last executing test programs: 3.492513949s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='location 1\n', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r9, &(0x7f0000000640)='1024\n', 0x5) 3.221820436s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='readonly\n', 0x9) 2.901889845s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='location 1\n', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='readonly\n', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) 2.748067479s ago: executing program 3 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f00000002c0)='1:0\n', 0x4) 2.505882095s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='location 1\n', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='readonly\n', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) 2.233794352s ago: executing program 3 (id=10): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x424, 0x12c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x2, 0x200}}, {{0x9, 0x5, 0x4, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x7c, &(0x7f0000000200)={0x40, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x7c, &(0x7f0000000400)={0x40, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x7c, &(0x7f0000000600)={0x40, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000002000)="0202000100"/64) 2.183290593s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.863573082s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='/dev/ram0,65536\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/mtd0\x00', 0x2, 0x0) ioctl(r1, 0x40084d02, &(0x7f0000000700)='\x00\x00\x00\x00\x00\x00@\x00') r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl(r2, 0x40186f40, &(0x7f0000000800)="ffffffff00"/24) ioctl(0xffffffffffffffff, 0x40986f00, &(0x7f0000000a00)="ffffffff0100000000003000000000000300040000000000766f6c3000"/149) 1.701829786s ago: executing program 0 (id=12): r0 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth0_vlan\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'veth1_vlan\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'vlan0\x00', 0x101}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_vlan\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000500)="122233445566aabbccddeeff8100000008004500001400000000400100000102030405060708", 0x2a, 0x0, &(0x7f0000000600)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="122233445566"}, 0x14) nanosleep(&(0x7f0000000700)={0x0, 0x5f5e100}, 0x0) 1.593099178s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000004c0)='writemostly\n', 0xc) 1.476962562s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='location 1\n', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) write(r9, &(0x7f0000000640)='1024\n', 0x5) 1.357945295s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000002000)='./sys\x00', &(0x7f0000002040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/devices/system/cpu/cpu0/cpuidle/state0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu0/cpuidle/state0/desc\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/256, 0x100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu0/cpuidle/state1/name\x00', 0x0, 0x0) read(r2, &(0x7f0000000500)=""/256, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/cpu/cpu0/cpuidle/state1/desc\x00', 0x0, 0x0) read(r3, &(0x7f0000000700)=""/256, 0x100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/system/cpu/cpu0/cpuidle/state2/name\x00', 0x0, 0x0) read(r4, &(0x7f0000000900)=""/256, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/devices/system/cpu/cpu0/cpuidle/state2/desc\x00', 0x0, 0x0) read(r5, &(0x7f0000000b00)=""/256, 0x100) 1.311533896s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) write$binfmt_script(r0, &(0x7f0000001e00)={'#! ', './file1', [{0x20, ']\\'}, {0x20, '\x00'}, {0x20, 'keyring\x00'}, {0x20, '{$/&\\'}, {0x20, '@'}]}, 0x21) r1 = syz_open_dev$vim2m(&(0x7f0000000c80), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000002d40)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002dc0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005540), 0x0, 0x2299aedbeccc98b3) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9cfb7000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000a00)={0x0, 0x3, r2, 0xe, 0x80000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000640)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007b00bbf35fd17e5ffff", 0x32}, {0x0}, {&(0x7f0000000040)="121addcb0fcac8f6c225d9ce806347051b653139497cc79ebcf4eb765a91bb5e", 0x20}, {&(0x7f0000000840)="5536a8ce748751036541003757aae393eb5c0aa76851bb7112a54a31d60df5d31a15b0cd121c40e97f1e258adeaa12ed984a5666e4f8495e91dd41a0dbae51840ed540f3c2520fb963a4388d94e9bf16b787118f9c145dd814cdcde8534d11e9bd808321a397bb5d7125b36b84dc6f4057fc77836c1207613d4dfc62991491be3dc980c64183a1327daa46ad84d0bd19a9ec9dd8b7f63d8aa7aef2339055bc0d2fe5961b4ed73ad94bf453c653eb53879e15d946c2b9464a95af169edcede9129bd7da48b17defd58136396adaafeadc1a53a2893b86f8d0ac7b555830aa233d610c33ab2defac32415d562f4b4c689115c4091a732cf990aee81622fffb8bfec1dd6646e0d74d27e267e88f0c5a1c16c34b72ce422991a8a3882d8762db692c85063d620bc8b15dfc65505454c41c707b9b64dad957d7bc432e4fc5176f1af402b9ba171ff3c7a277def36bb73a4a2717a170fbdf5b295976a4ea3a06d017e052344626c634aa5c6eb391f2b83d45e34e1239f5f2d4d3be42bf2d46a9411cd6b57173f5b1ecf78b", 0x188}], 0x4) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) 1.170269969s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x3) syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.117883501s ago: executing program 4 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000005c0)='readonly\n', 0x9) 855.308488ms ago: executing program 2 (id=17): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000400)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000380)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x6e) listen(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r5, &(0x7f0000000280)='1', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 780.964719ms ago: executing program 4 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r7, &(0x7f00000004c0)='writemostly\n', 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/bitmap_set\x00', 0x1, 0x0) write(r8, &(0x7f0000000540)='location 1\n', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r9, &(0x7f00000005c0)='readonly\n', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/bitmap/backlog\x00', 0x1, 0x0) 680.723782ms ago: executing program 4 (id=19): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xda, 0x3, 0x2b}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0xfc}) close(r1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 595.459294ms ago: executing program 4 (id=20): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x4, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1000001, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0xd, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 297.112242ms ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/kernel/panic_on_warn\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000b00)='rd_pages=1024\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0) write(r2, &(0x7f0000000d00)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001600)='./config/target/usb_gadget/naa.1234567890\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001700)='./config/target/usb_gadget/naa.1234567890/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001800)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001900)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000900)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/lun/lun_0/virtual_device\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001b00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/nexus\x00', 0x2, 0x0) write(r3, &(0x7f0000001c00)='naa.1234567890\x00', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/target/usb_gadget/naa.1234567890/tpgt_1/enable\x00', 0x2, 0x0) write(r4, &(0x7f0000001e00)='1\x00', 0x1) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/tcm.0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/tcm.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r5, &(0x7f0000002000)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000002100)={0x1}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000002200), 0x0, 0x2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002300)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x18, &(0x7f0000002400)=""/24}, &(0x7f0000002500)="5f000000000000001800", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SG_IO(r6, 0x2285, &(0x7f0000002600)={0x53, 0xfffffffe, 0xa, 0x0, @buffer={0x0, 0x18, &(0x7f0000002700)=""/24}, &(0x7f0000002800)="5f050100000000001800", 0x0, 0x0, 0x0, 0x0, 0x0}) 167.014746ms ago: executing program 0 (id=22): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1, 0x5, 0x57e, 0x306, 0x0, 0x0, '\x00'}}, 0x119) 0s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0\n', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='raid1\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:0\n', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='1:1\n', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='0\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md0/md/dev-ram1/slot\x00', 0x1, 0x0) write(r6, &(0x7f0000000440)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f00000004c0)='writemostly\n', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 67.001910][ T4173] cgroup: Unknown subsys name 'net' [ 67.151081][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.682462][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 70.179342][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 70.249986][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 70.264253][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 70.300342][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 70.376072][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 