last executing test programs: 3.342010488s ago: executing program 3 (id=7): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x4000070, 0x401, 0x8, 0xc, 0x3647, 0x81}) 3.20402649s ago: executing program 3 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 3.083765972s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) syz_open_dev$evdev(0x0, 0x0, 0x0) 2.648091589s ago: executing program 3 (id=9): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x7) 2.492271282s ago: executing program 3 (id=10): unshare(0x24060400) r0 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x0, 0xf, 0xfffffff9, 0x4}, 0x10) 2.406274753s ago: executing program 4 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 2.370212263s ago: executing program 1 (id=2): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[]) 2.300586334s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000030000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x1000000000000}, 0x18) r2 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) close_range(r2, 0xffffffffffffffff, 0x0) 2.175046656s ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.134814527s ago: executing program 3 (id=14): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000481, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.044790728s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) 1.96423673s ago: executing program 1 (id=15): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x97a1}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) 1.9313839s ago: executing program 0 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync() 1.872623301s ago: executing program 1 (id=17): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.853269492s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) creat(0x0, 0x0) unshare(0x60000480) 1.699896524s ago: executing program 1 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x100000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r4], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x49) r5 = gettid() r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000200000004", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x14, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYRES32=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r8}, 0x10) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000500)=@nullb, 0x0, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000200)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = timerfd_create(0x0, 0x0) read(r9, &(0x7f0000000380)=""/189, 0x8) 1.599341916s ago: executing program 4 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 308.064826ms ago: executing program 1 (id=20): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r0}, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 295.538236ms ago: executing program 2 (id=21): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) open_by_handle_at(r0, 0x0, 0x210000) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcd", 0x1b}], 0x3}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb", 0x3}], 0x1, &(0x7f0000002080)=ANY=[], 0x2f0}}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d00)="16", 0x1}], 0x1, &(0x7f0000004a40)=ANY=[], 0x1450}}], 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 232.225477ms ago: executing program 4 (id=22): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x48010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) 210.579567ms ago: executing program 4 (id=23): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) 100.524429ms ago: executing program 4 (id=24): creat(&(0x7f0000000300)='./file0\x00', 0xe5) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 43.32986ms ago: executing program 2 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0xffffff38) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000800)={0x53, 0xfffffffffffffffd, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x10003, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000280)='./mnt\x00', 0x200000, &(0x7f0000000000)={[{@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x0, 0x25b, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003904000000000000000400000086", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964"], 0x44}}, 0x0) 0s ago: executing program 0 (id=26): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='timer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000080)) bind$xdp(r4, &(0x7f0000000080)={0x2c, 0xf, r3, 0x2}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0xc9b, 0x3, 0x8}, 0x7f, 0xf, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff9, 0x9, 0xa2, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. syzkaller login: [ 67.460177][ T4155] cgroup: Unknown subsys name 'net' [ 67.595278][ T4155] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.140338][ T4155] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 71.090688][ T4172] chnl_net:caif_netlink_parms(): no params data found [ 71.113967][ T4166] chnl_net:caif_netlink_parms(): no params data found [ 71.160725][ T4165] chnl_net:caif_netlink_parms(): no params data found [ 71.225524][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 71.238640][ T4173] chnl_net:caif_netlink_parms(): no params data found [ 71.311101][ T4166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.319139][ T4166] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.329445][ T4166] device bridge_slave_0 entered promiscuous mode [ 71.358095][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.366467][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.375939][ T4172] device bridge_slave_0 entered promiscuous mode [ 71.384749][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.392034][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.402318][ T4172] device bridge_slave_1 entered promiscuous mode [ 71.410674][ T4166] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.418398][ T4166] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.426600][ T4166] device bridge_slave_1 entered promiscuous mode [ 71.500054][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.506910][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.515101][ T4165] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.522431][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.530856][ T4165] device bridge_slave_0 entered promiscuous mode [ 71.549144][ T4172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.560490][ T4166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.570158][ T4165] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.577823][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.586980][ T4165] device bridge_slave_1 entered promiscuous mode [ 71.611534][ T4172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.630501][ T4166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.665619][ T4173] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.672927][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.681726][ T4173] device bridge_slave_0 entered promiscuous mode [ 71.706750][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.713855][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.722571][ T4178] device bridge_slave_0 entered promiscuous mode [ 71.739052][ T4173] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.746437][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.754961][ T4173] device bridge_slave_1 entered promiscuous mode [ 71.771064][ T4165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.780732][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.788074][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.796440][ T4178] device bridge_slave_1 entered promiscuous mode [ 71.806273][ T4172] team0: Port device team_slave_0 added [ 71.823843][ T4166] team0: Port device team_slave_0 added [ 71.831875][ T4165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.860502][ T4172] team0: Port device team_slave_1 added [ 71.875308][ T4166] team0: Port device team_slave_1 added [ 71.883022][ T4173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.926942][ T4173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.951049][ T4165] team0: Port device team_slave_0 added [ 71.959915][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.995047][ T4165] team0: Port device team_slave_1 added [ 72.002535][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.021347][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.028709][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.055425][ T4172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.067686][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.074743][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.100753][ T4166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.114252][ T4173] team0: Port device team_slave_0 added [ 72.137876][ T4172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.145266][ T4172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.171583][ T4172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.183173][ T4166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.190716][ T4166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.217212][ T4166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.230446][ T4173] team0: Port device team_slave_1 added [ 72.245791][ T4178] team0: Port device team_slave_0 added [ 72.276707][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.283693][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.310310][ T4165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.324095][ T4165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.331244][ T4165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.358234][ T4165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.371488][ T4178] team0: Port device team_slave_1 added [ 72.402722][ T4172] device hsr_slave_0 entered promiscuous mode [ 72.410185][ T4172] device hsr_slave_1 entered promiscuous mode [ 72.442405][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.449889][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.476088][ T4173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.513076][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.520765][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.547192][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.559080][ T4173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.566343][ T4173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.592662][ T4173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.609887][ T4165] device hsr_slave_0 entered promiscuous mode [ 72.616978][ T4165] device hsr_slave_1 entered promiscuous mode [ 72.623666][ T4165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.631734][ T4165] Cannot create hsr debugfs directory [ 72.647048][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.654192][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.680789][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.695869][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 72.702991][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 72.704641][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 72.719389][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 72.738018][ T4166] device hsr_slave_0 entered promiscuous mode [ 72.749466][ T4166] device hsr_slave_1 entered promiscuous mode [ 72.756227][ T4166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.763803][ T4166] Cannot create hsr debugfs directory [ 72.775019][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 72.827137][ T4173] device hsr_slave_0 entered promiscuous mode [ 72.834295][ T4173] device hsr_slave_1 entered promiscuous mode [ 72.841444][ T4173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.849736][ T4173] Cannot create hsr debugfs directory [ 72.926084][ T4178] device hsr_slave_0 entered promiscuous mode [ 72.932964][ T4178] device hsr_slave_1 entered promiscuous mode [ 72.939741][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.947473][ T4178] Cannot create hsr debugfs directory [ 73.240156][ T4172] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.271706][ T4172] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.283768][ T4166] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.294290][ T4166] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.304332][ T4166] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.317499][ T4172] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.337151][ T4166] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.347942][ T4172] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.413724][ T4173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.438685][ T4173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.453162][ T4173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.478444][ T4173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.533968][ T4165] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.543847][ T4165] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.578166][ T4165] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.600498][ T4165] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.647204][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.663086][ T4166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.679373][ T4178] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.691058][ T4178] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.711005][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.726151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.739084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.747502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.758476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.767210][ T4178] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.779875][ T4166] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.805325][ T4178] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.815410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.824359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.834061][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.841470][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.850821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.860552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.871535][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.878785][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.889616][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.917427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.926993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.938738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.948649][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.957727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.966530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.976100][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.983260][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.991263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.999392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.030770][ T4173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.050069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.060520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.069755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.082338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.091869][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.099039][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.107238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.116043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.137534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.146726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.156066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.165616][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.196151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.204159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.213311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.224506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.232338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.240627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.250583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.259646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.268690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.281115][ T4172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.309894][ T4166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.321579][ T4166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.333580][ T4173] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.355608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.364324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.418648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.428889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.438913][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.446078][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.456529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.465754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.484670][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.491785][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.528422][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.556950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.572290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.583657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.598082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.608479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.619406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.627260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.634996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.660302][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.676769][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.685571][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.699021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.708163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.735318][ T4165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.748183][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.756694][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.766160][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.774923][ T4207] Bluetooth: hci3: command 0x041b tx timeout [ 74.776446][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.789427][ T4207] Bluetooth: hci2: command 0x041b tx timeout [ 74.790406][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.800987][ T4207] Bluetooth: hci0: command 0x041b tx timeout [ 74.804233][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.809405][ T4207] Bluetooth: hci1: command 0x041b tx timeout [ 74.819104][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.839315][ T4166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.860194][ T4173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.871211][ T4207] Bluetooth: hci4: command 0x041b tx timeout [ 74.880698][ T4173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.901086][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.922249][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.940247][ T4172] device veth0_vlan entered promiscuous mode [ 74.976650][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.987262][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.996729][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.007279][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.016752][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.024150][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.032569][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.041452][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.051190][ T1216] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.058340][ T1216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.066899][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.077645][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.086282][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.094090][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.102971][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.118971][ T4172] device veth1_vlan entered promiscuous mode [ 75.155276][ T4165] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.163283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.181359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.192641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.204035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.213655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.223816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.232900][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.270401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.283332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.292354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.302098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.313629][ T4178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.325447][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.332970][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.363751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.378872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.422147][ T4172] device veth0_macvtap entered promiscuous mode [ 75.433577][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.443468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.452967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.462055][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.469285][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.478242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.487170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.496306][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.503401][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.511452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.520858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.538368][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.557186][ T4172] device veth1_macvtap entered promiscuous mode [ 75.568219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.577738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.586510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.597997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.608052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.645426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.660275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.668919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.679153][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.701451][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.722859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.732024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.741617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.751459][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.760316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.772171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.799252][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.816489][ T4172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.826060][ T4172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.835033][ T4172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.843901][ T4172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.865461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.878727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.887806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.897997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.906933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.914998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.925895][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.935592][ T4165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.961160][ T4166] device veth0_vlan entered promiscuous mode [ 