lock_chain_count+0x20/0x20 [ 143.393407][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 143.393418][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 143.393434][ C1] handle_softirqs+0x328/0x820 [ 143.393445][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 143.393458][ C1] ? do_softirq+0x200/0x200 [ 143.393469][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 143.393481][ C1] __irq_exit_rcu+0x12f/0x220 [ 143.393492][ C1] ? irq_exit_rcu+0x20/0x20 [ 143.393505][ C1] irq_exit_rcu+0x5/0x20 [ 143.393514][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 143.393526][ C1] [ 143.393530][ C1] [ 143.393534][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 143.393545][ C1] RIP: 0010:unwind_next_frame+0x71e/0x1d90 [ 143.393558][ C1] Code: 38 74 0c 4c 89 f7 e8 91 b4 87 00 48 8b 14 24 49 8b 3e 4c 8d 7a 01 48 89 d0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 22 13 00 00 <4c> 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 48 8b 6c 24 18 4c 8b 74 [ 143.393566][ C1] RSP: 0018:ffffc90002e3f468 EFLAGS: 00000246 [ 143.393575][ C1] RAX: 0000000000000000 RBX: ffffc90002e3f528 RCX: ffffffff8d7ee5b4 [ 143.393583][ C1] RDX: ffffffff8dee0f58 RSI: ffffffff8dee0f40 RDI: ffffc90002e3fb50 [ 143.393592][ C1] RBP: ffffffff81bb819d R08: 0000000000000005 R09: 0000000000000003 [ 143.393599][ C1] R10: fffff520005c7eb1 R11: 1ffff920005c7eaf R12: 1ffffffff1bdc1eb [ 143.393607][ C1] R13: dffffc0000000000 R14: ffffc90002e3f560 R15: ffffffff8dee0f59 [ 143.393617][ C1] ? ___slab_alloc+0x81d/0xdf0 [ 143.393630][ C1] ? unwind_next_frame+0xac/0x1d90 [ 143.393643][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 143.393655][ C1] ? stack_trace_save+0xe0/0xe0 [ 143.393665][ C1] arch_stack_walk+0x10c/0x140 [ 143.393678][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 143.393689][ C1] stack_trace_save+0x98/0xe0 [ 143.393700][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 143.393710][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 143.393723][ C1] ? lock_chain_count+0x20/0x20 [ 143.393737][ C1] save_stack+0xf3/0x1e0 [ 143.393749][ C1] ? __reset_page_owner+0x180/0x180 [ 143.393760][ C1] ? get_page_from_freelist+0x1b77/0x1c60 [ 143.393772][ C1] ? __alloc_pages+0x1e1/0x470 [ 143.393783][ C1] ? new_slab+0xc0/0x4b0 [ 143.393793][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 143.393806][ C1] ? lock_chain_count+0x20/0x20 [ 143.393818][ C1] ? preempt_count_add+0x8d/0x190 [ 143.393831][ C1] __set_page_owner+0x41/0x2d0 [ 143.393842][ C1] ? post_alloc_hook+0x106/0x220 [ 143.393855][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 143.393872][ C1] ? verify_lock_unused+0x140/0x140 [ 143.393886][ C1] ? verify_lock_unused+0x140/0x140 [ 143.393900][ C1] ? __alloc_pages+0x470/0x470 [ 143.393912][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 143.393926][ C1] __alloc_pages+0x1e1/0x470 [ 143.393938][ C1] ? zone_statistics+0x170/0x170 [ 143.393955][ C1] new_slab+0xc0/0x4b0 [ 143.393965][ C1] ? kmem_cache_alloc+0x195/0x290 [ 143.393975][ C1] ___slab_alloc+0x81e/0xdf0 [ 143.393986][ C1] ? getname_flags+0xb5/0x500 [ 143.393997][ C1] ? getname_flags+0xb5/0x500 [ 143.394007][ C1] kmem_cache_alloc+0x195/0x290 [ 143.394019][ C1] getname_flags+0xb5/0x500 [ 143.394030][ C1] user_path_at_empty+0x2a/0x190 [ 143.394042][ C1] vfs_statx+0x102/0x4d0 [ 143.394056][ C1] ? vfs_fstatat+0x40/0x40 [ 143.394075][ C1] __x64_sys_newfstatat+0x12c/0x1b0 [ 143.394089][ C1] ? __ia32_sys_newlstat+0x160/0x160 [ 143.394105][ C1] ? lock_chain_count+0x20/0x20 [ 143.394117][ C1] ? vtime_user_exit+0x2dc/0x400 [ 143.394129][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 143.394142][ C1] do_syscall_64+0x4c/0xa0 [ 143.394152][ C1] ? clear_bhb_loop+0x30/0x80 [ 143.394163][ C1] ? clear_bhb_loop+0x30/0x80 [ 143.394174][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.394185][ C1] RIP: 0033:0x7f74bce56b0a [ 143.394195][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 143.394204][ C1] RSP: 002b:00007ffcdbba8818 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 143.394215][ C1] RAX: ffffffffffffffda RBX: 00007ffcdbba8cb0 RCX: 00007f74bce56b0a [ 143.394223][ C1] RDX: 00007ffcdbba8820 RSI: 00007ffcdbba8cb0 RDI: 00000000ffffff9c [ 143.394231][ C1] RBP: 000055983b563910 R08: 0000000000000000 R09: 0000000000000001 [ 143.394238][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbba88b0 [ 143.394246][ C1] R13: 0000000000000100 R14: 0000559809a95be0 R15: 00007ffcdbba9330 [ 143.394258][ C1] [ 145.024516][ C1] WARNING: CPU: 1 PID: 3560 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 145.033784][ C1] Modules linked in: [ 145.037649][ C1] CPU: 1 PID: 3560 Comm: udevd Not tainted syzkaller #0 [ 145.044561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.054601][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 145.060739][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 145.080322][ C1] RSP: 0018:ffffc90000dd0818 EFLAGS: 00010046 [ 145.086362][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88807dba3b80 [ 145.094304][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.102243][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fb74771 [ 145.110215][ C1] R10: ffffed100fb74771 R11: 1ffff1100fb74770 R12: ffff88807dba5308 [ 145.118156][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0888 R15: 0000000020000000 [ 145.126098][ C1] FS: 00007f74bccfe880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 145.134996][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.141549][ C1] CR2: 00007f40daee36c0 CR3: 000000007cdb3000 CR4: 00000000003506e0 [ 145.149494][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 145.157443][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 145.165387][ C1] Call Trace: [ 145.168640][ C1] [ 145.171489][ C1] bpf_probe_read_compat+0xdd/0x170 [ 145.176666][ C1] bpf_prog_63d51858d7cca270+0x3d/0xcb4 [ 145.182182][ C1] bpf_trace_run3+0x17e/0x320 [ 145.186829][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 145.191650][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 145.197515][ C1] enqueue_timer+0x394/0x520 [ 145.202079][ C1] __mod_timer+0x8e1/0xd20 [ 145.206468][ C1] queue_delayed_work_on+0x126/0x1e0 [ 145.211724][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 145.216980][ C1] ? _raw_spin_unlock+0x24/0x40 [ 145.221800][ C1] ? srcu_gp_start+0x14a/0x210 [ 145.226542][ C1] srcu_gp_start_if_needed+0x60d/0x960 [ 145.231986][ C1] rcu_core+0x962/0x15d0 [ 145.236204][ C1] ? local_bh_disable+0x20/0x20 [ 145.241024][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 145.246281][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 145.252231][ C1] ? lock_chain_count+0x20/0x20 [ 145.257052][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 145.261872][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 145.267141][ C1] handle_softirqs+0x328/0x820 [ 145.271876][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 145.276699][ C1] ? do_softirq+0x200/0x200 [ 145.281172][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 145.286340][ C1] __irq_exit_rcu+0x12f/0x220 [ 145.290988][ C1] ? irq_exit_rcu+0x20/0x20 [ 145.295461][ C1] irq_exit_rcu+0x5/0x20 [ 145.299669][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 145.305273][ C1] [ 145.308177][ C1] [ 