last executing test programs: 20.282907012s ago: executing program 0 (id=330): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000340)='./file2\x00', 0x3010400, &(0x7f00000004c0)=ANY=[], 0x41, 0x240, &(0x7f0000000a80)="$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") 18.573409893s ago: executing program 0 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x101d0) 17.093001113s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x158, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x3, {0x4}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x38, 0x1d}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, 0x0, 0xffffff00, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x1, 0x2, 0x5, 0x6, 0x2], 0x2}, {0x3, [0x0, 0x0, 0x2, 0x5, 0x6, 0x1], 0x1, 0xa6adcdac30c0f96d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 15.462043157s ago: executing program 0 (id=338): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14.089402538s ago: executing program 0 (id=342): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r1, &(0x7f0000000000)="11", 0x1, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @local}, 0x14) 13.84452553s ago: executing program 0 (id=346): mq_open(0x0, 0x6e93ebbbcc0884f2, 0x1ec, &(0x7f0000000300)={0xfffffffffffffffe, 0x1, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 12.674849053s ago: executing program 1 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 12.600219899s ago: executing program 4 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xb}, {0x1, 0xfff3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 11.45365552s ago: executing program 3 (id=350): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x20) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda90) accept4(r4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) shutdown(r0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11.200216913s ago: executing program 4 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 10.403551273s ago: executing program 1 (id=353): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.999486269s ago: executing program 3 (id=354): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1226, &(0x7f0000000140)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 9.943941893s ago: executing program 4 (id=355): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000001600)={0x1, @capture={0x1000, 0x0, {0x6, 0x20000001}, 0x2, 0xfffffff4}}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r4) sendto$inet6(r4, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r3, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r3, 0x2}, 0x8) 8.868748108s ago: executing program 4 (id=357): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 7.583574131s ago: executing program 4 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x6, 0x80002, 0xc) setuid(0xee01) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 7.538386686s ago: executing program 2 (id=359): io_setup(0x490, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.515585368s ago: executing program 3 (id=360): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x39, 0x1a, r2, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.00801314s ago: executing program 4 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 5.702013377s ago: executing program 1 (id=362): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4840) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffb000/0x4000)=nil) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.700798687s ago: executing program 3 (id=363): socket$inet6(0xa, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 5.565206449s ago: executing program 2 (id=364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r3) 4.923770626s ago: executing program 1 (id=365): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc3c8, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0xc0800, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40080c1, 0x1}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 4.721600364s ago: executing program 2 (id=366): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.481882905s ago: executing program 1 (id=367): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000002900)='./file1\x00', 0x10000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000000c00)="$eJzs3c9vHGcdB+DPrNeON1TBbZM2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYXABQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhKodFMztr79prr53GaweeJxrP+877Y77zzjsz3nVWG+D/1tVzaT5IkavnXr9f5tfX5tvra/PH6uJ2kjLdSJrdVYrbSfEwWSjLi74lfettPlq+8uanj9Y/6+aa9VLVn9it3RBD6q7WS2br/maHtpzc6y5W6/DyXJJr9XrQ1F77GqhYDtrZeg2HrrPN6n6a7+e6BY6Y3tOp6D43t5lJjieZ3vw9oNIYX4QHY193OQAAAHhGfXLnsCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ0/9/f9FvTTqdWZT9L7/f6q3rU4fQQt7rvngQOMAAAAAAAAAgPH42uM8zv2c6OU7RfU3/zNV5mQ+7yRfynu5l6Xczfncz2JWspK7uZhkpq+jqfuLKyt3L260LA1veWloy0vjOmIAAAAAAAAA+J/0i7Q2//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABHQZFMdFfVcrJeZyaNZjbLspr8I8nUYce7D8WwjQ/GHwcAAAB8IdNP0ObLj/M493Oil+8U1Wv+l6rXy9N5L7ezkuWspJ2lXK9fQ5ev+hvra/Pt9bX5W+VS5gf7/d6/9hXGVN3DRJUbtufTVY1WbmS52nI+16pgrqfR3ffZ5HQvnr64+nxYxlR8t7bHyJr1sJY7+91O7yI8FYNvRTR2qdnaDC7ZGJG5OrZG/lMXrxXVGzXJ1pEYeXaaA7mZqtfJjT1dTGPjnZ+TBzDmx+t1eTy/PtAx36+NkWikGolL1Xmqxjgv7T4Sydf/8se3brZvv3Pzxr1zR+eQRpjYYfvWOTHfuw6TvPxMj0Rzn/XnqpE4tZG/mh/mxzmX2byRu1nOT7KYlSylU5cv1vO5/Dmz+0gtDOTeGBXJVH1euudsLzHN5gdVajFnqrYnspwid3I9S3mt+ncpF/OtXM7lXOk7w6d2jLs6tuqqb2y96ntn+q9Dgz/7jTpR3t1+s3mXW9jtiHeanU9L995fjuvzfePanfWPNmo933cdzPWN0gu90Zkc2vmT3BubX6kT5T5+OeI5MV4z9UiUF1DvKdGL7sXuSDSrZ9H2ef77Ttku7dudzs3Fd3fof3VL/tV6XU6rta+Oqt0z/FQ8XeV8eSHT9Z1kcHaUZS9u3GX6yjqbc7lbNvjELdudqsqKonel/ih3qgmw/Uqdqn+H297Tpars5aFl81XZ6b6ygd+3ciftXB/D+AHwJP7+1kZyJsenWv9sfdL6uPWr1s3W69PfP/btY69MZfJvk99pzk282nil+HM+zs82X/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABP7t77H7yz2G4v3R2eaOxcNJBoZeuWUT1vSRT1F/rsr9XRTUwnGdhSfc/R2MNobQ1jW6Lz82Ts49P7EsHhdX5bJprbZtSwxMLAlj9t7/DDfUZY7O26OMBEI+Pd6USGT4BDvCkBY3Fh5da7F+69/8E3l28tvr309tLtycuXr8xdufza/IUby+2lue7Pw44SOAibD/3DjgQAAAAAAAAAAADYq2EfDDjz3KgPjezpMx7+ZyEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVFw9l+aDFLk4d36uzK+vzbfLpZferNlM0mgkxU+T4mGykO6Smb7uivzhYTpD9vPR8pU3P320/tlmX81u/aRRr3e2e2mS1XrJbJKJer2jqVHdDfZ3bVR/IxX/7h1DOWCfdzqdhS/UHzwl/w0AAP//ih7y/g==") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x155adae9f4f0a7c9) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c46500b0506070000000000000002003e0007000000fb0100000000000000000000000200003302000000000000c20b00009b00380003000a000001fcff0400000004000000080000000000000001040000000000000000000000000000ff0f0000000000000900000000000000"], 0xe8) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8c, &(0x7f00000004c0)=@string={0x8c, 0x3, "61271325746518249936cd2fc1312150b8859f8e33c93a928d093b7062fcd99d45ff248cbd4779bac98c423e7d74612bdc1de3ce091df0c921302da2fcb19a8c4dcf5ffd77f4e5a01c692ed5ec92af65ff521cd3d675d91ae07fabb32bf3321c8c83380e567748c8af620901c7ae56110b7298de552a0f8599a7fe99de9867a5c4f351894a6b50b557d2"}}]}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.459537867s ago: executing program 3 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x25, 0x7, 0x205}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 3.259719222s ago: executing program 2 (id=369): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x8, 0x1) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) close(0x3) 2.869568747s ago: executing program 2 (id=370): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 1.272691677s ago: executing program 1 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) 1.272573667s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 0s ago: executing program 2 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. syzkaller login: [ 66.220149][ T4173] cgroup: Unknown subsys name 'net' [ 66.357622][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.884258][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 69.076794][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 69.214697][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.222688][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.231010][ T4186] device