75.975052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.984004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.993923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.006318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.018757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.027277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.035733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.043626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.053509][ T4173] device veth0_vlan entered promiscuous mode [ 76.069257][ T4166] device veth1_vlan entered promiscuous mode [ 76.113199][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.129210][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.170394][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.194217][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.203699][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.220034][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.238659][ T4173] device veth1_vlan entered promiscuous mode [ 76.249249][ T4166] device veth0_macvtap entered promiscuous mode [ 76.280090][ T4178] device veth0_vlan entered promiscuous mode [ 76.305246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.315085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.323953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.333752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.343434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.382200][ T4166] device veth1_macvtap entered promiscuous mode [ 76.399592][ T4178] device veth1_vlan entered promiscuous mode [ 76.417766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.427503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.437629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.448834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.468720][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.483993][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.489270][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.503018][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.515805][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.526247][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.538540][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.550996][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.568005][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.576985][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586145][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.594898][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607331][ T4165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.617695][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.625882][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.633559][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.644026][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.653104][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.662053][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.671242][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.690186][ T4173] device veth0_macvtap entered promiscuous mode [ 76.732380][ T4173] device veth1_macvtap entered promiscuous mode [ 76.760453][ T483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.769930][ T483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.786049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.795470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.803865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.812549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.821582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.835593][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.855071][ T4212] Bluetooth: hci1: command 0x040f tx timeout [ 76.862672][ T4212] Bluetooth: hci0: command 0x040f tx timeout [ 76.869291][ T4212] Bluetooth: hci2: command 0x040f tx timeout [ 76.870726][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.876003][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 76.888901][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.902529][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.926051][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.938876][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.946674][ T4212] Bluetooth: hci4: command 0x040f tx timeout [ 76.954025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.964118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.974126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.983648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.013506][ T4165] device veth0_vlan entered promiscuous mode [ 77.026607][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.041748][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.052257][ T4173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.063116][ T4173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.078024][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.091959][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.102031][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.111723][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.121841][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.131376][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.145847][ T1216] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.157911][ T4178] device veth0_macvtap entered promiscuous mode [ 77.175502][ T4173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.184242][ T4173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.197077][ T4173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.205960][ T4173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.242321][ T4165] device veth1_vlan entered promiscuous mode [ 77.281012][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.286361][ T4178] device veth1_macvtap entered promiscuous mode [ 77.316624][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.334169][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.394659][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.415548][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.424217][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.460549][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.472575][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.494122][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.513020][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.524137][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.539355][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.551899][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.574156][ T4165] device veth0_macvtap entered promiscuous mode [ 77.599077][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.615379][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.624176][ T1216] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.633852][ T1216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.636881][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.656335][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.676883][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.695938][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.710575][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.725117][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.737105][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.748186][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.760097][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.771191][ T4165] device veth1_macvtap entered promiscuous mode [ 77.794909][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.827402][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.840494][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.860717][ T4178] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.870407][ T4178] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.880799][ T4178] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.890768][ T4178] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.930592][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.970039][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.980363][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.991165][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.001397][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.012259][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.022421][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.033272][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.040862][ T4258] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 78.046693][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.094211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.100011][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.114183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.121377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.132776][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.148513][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.162420][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.173267][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.186675][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.197565][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.208029][ T4165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.218876][ T4165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.233378][ T4165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.246065][ T4165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.255578][ T4165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265359][ T4165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.274094][ T4165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.300927][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.309315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.318584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.353276][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.369936][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.430240][ T4264] syz.3.9[4264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.430360][ T4264] syz.3.9[4264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.462004][ T483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.603303][ T483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.646455][ T483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655620][ T4217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.665866][ T4217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.700619][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.725588][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.744695][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.755798][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.780801][ T4270] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.826109][ T4217] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.884849][ T4217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.905338][ T4217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.914296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.945360][ T4212] Bluetooth: hci3: command 0x0419 tx timeout [ 78.951438][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 79.008500][ T4212] Bluetooth: hci0: command 0x0419 tx timeout [ 79.014798][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 79.059372][ T4276] loop3: detected capacity change from 0 to 256 [ 79.090564][ T4212] Bluetooth: hci1: command 0x0419 tx timeout [ 79.203686][ T26] audit: type=1326 audit(1742768895.696:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff707e12169 code=0x7ffc0000 [ 79.228360][ T4276] FAT-fs (loop3): bogus number of FAT sectors [ 79.258713][ T4276] FAT-fs (loop3): Can't find a valid FAT filesystem [ 79.298878][ T26] audit: type=1326 audit(1742768895.696:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff707e12169 code=0x7ffc0000 [ 79.391098][ T26] audit: type=1326 audit(1742768895.696:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4282 comm="syz.0.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7ff707e12169 code=0x7ffc0000 [ 80.910804][ T4302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.084566][ C1] ------------[ cut here ]------------ [ 81.084657][ C1] [ 81.084664][ C1] ====================================================== [ 81.084669][ C1] WARNING: possible circular locking dependency detected [ 81.084675][ C1] 5.15.179-syzkaller #0 Not tainted [ 81.084685][ C1] ------------------------------------------------------ [ 81.084690][ C1] syz.0.26/4308 is trying to acquire lock: [ 81.084700][ C1] ffffffff8c9fbd38 ((console_sem).lock){..-.}-{2:2}, at: down_trylock+0x1c/0xa0 [ 81.084769][ C1] [ 81.084769][ C1] but task is already holding lock: [ 81.084773][ C1] ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 81.084816][ C1] [ 81.084816][ C1] which lock already depends on the new lock. [ 81.084816][ C1] [ 81.084820][ C1] [ 81.084820][ C1] the existing dependency chain (in reverse order) is: [ 81.084825][ C1] [ 81.084825][ C1] -> #3 (&base->lock){-.-.}-{2:2}: [ 81.084846][ C1] lock_acquire+0x1db/0x4f0 [ 81.084863][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 81.084881][ C1] lock_timer_base+0x120/0x260 [ 81.084899][ C1] __mod_timer+0x1d6/0xeb0 [ 81.084916][ C1] queue_delayed_work_on+0x156/0x250 [ 81.084936][ C1] enqueue_task+0x28d/0x2e0 [ 81.084956][ C1] wake_up_new_task+0x515/0xb60 [ 81.084975][ C1] kernel_clone+0x44e/0x960 [ 81.084991][ C1] kernel_thread+0x12e/0x1a0 [ 81.085006][ C1] rest_init+0x21/0x330 [ 81.085021][ C1] start_kernel+0x48c/0x540 [ 81.085040][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 81.085060][ C1] [ 81.085060][ C1] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 81.085081][ C1] lock_acquire+0x1db/0x4f0 [ 81.085096][ C1] _raw_spin_lock_nested+0x2d/0x40 [ 81.085111][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 81.085129][ C1] task_fork_fair+0x5d/0x350 [ 81.085145][ C1] sched_cgroup_fork+0x2d3/0x330 [ 81.085163][ C1] copy_process+0x224a/0x3ef0 [ 81.085185][ C1] kernel_clone+0x210/0x960 [ 81.085200][ C1] kernel_thread+0x12e/0x1a0 [ 81.085215][ C1] rest_init+0x21/0x330 [ 81.085242][ C1] start_kernel+0x48c/0x540 [ 81.085258][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 81.085276][ C1] [ 81.085276][ C1] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 81.085297][ C1] lock_acquire+0x1db/0x4f0 [ 81.085311][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 81.085326][ C1] try_to_wake_up+0xae/0x12c0 [ 81.085344][ C1] up+0x6e/0x90 [ 81.085364][ C1] __up_console_sem+0x11a/0x1e0 [ 81.085381][ C1] console_unlock+0x1145/0x12b0 [ 81.085397][ C1] vprintk_emit+0xbf/0x150 [ 81.085412][ C1] dev_vprintk_emit+0x2aa/0x330 [ 81.085430][ C1] dev_printk_emit+0xd9/0x120 [ 81.085446][ C1] _dev_warn+0x11e/0x170 [ 81.085462][ C1] firmware_fallback_sysfs+0x681/0xc90 [ 81.085486][ C1] _request_firmware+0xc72/0x12c0 [ 81.085503][ C1] request_firmware_work_func+0x126/0x270 [ 81.085522][ C1] process_one_work+0x8a1/0x10c0 [ 81.085541][ C1] worker_thread+0xaca/0x1280 [ 81.085559][ C1] kthread+0x3f6/0x4f0 [ 81.085575][ C1] ret_from_fork+0x1f/0x30 [ 81.085592][ C1] [ 81.085592][ C1] -> #0 ((console_sem).lock){..-.