last executing test programs: 8.155458541s ago: executing program 4 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) pause() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") utime(&(0x7f0000000180)='./file0\x00', 0x0) 5.018682369s ago: executing program 3 (id=1574): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x80, 0x700, 0xffffffff, 0x8000, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) 4.026640292s ago: executing program 3 (id=1578): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 4.000940953s ago: executing program 4 (id=1579): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.862204079s ago: executing program 3 (id=1582): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008090) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.694684737s ago: executing program 1 (id=1585): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000ac0)={0x24, 0x0, 0x0, &(0x7f0000000a40)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x0, "fc374661"}]}}, 0x0}, 0x0) 3.694301497s ago: executing program 2 (id=1586): r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.654794739s ago: executing program 3 (id=1587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.556314193s ago: executing program 4 (id=1588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000340)=""/245, 0xf5}], 0x1, 0x404, 0xc) 3.195328729s ago: executing program 0 (id=1590): socket(0x2c, 0x3, 0x400000) 3.150575741s ago: executing program 2 (id=1591): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r3, 0x7) 2.394781234s ago: executing program 0 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 2.365498166s ago: executing program 4 (id=1593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x20000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2.339086746s ago: executing program 2 (id=1594): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.296359558s ago: executing program 0 (id=1595): dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000102c0)=ANY=[], 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_dev$evdev(0x0, 0x8000000000000021, 0x0) syz_usb_disconnect(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r5, 0xfffffffffffffc01, 0x0) 2.25819436s ago: executing program 3 (id=1596): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) 2.210720112s ago: executing program 2 (id=1597): socket(0x26, 0x6, 0x8) 1.271039904s ago: executing program 2 (id=1598): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008090) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.220291276s ago: executing program 4 (id=1599): unshare(0x60000600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) 996.850716ms ago: executing program 2 (id=1600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)}], 0x1) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 812.957494ms ago: executing program 1 (id=1601): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x24000010) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 613.961403ms ago: executing program 4 (id=1602): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 470.499329ms ago: executing program 0 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@textreal={0x8, &(0x7f0000000080)="2671070f38cac90f07160fc7b474b4cd0336e64b0f237a66b9800000c00f326635010000000f300f3800bd0000", 0x2d}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 382.143622ms ago: executing program 0 (id=1604): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r3, 0x7) 379.120893ms ago: executing program 1 (id=1605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00", @ANYRES16=r1, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 361.468243ms ago: executing program 3 (id=1606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 238.122459ms ago: executing program 1 (id=1607): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0x6, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 170.885532ms ago: executing program 0 (id=1608): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf0, 0xe6, 0xa4, 0x20, 0x103d, 0x100, 0x7faa, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x47, 0x0, 0x0, 0x17, 0xb2, 0xd}}]}}]}}, 0x0) 66.471077ms ago: executing program 1 (id=1609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r3, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 1 (id=1610): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008090) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 61.281095][ T4170] cgroup: Unknown subsys name 'net' [ 61.418473][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.947474][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 64.968468][ T4182] chnl_net:caif_netlink_parms(): no params data found [ 65.066919][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.161178][ T4182] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.169132][ T4182] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.177446][ T4182] device bridge_slave_0 entered promiscuous mode [ 65.188828][ T4182] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.196080][ T4182] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.204374][ T4182] device bridge_slave_1 entered promiscuous mode [ 65.235026][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 65.245147][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 65.260856][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.292581][ T4182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.306871][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.315317][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.323855][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.356435][ T4182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.365829][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.375273][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.386777][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.461126][ T4182] team0: Port device team_slave_0 added [ 65.469392][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.497852][ T4182] team0: Port device team_slave_1 added [ 65.505760][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.522689][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.529961][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.538684][ T4187] device bridge_slave_0 entered promiscuous mode [ 65.578309][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.585672][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.593751][ T4187] device bridge_slave_1 entered promiscuous mode [ 65.612159][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.619562][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.628058][ T4188] device bridge_slave_0 entered promiscuous mode [ 65.658624][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.666042][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.674348][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.682269][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.689484][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.698072][ T4188] device bridge_slave_1 entered promiscuous mode [ 65.705930][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.712961][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.739358][ T4182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.753407][ T4186] team0: Port device team_slave_0 added [ 65.759762][ T4182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.767296][ T4182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.793387][ T4182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.813721][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.820837][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.829471][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.845853][ T4186] team0: Port device team_slave_1 added [ 65.867473][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.925630][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.944944][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.960394][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.967572][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.993775][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.008487][ T4182] device hsr_slave_0 entered promiscuous mode [ 66.016016][ T4182] device hsr_slave_1 entered promiscuous mode [ 66.031289][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.042464][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.052240][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.059213][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.085997][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.118878][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.149628][ T4187] team0: Port device team_slave_0 added [ 66.158522][ T4187] team0: Port device team_slave_1 added [ 66.208857][ T4188] team0: Port device team_slave_0 added [ 66.232760][ T4190] team0: Port device team_slave_0 added [ 66.242572][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.249584][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.256457][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.264592][ T4186] Cannot create hsr debugfs directory [ 66.279967][ T4188] team0: Port device team_slave_1 added [ 66.297771][ T4190] team0: Port device team_slave_1 added [ 