bridge_slave_0 entered promiscuous mode [ 69.242979][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.250141][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.258552][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.315429][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.342300][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.407510][ T4186] team0: Port device team_slave_0 added [ 69.439994][ T4186] team0: Port device team_slave_1 added [ 69.514035][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.522557][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.549043][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.561277][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 69.581241][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.588550][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.614874][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.655962][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.743133][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 69.757477][ T4186] device hsr_slave_0 entered promiscuous mode [ 69.764407][ T4186] device hsr_slave_1 entered promiscuous mode [ 69.779024][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 69.814976][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.822452][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.830935][ T4191] device bridge_slave_0 entered promiscuous mode [ 69.863008][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.870214][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.878904][ T4191] device bridge_slave_1 entered promiscuous mode [ 69.899346][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.906945][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.915232][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.926989][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.934520][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.942800][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.985522][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.011574][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.032930][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.054766][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.114490][ T4191] team0: Port device team_slave_0 added [ 70.121338][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.128470][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.138051][ T4197] device bridge_slave_0 entered promiscuous mode [ 70.148151][ T4194] team0: Port device team_slave_0 added [ 70.167022][ T4191] team0: Port device team_slave_1 added [ 70.173384][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.180771][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.188849][ T4197] device bridge_slave_1 entered promiscuous mode [ 70.198749][ T4194] team0: Port device team_slave_1 added [ 70.211295][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.218389][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.226721][ T4192] device bridge_slave_0 entered promiscuous mode [ 70.269555][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.276837][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.285864][ T4192] device bridge_slave_1 entered promiscuous mode [ 70.294016][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.301193][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.327210][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.354905][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.376398][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.383510][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.411436][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.428230][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.435385][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.461785][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.475439][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.512419][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.519618][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.546198][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.563660][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.583182][ T4197] team0: Port device team_slave_0 added [ 70.605889][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.630983][ T4197] team0: Port device team_slave_1 added [ 70.641608][ T4191] device hsr_slave_0 entered promiscuous mode [ 70.648752][ T4191] device hsr_slave_1 entered promiscuous mode [ 70.656583][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.664851][ T4191] Cannot create hsr debugfs directory [ 70.712781][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.719926][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.747122][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.763460][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.770984][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.778271][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.786275][ T4194] Cannot create hsr debugfs directory [ 70.816522][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.823927][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.850379][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.874987][ T4192] team0: Port device team_slave_0 added [ 70.902209][ T4192] team0: Port device team_slave_1 added [ 70.921509][ T4175] Bluetooth: hci0: command 0x0409 tx timeout [ 70.971542][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.978547][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.004851][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.030105][ T4197] device hsr_slave_0 entered promiscuous mode [ 71.037820][ T4197] device hsr_slave_1 entered promiscuous mode [ 71.044793][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.052546][ T4197] Cannot create hsr debugfs directory [ 71.067758][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.074857][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.101083][ T4175] Bluetooth: hci2: command 0x0409 tx timeout [ 71.101618][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.109134][ T4175] Bluetooth: hci3: command 0x0409 tx timeout [ 71.120246][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 71.140682][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 71.231432][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.243265][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.253921][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.267842][ T4192] device hsr_slave_0 entered promiscuous mode [ 71.274903][ T4192] device hsr_slave_1 entered promiscuous mode [ 71.281737][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.289773][ T4192] Cannot create hsr debugfs directory [ 71.320769][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.414243][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.420959][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.505335][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.515291][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.537699][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.550117][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.592553][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.640348][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.652765][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.661772][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.682523][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.710560][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.721996][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.732779][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.745433][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.759736][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.773734][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.786791][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.796326][ T3101] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.803646][ T3101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.830341][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.841788][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.851861][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.883309][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.893650][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.903351][ T1209] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.910433][ T1209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.919892][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.928892][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.937982][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.948822][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.957524][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.966464][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.984951][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.999479][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.013024][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.023507][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.032512][ T1209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.046439][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.055921][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.069418][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.091827][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.103368][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.124781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.134252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.143209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.151482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.187082][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.236900][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.247298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.258107][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.265505][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.277197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.325354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.336082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.349199][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.356402][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.417611][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.426247][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.445237][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.477102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.489006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.498891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.511498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.519636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.528218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.537757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.546738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.555179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.569143][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.587421][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.598752][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.613513][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.627394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.636500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.646382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.656232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.666175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.678305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.687903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.696926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.718377][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.733204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.748435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.759112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.766440][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.791485][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.813842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.829660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.838984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.849113][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.856372][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.868306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.878229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.887384][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.894542][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.902495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.911739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.922043][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.929589][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.939207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.993114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.002160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.011196][ T4233] Bluetooth: hci0: command 0x041b tx timeout [ 73.021499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.037333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.047312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.057023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.067348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.077638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.089671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.099574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.109484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.119407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.129437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.138998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.158428][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.165535][ T4175] Bluetooth: hci3: command 0x041b tx timeout [ 73.171872][ T4233] Bluetooth: hci1: command 0x041b tx timeout [ 73.171925][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 73.200117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.209836][ T4175] Bluetooth: hci2: command 0x041b tx timeout [ 73.212726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.228206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.236559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.245814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.254947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.265492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.275328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.284973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.294088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.306349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.315449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.327112][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.357222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.366150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.374761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.384016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.391943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.401298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.410031][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.417219][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.426796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.436389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.445008][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.452220][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.460264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.470005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.490033][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.509311][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.519633][ T4186] device veth0_vlan entered promiscuous mode [ 