}-{2:2}: [ 81.085615][ C1] validate_chain+0x1649/0x5930 [ 81.085632][ C1] __lock_acquire+0x1295/0x1ff0 [ 81.085648][ C1] lock_acquire+0x1db/0x4f0 [ 81.085663][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 81.085678][ C1] down_trylock+0x1c/0xa0 [ 81.085696][ C1] __down_trylock_console_sem+0x105/0x250 [ 81.085714][ C1] console_trylock_spinning+0x8a/0x3f0 [ 81.085731][ C1] vprintk_emit+0xa6/0x150 [ 81.085747][ C1] _printk+0xd1/0x120 [ 81.085761][ C1] report_bug+0x1e5/0x2e0 [ 81.085781][ C1] handle_bug+0x3d/0x70 [ 81.085798][ C1] exc_invalid_op+0x16/0x40 [ 81.085815][ C1] asm_exc_invalid_op+0x16/0x20 [ 81.085832][ C1] copy_from_user_nofault+0x15c/0x1c0 [ 81.085851][ C1] bpf_probe_read_compat+0xe4/0x180 [ 81.085870][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0xd40 [ 81.085885][ C1] bpf_trace_run3+0x1d1/0x380 [ 81.085902][ C1] __traceiter_timer_start+0x79/0xd0 [ 81.085934][ C1] enqueue_timer+0x3ae/0x540 [ 81.085950][ C1] __mod_timer+0xa60/0xeb0 [ 81.085968][ C1] dsp_cmx_send+0x21bb/0x2240 [ 81.085986][ C1] call_timer_fn+0x16d/0x560 [ 81.086001][ C1] __run_timers+0x67c/0x890 [ 81.086016][ C1] run_timer_softirq+0x63/0xf0 [ 81.086036][ C1] handle_softirqs+0x3a7/0x930 [ 81.086054][ C1] __irq_exit_rcu+0x157/0x240 [ 81.086069][ C1] irq_exit_rcu+0x5/0x20 [ 81.086083][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 81.086104][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 81.086123][ C1] finish_lock_switch+0x91/0x100 [ 81.086142][ C1] finish_task_switch+0x134/0x630 [ 81.086162][ C1] __schedule+0x12cc/0x45b0 [ 81.086188][ C1] schedule+0x11b/0x1f0 [ 81.086204][ C1] futex_wait_queue_me+0x25b/0x480 [ 81.086219][ C1] futex_wait+0x2f8/0x740 [ 81.086239][ C1] do_futex+0x1414/0x1810 [ 81.086257][ C1] __se_sys_futex+0x407/0x490 [ 81.086276][ C1] do_syscall_64+0x3b/0xb0 [ 81.086293][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.086311][ C1] [ 81.086311][ C1] other info that might help us debug this: [ 81.086311][ C1] [ 81.086317][ C1] Chain exists of: [ 81.086317][ C1] (console_sem).lock --> &rq->__lock --> &base->lock [ 81.086317][ C1] [ 81.086344][ C1] Possible unsafe locking scenario: [ 81.086344][ C1] [ 81.086348][ C1] CPU0 CPU1 [ 81.086352][ C1] ---- ---- [ 81.086356][ C1] lock(&base->lock); [ 81.086365][ C1] lock(&rq->__lock); [ 81.086376][ C1] lock(&base->lock); [ 81.086386][ C1] lock((console_sem).lock); [ 81.086394][ C1] [ 81.086394][ C1] *** DEADLOCK *** [ 81.086394][ C1] [ 81.086397][ C1] 4 locks held by syz.0.26/4308: [ 81.086406][ C1] #0: ffffc90000dd0be0 ((&dsp_spl_tl)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560 [ 81.086440][ C1] #1: ffffffff8d9f1f38 (dsp_lock){..-.}-{2:2}, at: dsp_cmx_send+0x22/0x2240 [ 81.086474][ C1] #2: ffff8880b8f28098 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 81.086509][ C1] #3: ffffffff8cb1f4e0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 81.086542][ C1] [ 81.086542][ C1] stack backtrace: [ 81.086556][ C1] CPU: 1 PID: 4308 Comm: syz.0.26 Not tainted 5.15.179-syzkaller #0 [ 81.086572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.086585][ C1] Call Trace: [ 81.086590][ C1] [ 81.086596][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 81.086614][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 81.086634][ C1] ? print_circular_bug+0x12b/0x1a0 [ 81.086650][ C1] check_noncircular+0x2f8/0x3b0 [ 81.086665][ C1] ? __napi_poll+0xc7/0x440 [ 81.086682][ C1] ? net_rx_action+0x617/0xda0 [ 81.086700][ C1] ? add_chain_block+0x850/0x850 [ 81.086715][ C1] ? lockdep_lock+0x11f/0x2a0 [ 81.086734][ C1] validate_chain+0x1649/0x5930 [ 81.086751][ C1] ? unwind_get_return_address+0x49/0x80 [ 81.086777][ C1] ? reacquire_held_locks+0x660/0x660 [ 81.086796][ C1] ? lockdep_lock+0x11f/0x2a0 [ 81.086810][ C1] ? lockdep_unlock+0x166/0x300 [ 81.086824][ C1] ? lockdep_lock+0x2a0/0x2a0 [ 81.086840][ C1] ? mark_lock+0x98/0x340 [ 81.086855][ C1] __lock_acquire+0x1295/0x1ff0 [ 81.086875][ C1] lock_acquire+0x1db/0x4f0 [ 81.086888][ C1] ? down_trylock+0x1c/0xa0 [ 81.086904][ C1] ? vsnprintf+0x1c70/0x1c70 [ 81.086923][ C1] ? read_lock_is_recursive+0x10/0x10 [ 81.086938][ C1] ? memcpy+0x3c/0x60 [ 81.086955][ C1] ? vsnprintf+0x1b93/0x1c70 [ 81.086972][ C1] ? _prb_commit+0x30a/0x3e0 [ 81.086988][ C1] ? prb_reserve+0x1240/0x1240 [ 81.087004][ C1] _raw_spin_lock_irqsave+0xd1/0x120 [ 81.087018][ C1] ? down_trylock+0x1c/0xa0 [ 81.087034][ C1] ? _raw_spin_lock+0x40/0x40 [ 81.087049][ C1] ? vprintk_store+0xf1b/0x1300 [ 81.087065][ C1] down_trylock+0x1c/0xa0 [ 81.087082][ C1] __down_trylock_console_sem+0x105/0x250 [ 81.087099][ C1] ? printk_parse_prefix+0x2c0/0x2c0 [ 81.087113][ C1] ? vprintk_emit+0xa6/0x150 [ 81.087127][ C1] ? console_trylock+0x70/0x70 [ 81.087142][ C1] ? validate_chain+0x112/0x5930 [ 81.087160][ C1] ? vprintk_emit+0xa6/0x150 [ 81.087180][ C1] console_trylock_spinning+0x8a/0x3f0 [ 81.087195][ C1] ? vprintk_emit+0x150/0x150 [ 81.087212][ C1] ? reacquire_held_locks+0x660/0x660 [ 81.087226][ C1] ? validate_chain+0x112/0x5930 [ 81.087241][ C1] ? reacquire_held_locks+0x660/0x660 [ 81.087257][ C1] vprintk_emit+0xa6/0x150 [ 81.087272][ C1] _printk+0xd1/0x120 [ 81.087285][ C1] ? mark_lock+0x98/0x340 [ 81.087299][ C1] ? report_bug+0x16e/0x2e0 [ 81.087314][ C1] ? panic+0x860/0x860 [ 81.087326][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 81.087342][ C1] ? find_bug+0x9c/0x350 [ 81.087358][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 81.087373][ C1] report_bug+0x1e5/0x2e0 [ 81.087391][ C1] handle_bug+0x3d/0x70 [ 81.087406][ C1] exc_invalid_op+0x16/0x40 [ 81.087421][ C1] asm_exc_invalid_op+0x16/0x20 [ 81.087436][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 81.087453][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 81.087465][ C1] RSP: 0018:ffffc90000dd0730 EFLAGS: 00010046 [ 81.087477][ C1] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888024c38000 [ 81.087489][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 81.087498][ C1] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1004987001 [ 81.087509][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000007fffffe8 [ 81.087519][ C1] R13: 0000000000000000 R14: 000000007fffffe8 R15: ffffc90000dd07a8 [ 81.087532][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 81.087546][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 81.087565][ C1] bpf_probe_read_compat+0xe4/0x180 [ 81.087582][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0xd40 [ 81.087595][ C1] bpf_trace_run3+0x1d1/0x380 [ 81.087611][ C1] ? bpf_trace_run2+0x340/0x340 [ 81.087627][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 81.087642][ C1] ? _raw_spin_unlock+0x40/0x40 [ 81.087655][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 81.087669][ C1] ? _raw_spin_lock+0x40/0x40 [ 81.087682][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 81.087699][ C1] __traceiter_timer_start+0x79/0xd0 [ 81.087717][ C1] enqueue_timer+0x3ae/0x540 [ 81.087732][ C1] __mod_timer+0xa60/0xeb0 [ 81.087749][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 81.087768][ C1] ? mod_timer_pending+0x20/0x20 [ 81.087784][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 81.087799][ C1] ? _raw_read_unlock+0x40/0x40 [ 81.087811][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 81.087825][ C1] ? _raw_spin_lock+0x40/0x40 [ 81.087840][ C1] ? ktime_get+0x242/0x270 [ 81.087855][ C1] dsp_cmx_send+0x21bb/0x2240 [ 81.087869][ C1] ? read_lock_is_recursive+0x10/0x10 [ 81.087885][ C1] ? detach_timer+0x24/0x2f0 [ 81.087903][ C1] call_timer_fn+0x16d/0x560 [ 81.087917][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 81.087932][ C1] ? __run_timers+0x890/0x890 [ 81.087948][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 81.087964][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 81.087977][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 81.087990][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 81.088008][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 81.088022][ C1] __run_timers+0x67c/0x890 [ 81.088039][ C1] ? detach_timer+0x2f0/0x2f0 [ 81.088051][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 81.088069][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 81.088086][ C1] run_timer_softirq+0x63/0xf0 [ 81.088103][ C1] handle_softirqs+0x3a7/0x930 [ 81.088120][ C1] ? __irq_exit_rcu+0x157/0x240 [ 81.088136][ C1] ? do_softirq+0x240/0x240 [ 81.088151][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 81.088173][ C1] __irq_exit_rcu+0x157/0x240 [ 81.088188][ C1] ? irq_exit_rcu+0x20/0x20 [ 81.088205][ C1] irq_exit_rcu+0x5/0x20 [ 81.088218][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 81.088236][ C1] [ 81.088240][ C1] [ 81.088244][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 81.088260][ C1] RIP: 0010:finish_lock_switch+0x91/0x100 [ 81.088276][ C1] Code: 45 31 c9 68 47 cc 59 81 e8 6c 14 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 26 d1 ef 08 e8 c1 4e 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 81.088288][ C1] RSP: 0018:ffffc900011ef698 EFLAGS: 00000286 [ 81.088299][ C1] RAX: 8a0668da78ebbc00 RBX: ffff888024c3d974 RCX: ffffffff96a95f03 [ 81.088311][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: ffffffff8af9fa80 [ 81.088322][ C1] RBP: ffffc900011ef710 R08: ffffffff81871b70 