66.305896][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.313047][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.340657][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.378822][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.386176][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.412953][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.431321][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.438563][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.464874][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.505637][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.512833][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.539152][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.550747][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.558451][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.585135][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.600337][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.607621][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.634629][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.634639][ T2284] Bluetooth: hci0: command 0x0409 tx timeout [ 66.701796][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 66.711610][ T2284] Bluetooth: hci4: command 0x0409 tx timeout [ 66.717791][ T2284] Bluetooth: hci3: command 0x0409 tx timeout [ 66.724616][ T2284] Bluetooth: hci2: command 0x0409 tx timeout [ 66.734584][ T4187] device hsr_slave_0 entered promiscuous mode [ 66.741678][ T4187] device hsr_slave_1 entered promiscuous mode [ 66.748431][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.756218][ T4187] Cannot create hsr debugfs directory [ 66.821779][ T4188] device hsr_slave_0 entered promiscuous mode [ 66.831018][ T4188] device hsr_slave_1 entered promiscuous mode [ 66.837834][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.847678][ T4188] Cannot create hsr debugfs directory [ 66.877571][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.884810][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.891569][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.899162][ T4190] Cannot create hsr debugfs directory [ 67.111246][ T4182] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.122496][ T4182] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.144395][ T4182] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.157896][ T4182] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.212330][ T4186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.222757][ T4186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.258279][ T4186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.272845][ T4186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.329528][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.351026][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.360673][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.373551][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.380527][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.423549][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.433891][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.444885][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.458905][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.477525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.486480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.495892][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.503430][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.513154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.523151][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.539430][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.549786][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.576687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.586404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.595467][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.602607][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.659843][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.686582][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.698662][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.709143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.726104][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.736374][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.748913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.757369][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.768473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.789022][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.802329][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.828495][ T4182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.839832][ T4182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.869134][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.886319][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.896007][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.905060][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.914008][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.929562][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.971293][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.996054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.008992][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.033329][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.056226][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.066572][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.083254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.092755][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.108006][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.127077][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.137882][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.150403][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.161913][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.170543][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.177679][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.185773][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.195755][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.204505][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.211632][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.221271][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.269058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.278362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.287649][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.294761][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.306760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.315596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.324229][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.331286][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.339161][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.348432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.357440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.367190][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.374795][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.383838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.392974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.401942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.410596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.419655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.429006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.438162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.447075][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.456125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.465306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.474293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.482954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.490925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.505752][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.516074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.525516][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.532664][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.564644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.575361][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.587900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.596189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.603893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.612713][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.622469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.631006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.639971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.649714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.658473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.672638][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.696423][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.703682][ T1107] Bluetooth: hci0: command 0x041b tx timeout [ 68.713142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.722316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.730840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.747186][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.757404][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.768642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.778522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.786719][ T1107] Bluetooth: hci2: command 0x041b tx timeout [ 68.788135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.800453][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 68.806808][ T1107] Bluetooth: hci4: command 0x041b tx timeout [ 68.813162][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 