70.403978][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.411712][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.419942][ T4189] device bridge_slave_0 entered promiscuous mode [ 70.464821][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.471914][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.481481][ T4189] device bridge_slave_1 entered promiscuous mode [ 70.517107][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.524605][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.533068][ T4194] device bridge_slave_0 entered promiscuous mode [ 70.560723][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.567924][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.576430][ T4185] device bridge_slave_0 entered promiscuous mode [ 70.584287][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.591408][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.600265][ T4197] device bridge_slave_0 entered promiscuous mode [ 70.608776][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.616017][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.624518][ T4194] device bridge_slave_1 entered promiscuous mode [ 70.641912][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.649335][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.657532][ T4185] device bridge_slave_1 entered promiscuous mode [ 70.670645][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.678135][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.686475][ T4197] device bridge_slave_1 entered promiscuous mode [ 70.709590][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.739205][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.758129][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.776172][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.793373][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.806075][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.823438][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.833041][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.841584][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.850410][ T4192] device bridge_slave_0 entered promiscuous mode [ 70.873350][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.902453][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.909778][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.918980][ T4192] device bridge_slave_1 entered promiscuous mode [ 70.929561][ T4185] team0: Port device team_slave_0 added [ 70.945397][ T4189] team0: Port device team_slave_0 added [ 70.961843][ T4197] team0: Port device team_slave_0 added [ 70.976467][ T4185] team0: Port device team_slave_1 added [ 70.983760][ T4189] team0: Port device team_slave_1 added [ 70.992465][ T4194] team0: Port device team_slave_0 added [ 71.001018][ T4197] team0: Port device team_slave_1 added [ 71.029894][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.048285][ T4194] team0: Port device team_slave_1 added [ 71.078039][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.110404][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.117785][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.144413][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.157403][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.164723][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.191082][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.210151][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.217255][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.243946][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.255994][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.262972][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.288976][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.310386][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.322126][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.348474][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.360755][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.367851][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.393975][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.405320][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411877][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.440347][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.447693][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.474949][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.486797][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.494024][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.520000][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.538453][ T4192] team0: Port device team_slave_0 added [ 71.549553][ T4185] device hsr_slave_0 entered promiscuous mode [ 71.556577][ T4185] device hsr_slave_1 entered promiscuous mode [ 71.576041][ T4192] team0: Port device team_slave_1 added [ 71.595907][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.602900][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.629007][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.642282][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.649439][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.675620][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.735802][ T4194] device hsr_slave_0 entered promiscuous mode [ 71.742843][ T4194] device hsr_slave_1 entered promiscuous mode [ 71.750557][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.758837][ T4194] Cannot create hsr debugfs directory [ 71.775698][ T4189] device hsr_slave_0 entered promiscuous mode [ 71.782541][ T4189] device hsr_slave_1 entered promiscuous mode [ 71.789437][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.797261][ T4189] Cannot create hsr debugfs directory [ 71.812929][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.820417][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.827505][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.835197][ T4197] Cannot create hsr debugfs directory [ 71.874563][ T1325] Bluetooth: hci0: command 0x0409 tx timeout [ 71.874683][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 71.893699][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 71.899851][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 71.935920][ T4192] device hsr_slave_0 entered promiscuous mode [ 71.943027][ T4192] device hsr_slave_1 entered promiscuous mode [ 71.950533][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.958355][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 71.965039][ T4192] Cannot create hsr debugfs directory [ 72.278907][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.296417][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.306656][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.317181][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.352722][ T4194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.370981][ T4194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.396088][ T4194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.430233][ T4194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.469088][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.485548][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.521634][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.531628][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.555619][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.581381][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.592475][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.620327][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.629979][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.653052][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.664117][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.678263][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.689359][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.699389][ T573] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.706772][ T573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.735847][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.749889][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.759949][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.769448][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.778506][ T573] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.785662][ T573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.803417][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.813939][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.857725][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.866620][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.902848][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.912992][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.924729][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.935203][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.944192][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.954698][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.973168][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.981681][ T4197] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.992498][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.001916][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.012382][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.035507][ T4197] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.049274][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.061957][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.070741][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.080945][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.089947][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.097388][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.106770][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.115334][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.123756][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.132506][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.141548][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.148683][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.159369][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.176944][ T4197] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.195752][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.211420][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.219778][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.237535][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.252991][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.261137][ T4197] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.301722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.312417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.326477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.337089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.346726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.355359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.363795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.372371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.382090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.391167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.402573][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.409723][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.421406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.431036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.466854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.476998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.488121][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.495265][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.518958][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.526821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.538578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.574650][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.590841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.601409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.625522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.646561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.656650][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.665718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.674444][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.682292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.691361][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.706655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.715572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.724905][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.732028][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.757585][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.774852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.789227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.799768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.813208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.822387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.832298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.841605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.851096][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.858241][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.884777][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.903946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.943929][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.952703][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.965621][ T4186] Bluetooth: hci1: command 0x041b tx timeout [ 73.971783][ T4186] Bluetooth: hci3: command 0x041b tx timeout [ 73.980022][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.988365][ T4186] Bluetooth: hci2: command 0x041b tx timeout [ 74.000294][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.004180][ T4186] Bluetooth: hci0: command 0x041b tx timeout [ 74.019901][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.034190][ T4227] Bluetooth: hci4: command 0x041b tx timeout [ 74.045178][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.060046][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.090746][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.102978][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.117914][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.128077][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.135806][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.143479][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.152543][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.162221][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.171478][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.181016][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.191335][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.200187][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.236034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.255345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.291361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.310976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.334934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.351056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.361499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.376052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.386810][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.408006][ T4185] device veth0_vlan entered promiscuous mode [ 74.426564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.439131][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.451930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.463427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.495032][ T4194] device veth0_vlan entered promiscuous mode [ 74.506013][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.522434][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.532015][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.539184][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.552605][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.562206][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.572433][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.579612][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.587845][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.596273][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.603876][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.627588][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.637643][ T4185] device veth1_vlan entered promiscuous mode [ 74.651808][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.662551][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.686935][ T4194] device veth1_vlan entered promiscuous mode [ 74.703112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.712174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.721975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.731901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.740896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.748544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.756865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.787664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.797388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.814600][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.823199][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.840345][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.872042][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.885632][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.909049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.920037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.958977][ T4194] device veth0_macvtap entered promiscuous mode [ 74.970816][ T4194] device veth1_macvtap entered promiscuous mode [ 74.979732][ T4185] device veth0_macvtap entered promiscuous mode [ 75.001504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.025732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.035309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.045001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.056276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.090322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.110616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.119460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.128265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.136647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.145263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.166162][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.175202][ T4192] device veth0_vlan entered promiscuous mode [ 75.182427][ T4185] device veth1_macvtap entered promiscuous mode [ 75.192744][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.208085][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.232780][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.276157][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.285188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.294753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.327887][ T4194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.346138][ T4194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.358727][ T4194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.367645][ T4194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.387545][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.397135][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.409331][ T4192] device veth1_vlan entered promiscuous mode [ 