73.536525][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.555189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.567729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.579562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.595598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.605692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.615115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.624126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.633238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.660148][ T4186] device veth1_vlan entered promiscuous mode [ 73.688139][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.713184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.722673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.740870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.765306][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.791726][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.822477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.840274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.880055][ T4191] device veth0_vlan entered promiscuous mode [ 73.916662][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.925120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.940896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.950367][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.997079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.006418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.018983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.027092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.035686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.067154][ T4191] device veth1_vlan entered promiscuous mode [ 74.075321][ T4186] device veth0_macvtap entered promiscuous mode [ 74.088870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.099854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.127710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.152532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.169928][ T4186] device veth1_macvtap entered promiscuous mode [ 74.189064][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.224775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.236344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.246040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.255000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.263473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.272874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.292953][ T4191] device veth0_macvtap entered promiscuous mode [ 74.304069][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.323541][ T4191] device veth1_macvtap entered promiscuous mode [ 74.362796][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.389567][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.402023][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.414662][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.432286][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.441832][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.451285][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.460303][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.472542][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.482008][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.491730][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.500636][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.509335][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.522413][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.534746][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.545530][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.557961][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.575869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.585419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.595555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.607325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.634506][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.644437][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.653586][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.664532][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.685587][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.695364][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.704306][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.713958][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.726027][ T4192] device veth0_vlan entered promiscuous mode [ 74.733339][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.742583][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.777726][ T4197] device veth0_vlan entered promiscuous mode [ 74.785939][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.797381][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.806506][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.815999][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.826404][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.835317][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.845711][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.854061][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.878527][ T4192] device veth1_vlan entered promiscuous mode [ 74.930188][ T4197] device veth1_vlan entered promiscuous mode [ 74.955087][ T4194] device veth0_vlan entered promiscuous mode [ 74.969525][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.982093][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.990320][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.002294][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.012548][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.022993][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.031767][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.069675][ T4194] device veth1_vlan entered promiscuous mode [ 75.091933][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 75.106383][ T4192] device veth0_macvtap entered promiscuous mode [ 75.124290][ T4192] device veth1_macvtap entered promiscuous mode [ 75.158776][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.168963][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.178741][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.187382][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.197477][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.206439][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.215860][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.225134][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.234735][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.242940][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 75.249198][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 75.256276][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 75.262717][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 75.265357][ T4197] device veth0_macvtap entered promiscuous mode [ 75.281797][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.285805][ T4197] device veth1_macvtap entered promiscuous mode [ 75.290018][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.341977][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.357165][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.365416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.375732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.383468][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.399220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.418730][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.433564][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.443550][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.454349][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.466273][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.488721][ T4194] device veth0_macvtap entered promiscuous mode [ 