R09: ffffed10171e7461 [ 81.088333][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 81.088343][ C1] R13: 1ffff110171e760b R14: ffff8880b8f3b058 R15: ffff8880b8f3a300 [ 81.088357][ C1] ? trace_hardirqs_on+0x30/0x80 [ 81.088379][ C1] finish_task_switch+0x134/0x630 [ 81.088398][ C1] ? __switch_to_asm+0x34/0x60 [ 81.088415][ C1] __schedule+0x12cc/0x45b0 [ 81.088440][ C1] ? release_firmware_map_entry+0x190/0x190 [ 81.088460][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 81.088477][ C1] schedule+0x11b/0x1f0 [ 81.088492][ C1] futex_wait_queue_me+0x25b/0x480 [ 81.088509][ C1] futex_wait+0x2f8/0x740 [ 81.088525][ C1] ? plist_del+0x3ed/0x410 [ 81.088543][ C1] ? do_futex+0x1810/0x1810 [ 81.088564][ C1] ? reacquire_held_locks+0x660/0x660 [ 81.088585][ C1] ? __fsnotify_parent+0x50c/0x730 [ 81.088603][ C1] do_futex+0x1414/0x1810 [ 81.088622][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 81.088641][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 81.088663][ C1] ? read_lock_is_recursive+0x10/0x10 [ 81.088677][ C1] ? __context_tracking_exit+0x4c/0x80 [ 81.088692][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 81.088708][ C1] __se_sys_futex+0x407/0x490 [ 81.088727][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 81.088745][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 81.088760][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 81.088777][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 81.088794][ C1] do_syscall_64+0x3b/0xb0 [ 81.088809][ C1] ? clear_bhb_loop+0x15/0x70 [ 81.088824][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 81.088839][ C1] RIP: 0033:0x7ff707e12169 [ 81.088852][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.088863][ C1] RSP: 002b:00007ff705c7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.088877][ C1] RAX: ffffffffffffffda RBX: 00007ff70802afa8 RCX: 00007ff707e12169 [ 81.088888][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff70802afa8 [ 81.088897][ C1] RBP: 00007ff70802afa0 R08: 0000000000000000 R09: 0000000000000000 [ 81.088906][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff70802afac [ 81.088915][ C1] R13: 0000000000000000 R14: 00007fff5b002070 R15: 00007fff5b002158 [ 81.088932][ C1] [ 82.605448][ C1] WARNING: CPU: 1 PID: 4308 at mm/maccess.c:226 copy_from_user_nofault+0x15c/0x1c0 [ 82.614748][ C1] Modules linked in: [ 82.618647][ C1] CPU: 1 PID: 4308 Comm: syz.0.26 Not tainted 5.15.179-syzkaller #0 [ 82.626619][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.636688][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 82.642856][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 82.662460][ C1] RSP: 0018:ffffc90000dd0730 EFLAGS: 00010046 [ 82.668549][ C1] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888024c38000 [ 82.676547][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.684536][ C1] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1004987001 [ 82.692771][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000007fffffe8 [ 82.700759][ C1] R13: 0000000000000000 R14: 000000007fffffe8 R15: ffffc90000dd07a8 [ 82.708749][ C1] FS: 00007ff705c7b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 82.717699][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.724290][ C1] CR2: 00002000000012c0 CR3: 000000005faf8000 CR4: 00000000003506e0 [ 82.732275][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 82.740261][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 82.748251][ C1] Call Trace: [ 82.751537][ C1] [ 82.754400][ C1] ? __warn+0x15b/0x300 [ 82.758598][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 82.764147][ C1] ? report_bug+0x1b7/0x2e0 [ 82.768658][ C1] ? handle_bug+0x3d/0x70 [ 82.772991][ C1] ? exc_invalid_op+0x16/0x40 [ 82.777671][ C1] ? asm_exc_invalid_op+0x16/0x20 [ 82.782704][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 82.788173][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 82.793885][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 82.799470][ C1] bpf_probe_read_compat+0xe4/0x180 [ 82.804691][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0xd40 [ 82.810251][ C1] bpf_trace_run3+0x1d1/0x380 [ 82.814963][ C1] ? bpf_trace_run2+0x340/0x340 [ 82.819887][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 82.825789][ C1] ? _raw_spin_unlock+0x40/0x40 [ 82.830652][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 82.836135][ C1] ? _raw_spin_lock+0x40/0x40 [ 82.840857][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 82.846321][ C1] __traceiter_timer_start+0x79/0xd0 [ 82.851613][ C1] enqueue_timer+0x3ae/0x540 [ 82.856206][ C1] __mod_timer+0xa60/0xeb0 [ 82.860619][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 82.866869][ C1] ? mod_timer_pending+0x20/0x20 [ 82.871827][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 82.877717][ C1] ? _raw_read_unlock+0x40/0x40 [ 82.882702][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 82.888222][ C1] ? _raw_spin_lock+0x40/0x40 [ 82.893180][ C1] ? ktime_get+0x242/0x270 [ 82.897603][ C1] dsp_cmx_send+0x21bb/0x2240 [ 82.902280][ C1] ? read_lock_is_recursive+0x10/0x10 [ 82.907650][ C1] ? detach_timer+0x24/0x2f0 [ 82.912238][ C1] call_timer_fn+0x16d/0x560 [ 82.916853][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 82.921984][ C1] ? __run_timers+0x890/0x890 [ 82.926661][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 82.931975][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 82.937193][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 82.942304][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 82.947607][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 82.952721][ C1] __run_timers+0x67c/0x890 [ 82.957238][ C1] ? detach_timer+0x2f0/0x2f0 [ 82.961921][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 82.967909][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 82.973304][ C1] run_timer_softirq+0x63/0xf0 [ 82.978082][ C1] handle_softirqs+0x3a7/0x930 [ 82.982851][ C1] ? __irq_exit_rcu+0x157/0x240 [ 82.987705][ C1] ? do_softirq+0x240/0x240 [ 82.992217][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 82.997434][ C1] __irq_exit_rcu+0x157/0x240 [ 83.002135][ C1] ? irq_exit_rcu+0x20/0x20 [ 83.006647][ C1] irq_exit_rcu+0x5/0x20 [ 83.010891][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.016565][ C1] [ 83.019494][ C1] [ 83.022421][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.028403][ C1] RIP: 0010:finish_lock_switch+0x91/0x100 [ 83.034133][ C1] Code: 45 31 c9 68 47 cc 59 81 e8 6c 14 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 26 d1 ef 08 e8 c1 4e 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 83.053876][ C1] RSP: 0018:ffffc900011ef698 EFLAGS: 00000286 [ 83.059969][ C1] RAX: 8a0668da78ebbc00 RBX: ffff888024c3d974 RCX: ffffffff96a95f03 [ 83.067955][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: ffffffff8af9fa80 [ 83.075966][ C1] RBP: ffffc900011ef710 R08: ffffffff81871b70 R09: ffffed10171e7461 [ 83.083965][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 83.091948][ C1] R13: 1ffff110171e760b R14: ffff8880b8f3b058 R15: ffff8880b8f3a300 [ 83.099933][ C1] ? trace_hardirqs_on+0x30/0x80 [ 83.104891][ C1] finish_task_switch+0x134/0x630 [ 83.109941][ C1] ? __switch_to_asm+0x34/0x60 [ 83.114714][ C1] __schedule+0x12cc/0x45b0 [ 83.119232][ C1] ? release_firmware_map_entry+0x190/0x190 [ 83.125129][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 83.130329][ C1] schedule+0x11b/0x1f0 [ 83.134514][ C1] futex_wait_queue_me+0x25b/0x480 [ 83.139653][ C1] futex_wait+0x2f8/0x740 [ 83.143988][ C1] ? plist_del+0x3ed/0x410 [ 83.148430][ C1] ? do_futex+0x1810/0x1810 [ 83.152939][ C1] ? reacquire_held_locks+0x660/0x660 [ 83.158320][ C1] ? __fsnotify_parent+0x50c/0x730 [ 83.163434][ C1] do_futex+0x1414/0x1810 [ 83.167926][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 83.172989][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 83.178234][ C1] ? read_lock_is_recursive+0x10/0x10 [ 83.183626][ C1] ? __context_tracking_exit+0x4c/0x80 [ 83.189089][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 83.194236][ C1] __se_sys_futex+0x407/0x490 [ 