145.311082][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 145.317034][ C1] RIP: 0010:unwind_next_frame+0x71e/0x1d90 [ 145.322812][ C1] Code: 38 74 0c 4c 89 f7 e8 91 b4 87 00 48 8b 14 24 49 8b 3e 4c 8d 7a 01 48 89 d0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 22 13 00 00 <4c> 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 48 8b 6c 24 18 4c 8b 74 [ 145.342386][ C1] RSP: 0018:ffffc90002e3f468 EFLAGS: 00000246 [ 145.348424][ C1] RAX: 0000000000000000 RBX: ffffc90002e3f528 RCX: ffffffff8d7ee5b4 [ 145.356367][ C1] RDX: ffffffff8dee0f58 RSI: ffffffff8dee0f40 RDI: ffffc90002e3fb50 [ 145.364314][ C1] RBP: ffffffff81bb819d R08: 0000000000000005 R09: 0000000000000003 [ 145.372259][ C1] R10: fffff520005c7eb1 R11: 1ffff920005c7eaf R12: 1ffffffff1bdc1eb [ 145.380204][ C1] R13: dffffc0000000000 R14: ffffc90002e3f560 R15: ffffffff8dee0f59 [ 145.388149][ C1] ? ___slab_alloc+0x81d/0xdf0 [ 145.392894][ C1] ? unwind_next_frame+0xac/0x1d90 [ 145.397979][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 145.402715][ C1] ? stack_trace_save+0xe0/0xe0 [ 145.407536][ C1] arch_stack_walk+0x10c/0x140 [ 145.412278][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 145.417013][ C1] stack_trace_save+0x98/0xe0 [ 145.421659][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 145.426738][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 145.432690][ C1] ? lock_chain_count+0x20/0x20 [ 145.437513][ C1] save_stack+0xf3/0x1e0 [ 145.441749][ C1] ? __reset_page_owner+0x180/0x180 [ 145.446924][ C1] ? get_page_from_freelist+0x1b77/0x1c60 [ 145.452618][ C1] ? __alloc_pages+0x1e1/0x470 [ 145.457361][ C1] ? new_slab+0xc0/0x4b0 [ 145.461576][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 145.466314][ C1] ? lock_chain_count+0x20/0x20 [ 145.471137][ C1] ? preempt_count_add+0x8d/0x190 [ 145.476130][ C1] __set_page_owner+0x41/0x2d0 [ 145.480878][ C1] ? post_alloc_hook+0x106/0x220 [ 145.485785][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 145.491393][ C1] ? verify_lock_unused+0x140/0x140 [ 145.496563][ C1] ? verify_lock_unused+0x140/0x140 [ 145.501735][ C1] ? __alloc_pages+0x470/0x470 [ 145.506470][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 145.511727][ C1] __alloc_pages+0x1e1/0x470 [ 145.516294][ C1] ? zone_statistics+0x170/0x170 [ 145.521207][ C1] new_slab+0xc0/0x4b0 [ 145.525246][ C1] ? kmem_cache_alloc+0x195/0x290 [ 145.530337][ C1] ___slab_alloc+0x81e/0xdf0 [ 145.534937][ C1] ? getname_flags+0xb5/0x500 [ 145.539588][ C1] ? getname_flags+0xb5/0x500 [ 145.544243][ C1] kmem_cache_alloc+0x195/0x290 [ 145.549068][ C1] getname_flags+0xb5/0x500 [ 145.553540][ C1] user_path_at_empty+0x2a/0x190 [ 145.558458][ C1] vfs_statx+0x102/0x4d0 [ 145.562675][ C1] ? vfs_fstatat+0x40/0x40 [ 145.567065][ C1] __x64_sys_newfstatat+0x12c/0x1b0 [ 145.572234][ C1] ? __ia32_sys_newlstat+0x160/0x160 [ 145.577493][ C1] ? lock_chain_count+0x20/0x20 [ 145.582314][ C1] ? vtime_user_exit+0x2dc/0x400 [ 145.587223][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 145.592396][ C1] do_syscall_64+0x4c/0xa0 [ 145.596785][ C1] ? clear_bhb_loop+0x30/0x80 [ 145.601431][ C1] ? clear_bhb_loop+0x30/0x80 [ 145.606078][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 145.611940][ C1] RIP: 0033:0x7f74bce56b0a [ 145.616329][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 145.635905][ C1] RSP: 002b:00007ffcdbba8818 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 145.644289][ C1] RAX: ffffffffffffffda RBX: 00007ffcdbba8cb0 RCX: 00007f74bce56b0a [ 145.652231][ C1] RDX: 00007ffcdbba8820 RSI: 00007ffcdbba8cb0 RDI: 00000000ffffff9c [ 145.660177][ C1] RBP: 000055983b563910 R08: 0000000000000000 R09: 0000000000000001 [ 145.668121][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbba88b0 [ 145.676062][ C1] R13: 0000000000000100 R14: 0000559809a95be0 R15: 00007ffcdbba9330 [ 145.684020][ C1] [ 145.687035][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 145.694288][ C1] CPU: 1 PID: 3560 Comm: udevd Not tainted syzkaller #0 [ 145.701195][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 145.711220][ C1] Call Trace: [ 145.714473][ C1] [ 145.717296][ C1] dump_stack_lvl+0x168/0x230 [ 145.721946][ C1] ? show_regs_print_info+0x20/0x20 [ 145.727116][ C1] ? load_image+0x3b0/0x3b0 [ 145.731599][ C1] panic+0x2c9/0x7f0 [ 145.735464][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 145.739940][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 145.745499][ C1] __warn+0x248/0x2b0 [ 145.749453][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 145.754967][ C1] report_bug+0x1b7/0x2e0 [ 145.759271][ C1] handle_bug+0x3a/0x70 [ 145.763395][ C1] exc_invalid_op+0x16/0x40 [ 145.767869][ C1] asm_exc_invalid_op+0x16/0x20 [ 145.772701][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 145.778825][ C1] Code: 24 45 31 f6 31 ff 89 de e8 8d f6 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 f3 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 145.798402][ C1] RSP: 0018:ffffc90000dd0818 EFLAGS: 00010046 [ 145.804439][ C1] RAX: ffffffff819ed900 RBX: 0000000000000008 RCX: ffff88807dba3b80 [ 145.812380][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 145.820323][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100fb74771 [ 145.828264][ C1] R10: ffffed100fb74771 R11: 1ffff1100fb74770 R12: ffff88807dba5308 [ 145.836204][ C1] R13: 00007ffffffff000 R14: ffffc90000dd0888 R15: 0000000020000000 [ 145.844148][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 145.849670][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 145.855186][ C1] bpf_probe_read_compat+0xdd/0x170 [ 145.860356][ C1] bpf_prog_63d51858d7cca270+0x3d/0xcb4 [ 145.865870][ C1] bpf_trace_run3+0x17e/0x320 [ 145.870517][ C1] ? bpf_trace_run2+0x2d0/0x2d0 [ 145.875337][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 145.881203][ C1] enqueue_timer+0x394/0x520 [ 145.885766][ C1] __mod_timer+0x8e1/0xd20 [ 145.890182][ C1] queue_delayed_work_on+0x126/0x1e0 [ 145.895441][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 145.900699][ C1] ? _raw_spin_unlock+0x24/0x40 [ 145.905517][ C1] ? srcu_gp_start+0x14a/0x210 [ 145.910253][ C1] srcu_gp_start_if_needed+0x60d/0x960 [ 145.915685][ C1] rcu_core+0x962/0x15d0 [ 145.919903][ C1] ? local_bh_disable+0x20/0x20 [ 145.924723][ C1] ? lockdep_softirqs_on+0x570/0x570 [ 145.929997][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 145.935946][ C1] ? lock_chain_count+0x20/0x20 [ 145.940769][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 145.945590][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 145.950849][ C1] handle_softirqs+0x328/0x820 [ 145.955586][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 145.960425][ C1] ? do_softirq+0x200/0x200 [ 145.964898][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 145.970065][ C1] __irq_exit_rcu+0x12f/0x220 [ 145.974715][ C1] ? irq_exit_rcu+0x20/0x20 [ 145.979193][ C1] irq_exit_rcu+0x5/0x20 [ 145.983412][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 145.989018][ C1] [ 145.991950][ C1] [ 145.994852][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 146.000805][ C1] RIP: 0010:unwind_next_frame+0x71e/0x1d90 [ 146.006589][ C1] Code: 38 74 0c 4c 89 f7 e8 91 b4 87 00 48 8b 14 24 49 8b 3e 4c 8d 7a 01 48 89 d0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 22 13 00 00 <4c> 