75.501109][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509129][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.517053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.533347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.548214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.559039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.578564][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.590039][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.601671][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.612725][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.624918][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.656226][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.667644][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.679234][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.689794][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.699704][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.711352][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.724169][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.735394][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.752192][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.784307][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.795791][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.808598][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.820016][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.832520][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.845933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.865302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.877963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.630196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.091412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.111108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.171953][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 77.181203][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.190081][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.202386][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.211218][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.227337][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.238530][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.249406][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.258162][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.274806][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.285360][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.305528][ T4194] device veth1_macvtap entered promiscuous mode [ 77.320985][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 77.329713][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.376634][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 77.488498][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 77.529740][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 77.942457][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.067573][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 78.095386][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.132217][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.177203][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.214261][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.253546][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.304980][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.329497][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.341308][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.484508][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.500829][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.582412][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.595539][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.629015][ T3101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.966200][ T3101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.007163][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.030835][ T3101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.051996][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.144709][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8'. [ 79.350850][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.366222][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.376271][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.386998][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.396907][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.409447][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.419572][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.434639][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.446750][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.459785][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.469649][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.481775][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.490913][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.525732][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.544953][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.558762][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.568007][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.593821][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.604417][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.614938][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.653006][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.688767][ T4291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.696418][ T4291] IPv6: NLM_F_CREATE should be set when creating new route [ 79.772141][ T4291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.803640][ T4291] Zero length message leads to an empty skb [ 80.700680][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.722790][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.958007][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.559983][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.575840][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.861917][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.961051][ T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 82.002747][ T4313] process 'syz.1.16' launched '/dev/fd/5' with NULL argv: empty string added [ 82.498572][ T4324] netlink: 'syz.4.5': attribute type 21 has an invalid length. [ 82.506574][ T4324] IPv6: NLM_F_CREATE should be specified when creating new route [ 82.515864][ T4324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.791269][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.320570][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 84.328519][ T21] usb 4-1: can't read configurations, error -71 [ 84.632881][ T4340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 85.340139][ T4337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.754641][ T4354] netlink: 276 bytes leftover after parsing attributes in process `syz.3.26'. [ 86.654550][ T4361] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.764910][ T1325] cfg80211: failed to load regulatory.db [ 87.170472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 87.179479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 87.190474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.200045][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.211827][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.222820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.234826][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.248828][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 87.259047][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 88.735952][ T4375] sched: RT throttling activated [ 90.046526][ T4382] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 91.281698][ T4390] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.317051][ T4392] loop3: detected capacity change from 0 to 164 [ 91.601290][ T4392] rock: directory entry would overflow storage [ 91.760672][ T4392] rock: sig=0x5053, size=7, remaining=4 [ 91.767901][ T4392] isofs_fill_super: root inode is not a directory. Corrupted media? [ 92.284161][ T4400] loop4: detected capacity change from 0 to 1024 [ 92.499209][ T4400] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 94.384400][ T4436] loop3: detected capacity change from 0 to 128 [ 94.432657][ T4436] ======================================================= [ 94.432657][ T4436] WARNING: The mand