83.198962][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 83.203748][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 83.209874][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 83.215120][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 83.219892][ C1] do_syscall_64+0x3b/0xb0 [ 83.224323][ C1] ? clear_bhb_loop+0x15/0x70 [ 83.229018][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.234913][ C1] RIP: 0033:0x7ff707e12169 [ 83.239334][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.258963][ C1] RSP: 002b:00007ff705c7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.267382][ C1] RAX: ffffffffffffffda RBX: 00007ff70802afa8 RCX: 00007ff707e12169 [ 83.275465][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff70802afa8 [ 83.283431][ C1] RBP: 00007ff70802afa0 R08: 0000000000000000 R09: 0000000000000000 [ 83.291492][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff70802afac [ 83.299462][ C1] R13: 0000000000000000 R14: 00007fff5b002070 R15: 00007fff5b002158 [ 83.307441][ C1] [ 83.310475][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 83.317749][ C1] CPU: 1 PID: 4308 Comm: syz.0.26 Not tainted 5.15.179-syzkaller #0 [ 83.325836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.335889][ C1] Call Trace: [ 83.339170][ C1] [ 83.342009][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 83.346697][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 83.352328][ C1] ? panic+0x860/0x860 [ 83.356398][ C1] ? copy_from_user_nofault+0x120/0x1c0 [ 83.361944][ C1] ? copy_from_user_nofault+0x120/0x1c0 [ 83.367590][ C1] panic+0x318/0x860 [ 83.371614][ C1] ? __warn+0x16a/0x300 [ 83.375779][ C1] ? fb_is_primary_device+0xd0/0xd0 [ 83.380995][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 83.386544][ C1] __warn+0x2b2/0x300 [ 83.390529][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 83.396070][ C1] report_bug+0x1b7/0x2e0 [ 83.400404][ C1] handle_bug+0x3d/0x70 [ 83.404559][ C1] exc_invalid_op+0x16/0x40 [ 83.409061][ C1] asm_exc_invalid_op+0x16/0x20 [ 83.413910][ C1] RIP: 0010:copy_from_user_nofault+0x15c/0x1c0 [ 83.420092][ C1] Code: db 48 c7 c0 f2 ff ff ff 48 0f 44 c5 eb 0c e8 9b b0 d5 ff 48 c7 c0 f2 ff ff ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 84 b0 d5 ff <0f> 0b e9 1e ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c ef fe ff [ 83.439788][ C1] RSP: 0018:ffffc90000dd0730 EFLAGS: 00010046 [ 83.445866][ C1] RAX: ffffffff81aaec3c RBX: 0000000000000000 RCX: ffff888024c38000 [ 83.453842][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 83.461812][ C1] RBP: dffffc0000000000 R08: ffffffff81aaeb4d R09: ffffed1004987001 [ 83.469883][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 000000007fffffe8 [ 83.477876][ C1] R13: 0000000000000000 R14: 000000007fffffe8 R15: ffffc90000dd07a8 [ 83.485857][ C1] ? copy_from_user_nofault+0x6d/0x1c0 [ 83.491338][ C1] ? copy_from_user_nofault+0x15c/0x1c0 [ 83.496886][ C1] bpf_probe_read_compat+0xe4/0x180 [ 83.502091][ C1] bpf_prog_4595f2d530cd9aa3+0x35/0xd40 [ 83.507635][ C1] bpf_trace_run3+0x1d1/0x380 [ 83.512313][ C1] ? bpf_trace_run2+0x340/0x340 [ 83.517162][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 83.523053][ C1] ? _raw_spin_unlock+0x40/0x40 [ 83.527911][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 83.533502][ C1] ? _raw_spin_lock+0x40/0x40 [ 83.538202][ C1] ? __bpf_trace_timer_class+0x20/0x20 [ 83.543665][ C1] __traceiter_timer_start+0x79/0xd0 [ 83.548968][ C1] enqueue_timer+0x3ae/0x540 [ 83.553593][ C1] __mod_timer+0xa60/0xeb0 [ 83.558015][ C1] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 83.564260][ C1] ? mod_timer_pending+0x20/0x20 [ 83.569204][ C1] ? _raw_read_unlock_irqrestore+0xd9/0x130 [ 83.575099][ C1] ? _raw_read_unlock+0x40/0x40 [ 83.579953][ C1] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 83.585416][ C1] ? _raw_spin_lock+0x40/0x40 [ 83.590120][ C1] ? ktime_get+0x242/0x270 [ 83.594538][ C1] dsp_cmx_send+0x21bb/0x2240 [ 83.599226][ C1] ? read_lock_is_recursive+0x10/0x10 [ 83.604712][ C1] ? detach_timer+0x24/0x2f0 [ 83.609327][ C1] call_timer_fn+0x16d/0x560 [ 83.614015][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 83.619136][ C1] ? __run_timers+0x890/0x890 [ 83.623806][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 83.629001][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 83.634194][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 83.639299][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 83.644495][ C1] ? dsp_cmx_receive+0x1370/0x1370 [ 83.649599][ C1] __run_timers+0x67c/0x890 [ 83.654104][ C1] ? detach_timer+0x2f0/0x2f0 [ 83.658770][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 83.664752][ C1] ? ktime_get_real_ts64+0x460/0x460 [ 83.670037][ C1] run_timer_softirq+0x63/0xf0 [ 83.674801][ C1] handle_softirqs+0x3a7/0x930 [ 83.679613][ C1] ? __irq_exit_rcu+0x157/0x240 [ 83.684458][ C1] ? do_softirq+0x240/0x240 [ 83.688956][ C1] ? irqtime_account_irq+0xd0/0x1e0 [ 83.694150][ C1] __irq_exit_rcu+0x157/0x240 [ 83.698831][ C1] ? irq_exit_rcu+0x20/0x20 [ 83.703334][ C1] irq_exit_rcu+0x5/0x20 [ 83.707578][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 83.713215][ C1] [ 83.716147][ C1] [ 83.719073][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 83.725050][ C1] RIP: 0010:finish_lock_switch+0x91/0x100 [ 83.730766][ C1] Code: 45 31 c9 68 47 cc 59 81 e8 6c 14 09 00 48 83 c4 08 4c 89 ff e8 90 db fe ff 66 90 4c 89 ff e8 26 d1 ef 08 e8 c1 4e 2d 00 fb 5b <41> 5c 41 5d 41 5e 41 5f c3 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 87 [ 83.750451][ C1] RSP: 0018:ffffc900011ef698 EFLAGS: 00000286 [ 83.756638][ C1] RAX: 8a0668da78ebbc00 RBX: ffff888024c3d974 RCX: ffffffff96a95f03 [ 83.764625][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2a60 RDI: ffffffff8af9fa80 [ 83.772696][ C1] RBP: ffffc900011ef710 R08: ffffffff81871b70 R09: ffffed10171e7461 [ 83.780687][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 83.788671][ C1] R13: 1ffff110171e760b R14: ffff8880b8f3b058 R15: ffff8880b8f3a300 [ 83.796646][ C1] ? trace_hardirqs_on+0x30/0x80 [ 83.801616][ C1] finish_task_switch+0x134/0x630 [ 83.806780][ C1] ? __switch_to_asm+0x34/0x60 [ 83.811568][ C1] __schedule+0x12cc/0x45b0 [ 83.816173][ C1] ? release_firmware_map_entry+0x190/0x190 [ 83.822107][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 83.827336][ C1] schedule+0x11b/0x1f0 [ 83.831513][ C1] futex_wait_queue_me+0x25b/0x480 [ 83.836633][ C1] futex_wait+0x2f8/0x740 [ 83.840978][ C1] ? plist_del+0x3ed/0x410 [ 83.845416][ C1] ? do_futex+0x1810/0x1810 [ 83.849956][ C1] ? reacquire_held_locks+0x660/0x660 [ 83.855356][ C1] ? __fsnotify_parent+0x50c/0x730 [ 83.860561][ C1] do_futex+0x1414/0x1810 [ 83.864908][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 83.870067][ C1] ? futex_exit_release+0x1e0/0x1e0 [ 83.875511][ C1] ? read_lock_is_recursive+0x10/0x10 [ 83.880896][ C1] ? __context_tracking_exit+0x4c/0x80 [ 83.886450][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 83.891477][ C1] __se_sys_futex+0x407/0x490 [ 83.896158][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 83.900927][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 83.906904][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 83.914385][ C1] ? __x64_sys_futex+0x1d/0xf0 [ 83.919291][ C1] do_syscall_64+0x3b/0xb0 [ 83.923747][ C1] ? clear_bhb_loop+0x15/0x70 [ 83.928445][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.934342][ C1] RIP: 0033:0x7ff707e12169 [ 83.938760][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.958360][ C1] RSP: 002b:00007ff705c7b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 83.966949][ C1] RAX: ffffffffffffffda RBX: 00007ff70802afa8 RCX: 00007ff707e12169 [ 83.975113][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff70802afa8 [ 83.983693][ C1] RBP: 00007ff70802afa0 R08: 0000000000000000 R09: 0000000000000000 [ 83.991666][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff70802afac [ 83.999723][ C1] R13: 0000000000000000 R14: 00007fff5b002070 R15: 00007fff5b002158 [ 84.007815][ C1] [ 84.011123][ C1] Kernel Offset: disabled [ 84.015468][ C1] Rebooting in 86400 seconds..