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 48 8b 6c 24 18 4c 8b 74 [ 146.026192][ C1] RSP: 0018:ffffc90002e3f468 EFLAGS: 00000246 [ 146.032240][ C1] RAX: 0000000000000000 RBX: ffffc90002e3f528 RCX: ffffffff8d7ee5b4 [ 146.040181][ C1] RDX: ffffffff8dee0f58 RSI: ffffffff8dee0f40 RDI: ffffc90002e3fb50 [ 146.048124][ C1] RBP: ffffffff81bb819d R08: 0000000000000005 R09: 0000000000000003 [ 146.056070][ C1] R10: fffff520005c7eb1 R11: 1ffff920005c7eaf R12: 1ffffffff1bdc1eb [ 146.064013][ C1] R13: dffffc0000000000 R14: ffffc90002e3f560 R15: ffffffff8dee0f59 [ 146.071959][ C1] ? ___slab_alloc+0x81d/0xdf0 [ 146.076700][ C1] ? unwind_next_frame+0xac/0x1d90 [ 146.081782][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 146.086553][ C1] ? stack_trace_save+0xe0/0xe0 [ 146.091372][ C1] arch_stack_walk+0x10c/0x140 [ 146.096107][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 146.100840][ C1] stack_trace_save+0x98/0xe0 [ 146.105485][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 146.110565][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 146.116529][ C1] ? lock_chain_count+0x20/0x20 [ 146.121363][ C1] save_stack+0xf3/0x1e0 [ 146.125582][ C1] ? __reset_page_owner+0x180/0x180 [ 146.130760][ C1] ? get_page_from_freelist+0x1b77/0x1c60 [ 146.136483][ C1] ? __alloc_pages+0x1e1/0x470 [ 146.141224][ C1] ? new_slab+0xc0/0x4b0 [ 146.145443][ C1] ? ___slab_alloc+0x81e/0xdf0 [ 146.150180][ C1] ? lock_chain_count+0x20/0x20 [ 146.155003][ C1] ? preempt_count_add+0x8d/0x190 [ 146.160002][ C1] __set_page_owner+0x41/0x2d0 [ 146.164737][ C1] ? post_alloc_hook+0x106/0x220 [ 146.169647][ C1] get_page_from_freelist+0x1b77/0x1c60 [ 146.175168][ C1] ? verify_lock_unused+0x140/0x140 [ 146.180341][ C1] ? verify_lock_unused+0x140/0x140 [ 146.185519][ C1] ? __alloc_pages+0x470/0x470 [ 146.190255][ C1] ? prepare_alloc_pages+0x368/0x5f0 [ 146.195511][ C1] __alloc_pages+0x1e1/0x470 [ 146.200075][ C1] ? zone_statistics+0x170/0x170 [ 146.204987][ C1] new_slab+0xc0/0x4b0 [ 146.209028][ C1] ? kmem_cache_alloc+0x195/0x290 [ 146.214021][ C1] ___slab_alloc+0x81e/0xdf0 [ 146.218589][ C1] ? getname_flags+0xb5/0x500 [ 146.223238][ C1] ? getname_flags+0xb5/0x500 [ 146.227882][ C1] kmem_cache_alloc+0x195/0x290 [ 146.232712][ C1] getname_flags+0xb5/0x500 [ 146.237185][ C1] user_path_at_empty+0x2a/0x190 [ 146.242095][ C1] vfs_statx+0x102/0x4d0 [ 146.246311][ C1] ? vfs_fstatat+0x40/0x40 [ 146.250700][ C1] __x64_sys_newfstatat+0x12c/0x1b0 [ 146.255875][ C1] ? __ia32_sys_newlstat+0x160/0x160 [ 146.261133][ C1] ? lock_chain_count+0x20/0x20 [ 146.265956][ C1] ? vtime_user_exit+0x2dc/0x400 [ 146.270868][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 146.276040][ C1] do_syscall_64+0x4c/0xa0 [ 146.280428][ C1] ? clear_bhb_loop+0x30/0x80 [ 146.285076][ C1] ? clear_bhb_loop+0x30/0x80 [ 146.289720][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.295599][ C1] RIP: 0033:0x7f74bce56b0a [ 146.300013][ C1] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 146.319592][ C1] RSP: 002b:00007ffcdbba8818 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 146.327974][ C1] RAX: ffffffffffffffda RBX: 00007ffcdbba8cb0 RCX: 00007f74bce56b0a [ 146.335936][ C1] RDX: 00007ffcdbba8820 RSI: 00007ffcdbba8cb0 RDI: 00000000ffffff9c [ 146.343881][ C1] RBP: 000055983b563910 R08: 0000000000000000 R09: 0000000000000001 [ 146.351831][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbba88b0 [ 146.359776][ C1] R13: 0000000000000100 R14: 0000559809a95be0 R15: 00007ffcdbba9330 [ 146.367726][ C1] [ 147.468480][ C1] Shutting down cpus with NMI [ 147.473408][ C1] Kernel Offset: disabled [ 147.477724][ C1] Rebooting in 86400 seconds..