68.845917][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.863065][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.888181][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.908227][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.917839][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.927698][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.944534][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.959861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.983283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.998508][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.028750][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.053289][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.062590][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.079416][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.089670][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.096831][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.105815][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.115220][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.126208][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.134323][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.145736][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.165632][ T4182] device veth0_vlan entered promiscuous mode [ 69.217775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.227959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.238234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.248018][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.256468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.265249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.277485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.286575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.296186][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.304591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.317053][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.335521][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.352472][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.368777][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.385949][ T4182] device veth1_vlan entered promiscuous mode [ 69.399393][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.408985][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.422784][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.433826][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.459743][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.471088][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.495410][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.504969][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.515396][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.525748][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.534861][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.544487][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.553842][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.563147][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.570714][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.578584][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.601082][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.635253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.646499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.661580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.670900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.694185][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.704598][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.721129][ T4182] device veth0_macvtap entered promiscuous mode [ 69.749637][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.758648][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.773257][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.781324][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.791023][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.804759][ T4182] device veth1_macvtap entered promiscuous mode [ 69.829826][ T4188] device veth0_vlan entered promiscuous mode [ 69.837736][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.846648][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.855774][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.865143][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.873482][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.897626][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.913157][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.924381][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.935325][ T4187] device veth0_vlan entered promiscuous mode [ 69.947043][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.956820][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.975997][ T4188] device veth1_vlan entered promiscuous mode [ 69.987561][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.998615][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.008151][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.017790][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.026894][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.043169][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.051308][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.060094][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.072548][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.080097][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.087988][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.096896][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.109911][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.122009][ T4186] device veth0_vlan entered promiscuous mode [ 70.131156][ T4187] device veth1_vlan entered promiscuous mode [ 70.171164][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.180303][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.220180][ T4186] device veth1_vlan entered promiscuous mode [ 70.240386][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.250731][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.279180][ T4188] device veth0_macvtap entered promiscuous mode [ 70.322401][ T4187] device veth0_macvtap entered promiscuous mode [ 70.344226][ T4187] device veth1_macvtap entered promiscuous mode [ 70.355185][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.369600][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.379379][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.399586][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.408179][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.425145][ T4188] device veth1_macvtap entered promiscuous mode [ 70.443158][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.452366][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.461201][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.486033][ T4186] device veth0_macvtap entered promiscuous mode [ 70.520335][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.533492][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.546675][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.569496][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.581133][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.591331][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.602071][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.614220][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.626518][ T4186] device veth1_macvtap entered promiscuous mode [ 70.634036][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.643289][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.651280][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.660227][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.668938][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.678048][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.689925][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.701140][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.712838][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.727802][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.740520][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.750412][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.761311][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.773079][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.782163][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 70.791069][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.800155][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.811906][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.823001][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.833266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.842360][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.851066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.860184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.874787][ T4237] Bluetooth: hci1: command 0x040f tx timeout [ 70.880654][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.885671][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.895897][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.902966][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 70.911009][ T4237] Bluetooth: hci3: command 0x040f tx timeout [ 70.917191][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.926554][ T4237] Bluetooth: hci2: command 0x040f tx timeout [ 70.926716][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.942100][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.967400][ T4208] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.994736][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.004597][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.044348][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.059872][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.069138][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.086152][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.096823][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.113459][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.123697][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.134502][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.145851][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.174586][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.185330][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.199304][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.209719][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.218812][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.228198][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.236741][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.248378][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.260297][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.272601][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.283590][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.293984][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.306559][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.318996][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.345870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.367188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.390066][ T4190] device veth0_vlan entered promiscuous mode [ 71.420270][ T4186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.430839][ T4186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.441320][ T4186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.450378][ T4186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.489479][ T4190] device veth1_vlan entered promiscuous mode [ 71.542376][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.594736][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.610525][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.649526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.650140][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.668164][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.675548][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.692850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.712569][ T4190] device veth0_macvtap entered promiscuous mode [ 71.739310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.759604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.774542][ T4190] device veth1_macvtap entered promiscuous mode [ 71.781900][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.796798][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.826759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.841321][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.845039][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.857015][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.873620][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.893464][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.916345][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.927612][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.938210][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.948752][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.959297][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.970398][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.981171][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.995531][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.019522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.029347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.042792][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.050942][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.069763][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.083739][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.094258][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.104817][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.118405][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.129448][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.139435][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.150268][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.162333][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.189104][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.203288][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.214358][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.236684][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.271126][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.308384][ T26] audit: type=1326 audit(1763618205.866:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.364017][ T26] audit: type=1326 audit(1763618205.896:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.444380][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.463145][ T26] audit: type=1326 audit(1763618205.896:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.475845][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.502881][ T26] audit: type=1326 audit(1763618205.896:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.505097][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.535912][ T26] audit: type=1326 audit(1763618205.896:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.570330][ T26] audit: type=1326 audit(1763618205.896:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.679504][ T26] audit: type=1326 audit(1763618205.896:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.686588][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.768054][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.783180][ T4306] loop3: detected capacity change from 0 to 1024 [ 72.797516][ T26] audit: type=1326 audit(1763618205.896:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.805282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.833373][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.859638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.867904][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 72.911596][ T4306] EXT4-fs (loop3): Ignoring removed orlov option [ 72.920520][ T26] audit: type=1326 audit(1763618205.896:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 72.938314][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.950213][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 72.955411][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 73.044894][ T4306] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 73.062485][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 73.102467][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 73.148010][ T26] audit: type=1326 audit(1763618205.896:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4300 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 73.209337][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.313488][ T1169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.345482][ T4315] loop0: detected capacity change from 0 to 4096 [ 73.502821][ T4315] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,grpquota,,errors=continue. Quota mode: writeback. [ 74.576962][ T4347] loop3: detected capacity change from 0 to 1024 [ 74.685549][ T4347] EXT4-fs (loop3): Ignoring removed orlov option [ 74.722916][ T4347] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 75.648909][ T4376] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 75.869398][ T4385] device syzkaller0 entered promiscuous mode [ 76.086350][ T4392] device syzkaller0 entered promiscuous mode [ 76.827573][ T4423] device syzkaller0 entered promiscuous mode [ 77.970721][ T4476] device syzkaller0 entered promiscuous mode [ 78.787788][ T4505] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 78.823350][ T4505] device syzkaller0 entered promiscuous mode [ 79.929217][ T4560] device syzkaller0 entered promiscuous mode [ 80.874400][ T4593] capability: warning: `syz.3.126' uses deprecated v2 capabilities in a way that may be insecure [ 82.963909][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.149340][ T4700] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 85.443816][ T4741] syz.1.189 (4741) used obsolete PPPIOCDETACH ioctl [ 87.023922][ T1110] cfg80211: failed to load regulatory.db [ 101.461531][ T5148] pim6reg: tun_chr_ioctl cmd 2147767507 [ 111.885947][ T5379] Zero length message leads to an empty skb [ 115.271597][ T5451] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.279678][ T5451] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.339465][ T5453] device bridge_slave_1 left promiscuous mode [ 115.352220][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.430711][ T5453] device bridge_slave_0 left promiscuous mode [ 115.460635][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.724500][ T5665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.118602][ T5684] process 'syz.4.588' launched './file0' with NULL argv: empty string added [ 123.696204][ T5785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 124.527911][ T5793] device netdevsim0 entered promiscuous mode [ 124.570818][ T5797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.637'. [ 129.424685][ T5853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 129.468434][ T5858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.477353][ T5851] device syzkaller0 entered promiscuous mode [ 129.828987][ T5873] syz.2.661 uses obsolete (PF_INET,SOCK_PACKET) [ 130.096792][ T5887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.474117][ T5907] netlink: 52 bytes