mount option has been deprecated and [ 94.432657][ T4436] and is ignored by this kernel. Remove the mand [ 94.432657][ T4436] option from the mount to silence this warning. [ 94.432657][ T4436] ======================================================= [ 94.547402][ T4436] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.577076][ T4442] IPVS: Scheduler module ip_vs_sip not found [ 94.600553][ T4436] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 94.870638][ T1325] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.881423][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 94.904282][ T4458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 95.078409][ T4466] loop3: detected capacity change from 0 to 128 [ 95.120631][ T1325] usb 1-1: Using ep0 maxpacket: 32 [ 95.184988][ T4466] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 95.246007][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.261964][ T4466] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.267573][ T1325] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.283753][ T1325] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 95.293376][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.306507][ T1325] usb 1-1: config 0 descriptor?? [ 95.311695][ T4466] ext2 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.364025][ T1325] hub 1-1:0.0: USB hub found [ 95.576984][ T4230] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 96.882091][ T4446] netlink: 5 bytes leftover after parsing attributes in process `syz.0.53'. [ 96.980736][ T1325] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 97.192188][ T4446] udc-core: couldn't find an available UDC or it's busy [ 97.211795][ T4446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 98.319028][ T4502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'. [ 98.580982][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.730407][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.930770][ T1325] usbhid 1-1:0.0: can't add hid device: -71 [ 98.947845][ T1325] usbhid: probe of 1-1:0.0 failed with error -71 [ 98.960268][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.973934][ T4230] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.984884][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.994832][ T4230] usb 3-1: config 0 descriptor?? [ 100.524045][ T1325] usb 1-1: USB disconnect, device number 2 [ 100.595026][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 100.660814][ T4230] usbhid 3-1:0.0: can't add hid device: -71 [ 100.667178][ T4230] usbhid: probe of 3-1:0.0 failed with error -71 [ 100.690084][ T4230] usb 3-1: USB disconnect, device number 2 [ 101.033623][ T4515] device hsr_slave_0 left promiscuous mode [ 103.268512][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 103.291778][ T4541] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.301507][ T4541] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.310351][ T4541] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.319491][ T4541] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.354085][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.82'. [ 103.429892][ T4230] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.021211][ T4230] usb 3-1: device descriptor read/all, error -71 [ 104.260017][ T4556] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86'. [ 104.378778][ T4556] syz.4.86 (4556) used greatest stack depth: 20688 bytes left [ 104.458496][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 105.217179][ T4567] device syz_tun entered promiscuous mode [ 105.227186][ T4567] device macvtap1 entered promiscuous mode [ 105.256016][ T4567] device syz_tun left promiscuous mode [ 105.565848][ T4574] netlink: 16 bytes leftover after parsing attributes in process `syz.0.88'. [ 106.572173][ T4580] loop0: detected capacity change from 0 to 1024 [ 106.699740][ T4580] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 106.699988][ T4580] EXT4-fs warning (device loop0): ext4_enable_quotas:6486: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 106.706146][ T4580] EXT4-fs (loop0): mount failed [ 107.786242][ T4592] loop4: detected capacity change from 0 to 512 [ 107.914094][ T4592] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 107.975820][ T4592] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.110105][ T4601] EXT4-fs error (device loop4): __ext4_new_inode:1286: comm syz.4.94: failed to insert inode 16: doubly allocated? [ 108.858454][ T4585] ODEBUG: Out of memory. ODEBUG disabled [ 109.864261][ T4614] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 112.256517][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 112.433727][ T4641] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.742744][ T4653] Illegal XDP return value 4291195024, expect packet loss! [ 114.699424][ T4662] loop4: detected capacity change from 0 to 4096 [ 114.903552][ T4662] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 114.999426][ T4662] fs-verity: sha256 using implementation "sha256-avx2" [ 115.008037][ T4673] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 115.064028][ T4673] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.120'. [ 115.139579][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 115.164411][ T4676] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.173409][ T4676] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.182226][ T4676] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.191065][ T4676] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.239896][ T4676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.121'. [ 115.577780][ T4685] loop2: detected capacity change from 0 to 256 [ 115.595176][ T4685] exfat: Deprecated parameter 'utf8' [ 115.609162][ T4685] exfat: Deprecated parameter 'namecase' [ 115.617811][ T4685] exfat: Deprecated parameter 'utf8' [ 116.454313][ T4685] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x14f33695, utbl_chksum : 0xe619d30d) [ 116.649964][ T4685] exFAT-fs (loop2): error, tried to truncate zeroed cluster. [ 116.681833][ T4692] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 116.718573][ T4692] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 116.799119][ T4685] attempt to access beyond end of device [ 116.799119][ T4685] loop2: rw=2049, want=34359738489, limit=256 [ 118.259217][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. syzkaller syzkaller login: [ 118.662110][ T4746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.752178][ T4750] device bond_slave_0 entered promiscuous mode [ 118.758713][ T4750] device bond_slave_1 entered promiscuous mode [ 118.771528][ T4750] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.781413][ T4750] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 118.801704][ T1657] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 118.857003][ T4753] device ip6gre1 entered promiscuous mode [ 118.986028][ T4754] syz.3.148 (4754) used greatest stack depth: 20080 bytes left [ 119.258521][ T4759] loop2: detected capacity change from 0 to 512 [ 120.334997][ T4759] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 120.544681][ T4759] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.307361][ T4794] loop1: detected capacity change from 0 to 128 [ 122.341081][ T4791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 123.132199][ T4798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 123.157089][ T4794] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 123.170863][ T4798] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 123.201517][ T4798] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 123.936511][ T4794] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 123.990711][ T4794] FAT-fs (loop1): Filesystem has been set read-only [ 124.342438][ T4825] netlink: 'syz.1.167': attribute type 39 has an invalid length. [ 126.333872][ T4842] sctp: [Deprecated]: syz.0.173 (pid 4842) Use of int in max_burst socket option. [ 126.333872][ T4842] Use struct sctp_assoc_value instead [ 127.469991][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 127.529857][ T4857] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 128.498737][ T4867] loop1: detected capacity change from 0 to 512 [ 128.577336][ T4868] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 128.800833][ T4867] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.103660][ T4867] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.610537][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.652576][ T4867] EXT4-fs (loop1): 1 truncate cleaned up [ 129.658436][ T4867] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 129.792830][ T26] audit: type=1800 audit(3919107976.401:2): pid=4867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 129.814099][ T4880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.309060][ T4867] EXT4-fs (loop1): shut down requested (1) [ 131.413442][ T26] audit: type=1800 audit(3919107978.021:3): pid=4883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.187" name="bus" dev="ramfs" ino=33774 res=0 errno=0 [ 131.761375][ T4903] bridge0: port 3(syz_tun) entered blocking state [ 131.768560][ T4903] bridge0: port 3(syz_tun) entered disabled state [ 131.786321][ T4903] device syz_tun entered promiscuous mode [ 132.522424][ T4903] bridge0: port 3(syz_tun) entered blocking state [ 132.529751][ T4903] bridge0: port 3(syz_tun) entered forwarding state [ 132.542123][ T4907] device bridge0 entered promiscuous mode [ 133.808750][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.815134][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.825012][ T4911] capability: warning: `syz.2.195' uses deprecated v2 capabilities in a way that may be insecure [ 135.161131][ T4925] loop4: detected capacity change from 0 to 128 [ 135.273678][ T4927] device bridge1 entered promiscuous mode [ 135.281444][ T4925] vfat filesystem being mounted at /39/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 135.285056][ T4927] bond2: (slave bridge1): making interface the new active one [ 135.302157][ T4927] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 135.412199][ T4935] attempt to access beyond end of device [ 135.412199][ T4935] loop4: rw=2049, want=769, limit=128 [ 135.506132][ T4925] attempt to access beyond end of device [ 135.506132][ T4925] loop4: rw=524288, want=369, limit=128 [ 139.794393][ T4984] loop3: detected capacity change from 0 to 8192 [ 139.849597][ T4180] loop3: p1 p2 [ 139.853395][ T4180] loop3: partition table partially beyond EOD, truncated [ 139.900554][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.940654][ T4180] loop3: p1 start 16777216 is beyond EOD, truncated [ 139.947449][ T4180] loop3: p2 size 515840 extends beyond EOD, truncated [ 139.983281][ T4984] loop3: p1 p2 [ 139.986821][ T4984] loop3: partition table partially beyond EOD, truncated [ 140.010811][ T4984] loop3: p1 start 16777216 is beyond EOD, truncated [ 140.026184][ T4984] loop3: p2 size 515840 extends beyond EOD, truncated [ 140.170488][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 140.290796][ T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.370834][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.389651][ T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.449928][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 141.504890][ T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.519218][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.533853][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.569198][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 141.636897][ T4997] loop4: detected capacity change from 0 to 4096 [ 141.831268][ T4997] NILFS (loop4): unrecognized mount option "01777777777777777777777" [ 141.850688][ T23] usb 2-1: GET_CAPABILITIES returned 0 [ 141.856316][ T23] usbtmc 2-1:16.0: can't read capabilities [ 141.934857][ T4997] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 142.061833][ T23] usb 2-1: USB disconnect, device number 2 [ 142.292333][ T5005] netlink: 'syz.0.225': attribute type 21 has an invalid length. [ 142.341701][ T5005] netlink: 132 bytes leftover after parsing attributes in process `syz.0.225'. [ 142.360836][ T5005] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 142.378737][ T5005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 142.403779][ T5005] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 142.492681][ T5011] device syzkaller0 entered promiscuous mode [ 142.628992][ T5016] tipc: Started in network mode [ 142.636845][ T5016] tipc: Node identity 4, cluster identity 4711 [ 142.656417][ T5016] tipc: Node number set to 4 [ 145.884096][ T5045] netlink: 20 bytes leftover after parsing attributes in process `syz.1.237'. [ 145.970128][ T5045] device ip6gre1 entered promiscuous mode [ 146.219287][ T5047] netlink: 'syz.1.237': attribute type 6 has an invalid length. [ 146.270530][ T5047] netlink: 72 bytes leftover after parsing attributes in process `syz.1.237'. [ 146.497708][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 146.973210][ T5063] loop4: detected capacity change from 0 to 4096 [ 147.281450][ T5061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.243'. [ 148.865731][ T5093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.251'. [ 149.088544][ T5097] loop4: detected capacity change from 0 to 512 [ 149.102128][ T5099] loop0: detected capacity change from 0 to 512 [ 149.179462][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 149.228711][ T5099] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 149.251536][ T5097] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.255: Invalid inode bitmap blk 4 in block_group 0 [ 149.273246][ T5102] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 149.300814][ T5099] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.313681][ T5108] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 149.321150][ T5108] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 149.368415][ T5097] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 151.888369][ T5107] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 153.706283][ T5146] overlayfs: overlapping lowerdir path [ 155.794511][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.802480][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.890740][ T5183] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 157.949312][ T5185] team0: Port device team_slave_0 removed [ 158.016732][ T5195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.734581][ T5195] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.823454][ T5206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.285'. [ 159.886336][ T5195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.917961][ T5195] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.970158][ T5206] bond1: (slave vcan1): refused to change device type [ 160.137344][ T5195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.162511][ T5219] xt_hashlimit: size too large, truncated to 1048576 [ 160.169660][ T5195] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.184539][ T5219] xt_hashlimit: invalid rate [ 160.333307][ T5195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.440692][ T5195] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.255061][ T5195] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.292530][ T5195] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.393458][ T5195] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.428121][ T5195] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.450380][ T5195] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.460786][ T5195] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.487426][ T5195] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.512454][ T5195] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.870550][ T4234] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.291310][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 163.356794][ T4234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.590526][ T4234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.620176][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.694987][ T4234] usb 3-1: config 0 descriptor?? [ 163.747690][ T4234] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 163.794054][ T5248] xt_hashlimit: max too large, truncated to 1048576 [ 