75.437955][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.456707][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.471928][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.494152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.502459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.512237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.532738][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.554344][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.566474][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.578473][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.596926][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.606401][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.615592][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.624682][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.645935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.656081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.665361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.675863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.723301][ T4189] device veth0_vlan entered promiscuous mode [ 75.762976][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.782611][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.794678][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.803357][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.813862][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.822664][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.832492][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.841102][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.852605][ T4192] device veth0_macvtap entered promiscuous mode [ 75.892545][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.917813][ T4189] device veth1_vlan entered promiscuous mode [ 75.926314][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.952064][ T4192] device veth1_macvtap entered promiscuous mode [ 75.961428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.964892][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.973382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.986522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.994062][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.005640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.014479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.022789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.031545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.039674][ T4186] Bluetooth: hci0: command 0x040f tx timeout [ 76.043426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.053240][ T4186] Bluetooth: hci2: command 0x040f tx timeout [ 76.059701][ T4186] Bluetooth: hci3: command 0x040f tx timeout [ 76.065899][ T4186] Bluetooth: hci1: command 0x040f tx timeout [ 76.066103][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.082519][ T4197] device veth0_vlan entered promiscuous mode [ 76.116418][ T4186] Bluetooth: hci4: command 0x040f tx timeout [ 76.135991][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.143932][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.164464][ T4197] device veth1_vlan entered promiscuous mode [ 76.179275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.187429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.198397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.217766][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.236300][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.246487][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.257082][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.275976][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.294729][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.302603][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.314548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.325828][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.344484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.353275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.368849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.377856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.390040][ T4189] device veth0_macvtap entered promiscuous mode [ 76.399536][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.416810][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.427495][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.441968][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.459703][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.489592][ T4189] device veth1_macvtap entered promiscuous mode [ 76.531673][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.541261][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.550440][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.561572][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.586630][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617572][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.642443][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652429][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.672976][ T4197] device veth0_macvtap entered promiscuous mode [ 76.686106][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.702738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.712848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.727804][ T4268] loop0: detected capacity change from 0 to 512 [ 76.741354][ T4197] device veth1_macvtap entered promiscuous mode [ 76.797333][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.841438][ T4268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.1: missing EA_INODE flag [ 76.860636][ T4268] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1: error while reading EA inode 2 err=-117 [ 76.861295][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.884673][ T4268] EXT4-fs (loop0): 1 orphan inode deleted [ 76.890454][ T4268] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 76.920487][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.958848][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.969014][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.979709][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.991139][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.013013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.031826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.058749][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.078397][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.096024][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.107323][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.118369][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.128668][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.130590][ T4272] md/raid1:md0: not clean -- starting background reconstruction [ 77.141167][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.161777][ T4272] md/raid1:md0: active with 2 out of 2 mirrors [ 77.170262][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.192464][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.214687][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.228456][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.239649][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.249818][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.261033][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.271166][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.284869][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.296402][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.324752][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.344620][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.359783][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.381513][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.394817][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.403739][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412490][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.438365][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490067][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.520304][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.532383][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.549467][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.554009][ T4280] md: could not open device unknown-block(1,0). [ 77.574729][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.587083][ T4281] md: could not open device unknown-block(1,0). [ 77.595949][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.596548][ T4280] md: could not open device unknown-block(1,1). [ 77.613692][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.616781][ T4281] md: could not open device unknown-block(1,1). [ 77.635437][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.654175][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.685417][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.695891][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.717794][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.731360][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.741566][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.750759][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.765156][ T573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.773266][ T573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.847161][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.951493][ T4284] device syzkaller0 entered promiscuous mode [ 77.957772][ T573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.957795][ T573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.994331][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.015528][ T573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.023400][ T573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.078152][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.120630][ T4186] Bluetooth: hci1: command 0x0419 tx timeout [ 78.133932][ T4186] Bluetooth: hci3: command 0x0419 tx timeout [ 78.140046][ T4186] Bluetooth: hci2: command 0x0419 tx timeout [ 78.160932][ T4186] Bluetooth: hci0: command 0x0419 tx timeout [ 78.167172][ T4234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.175462][ T4227] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.186819][ T4234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.202537][ T4186] Bluetooth: hci4: command 0x0419 tx timeout [ 78.217916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.234962][ T4289] ubi0: attaching mtd0 [ 78.243171][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.252182][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.282153][ T4289] ubi0: scanning is finished [ 78.289062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.304445][ T4289] ubi0: empty MTD device detected [ 78.324961][ T4291] device vlan0 entered promiscuous mode [ 78.339136][ T573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.351244][ T573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.397621][ T573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.454281][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 78.464060][ T4289] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 78.487263][ T4294] md: could not open device unknown-block(1,0). [ 78.533505][ T4294] md: could not open device unknown-block(1,1). [ 78.540384][ T4289] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 78.559444][ T4289] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 78.574199][ T4227] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 78.576940][ T4289] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 78.597436][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.626640][ T4297] md: could not open device unknown-block(1,0). [ 78.641794][ T4289] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 78.666795][ T4297] md: could not open device unknown-block(1,1). [ 78.689801][ T4289] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 78.697414][ T4227] usb 4-1: config 0 descriptor?? [ 78.759526][ T4289] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3067340099 [ 78.788354][ T4289] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 78.927760][ T4295] ubi0: background thread "ubi_bgt0d" started, PID 4295 [ 78.951645][ T4227] usb 4-1: probing VID:PID(0424:012C) [ 78.962258][ T4227] usb 4-1: vub300 testing BULK IN EndPoint(0) 81 [ 78.968759][ T4227] usb 4-1: vub300 testing BULK OUT EndPoint(1) 02 [ 78.975330][ T4227] usb 4-1: vub300 testing BULK IN EndPoint(2) 83 [ 78.981710][ T4227] usb 4-1: vub300 testing BULK OUT EndPoint(3) 04 [ 78.986314][ T4303] md: could not open device unknown-block(1,0). [ 78.988840][ T4227] usb 4-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 79.012073][ T4306] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 79.031018][ T4305] loop0: detected capacity change from 0 to 512 [ 79.058880][ T4306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 79.082468][ T4303] md: could not open device unknown-block(1,1). [ 79.121937][ T4305] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.15: missing EA_INODE flag [ 79.144514][ T4305] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.15: error while reading EA inode 2 err=-117 [ 79.224675][ T4311] md: could not open device unknown-block(1,0). [ 79.232260][ T4311] md: could not open device unknown-block(1,1). [ 79.325135][ T4305] EXT4-fs (loop0): 1 orphan inode deleted [ 79.338981][ T4305] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 79.380904][ T4227] usb 4-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 79.428409][ T4305] overlayfs: failed to resolve './bus': -2 [ 79.555095][ T4316] device syzkaller0 entered promiscuous mode [ 79.913894][ T26] audit: type=1800 audit(1788464014.930:2): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="enable" dev="configfs" ino=33319 res=0 errno=0 [ 79.937123][ T4226] wiimote 0005:057E:0306.0001: unknown main item tag 0x0 [ 79.963119][ T4227] usb 4-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 80.000039][ T4226] wiimote 0005:057E:0306.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 80.027402][ T4319] se_device not configured yet, cannot port link [ 80.044855][ T26] audit: type=1800 audit(1788464015.070:3): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="nexus" dev="configfs" ino=32541 res=0 errno=0 [ 80.046383][ T4226] wiimote 0005:057E:0306.0001: New device registered [ 80.076183][ T26] audit: type=1800 audit(1788464015.100:4): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="enable" dev="configfs" ino=33342 res=0 errno=0 [ 80.077629][ T4319] [ 80.098459][ T4319] ====================================================== [ 80.105497][ T4319] WARNING: possible circular locking dependency detected [ 80.112544][ T4319] syzkaller #0 Not tainted [ 80.116982][ T4319] ------------------------------------------------------ [ 80.124021][ T4319] syz.1.21/4319 is trying to acquire lock: [ 80.129855][ T4319] ffffffff8cf20b08 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x1d/0x2c0 [ 80.138801][ T4319] [ 80.138801][ T4319] but task is already holding lock: [ 80.146278][ T4319] ffff888147e9c310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 80.155309][ T4319] [ 80.155309][ T4319] which lock already depends on the new lock. [ 80.155309][ T4319] [ 80.165753][ T4319] [ 80.165753][ T4319] the existing dependency chain (in reverse order) is: [ 80.174789][ T4319] [ 80.174789][ T4319] -> #3 (&gi->lock){+.+.}-{3:3}: [ 80.181949][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 80.187694][ T4319] mutex_lock_nested+0x17/0x20 [ 80.192981][ T4319] config_usb_cfg_link+0x55/0x250 [ 80.198538][ T4319] configfs_symlink+0x5a4/0x13b0 [ 80.204028][ T4319] vfs_symlink+0x245/0x3d0 [ 80.208991][ T4319] do_symlinkat+0x1ab/0x6b0 [ 80.214220][ T4319] __x64_sys_symlinkat+0x95/0xa0 [ 80.219707][ T4319] do_syscall_64+0x4c/0xa0 [ 80.224678][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.231122][ T4319] [ 80.231122][ T4319] -> #2 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 80.239821][ T4319] down_write+0x38/0x60 [ 80.244550][ T4319] configfs_depend_item_unlocked+0x14f/0x430 [ 80.251087][ T4319] usbg_make_tpg+0x1f3/0x580 [ 80.256245][ T4319] target_fabric_make_tpg+0xa0/0x6d0 [ 80.262084][ T4319] configfs_mkdir+0x511/0x9e0 [ 80.267311][ T4319] vfs_mkdir+0x386/0x570 [ 80.272103][ T4319] do_mkdirat+0x1dd/0x5c0 [ 80.277091][ T4319] __x64_sys_mkdirat+0x85/0x90 [ 80.282611][ T4319] do_syscall_64+0x4c/0xa0 [ 80.287594][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.294026][ T4319] [ 80.294026][ T4319] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 80.301723][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 80.307490][ T4319] mutex_lock_nested+0x17/0x20 [ 80.312812][ T4319] usbg_make_tpg+0x144/0x580 [ 80.317945][ T4319] target_fabric_make_tpg+0xa0/0x6d0 [ 80.323789][ T4319] configfs_mkdir+0x511/0x9e0 [ 80.329139][ T4319] vfs_mkdir+0x386/0x570 [ 80.333948][ T4319] do_mkdirat+0x1dd/0x5c0 [ 80.338807][ T4319] __x64_sys_mkdirat+0x85/0x90 [ 80.344110][ T4319] do_syscall_64+0x4c/0xa0 [ 80.349079][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.355531][ T4319] [ 80.355531][ T4319] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 80.363616][ T4319] __lock_acquire+0x2c66/0x7b50 [ 80.369012][ T4319] lock_acquire+0x19e/0x400 [ 80.374062][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 80.379812][ T4319] mutex_lock_nested+0x17/0x20 [ 80.385103][ T4319] tcm_alloc+0x1d/0x2c0 [ 80.389794][ T4319] usb_get_function+0x59/0xa0 [ 80.395003][ T4319] config_usb_cfg_link+0x144/0x250 [ 80.400667][ T4319] configfs_symlink+0x5a4/0x13b0 [ 80.406163][ T4319] vfs_symlink+0x245/0x3d0 [ 80.411137][ T4319] do_symlinkat+0x1ab/0x6b0 [ 80.416174][ T4319] __x64_sys_symlinkat+0x95/0xa0 [ 80.421641][ T4319] do_syscall_64+0x4c/0xa0 [ 80.426606][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.433032][ T4319] [ 80.433032][ T4319] other info that might help us debug this: [ 80.433032][ T4319] [ 80.443262][ T4319] Chain exists of: [ 80.443262][ T4319] tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock [ 80.443262][ T4319] [ 80.457132][ T4319] Possible unsafe locking scenario: [ 80.457132][ T4319] [ 80.464621][ T4319] CPU0 CPU1 [ 80.470030][ T4319] ---- ---- [ 80.475432][ T4319] lock(&gi->lock); [ 80.479487][ T4319] lock(&sb->s_type->i_mutex_key#21); [ 80.487476][ T4319] lock(&gi->lock); [ 80.493923][ T4319] lock(tpg_instances_lock); [ 80.498632][ T4319] [ 80.498632][ T4319] *** DEADLOCK *** [ 80.498632][ T4319] [ 80.506820][ T4319] 3 locks held by syz.1.21/4319: [ 80.511759][ T4319] #0: ffff88801d6ee460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 80.521004][ T4319] #1: ffff88805fa68660 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 80.531903][ T4319] #2: ffff888147e9c310 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x55/0x250 [ 80.541353][ T4319] [ 80.541353][ T4319] stack backtrace: [ 80.547277][ T4319] CPU: 0 PID: 4319 Comm: syz.1.21 Not tainted syzkaller #0 [ 80.554504][ T4319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 80.564587][ T4319] Call Trace: [ 80.567898][ T4319] [ 80.570853][ T4319] dump_stack_lvl+0x188/0x250 [ 80.575541][ T4319] ? load_image+0x410/0x410 [ 80.580060][ T4319] ? show_regs_print_info+0x20/0x20 [ 80.585332][ T4319] ? print_circular_bug+0x12b/0x1a0 [ 80.590564][ T4319] check_noncircular+0x296/0x330 [ 80.595570][ T4319] ? add_chain_block+0x9b0/0x9b0 [ 80.600552][ T4319] ? lockdep_lock+0xf1/0x1f0 [ 80.605206][ T4319] ? mark_lock+0x94/0x320 [ 80.609563][ T4319] ? _find_first_zero_bit+0xd1/0xf0 [ 80.614990][ T4319] __lock_acquire+0x2c66/0x7b50 [ 80.620661][ T4319] ? verify_lock_unused+0x140/0x140 [ 80.625887][ T4319] ? verify_lock_unused+0x140/0x140 [ 80.631112][ T4319] ? stack_trace_save+0xa6/0xf0 [ 80.636011][ T4319] lock_acquire+0x19e/0x400 [ 80.640567][ T4319] ? tcm_alloc+0x1d/0x2c0 [ 80.645087][ T4319] ? __might_sleep+0xf0/0xf0 [ 80.649706][ T4319] ? read_lock_is_recursive+0x10/0x10 [ 80.655095][ T4319] ? __mutex_trylock_common+0x15c/0x260 [ 80.660676][ T4319] __mutex_lock_common+0x1e5/0x2400 [ 80.665884][ T4319] ? tcm_alloc+0x1d/0x2c0 [ 80.670228][ T4319] ? __mutex_lock_common+0x435/0x2400 [ 80.675658][ T4319] ? lock_chain_count+0x20/0x20 [ 80.680520][ T4319] ? tcm_alloc+0x1d/0x2c0 [ 80.685008][ T4319] ? mutex_lock_io_nested+0x60/0x60 [ 80.690549][ T4319] ? mutex_lock_io_nested+0x60/0x60 [ 80.695986][ T4319] mutex_lock_nested+0x17/0x20 [ 80.700796][ T4319] tcm_alloc+0x1d/0x2c0 [ 80.705182][ T4319] usb_get_function+0x59/0xa0 [ 80.709895][ T4319] config_usb_cfg_link+0x144/0x250 [ 80.715045][ T4319] configfs_symlink+0x5a4/0x13b0 [ 80.720000][ T4319] ? end_current_label_crit_section+0x14b/0x170 [ 80.726251][ T4319] ? common_perm+0x15d/0x1b0 [ 80.730857][ T4319] ? from_kgid+0x14f/0x6a0 [ 80.735351][ T4319] ? apparmor_path_symlink+0x1ac/0x230 [ 80.740825][ T4319] ? lookup_one_qstr_excl+0x11c/0x240 [ 80.746227][ T4319] ? detach_groups+0x370/0x370 [ 80.751035][ T4319] ? inode_permission+0xef/0x480 [ 80.756027][ T4319] ? bpf_lsm_inode_symlink+0x5/0x10 [ 80.761261][ T4319] ? security_inode_symlink+0xb2/0x100 [ 80.766734][ T4319] vfs_symlink+0x245/0x3d0 [ 80.771212][ T4319] do_symlinkat+0x1ab/0x6b0 [ 80.775722][ T4319] ? strncpy_from_user+0x1f4/0x350 [ 80.781190][ T4319] ? vfs_symlink+0x3d0/0x3d0 [ 80.785820][ T4319] __x64_sys_symlinkat+0x95/0xa0 [ 80.790805][ T4319] do_syscall_64+0x4c/0xa0 [ 80.795242][ T4319] ? clear_bhb_loop+0x30/0x80 [ 80.799958][ T4319] ? clear_bhb_loop+0x30/0x80 [ 80.804681][ T4319] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.810595][ T4319] RIP: 0033:0x7fab7d719159 [ 80.815015][ T4319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.834727][ T4319] RSP: 002b:00007fab7b971028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 80.843288][ T4319] RAX: ffffffffffffffda RBX: 00007fab7d9a0fa0 RCX: 00007fab7d719159 [ 80.851279][ T4319] RDX: 0000200000001400 RSI: ffffffffffffff9c RDI: 0000200000001300 [ 80.859379][ T4319] RBP: 00007fab7d7b0024 R08: 0000000000000000 R09: 0000000000000000 [ 80.867387][ T4319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.875397][ T4319] R13: 00007fab7d9a1038 R14: 00007fab7d9a0fa0 R15: 00007ffc8b5437e8 [ 80.883437][ T4319] [ 80.886559][ C0] vkms_vblank_simulate: vblank timer overrun [ 80.906171][ T4322] wiimote 0005:057E:0306.0001: Device removed [ 80.950817][ T4330] md: could not open device unknown-block(1,0). [ 80.958040][ T4330] md: could not open device unknown-block(1,1). [ 81.004382][ T4328] fido_id[4328]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.008092][ T26] audit: type=1800 audit(1788464016.020:5): pid=4325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.21" name="UDC" dev="configfs" ino=32542 res=0 errno=0 [ 81.693831][ T4227] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-32 [ 81.954406][ T4260] wiimote 0005:057E:0306.0001: detected device: Nintendo Wii Remote (Gen 1) [ 81.975155][ T4260] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input6 [ 81.989469][ T4260] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input7 [ 82.002700][ T4260] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0001/input/input5 [ 83.664733][ T4227] usb 4-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 83.664999][ T7] usb 4-1: USB disconnect, device number 2 [ 83.739586][ T7] USB vub300 remote SDIO host controller[0] now disconnected [ 84.683758][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3031 [ 84.700274][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 0, name: swapper/1 [ 84.709011][ C1] INFO: lockdep is turned off. [ 84.713929][ C1] Preemption disabled at: [ 84.713939][ C1] [<0000000000000000>] 0x0 [ 84.722729][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 84.729805][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.739864][ C1] Call Trace: [ 84.743156][ C1] [ 84.746008][ C1] dump_stack_lvl+0x188/0x250 [ 84.750718][ C1] ? lock_chain_count+0x20/0x20 [ 84.755587][ C1] ? show_regs_print_info+0x20/0x20 [ 84.760931][ C1] ? load_image+0x410/0x410 [ 84.765457][ C1] ? rcu_is_watching+0x11/0xa0 [ 84.770251][ C1] ? lock_release+0xb5/0x8a0 [ 84.774870][ C1] ___might_sleep+0x493/0x610 [ 84.779600][ C1] ? __might_sleep+0xf0/0xf0 [ 84.784219][ C1] ? lock_release+0xb5/0x8a0 [ 84.788840][ C1] ? __flush_work+0x11a/0x210 [ 84.793557][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 84.799490][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 84.804552][ C1] ? kobject_put+0x25c/0x450 [ 84.809277][ C1] start_flush_work+0x2e/0x830 [ 84.814056][ C1] __flush_work+0x148/0x210 [ 84.818592][ C1] ? flush_work+0x20/0x20 [ 84.822961][ C1] ? lock_chain_count+0x20/0x20 [ 84.827829][ C1] __cancel_work_timer+0x3f4/0x560 [ 84.832987][ C1] ? slab_free_freelist_hook+0xec/0x170 [ 84.838563][ C1] ? cancel_work_sync+0x20/0x20 [ 84.843434][ C1] ? kobject_put+0x25c/0x450 [ 84.848037][ C1] ? kfree+0xef/0x2a0 [ 84.852058][ C1] ? kobject_put+0x41d/0x450 [ 84.856658][ C1] ? kref_get+0x70/0x70 [ 84.860822][ C1] mmc_free_host+0x15/0x30 [ 84.865269][ C1] call_timer_fn+0x17b/0x540 [ 84.869902][ C1] ? kref_get+0x70/0x70 [ 84.874070][ C1] ? __run_timers+0x810/0x810 [ 84.878783][ C1] ? kref_get+0x70/0x70 [ 84.882945][ C1] __run_timers+0x56c/0x810 [ 84.887467][ C1] ? detach_timer+0x2b0/0x2b0 [ 84.892170][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 84.897371][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 84.902223][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 84.908473][ C1] run_timer_softirq+0x63/0xf0 [ 84.913242][ C1] handle_softirqs+0x336/0x830 [ 84.918013][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 84.922869][ C1] ? do_softirq+0x210/0x210 [ 84.927406][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 84.932554][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 84.937982][ C1] __irq_exit_rcu+0x13b/0x230 [ 84.942699][ C1] ? irq_exit_rcu+0x20/0x20 [ 84.947219][ C1] irq_exit_rcu+0x5/0x20 [ 84.951503][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 84.957162][ C1] [ 84.960113][ C1] [ 84.963042][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 84.969068][ C1] RIP: 0010:default_idle+0xb/0x10 [ 84.974128][ C1] Code: b7 48 89 df e8 06 75 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 05 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 84.993766][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 84.999862][ C1] RAX: d4dec2af1873c800 RBX: ffff888016e98000 RCX: 000000000000a436 [ 85.008043][ C1] RDX: 0000000000000001 RSI: ffffffff8a7a4520 RDI: ffffffff89c9cd50 [ 85.016073][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 85.024061][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 85.032071][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 85.040067][ C1] ? default_idle_call+0x70/0xc0 [ 85.045051][ C1] default_idle_call+0x81/0xc0 [ 85.049857][ C1] do_idle+0x3a1/0x650 [ 85.053977][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 85.059224][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 85.065440][ C1] ? schedule_idle+0x57/0x90 [ 85.070145][ C1] cpu_startup_entry+0x14/0x20 [ 85.074931][ C1] start_secondary+0x32f/0x430 [ 85.079731][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 85.085363][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 85.091364][ C1] [ 85.094463][ C1] ODEBUG: object ffffc90000dd09a0 is NOT on stack ffffc90000d60000, but annotated. [ 85.104207][ C1] ------------[ cut here ]------------ [ 85.109727][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:561 __debug_object_init+0x4c0/0xc80 [ 85.119056][ C1] Modules linked in: [ 85.122967][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 85.131444][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.141520][ C1] RIP: 0010:__debug_object_init+0x4c0/0xc80 [ 85.147462][ C1] Code: 36 09 73 12 48 c7 c1 40 4d 7a 8a 48 c7 c7 a0 4d 7a 8a 84 c0 48 0f 45 f9 4c 89 ee e8 4a e3 c8 05 48 be 00 00 00 00 00 fc ff df <0f> 0b e9 4d fd ff ff 83 3d 62 08 73 12 00 4c 89 6c 24 28 0f 84 23 [ 85.167115][ C1] RSP: 0018:ffffc90000dd07e0 EFLAGS: 00010046 [ 85.173372][ C1] RAX: 0000000000000050 RBX: 0000000000000001 RCX: d4dec2af1873c800 [ 85.181372][ C1] RDX: 0000000000000100 RSI: dffffc0000000000 RDI: 0000000000000000 [ 85.189443][ C1] RBP: ffffc90000dd0950 R08: ffffc90000dd0307 R09: 1ffff920001ba060 [ 85.197561][ C1] R10: dffffc0000000000 R11: fffff520001ba061 R12: f8f8f8f8f8f8f8f8 [ 85.205545][ C1] R13: ffffc90000dd09a0 R14: ffff888016e98020 R15: ffff88805f044700 [ 85.213559][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 85.222511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.229132][ C1] CR2: 00007f0a373a4f5c CR3: 000000001d952000 CR4: 00000000003506e0 [ 85.237149][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.245322][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.253321][ C1] Call Trace: [ 85.256610][ C1] [ 85.259476][ C1] ? lockdep_init_map_type+0x98/0x900 [ 85.265056][ C1] ? debug_object_init+0x10/0x10 [ 85.270038][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 85.275473][ C1] ? rcu_is_watching+0x11/0xa0 [ 85.280253][ C1] ? __might_sleep+0xf0/0xf0 [ 85.284865][ C1] ? lock_release+0xb5/0x8a0 [ 85.289507][ C1] ? __init_swait_queue_head+0xa4/0x140 [ 85.295082][ C1] __synchronize_srcu+0x229/0x350 [ 85.300116][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 85.305855][ C1] ? _raw_spin_unlock+0x40/0x40 [ 85.310735][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 85.316300][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 85.321338][ C1] wakeup_source_unregister+0x112/0x190 [ 85.326943][ C1] mmc_host_classdev_release+0x43/0xf0 [ 85.332457][ C1] ? mmc_free_host+0x30/0x30 [ 85.337087][ C1] device_release+0x92/0x1c0 [ 85.341702][ C1] kobject_put+0x217/0x450 [ 85.346145][ C1] ? kref_get+0x70/0x70 [ 85.350390][ C1] call_timer_fn+0x17b/0x540 [ 85.355131][ C1] ? kref_get+0x70/0x70 [ 85.359319][ C1] ? __run_timers+0x810/0x810 [ 85.364016][ C1] ? kref_get+0x70/0x70 [ 85.368229][ C1] __run_timers+0x56c/0x810 [ 85.372776][ C1] ? detach_timer+0x2b0/0x2b0 [ 85.377575][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 85.382786][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 85.387647][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.393924][ C1] run_timer_softirq+0x63/0xf0 [ 85.398831][ C1] handle_softirqs+0x336/0x830 [ 85.403620][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 85.408499][ C1] ? do_softirq+0x210/0x210 [ 85.413036][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.418158][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 85.423370][ C1] __irq_exit_rcu+0x13b/0x230 [ 85.428062][ C1] ? irq_exit_rcu+0x20/0x20 [ 85.432620][ C1] irq_exit_rcu+0x5/0x20 [ 85.436900][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.442564][ C1] [ 85.445528][ C1] [ 85.448490][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.454500][ C1] RIP: 0010:default_idle+0xb/0x10 [ 85.459541][ C1] Code: b7 48 89 df e8 06 75 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 05 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 85.479327][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 85.485411][ C1] RAX: d4dec2af1873c800 RBX: ffff888016e98000 RCX: 000000000000a436 [ 85.493416][ C1] RDX: 0000000000000001 RSI: ffffffff8a7a4520 RDI: ffffffff89c9cd50 [ 85.501394][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 85.509391][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 85.517397][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 85.525411][ C1] ? default_idle_call+0x70/0xc0 [ 85.530391][ C1] default_idle_call+0x81/0xc0 [ 85.535176][ C1] do_idle+0x3a1/0x650 [ 85.539261][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 85.544482][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 85.550682][ C1] ? schedule_idle+0x57/0x90 [ 85.555334][ C1] cpu_startup_entry+0x14/0x20 [ 85.560136][ C1] start_secondary+0x32f/0x430 [ 85.564919][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 85.570522][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 85.576431][ C1] [ 85.579453][ C1] irq event stamp: 196840 [ 85.583780][ C1] hardirqs last enabled at (196839): [] tick_nohz_idle_exit+0x3f5/0x510 [ 85.593794][ C1] hardirqs last disabled at (196840): [] __schedule+0x2fc/0x4350 [ 85.603109][ C1] softirqs last enabled at (196822): [] __irq_exit_rcu+0x13b/0x230 [ 85.612670][ C1] softirqs last disabled at (196667): [] __irq_exit_rcu+0x13b/0x230 [ 85.622337][ C1] ---[ end trace 44ef6e409ff770fa ]--- [ 85.627882][ C1] BUG: scheduling while atomic: swapper/1/0/0x00000102 [ 85.634779][ C1] INFO: lockdep is turned off. [ 85.639591][ C1] Modules linked in: [ 85.643509][ C1] Preemption disabled at: [ 85.643520][ C1] [<0000000000000000>] 0x0 [ 85.652348][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 85.660797][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.670855][ C1] Call Trace: [ 85.674146][ C1] [ 85.677011][ C1] dump_stack_lvl+0x188/0x250 [ 85.681731][ C1] ? show_regs_print_info+0x20/0x20 [ 85.686936][ C1] ? load_image+0x410/0x410 [ 85.691472][ C1] ? ktime_get+0x7b/0x270 [ 85.695811][ C1] __schedule_bug+0x198/0x1f0 [ 85.700515][ C1] ? raw_spin_rq_unlock_irq+0x90/0x90 [ 85.705905][ C1] __schedule+0x1302/0x4350 [ 85.710459][ C1] ? lock_release+0xb5/0x8a0 [ 85.715094][ C1] ? try_to_wake_up+0x3b8/0x1020 [ 85.720061][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 85.725120][ C1] ? rcu_is_watching+0x11/0xa0 [ 85.729914][ C1] ? lock_release+0xb5/0x8a0 [ 85.734517][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 85.739742][ C1] ? release_firmware_map_entry+0x190/0x190 [ 85.746681][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 85.752593][ C1] ? rcu_is_watching+0x11/0xa0 [ 85.757378][ C1] schedule+0x11b/0x1e0 [ 85.761578][ C1] schedule_timeout+0xbd/0x2d0 [ 85.766383][ C1] ? console_conditional_schedule+0x40/0x40 [ 85.772278][ C1] ? __lock_acquire+0x7b50/0x7b50 [ 85.777316][ C1] ? lock_chain_count+0x20/0x20 [ 85.782200][ C1] ? rcu_is_watching+0x11/0xa0 [ 85.787098][ C1] ? lock_acquire+0xc8/0x400 [ 85.791796][ C1] do_wait_for_common+0x295/0x460 [ 85.796853][ C1] ? console_conditional_schedule+0x40/0x40 [ 85.802785][ C1] ? wait_for_completion_killable_timeout+0x60/0x60 [ 85.809388][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 85.814462][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 85.820059][ C1] wait_for_completion+0x48/0x60 [ 85.825036][ C1] __synchronize_srcu+0x2b5/0x350 [ 85.830094][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 85.836161][ C1] ? rcu_read_lock_any_held+0x130/0x130 [ 85.841754][ C1] ? _raw_spin_unlock+0x40/0x40 [ 85.846691][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 85.852277][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 85.857361][ C1] wakeup_source_unregister+0x112/0x190 [ 85.862952][ C1] mmc_host_classdev_release+0x43/0xf0 [ 85.868455][ C1] ? mmc_free_host+0x30/0x30 [ 85.873051][ C1] device_release+0x92/0x1c0 [ 85.877655][ C1] kobject_put+0x217/0x450 [ 85.882081][ C1] ? kref_get+0x70/0x70 [ 85.886256][ C1] call_timer_fn+0x17b/0x540 [ 85.890974][ C1] ? kref_get+0x70/0x70 [ 85.895152][ C1] ? __run_timers+0x810/0x810 [ 85.899873][ C1] ? kref_get+0x70/0x70 [ 85.904050][ C1] __run_timers+0x56c/0x810 [ 85.908602][ C1] ? detach_timer+0x2b0/0x2b0 [ 85.913311][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 85.918559][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 85.923436][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 85.929685][ C1] run_timer_softirq+0x63/0xf0 [ 85.934475][ C1] handle_softirqs+0x336/0x830 [ 85.939277][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 85.944187][ C1] ? do_softirq+0x210/0x210 [ 85.948738][ C1] ? hrtimer_interrupt+0x6a2/0x8b0 [ 85.953870][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 85.959109][ C1] __irq_exit_rcu+0x13b/0x230 [ 85.963828][ C1] ? irq_exit_rcu+0x20/0x20 [ 85.968374][ C1] irq_exit_rcu+0x5/0x20 [ 85.972621][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 85.978263][ C1] [ 85.981204][ C1] [ 85.984161][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 85.990177][ C1] RIP: 0010:default_idle+0xb/0x10 [ 85.995220][ C1] Code: b7 48 89 df e8 06 75 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 05 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 86.014953][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 86.021065][ C1] RAX: d4dec2af1873c800 RBX: ffff888016e98000 RCX: 000000000000a436 [ 86.029062][ C1] RDX: 0000000000000001 RSI: ffffffff8a7a4520 RDI: ffffffff89c9cd50 [ 86.037068][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 86.045085][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 86.053105][ C1] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 86.061094][ C1] ? default_idle_call+0x70/0xc0 [ 86.066054][ C1] default_idle_call+0x81/0xc0 [ 86.070876][ C1] do_idle+0x3a1/0x650 [ 86.074969][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 86.080201][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 86.086397][ C1] ? schedule_idle+0x57/0x90 [ 86.091297][ C1] cpu_startup_entry+0x14/0x20 [ 86.096104][ C1] start_secondary+0x32f/0x430 [ 86.100911][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 86.106296][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 86.112213][ C1] [ 86.115295][ T0] bad: scheduling from the idle thread! [ 86.120872][ T0] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 86.129327][ T0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.139411][ T0] Call Trace: [ 86.142721][ T0] [ 86.145595][ T0] dump_stack_lvl+0x188/0x250 [ 86.150313][ T0] ? show_regs_print_info+0x20/0x20 [ 86.155544][ T0] ? load_image+0x410/0x410 [ 86.160081][ T0] ? do_raw_spin_unlock+0x11d/0x230 [ 86.165304][ T0] dequeue_task_idle+0x77/0xe0 [ 86.170102][ T0] ? dump_cpu_task+0x90/0x90 [ 86.174729][ T0] __schedule+0x6cf/0x4350 [ 86.179203][ T0] ? lock_release+0xb5/0x8a0 [ 86.183814][ T0] ? do_raw_spin_lock+0x128/0x2f0 [ 86.188929][ T0] ? rcu_is_watching+0x11/0xa0 [ 86.193736][ T0] ? release_firmware_map_entry+0x190/0x190 [ 86.199662][ T0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.205570][ T0] ? rcu_is_watching+0x11/0xa0 [ 86.210365][ T0] schedule+0x11b/0x1e0 [ 86.214536][ T0] schedule_timeout+0xbd/0x2d0 [ 86.219336][ T0] ? console_conditional_schedule+0x40/0x40 [ 86.225267][ T0] ? __lock_acquire+0x7b50/0x7b50 [ 86.230332][ T0] ? lock_chain_count+0x20/0x20 [ 86.235203][ T0] ? rcu_is_watching+0x11/0xa0 [ 86.240014][ T0] ? lock_acquire+0xc8/0x400 [ 86.244626][ T0] do_wait_for_common+0x295/0x460 [ 86.249711][ T0] ? console_conditional_schedule+0x40/0x40 [ 86.255629][ T0] ? wait_for_completion_killable_timeout+0x60/0x60 [ 86.262457][ T0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.267521][ T0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.273109][ T0] wait_for_completion+0x48/0x60 [ 86.278071][ T0] __synchronize_srcu+0x2b5/0x350 [ 86.283113][ T0] ? synchronize_srcu_expedited+0x20/0x20 [ 86.288850][ T0] ? rcu_read_lock_any_held+0x130/0x130 [ 86.294419][ T0] ? _raw_spin_unlock+0x40/0x40 [ 86.299303][ T0] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 86.304864][ T0] ? synchronize_srcu+0x18f/0x1b0 [ 86.309924][ T0] wakeup_source_unregister+0x112/0x190 [ 86.315490][ T0] mmc_host_classdev_release+0x43/0xf0 [ 86.320978][ T0] ? mmc_free_host+0x30/0x30 [ 86.325583][ T0] device_release+0x92/0x1c0 [ 86.330200][ T0] kobject_put+0x217/0x450 [ 86.334628][ T0] ? kref_get+0x70/0x70 [ 86.338806][ T0] call_timer_fn+0x17b/0x540 [ 86.343414][ T0] ? kref_get+0x70/0x70 [ 86.347589][ T0] ? __run_timers+0x810/0x810 [ 86.352305][ T0] ? kref_get+0x70/0x70 [ 86.356476][ T0] __run_timers+0x56c/0x810 [ 86.361011][ T0] ? detach_timer+0x2b0/0x2b0 [ 86.365723][ T0] ? kvm_sched_clock_read+0x14/0x40 [ 86.370963][ T0] ? sched_clock_cpu+0x15/0x3c0 [ 86.375848][ T0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 86.382134][ T0] run_timer_softirq+0x63/0xf0 [ 86.386926][ T0] handle_softirqs+0x336/0x830 [ 86.391728][ T0] ? __irq_exit_rcu+0x13b/0x230 [ 86.396582][ T0] ? do_softirq+0x210/0x210 [ 86.401087][ T0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 86.406236][ T0] ? irqtime_account_irq+0xb2/0x1b0 [ 86.411475][ T0] __irq_exit_rcu+0x13b/0x230 [ 86.416178][ T0] ? irq_exit_rcu+0x20/0x20 [ 86.420712][ T0] irq_exit_rcu+0x5/0x20 [ 86.424968][ T0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 86.430635][ T0] [ 86.433582][ T0] [ 86.436529][ T0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 86.442516][ T0] RIP: 0010:default_idle+0xb/0x10 [ 86.447548][ T0] Code: b7 48 89 df e8 06 75 f4 f7 eb ad e8 4f ab f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 05 5c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 86.467161][ T0] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 86.473260][ T0] RAX: d4dec2af1873c800 RBX: ffff888016e98000 RCX: 000000000000a436 [ 86.481255][ T0] RDX: 0000000000000001 RSI: ffffffff8a7a4520 RDI: ffffffff89c9cd50 [ 86.489234][ T0] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 86.497217][ T0] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff920001acfb4 [ 86.505207][ T0] R13: dffffc0000000000 R14: 1ffff11002dd3000 R15: 0000000000000000 [ 86.513210][ T0] ? default_idle_call+0x70/0xc0 [ 86.518161][ T0] default_idle_call+0x81/0xc0 [ 86.522939][ T0] do_idle+0x3a1/0x650 [ 86.527024][ T0] ? idle_inject_timer_fn+0x60/0x60 [ 86.532258][ T0] ? asm_sysvec_call_function_single+0x16/0x20 [ 86.538427][ T0] ? schedule_idle+0x57/0x90 [ 86.543031][ T0] cpu_startup_entry+0x14/0x20 [ 86.547826][ T0] start_secondary+0x32f/0x430 [ 86.552666][ T0] ? arch_scale_freq_tick+0x120/0x120 [ 86.558045][ T0] secondary_startup_64_no_verify+0xb1/0xbb [ 86.563958][ T0] [ 86.576901][ C1] ================================================================== [ 86.585011][ C1] BUG: KASAN: stack-out-of-bounds in __netif_receive_skb_core+0xc9/0x3670 [ 86.593551][ C1] Read of size 8 at addr ffffc90000dd0bb8 by task kworker/1:6/4227 [ 86.601473][ C1] [ 86.603843][ C1] CPU: 1 PID: 4227 Comm: kworker/1:6 Tainted: G W syzkaller #0 [ 86.612710][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.622770][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 86.628857][ C1] Call Trace: [ 86.632143][ C1] [ 86.635001][ C1] dump_stack_lvl+0x188/0x250 [ 86.639715][ C1] ? show_regs_print_info+0x20/0x20 [ 86.644932][ C1] ? load_image+0x410/0x410 [ 86.649465][ C1] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 86.655039][ C1] print_address_description+0x60/0x2d0 [ 86.660619][ C1] ? __netif_receive_skb_core+0xc9/0x3670 [ 86.666349][ C1] kasan_report+0xdf/0x130 [ 86.670795][ C1] ? __netif_receive_skb_core+0xc9/0x3670 [ 86.676555][ C1] __netif_receive_skb_core+0xc9/0x3670 [ 86.682148][ C1] ? _raw_spin_unlock+0x40/0x40 [ 86.687030][ C1] ? set_rps_cpu+0x660/0x660 [ 86.691654][ C1] ? rcu_is_watching+0x11/0xa0 [ 86.696516][ C1] ? lock_acquire+0xc8/0x400 [ 86.701139][ C1] ? mmc_host_classdev_release+0x43/0xf0 [ 86.706804][ C1] ? device_release+0x92/0x1c0 [ 86.711602][ C1] ? read_lock_is_recursive+0x10/0x10 [ 86.716993][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 86.722047][ C1] ? lock_chain_count+0x20/0x20 [ 86.726935][ C1] __netif_receive_skb+0x74/0x290 [ 86.732102][ C1] process_backlog+0x366/0x770 [ 86.736898][ C1] ? rps_trigger_softirq+0x210/0x210 [ 86.742235][ C1] ? lock_chain_count+0x20/0x20 [ 86.747102][ C1] __napi_poll+0xbb/0x430 [ 86.751449][ C1] net_rx_action+0x522/0xa80 [ 86.756054][ C1] ? net_tx_action+0x880/0x880 [ 86.760895][ C1] ? lock_chain_count+0x20/0x20 [ 86.765799][ C1] handle_softirqs+0x336/0x830 [ 86.770608][ C1] ? do_softirq+0x142/0x210 [ 86.775150][ C1] ? do_softirq+0x210/0x210 [ 86.779695][ C1] do_softirq+0x142/0x210 [ 86.784061][ C1] [ 86.787043][ C1] [ 86.790000][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 86.795534][ C1] ? lock_release+0xb5/0x8a0 [ 86.800220][ C1] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 86.806266][ C1] ? wg_socket_send_skb_to_peer+0x167/0x1c0 [ 86.812342][ C1] ? send4+0xd70/0xd70 [ 86.816453][ C1] ? __local_bh_disable_ip+0x111/0x1a0 [ 86.821948][ C1] ? wg_socket_send_skb_to_peer+0x167/0x1c0 [ 86.827883][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 86.833120][ C1] ? _local_bh_enable+0xa0/0xa0 [ 86.838007][ C1] ? do_raw_read_unlock+0x39/0x70 [ 86.843074][ C1] wg_socket_send_skb_to_peer+0x167/0x1c0 [ 86.848924][ C1] wg_packet_tx_worker+0x1d3/0x7b0 [ 86.854069][ C1] process_one_work+0x867/0xff0 [ 86.858966][ C1] ? worker_detach_from_pool+0x240/0x240 [ 86.864631][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 86.869960][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 86.875013][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 86.880610][ C1] ? wq_worker_running+0x97/0x170 [ 86.885689][ C1] worker_thread+0xad7/0x12a0 [ 86.890413][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 86.896343][ C1] kthread+0x42e/0x520 [ 86.900441][ C1] ? rcu_lock_release+0x20/0x20 [ 86.905329][ C1] ? kthread_blkcg+0xd0/0xd0 [ 86.909951][ C1] ret_from_fork+0x1f/0x30 [ 86.914414][ C1] [ 86.917462][ C1] [ 86.919841][ C1] [ 86.922187][ C1] Memory state around the buggy address: [ 86.927843][ C1] ffffc90000dd0a80: f1 f1 f1 f1 f8 f8 f8 f8 f8 f8 f2 f2 f2 f2 f8 f8 [ 86.935932][ C1] ffffc90000dd0b00: f2 f2 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 86.944113][ C1] >ffffc90000dd0b80: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 f3 f3 f3 [ 86.952197][ C1] ^ [ 86.958112][ C1] ffffc90000dd0c00: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.966201][ C1] ffffc90000dd0c80: 00 00 00 00 f1 f1 f1 f1 f8 f2 f2 f2 f8 f3 f3 f3 [ 86.974283][ C1] ================================================================== [ 86.985731][ T4225] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [ 86.994099][ T4225] BUG: unable to handle page fault for address: ffff888079971a80 [ 87.001834][ T4225] #PF: supervisor instruction fetch in kernel mode [ 87.008355][ T4225] #PF: error_code(0x0011) - permissions violation [ 87.014795][ T4225] PGD 16801067 P4D 16801067 PUD 2c0cf063 PMD 80000000798001e3 [ 87.022392][ T4225] Oops: 0011 [#1] PREEMPT SMP KASAN [ 87.027621][ T4225] CPU: 1 PID: 4225 Comm: kworker/1:5 Tainted: G B W syzkaller #0 [ 87.036538][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.046628][ T4225] Workqueue: rcu_gp srcu_invoke_callbacks [ 87.052458][ T4225] RIP: 0010:0xffff888079971a80 [ 87.057249][ T4225] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <01> 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 [ 87.076890][ T4225] RSP: 0018:ffffc90002fdfb38 EFLAGS: 00010246 [ 87.083024][ T4225] RAX: 1ffff920001ba135 RBX: 1ffff920005fbf70 RCX: 0000000000000000 [ 87.091029][ T4225] RDX: dffffc0000000000 RSI: 0000000000000200 RDI: ffffc90000dd09a0 [ 87.099038][ T4225] RBP: ffffc90002fdfc30 R08: ffffffff96536303 R09: 1ffffffff2ca6c60 [ 87.107043][ T4225] R10: dffffc0000000000 R11: fffffbfff2ca6c61 R12: 1ffff11017226f19 [ 87.115047][ T4225] R13: ffffffff8cb32370 R14: dffffc0000000000 R15: ffffc90000dd09a0 [ 87.123051][ T4225] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 87.132007][ T4225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.138622][ T4225] CR2: ffff888079971a80 CR3: 000000001d952000 CR4: 00000000003506e0 [ 87.146632][ T4225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.154641][ T4225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.162648][ T4225] Call Trace: [ 87.165962][ T4225] [ 87.169022][ T4225] ? srcu_invoke_callbacks+0x195/0x3c0 [ 87.174516][ T4225] ? try_check_zero+0x340/0x340 [ 87.179501][ T4225] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.185431][ T4225] process_one_work+0x867/0xff0 [ 87.190330][ T4225] ? worker_detach_from_pool+0x240/0x240 [ 87.196003][ T4225] ? lockdep_hardirqs_off+0x70/0x100 [ 87.201324][ T4225] ? _raw_spin_lock_irq+0xb7/0xf0 [ 87.206384][ T4225] ? _raw_spin_lock_irqsave+0x100/0x100 [ 87.212084][ T4225] ? wq_worker_running+0x97/0x170 [ 87.217136][ T4225] worker_thread+0xad7/0x12a0 [ 87.221849][ T4225] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 87.227797][ T4225] kthread+0x42e/0x520 [ 87.231893][ T4225] ? rcu_lock_release+0x20/0x20 [ 87.236769][ T4225] ? kthread_blkcg+0xd0/0xd0 [ 87.241393][ T4225] ret_from_fork+0x1f/0x30 [ 87.245850][ T4225] [ 87.248888][ T4225] Modules linked in: [ 87.252850][ T4225] CR2: ffff888079971a80 [ 87.257040][ T4225] ---[ end trace 44ef6e409ff770fb ]--- [ 87.262515][ T4225] RIP: 0010:0xffff888079971a80 [ 87.267315][ T4225] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <01> 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de ff ff ff ff 00 00 [ 87.287195][ T4225] RSP: 0018:ffffc90002fdfb38 EFLAGS: 00010246 [ 87.293308][ T4225] RAX: 1ffff920001ba135 RBX: 1ffff920005fbf70 RCX: 0000000000000000 [ 87.301500][ T4225] RDX: dffffc0000000000 RSI: 0000000000000200 RDI: ffffc90000dd09a0 [ 87.309767][ T4225] RBP: ffffc90002fdfc30 R08: ffffffff96536303 R09: 1ffffffff2ca6c60 [ 87.317776][ T4225] R10: dffffc0000000000 R11: fffffbfff2ca6c61 R12: 1ffff11017226f19 [ 87.325777][ T4225] R13: ffffffff8cb32370 R14: dffffc0000000000 R15: ffffc90000dd09a0 [ 87.333784][ T4225] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 87.342743][ T4225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.349356][ T4225] CR2: ffff888079971a80 CR3: 000000001d952000 CR4: 00000000003506e0 [ 87.357389][ T4225] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.365395][ T4225] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.373403][ T4225] Kernel panic - not syncing: Fatal exception in interrupt [ 87.380731][ T4225] Kernel Offset: disabled [ 87.385213][ T4225] Rebooting in 86400 seconds..