leftover after parsing attributes in process `syz.2.675'. [ 130.507675][ T5904] device syzkaller0 entered promiscuous mode [ 130.681356][ T5914] xt_NFQUEUE: number of queues (1288) out of range (got 66820) [ 130.869645][ T5918] device syzkaller0 entered promiscuous mode [ 130.886196][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.682'. [ 131.643540][ T5949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.695'. [ 132.084321][ T5959] device syzkaller0 entered promiscuous mode [ 132.979037][ T5992] device syzkaller0 entered promiscuous mode [ 132.997523][ T5999] device syzkaller0 entered promiscuous mode [ 133.104037][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.763648][ T6087] device syzkaller0 entered promiscuous mode [ 134.795914][ T6088] device syzkaller0 entered promiscuous mode [ 134.945830][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 136.566619][ T6194] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.868831][ T6215] loop2: detected capacity change from 0 to 512 [ 140.127815][ T6261] netlink: 'syz.0.794': attribute type 12 has an invalid length. [ 140.196654][ T6261] loop0: detected capacity change from 0 to 512 [ 141.631375][ C0] sched: RT throttling activated [ 142.797482][ T6261] EXT4-fs: error -4 creating inode table initialization thread [ 142.805767][ T6261] EXT4-fs (loop0): mount failed [ 143.027167][ T6264] device syzkaller0 entered promiscuous mode [ 143.606204][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.808'. [ 143.848393][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 144.021592][ T6309] loop4: detected capacity change from 0 to 512 [ 145.665348][ T6309] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.016422][ T6309] EXT4-fs (loop4): 1 orphan inode deleted [ 146.022471][ T6309] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 146.035176][ T6309] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.395951][ T6309] syz.4.809 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.918165][ T6324] loop0: detected capacity change from 0 to 512 [ 146.959961][ T6324] EXT4-fs (loop0): Ignoring removed nobh option [ 146.983304][ T6324] EXT4-fs (loop0): old and new quota format mixing [ 147.141205][ T6330] device syzkaller0 entered promiscuous mode [ 147.637201][ T6349] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 147.712977][ T6349] loop4: detected capacity change from 0 to 1024 [ 147.813453][ T6349] EXT4-fs (loop4): Ignoring removed bh option [ 147.989997][ T6348] loop2: detected capacity change from 0 to 1024 [ 148.040946][ T6349] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 148.691451][ T6347] tipc: Failed to remove unknown binding: 66,1,1/0:1796303289/1796303291 [ 148.799467][ T6347] tipc: Failed to remove unknown binding: 66,1,1/0:1796303289/1796303291 [ 148.853377][ T6348] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 148.865607][ T6347] tipc: Failed to remove unknown binding: 66,1,1/0:1796303289/1796303291 [ 151.377853][ T6400] syz.0.842[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.378436][ T6400] syz.0.842[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.544813][ T6426] netlink: 'syz.4.854': attribute type 12 has an invalid length. [ 154.658527][ T6457] tipc: Failed to remove unknown binding: 66,1,1/0:1179258170/1179258172 [ 154.671240][ T6457] tipc: Failed to remove unknown binding: 66,1,1/0:1179258170/1179258172 [ 154.732814][ T6457] tipc: Failed to remove unknown binding: 66,1,1/0:1179258170/1179258172 [ 154.828016][ T6459] capability: warning: `syz.1.869' uses 32-bit capabilities (legacy support in use) [ 156.048011][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.073067][ T6466] loop1: detected capacity change from 0 to 512 [ 156.198595][ T6466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.268800][ T6466] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.872: bad orphan inode 131083 [ 156.369660][ T6466] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 156.471831][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.495832][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 156.712541][ T6497] tipc: Failed to remove unknown binding: 66,1,1/0:2235317576/2235317578 [ 156.741686][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.750792][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.791075][ T7] usb 4-1: Product: syz [ 156.814458][ T7] usb 4-1: Manufacturer: syz [ 156.829433][ T7] usb 4-1: SerialNumber: syz [ 156.885808][ T6497] tipc: Failed to remove unknown binding: 66,1,1/0:2235317576/2235317578 [ 156.979337][ T6497] tipc: Failed to remove unknown binding: 66,1,1/0:2235317576/2235317578 [ 157.691620][ T6503] netlink: 'syz.2.881': attribute type 12 has an invalid length. [ 157.996872][ T6503] loop2: detected capacity change from 0 to 512 [ 158.703880][ T6505] loop1: detected capacity change from 0 to 512 [ 160.463584][ T6503] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.475748][ T6503] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.652648][ T7] usb 4-1: can't set config #1, error -71 [ 160.667930][ T7] usb 4-1: USB disconnect, device number 2 [ 160.711123][ T6505] EXT4-fs (loop1): 1 orphan inode deleted [ 160.717042][ T6505] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 160.728235][ T6505] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.366307][ T6550] device syzkaller0 entered promiscuous mode [ 162.502489][ T6554] loop3: detected capacity change from 0 to 1024 [ 162.752432][ T6554] EXT4-fs (loop3): Ignoring removed bh option [ 162.893591][ T6554] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 164.621825][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 164.621842][ T26] audit: type=1326 audit(1763618298.176:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d98ed749 code=0x7ffc0000 [ 164.759851][ T26] audit: type=1326 audit(1763618298.236:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d98ed749 code=0x7ffc0000 [ 164.881873][ T26] audit: type=1326 audit(1763618298.266:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f69d98ed749 code=0x7ffc0000 [ 164.983097][ T26] audit: type=1326 audit(1763618298.266:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d98ed749 code=0x7ffc0000 [ 165.048875][ T26] audit: type=1326 audit(1763618298.266:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69d98ed749 code=0x7ffc0000 [ 165.215516][ T6598] loop2: detected capacity change from 0 to 512 [ 166.646045][ T6598] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 166.971967][ T6598] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 166.989122][ T6598] EXT4-fs (loop2): 1 truncate cleaned up [ 166.994953][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,errors=remount-ro,nodiscard,quota,. Quota mode: writeback. [ 167.729138][ T6614] netlink: 64 bytes leftover after parsing attributes in process `syz.1.929'. [ 168.243245][ T6629] loop0: detected capacity change from 0 to 1024 [ 169.625956][ T6635] device syzkaller0 entered promiscuous mode [ 169.657676][ T6629] EXT4-fs (loop0): Ignoring removed bh option [ 170.018442][ T6629] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 172.377812][ T6714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 174.579416][ T6799] device syzkaller0 entered promiscuous mode [ 174.898079][ T6801] device syzkaller0 entered promiscuous mode [ 175.481635][ T1107] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 175.891878][ T1107] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.929945][ T1107] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 176.192304][ T1107] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 176.223049][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.271784][ T1107] usb 3-1: Product: syz [ 176.300282][ T1107] usb 3-1: Manufacturer: syz [ 176.341519][ T1107] usb 3-1: SerialNumber: syz [ 176.411068][ T1107] cdc_mbim 3-1:1.0: skipping garbage [ 176.606208][ T6814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 176.624822][ T6845] device syzkaller0 entered promiscuous mode [ 177.081918][ T1107] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 177.095011][ T1107] cdc_mbim 3-1:1.0: bind() failure [ 177.131174][ T1107] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 177.144820][ T1107] cdc_ncm 3-1:1.1: bind() failure [ 177.704011][ T6874] device syzkaller0 entered promiscuous mode [ 177.913779][ T6877] device syzkaller0 entered promiscuous mode [ 178.962642][ T6906] device syzkaller0 entered promiscuous mode [ 179.242211][ T6912] device syzkaller0 entered promiscuous mode [ 179.301300][ T21] usb 3-1: USB disconnect, device number 2 [ 180.001644][ T6941] device syzkaller0 entered promiscuous mode [ 180.039334][ T6945] device syzkaller0 entered promiscuous mode [ 181.000248][ T6981] device syzkaller0 entered promiscuous mode [ 181.870756][ T7011] device syzkaller0 entered promiscuous mode [ 182.527977][ T7044] device syzkaller0 entered promiscuous mode [ 182.977385][ T7056] xt_CT: No such helper "pptp" [ 185.677620][ T7166] device syzkaller0 entered promiscuous mode [ 186.848193][ T7223] device syzkaller0 entered promiscuous mode [ 186.961050][ T7221] device syzkaller0 entered promiscuous mode [ 187.700596][ T7248] loop0: detected capacity change from 0 to 512 [ 187.736786][ T7248] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 187.782634][ T7248] EXT4-fs (loop0): inline encryption not supported [ 187.797138][ T7248] EXT4-fs (loop0): Test dummy encryption mode enabled [ 187.833457][ T7248] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 187.841304][ T7248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.894378][ T7259] loop1: detected capacity change from 0 to 512 [ 187.945272][ T7248] EXT4-fs (loop0): 1 truncate cleaned up [ 187.961654][ T7248] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 188.053782][ T7259] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 188.379470][ T7282] device syzkaller0 entered promiscuous mode [ 188.548934][ T7287] device syzkaller0 entered promiscuous mode [ 188.604492][ T7248] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 189.902380][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 189.958890][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.998403][ T7345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.362649][ T7363] device syzkaller0 entered promiscuous mode [ 190.387355][ T7361] device syzkaller0 entered promiscuous mode [ 191.212980][ T7376] loop2: detected capacity change from 0 to 8192 [ 191.341972][ T7376] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.501878][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 191.515067][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 191.577748][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 191.633467][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 192.644241][ T7400] device syzkaller0 entered promiscuous mode [ 193.228592][ T7419] loop3: detected capacity change from 0 to 512 [ 193.313521][ T7419] EXT4-fs (loop3): Ignoring removed oldalloc option [ 193.320474][ T7419] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.561327][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.1262: invalid indirect mapped block 4294967295 (level 0) [ 193.586578][ T7419] EXT4-fs (loop3): Remounting filesystem read-only [ 193.593359][ T7419] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.1262: invalid indirect mapped block 4294967295 (level 1) [ 193.614040][ T7419] EXT4-fs (loop3): Remounting filesystem read-only [ 193.622595][ T7419] EXT4-fs (loop3): 1 orphan inode deleted [ 193.628432][ T7419] EXT4-fs (loop3): 1 truncate cleaned up [ 193.634272][ T7419] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,errors=remount-ro,init_itable,block_validity,block_validity,quota,. Quota mode: writeback. [ 194.260304][ T7403] device syzkaller0 entered promiscuous mode [ 194.543692][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.741130][ T7426] hub 2-0:1.0: USB hub found [ 194.776315][ T7426] hub 2-0:1.0: 1 port detected [ 196.485396][ T7457] device syzkaller0 entered promiscuous mode [ 196.712771][ T7470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 198.343781][ T7501] device syzkaller0 entered promiscuous mode [ 198.560680][ T7515] loop0: detected capacity change from 0 to 512 [ 198.592405][ T7513] device syzkaller0 entered promiscuous mode [ 198.697957][ T7515] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1297: inode has both inline data and extents flags [ 198.718726][ T7515] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1297: couldn't read orphan inode 15 (err -117) [ 198.801436][ T7515] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 198.895310][ T7527] futex_wake_op: syz.2.1302 tries to shift op by 32; fix this program [ 199.488311][ T7549] device syzkaller0 entered promiscuous mode [ 199.501718][ T4291] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 199.899046][ T7561] device syzkaller0 entered promiscuous mode [ 200.021953][ T4291] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 200.104946][ T4291] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.376193][ T4291] usb 5-1: config 0 has no interfaces? [ 200.821651][ T4291] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.830759][ T4291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.849570][ T4291] usb 5-1: Product: syz [ 200.861505][ T4291] usb 5-1: Manufacturer: syz [ 200.866162][ T4291] usb 5-1: SerialNumber: syz [ 200.917948][ T4291] usb 5-1: config 0 descriptor?? [ 201.228112][ T4291] usb 5-1: USB disconnect, device number 2 [ 201.681958][ T7597] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1330'. [ 201.702439][ T7597] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 201.945319][ T7599] device syzkaller0 entered promiscuous mode [ 204.569405][ T7669] device syzkaller0 entered promiscuous mode [ 205.082564][ T7687] loop3: detected capacity change from 0 to 256 [ 205.324563][ T7687] exfat: Deprecated parameter 'namecase' [ 205.346082][ T7687] exfat: Deprecated parameter 'utf8' [ 205.651965][ T7687] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 206.230740][ T7714] device syzkaller0 entered promiscuous mode [ 208.106884][ T7763] device syzkaller0 entered promiscuous mode [ 208.250215][ T7766] loop1: detected capacity change from 0 to 1024 [ 208.323954][ T7766] ======================================================= [ 208.323954][ T7766] WARNING: The mand mount option has been deprecated and [ 208.323954][ T7766] and is ignored by this kernel. Remove the mand [ 208.323954][ T7766] option from the mount to silence this warning. [ 208.323954][ T7766] ======================================================= [ 208.484360][ T7766] EXT4-fs (loop1): Ignoring removed nobh option [ 208.536436][ T7766] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 208.577391][ T7766] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1390: couldn't read orphan inode 11 (err -117) [ 208.668111][ T7766] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 208.826782][ T7766] block device autoloading is deprecated and will be removed. [ 210.200548][ T7794] device syzkaller0 entered promiscuous mode [ 211.239330][ T7831] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1414'. [ 211.289703][ T7831] unsupported nlmsg_type 40 [ 211.762257][ T7839] device syzkaller0 entered promiscuous mode [ 212.440853][ T7866] loop2: detected capacity change from 0 to 256 [ 212.511462][ T4237] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 212.526710][ T7866] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x368b264c, utbl_chksum : 0xe619d30d) [ 212.627032][ T7866] exFAT-fs (loop2): IO charset B not found [ 212.931971][ T4237] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.947799][ T4237] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 212.959435][ T4237] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.982707][ T4237] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.993211][ T4237] usb 2-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 213.016839][ T4237] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.055272][ T4237] usb 2-1: config 0 descriptor?? [ 213.081825][ T7858] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.437154][ T7879] device syzkaller0 entered promiscuous mode [ 213.577967][ T4237] elecom 0003:056E:010D.0001: item fetching failed at offset 0/3 [ 213.597407][ T4237] elecom: probe of 0003:056E:010D.0001 failed with error -22 [ 213.767848][ T4262] usb 2-1: USB disconnect, device number 2 [ 213.872183][ T26] audit: type=1326 audit(1763618347.396:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 213.957284][ T26] audit: type=1326 audit(1763618347.396:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 214.041914][ T26] audit: type=1326 audit(1763618347.396:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7893 comm="syz.3.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0805ece749 code=0x7ffc0000 [ 215.790609][ T7940] tmpfs: Unknown parameter 'cg™l' [ 217.151485][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 217.665075][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.691415][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.701231][ T4237] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 217.758272][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.774485][ T4237] usb 4-1: config 0 descriptor?? [ 218.342514][ T4237] usbhid 4-1:0.0: can't add hid device: -71 [ 218.350331][ T4237] usbhid: probe of 4-1:0.0 failed with error -71 [ 218.384167][ T4237] usb 4-1: USB disconnect, device number 3 [ 218.539533][ T8001] device syzkaller0 entered promiscuous mode [ 218.554523][ T26] audit: type=1326 audit(1763618352.116:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8010 comm="syz.0.1487" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x0 [ 218.614676][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 218.651502][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 219.073257][ T7] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 219.109329][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.161019][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 219.411813][ T7] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 219.438264][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.471529][ T7] usb 2-1: Product: syz [ 219.480069][ T7] usb 2-1: Manufacturer: syz [ 219.498097][ T7] usb 2-1: SerialNumber: syz [ 219.525541][ T7] usb 2-1: config 0 descriptor?? [ 219.584168][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 219.625001][ T7] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 219.798706][ T7] usb 2-1: USB disconnect, device number 3 [ 219.883037][ T8021] loop3: detected capacity change from 0 to 40427 [ 219.934845][ T8021] F2FS-fs (loop3): Unrecognized mount option "age_extent_cache" or missing value [ 220.190199][ T8051] device syzkaller0 entered promiscuous mode [ 220.700363][ T8068] syz.1.1510[8068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.700465][ T8068] syz.1.1510[8068] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.777466][ T8073] syz.1.1510[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.824610][ T8073] syz.1.1510[8073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.449416][ T8103] device syzkaller0 entered promiscuous mode [ 222.721525][ T8120] loop3: detected capacity change from 0 to 512 [ 222.846574][ T8120] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 222.863854][ T8120] ext4 filesystem being mounted at /296/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.883950][ T8120] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.1528: corrupted inode contents [ 222.993306][ T8120] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #2: comm syz.3.1528: mark_inode_dirty error [ 223.037435][ T8120] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #2: comm syz.3.1528: corrupted inode contents [ 223.086966][ T8120] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.1528: mark_inode_dirty error [ 225.938180][ T8179] overlayfs: failed to clone lowerpath [ 227.427842][ T8172] device syzkaller0 entered promiscuous mode [ 227.579566][ T8177] netlink: 'syz.3.1550': attribute type 13 has an invalid length. [ 228.928645][ T8177] gretap0: refused to change device tx_queue_len [ 228.935491][ T8177] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 230.183329][ T8213] loop3: detected capacity change from 0 to 4096 [ 230.261943][ T8213] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 231.148815][ T8217] loop4: detected capacity change from 0 to 1024 [ 231.392427][ T8213] EXT4-fs (loop3): Test dummy encryption mode enabled [ 231.409975][ T8213] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 231.679595][ T8213] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,mblk_io_submit,data_err=abort,test_dummy_encryption,jqfmt=vfsv0,nodelalloc,noquota,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 231.712385][ T8217] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 231.978028][ T8217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 232.268291][ T8217] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.1560: Freeing blocks not in datazone - block = 0, count = 4096 [ 232.904806][ T8217] EXT4-fs (loop4): 1 orphan inode deleted [ 232.910599][ T8217] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.950901][ T8217] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #2: block 16: comm syz.4.1560: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 234.759306][ T8307] device syzkaller0 entered promiscuous mode [ 234.998474][ T21] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 235.382567][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.518077][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.896930][ T21] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 235.906543][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.930167][ T21] usb 2-1: config 0 descriptor?? [ 236.463089][ T26] audit: type=1326 audit(1763618370.026:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 236.698306][ T21] playstation 0003:054C:0DF2.0002: item fetching failed at offset 1/5 [ 237.004685][ T21] playstation 0003:054C:0DF2.0002: Parse failed [ 237.058881][ T21] playstation: probe of 0003:054C:0DF2.0002 failed with error -22 [ 237.095996][ T26] audit: type=1326 audit(1763618370.066:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.151233][ T21] usb 2-1: USB disconnect, device number 4 [ 237.198578][ T26] audit: type=1326 audit(1763618370.096:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.250634][ T26] audit: type=1326 audit(1763618370.206:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.293812][ T26] audit: type=1326 audit(1763618370.226:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.337310][ T26] audit: type=1326 audit(1763618370.276:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.380391][ T26] audit: type=1326 audit(1763618370.296:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.444389][ T26] audit: type=1326 audit(1763618370.326:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.505853][ T26] audit: type=1326 audit(1763618370.556:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 237.595557][ T26] audit: type=1326 audit(1763618370.556:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.0.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a534c3749 code=0x7ffc0000 [ 238.031801][ T8372] device syzkaller0 entered promiscuous mode [ 343.341312][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.348537][ C0] rcu: 1-...!: (1 ticks this GP) idle=4a1/1/0x4000000000000000 softirq=22311/22311 fqs=0 [ 343.359602][ C0] (detected by 0, t=10502 jiffies, g=27701, q=50) [ 343.366143][ C0] Sending NMI from CPU 0 to CPUs 1: [ 343.371379][ C1] NMI backtrace for cpu 1 [ 343.371401][ C1] CPU: 1 PID: 8374 Comm: syz.4.1602 Not tainted syzkaller #0 [ 343.371418][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.371436][ C1] RIP: 0010:lock_is_held_type+0x0/0x190 [ 343.371476][ C1] Code: 60 c0 03 00 75 d6 48 c7 c7 00 1b 0b 8a 48 c7 c6 40 1b 0b 8a e8 c1 37 f5 ff 0f 0b eb bf e8 98 fd ff ff 0f 1f 84 00 00 00 00 00 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 [ 343.371490][ C1] RSP: 0018:ffffc90000dd0c78 EFLAGS: 00000002 [ 343.371506][ C1] RAX: ffffffff880972ff RBX: 0000000000000001 RCX: ffff88801d9e3b80 [ 343.371518][ C1] RDX: 0000000000010000 RSI: 00000000ffffffff RDI: ffff88807c941b00 [ 343.371530][ C1] RBP: ffff88807c941b40 R08: 0000000000000004 R09: 0000000000000003 [ 343.371540][ C1] R10: fffff520001ba180 R11: 1ffff920001ba180 R12: ffff88807c941800 [ 343.371553][ C1] R13: dffffc0000000000 R14: ffff88802326f500 R15: ffff888148408300 [ 343.371566][ C1] FS: 00007f4d754556c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 343.371581][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.371592][ C1] CR2: 0000200000030030 CR3: 000000005afa0000 CR4: 00000000003506e0 [ 343.371607][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.371617][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.371627][ C1] Call Trace: [ 343.371633][ C1] [ 343.371639][ C1] advance_sched+0x141/0x940 [ 343.371661][ C1] ? _raw_spin_unlock+0x40/0x40 [ 343.371677][ C1] ? debug_object_deactivate+0x63/0x340 [ 343.371702][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 343.371727][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 343.371751][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 343.371770][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 343.371791][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 343.371822][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 343.371841][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 343.371860][ C1] [ 343.371865][ C1] [ 343.371870][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.371889][ C1] RIP: 0010:unwind_next_frame+0x66f/0x1d90 [ 343.371908][ C1] Code: 04 28 84 c0 0f 85 7f 13 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 8f 13 00 00 48 0f bf 02 48 01 c5 e9 0e 01 00 00 <4c> 8d 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 0c 4c 89 ff e8 [ 343.371921][ C1] RSP: 0018:ffffc900031feca8 EFLAGS: 00000293 [ 343.371934][ C1] RAX: 0000000000000014 RBX: ffffc900031fed68 RCX: ffffffff8d7ef70c [ 343.371946][ C1] RDX: ffffffff8dee2956 RSI: ffffffff8dee2956 RDI: ffffffff8134794c [ 343.371965][ C1] RBP: ffffffff81bc0f2a R08: 000000000000000c R09: 0000000000000000 [ 343.371976][ C1] R10: fffff5200063fdb9 R11: 1ffff9200063fdb7 R12: 1ffffffff1bdc52b [ 343.371988][ C1] R13: dffffc0000000000 R14: ffffffff8dee295a R15: 0000000000000004 [ 343.372001][ C1] ? kasan_set_track+0x4a/0x70 [ 343.372022][ C1] ? unwind_next_frame+0xac/0x1d90 [ 343.372041][ C1] ? unwind_next_frame+0xac/0x1d90 [ 343.372062][ C1] ? kasan_set_track+0x4b/0x70 [ 343.372080][ C1] ? stack_trace_save+0xe0/0xe0 [ 343.372095][ C1] arch_stack_walk+0x10c/0x140 [ 343.372117][ C1] ? kasan_set_track+0x4b/0x70 [ 343.372133][ C1] ? kfree+0xef/0x2a0 [ 343.372148][ C1] stack_trace_save+0x98/0xe0 [ 343.372163][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 343.372180][ C1] ? 0xffffffffa002a000 [ 343.372193][ C1] ? is_bpf_text_address+0x254/0x270 [ 343.372215][ C1] kasan_set_track+0x4b/0x70 [ 343.372230][ C1] ? kasan_set_track+0x4b/0x70 [ 343.372274][ C1] kasan_set_free_info+0x1f/0x40 [ 343.372292][ C1] ____kasan_slab_free+0xd5/0x110 [ 343.372311][ C1] slab_free_freelist_hook+0xea/0x170 [ 343.372329][ C1] ? free_verifier_state+0xd8/0x220 [ 343.372345][ C1] kfree+0xef/0x2a0 [ 343.372362][ C1] free_verifier_state+0xd8/0x220 [ 343.372381][ C1] pop_stack+0x3ca/0x550 [ 343.372399][ C1] do_check+0x8c02/0xeac0 [ 343.372442][ C1] ? mark_reg_unknown+0x5a0/0x5a0 [ 343.372467][ C1] ? btf_check_subprog_arg_match+0x13e/0x290 [ 343.372491][ C1] do_check_common+0xe67/0x16c0 [ 343.372517][ C1] bpf_check+0x31f3/0xf090 [ 343.372545][ C1] ? mark_lock+0x94/0x320 [ 343.372569][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 343.372586][ C1] ? mark_lock+0x94/0x320 [ 343.372615][ C1] ? verify_lock_unused+0x140/0x140 [ 343.372639][ C1] ? verify_lock_unused+0x140/0x140 [ 343.372658][ C1] ? rcu_lock_release+0x5/0x20 [ 343.372678][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 343.372704][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 343.372727][ C1] ? lock_chain_count+0x20/0x20 [ 343.372748][ C1] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 343.372768][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 343.372785][ C1] ? ktime_get_with_offset+0xff/0x320 [ 343.372804][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 343.372824][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 343.372848][ C1] ? __might_fault+0xb3/0x110 [ 343.372865][ C1] ? memset+0x1e/0x40 [ 343.372882][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 343.372901][ C1] bpf_prog_load+0x1043/0x1550 [ 343.372925][ C1] ? map_freeze+0x350/0x350 [ 343.372942][ C1] ? __might_fault+0xb7/0x110 [ 343.372969][ C1] ? __might_fault+0xb3/0x110 [ 343.372985][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 343.373002][ C1] ? security_bpf+0x7a/0xa0 [ 343.373019][ C1] __sys_bpf+0x4c2/0x670 [ 343.373038][ C1] ? bpf_link_show_fdinfo+0x340/0x340 [ 343.373061][ C1] ? vtime_user_exit+0x2dc/0x400 [ 343.373082][ C1] __x64_sys_bpf+0x78/0x90 [ 343.373100][ C1] do_syscall_64+0x4c/0xa0 [ 343.373114][ C1] ? clear_bhb_loop+0x30/0x80 [ 343.373129][ C1] ? clear_bhb_loop+0x30/0x80 [ 343.373146][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.373163][ C1] RIP: 0033:0x7f4d77230749 [ 343.373180][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.373193][ C1] RSP: 002b:00007f4d75455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.373208][ C1] RAX: ffffffffffffffda RBX: 00007f4d77487180 RCX: 00007f4d77230749 [ 343.373220][ C1] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 343.373231][ C1] RBP: 00007f4d772b4f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.373241][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.373250][ C1] R13: 00007f4d77487218 R14: 00007f4d77487180 R15: 00007ffd2f67bc48 [ 343.373271][ C1] [ 343.373372][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g27701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 344.014691][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=17425 [ 344.022592][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g27701 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 344.033993][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 344.043988][ C0] rcu: RCU grace-period kthread stack dump: [ 344.049896][ C0] task:rcu_preempt state:I stack:27496 pid: 15 ppid: 2 flags:0x00004000 [ 344.059128][ C0] Call Trace: [ 344.062505][ C0] [ 344.065452][ C0] __schedule+0x11bb/0x4390 [ 344.069981][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 344.075378][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 344.081298][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 344.087217][ C0] ? _raw_spin_unlock+0x40/0x40 [ 344.092092][ C0] ? rcu_is_watching+0x11/0xa0 [ 344.096877][ C0] ? release_firmware_map_entry+0x190/0x190 [ 344.102812][ C0] schedule+0x11b/0x1e0 [ 344.106996][ C0] schedule_timeout+0x15c/0x280 [ 344.111901][ C0] ? console_conditional_schedule+0x40/0x40 [ 344.117821][ C0] ? update_process_times+0x200/0x200 [ 344.123218][ C0] ? prepare_to_swait_event+0x331/0x350 [ 344.128796][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 344.133669][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 344.138886][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 344.143588][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 344.148375][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 344.153588][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 344.158897][ C0] rcu_gp_kthread+0x98/0x350 [ 344.163506][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.168641][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 344.174558][ C0] ? __kthread_parkme+0x157/0x1b0 [ 344.179609][ C0] kthread+0x436/0x520 [ 344.183702][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 344.188831][ C0] ? kthread_blkcg+0xd0/0xd0 [ 344.193442][ C0] ret_from_fork+0x1f/0x30 [ 344.197890][ C0] [ 344.200920][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 344.207251][ C0] Sending NMI from CPU 0 to CPUs 1: [ 344.212556][ C1] NMI backtrace for cpu 1 [ 344.212565][ C1] CPU: 1 PID: 8374 Comm: syz.4.1602 Not tainted syzkaller #0 [ 344.212581][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 344.212590][ C1] RIP: 0010:check_preemption_disabled+0x0/0x110 [ 344.212613][ C1] Code: 00 00 48 c7 c7 20 dd 12 8a e8 2c 01 00 00 65 ff 0d 91 d6 59 76 5b c3 00 00 cc 48 c7 c7 20 e5 59 8a 48 c7 c6 60 e5 59 8a eb 00 <55> 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 344.212627][ C1] RSP: 0018:ffffc90000dd0b58 EFLAGS: 00000046 [ 344.212642][ C1] RAX: 1ffff11003b3c8cc RBX: ffffffffffffffff RCX: 0000000000000001 [ 344.212654][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2f00 RDI: ffffffff8a59e580 [ 344.212666][ C1] RBP: ffffc90000dd0c70 R08: dffffc0000000000 R09: fffffbfff1ad33a6 [ 344.212679][ C1] R10: fffffbfff1ad33a6 R11: 1ffffffff1ad33a5 R12: ffff88801d9e4670 [ 344.212691][ C1] R13: dffffc0000000000 R14: ffff88801d9e4660 R15: 1ffff920001ba178 [ 344.212704][ C1] FS: 00007f4d754556c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 344.212719][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.212731][ C1] CR2: 0000200000030030 CR3: 000000005afa0000 CR4: 00000000003506e0 [ 344.212746][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 344.212756][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 344.212766][ C1] Call Trace: [ 344.212772][ C1] [ 344.212776][ C1] lock_release+0x540/0x870 [ 344.212798][ C1] ? rcu_lock_release+0x5/0x20 [ 344.212817][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 344.212836][ C1] ? __rwlock_init+0x140/0x140 [ 344.212851][ C1] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 344.212871][ C1] advance_sched+0x7d0/0x940 [ 344.212900][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 344.212923][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 344.212946][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 344.212965][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 344.212985][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 344.213014][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 344.213033][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 344.213051][ C1] [ 344.213056][ C1] [ 344.213061][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 344.213079][ C1] RIP: 0010:unwind_next_frame+0x66f/0x1d90 [ 344.213098][ C1] Code: 04 28 84 c0 0f 85 7f 13 00 00 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 8f 13 00 00 48 0f bf 02 48 01 c5 e9 0e 01 00 00 <4c> 8d 7b 40 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 0c 4c 89 ff e8 [ 344.213111][ C1] RSP: 0018:ffffc900031feca8 EFLAGS: 00000293 [ 344.213124][ C1] RAX: 0000000000000014 RBX: ffffc900031fed68 RCX: ffffffff8d7ef70c [ 344.213136][ C1] RDX: ffffffff8dee2956 RSI: ffffffff8dee2956 RDI: ffffffff8134794c [ 344.213148][ C1] RBP: ffffffff81bc0f2a R08: 000000000000000c R09: 0000000000000000 [ 344.213159][ C1] R10: fffff5200063fdb9 R11: 1ffff9200063fdb7 R12: 1ffffffff1bdc52b [ 344.213171][ C1] R13: dffffc0000000000 R14: ffffffff8dee295a R15: 0000000000000004 [ 344.213184][ C1] ? kasan_set_track+0x4a/0x70 [ 344.213203][ C1] ? unwind_next_frame+0xac/0x1d90 [ 344.213222][ C1] ? unwind_next_frame+0xac/0x1d90 [ 344.213242][ C1] ? kasan_set_track+0x4b/0x70 [ 344.213260][ C1] ? stack_trace_save+0xe0/0xe0 [ 344.213275][ C1] arch_stack_walk+0x10c/0x140 [ 344.213295][ C1] ? kasan_set_track+0x4b/0x70 [ 344.213312][ C1] ? kfree+0xef/0x2a0 [ 344.213326][ C1] stack_trace_save+0x98/0xe0 [ 344.213341][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 344.213358][ C1] ? 0xffffffffa002a000 [ 344.213369][ C1] ? is_bpf_text_address+0x254/0x270 [ 344.213390][ C1] kasan_set_track+0x4b/0x70 [ 344.213406][ C1] ? kasan_set_track+0x4b/0x70 [ 344.213445][ C1] kasan_set_free_info+0x1f/0x40 [ 344.213474][ C1] ____kasan_slab_free+0xd5/0x110 [ 344.213492][ C1] slab_free_freelist_hook+0xea/0x170 [ 344.213509][ C1] ? free_verifier_state+0xd8/0x220 [ 344.213541][ C1] kfree+0xef/0x2a0 [ 344.213559][ C1] free_verifier_state+0xd8/0x220 [ 344.213576][ C1] pop_stack+0x3ca/0x550 [ 344.213593][ C1] do_check+0x8c02/0xeac0 [ 344.213631][ C1] ? mark_reg_unknown+0x5a0/0x5a0 [ 344.213658][ C1] ? btf_check_subprog_arg_match+0x13e/0x290 [ 344.213682][ C1] do_check_common+0xe67/0x16c0 [ 344.213706][ C1] bpf_check+0x31f3/0xf090 [ 344.213733][ C1] ? mark_lock+0x94/0x320 [ 344.213754][ C1] ? bpf_get_btf_vmlinux+0x10/0x10 [ 344.213772][ C1] ? mark_lock+0x94/0x320 [ 344.213799][ C1] ? verify_lock_unused+0x140/0x140 [ 344.213834][ C1] ? verify_lock_unused+0x140/0x140 [ 344.213852][ C1] ? rcu_lock_release+0x5/0x20 [ 344.213871][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 344.213899][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 344.213919][ C1] ? lock_chain_count+0x20/0x20 [ 344.213939][ C1] ? seqcount_lockdep_reader_access+0x120/0x1c0 [ 344.213959][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 344.213975][ C1] ? ktime_get_with_offset+0xff/0x320 [ 344.213993][ C1] ? seqcount_lockdep_reader_access+0x172/0x1c0 [ 344.214012][ C1] ? ktime_get_real_ts64+0x420/0x420 [ 344.214033][ C1] ? __might_fault+0xb3/0x110 [ 344.214049][ C1] ? memset+0x1e/0x40 [ 344.214065][ C1] ? bpf_obj_name_cpy+0x190/0x1d0 [ 344.214083][ C1] bpf_prog_load+0x1043/0x1550 [ 344.214105][ C1] ? map_freeze+0x350/0x350 [ 344.214138][ C1] ? __might_fault+0xb7/0x110 [ 344.214160][ C1] ? __might_fault+0xb3/0x110 [ 344.214176][ C1] ? bpf_lsm_bpf+0x5/0x10 [ 344.214193][ C1] ? security_bpf+0x7a/0xa0 [ 344.214210][ C1] __sys_bpf+0x4c2/0x670 [ 344.214228][ C1] ? bpf_link_show_fdinfo+0x340/0x340 [ 344.214251][ C1] ? vtime_user_exit+0x2dc/0x400 [ 344.214272][ C1] __x64_sys_bpf+0x78/0x90 [ 344.214290][ C1] do_syscall_64+0x4c/0xa0 [ 344.214304][ C1] ? clear_bhb_loop+0x30/0x80 [ 344.214320][ C1] ? clear_bhb_loop+0x30/0x80 [ 344.214337][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.214354][ C1] RIP: 0033:0x7f4d77230749 [ 344.214370][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.214383][ C1] RSP: 002b:00007f4d75455038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.214398][ C1] RAX: ffffffffffffffda RBX: 00007f4d77487180 RCX: 00007f4d77230749 [ 344.214410][ C1] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 344.214421][ C1] RBP: 00007f4d772b4f91 R08: 0000000000000000 R09: 0000000000000000 [ 344.214431][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.214441][ C1] R13: 00007f4d77487218 R14: 00007f4d77487180 R15: 00007ffd2f67bc48 [ 344.214459][ C1]