163.818435][ T5248] xt_hashlimit: overflow, try lower: 0/0 [ 163.836025][ T5250] device bond_slave_0 entered promiscuous mode [ 163.842551][ T5250] device bond_slave_1 entered promiscuous mode [ 163.849276][ T5250] device vlan2 entered promiscuous mode [ 163.855301][ T5250] device bond0 entered promiscuous mode [ 164.418713][ T5230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.596753][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.628386][ T5267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.650188][ T5267] device bridge_slave_0 left promiscuous mode [ 165.667291][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.745775][ T5267] device bridge_slave_1 left promiscuous mode [ 165.760297][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.817426][ T5267] bond0: (slave bond_slave_0): Releasing backup interface [ 165.865591][ T5267] bond0: (slave bond_slave_1): Releasing backup interface [ 165.997982][ T5267] team0: Port device team_slave_1 removed [ 166.014049][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.069862][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.092350][ T4175] usb 3-1: USB disconnect, device number 5 [ 166.101511][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.131108][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.197914][ T5267] bond1: (slave bridge1): Releasing backup interface [ 168.566499][ T5298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 168.760292][ T5306] netlink: 'syz.2.313': attribute type 3 has an invalid length. [ 170.239511][ T5319] loop2: detected capacity change from 0 to 7 [ 170.421116][ T5319] loop2: [ 170.428246][ T5319] loop2: partition table partially beyond EOD, truncated [ 172.953530][ T5346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.342810][ T5369] loop0: detected capacity change from 0 to 16 [ 175.460687][ T5369] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.820087][ T5421] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 182.241259][ T5440] device syzkaller0 entered promiscuous mode [ 182.269125][ T5440] tipc: Started in network mode [ 182.358649][ T5440] tipc: Node identity 768c4c313b4, cluster identity 4711 [ 183.332283][ T5440] tipc: Enabled bearer , priority 0 [ 183.381157][ T5439] tipc: Resetting bearer [ 183.449333][ T5439] tipc: Disabling bearer [ 186.121160][ T5457] loop3: detected capacity change from 0 to 8192 [ 186.151537][ T5457] vfat filesystem being mounted at /69/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 191.374696][ T4228] Bluetooth: hci0: command 0x0406 tx timeout [ 191.380918][ T4228] Bluetooth: hci2: command 0x0406 tx timeout [ 191.386987][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 191.410564][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 191.437027][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 194.610992][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.617544][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.930493][ C0] ------------[ cut here ]------------ [ 306.937394][ C0] WARNING: CPU: 0 PID: 5525 at kernel/rcu/tree_stall.h:937 rcu_check_gp_start_stall+0x2dc/0x460 [ 306.948676][ C0] Modules linked in: [ 306.952622][ C0] CPU: 0 PID: 5525 Comm: syz.2.373 Not tainted syzkaller #0 [ 306.959940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.970038][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 306.976505][ C0] Code: ff ff ff 48 c7 c7 20 ec 31 96 be 04 00 00 00 e8 8a df 58 00 48 89 df b8 01 00 00 00 87 05 dc 9b cc 14 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 2f 32 8c 74 47 48 c7 c0 c4 0f 8a 8d 48 c1 e8 03 [ 306.996246][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 307.002451][ C0] RAX: 0000000000000000 RBX: ffffffff8c322f00 RCX: ffffffff81655036 [ 307.010956][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c322f00 [ 307.018970][ C0] RBP: ffffc90000007e10 R08: 0000000000000003 R09: 0000000000000004 [ 307.027220][ C0] R10: dffffc0000000000 R11: fffffbfff2c63d84 R12: 0000000000002904 [ 307.035355][ C0] R13: ffff8880b903b258 R14: 0000000000000a02 R15: dffffc0000000000 [ 307.043431][ C0] FS: 00007f1abc30c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 307.052398][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 307.059010][ C0] CR2: 0000200000000058 CR3: 000000004d6e9000 CR4: 00000000003506f0 [ 307.067014][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 307.075017][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 307.083109][ C0] Call Trace: [ 307.086421][ C0] [ 307.089297][ C0] rcu_core+0x62b/0x1670 [ 307.093579][ C0] ? lock_chain_count+0x20/0x20 [ 307.098466][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 307.103530][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 307.108895][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.114130][ C0] ? local_bh_disable+0x20/0x20 [ 307.119061][ C0] ? __run_timers+0x79c/0x800 [ 307.123777][ C0] ? __run_timers+0x75f/0x800 [ 307.128504][ C0] ? detach_timer+0x2b0/0x2b0 [ 307.133229][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 307.139250][ C0] ? detach_timer+0x2b0/0x2b0 [ 307.144066][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 307.148955][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 307.154279][ C0] handle_softirqs+0x339/0x830 [ 307.159081][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 307.163972][ C0] ? do_softirq+0x210/0x210 [ 307.168516][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 307.173746][ C0] __irq_exit_rcu+0x13b/0x230 [ 307.178467][ C0] ? irq_exit_rcu+0x20/0x20 [ 307.183008][ C0] irq_exit_rcu+0x5/0x20 [ 307.187295][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 307.192966][ C0] [ 307.195919][ C0] [ 307.198881][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.204893][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 307.210821][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee ea 97 f7 48 89 df e8 26 c3 98 f7 e8 91 b5 b9 f7 fb bf 01 00 00 00 a6 c9 8c f7 65 8b 05 47 d7 3c 76 85 c0 74 02 5b c3 e8 94 e4 3a [ 307.230458][ C0] RSP: 0018:ffffc9000335fbc0 EFLAGS: 00000282 [ 307.236561][ C0] RAX: b890a6cb6d220c00 RBX: ffff888073dd3780 RCX: b890a6cb6d220c00 [ 307.244563][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 307.252669][ C0] RBP: 0000000000000000 R08: ffff888073dd3783 R09: 1ffff1100e7ba6f0 [ 307.260761][ C0] R10: dffffc0000000000 R11: ffffed100e7ba6f1 R12: ffff888073dd3780 [ 307.268770][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 307.276799][ C0] get_signal+0x11d6/0x12c0 [ 307.281361][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 307.287027][ C0] ? _copy_from_user+0x111/0x170 [ 307.292008][ C0] ? load_gs_index+0x130/0x130 [ 307.296813][ C0] ? get_sigframe_size+0x10/0x10 [ 307.301837][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 307.307325][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 307.312642][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 307.318293][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 307.323791][ C0] do_syscall_64+0x58/0xa0 [ 307.328255][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.332963][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.337673][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.343601][ C0] RIP: 0033:0x7f1abe0b2627 [ 307.348058][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 307.367692][ C0] RSP: 002b:00007f1abc30c028 EFLAGS: 00000246 [ 307.373810][ C0] RAX: 0000000000000048 RBX: 00007f1abe32bfa0 RCX: 00007f1abe0b2629 [ 307.381814][ C0] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000003 [ 307.389809][ C0] RBP: 00007f1abe148b39 R08: 0000000000000000 R09: 0000000000000000 [ 307.397814][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.405816][ C0] R13: 00007f1abe32c038 R14: 00007f1abe32bfa0 R15: 00007ffcfbc75778 [ 307.413834][ C0] [ 307.416905][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 307.424291][ C0] CPU: 0 PID: 5525 Comm: syz.2.373 Not tainted syzkaller #0 [ 307.431597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 307.441674][ C0] Call Trace: [ 307.444977][ C0] [ 307.447871][ C0] dump_stack_lvl+0x188/0x250 [ 307.452697][ C0] ? show_regs_print_info+0x20/0x20 [ 307.457929][ C0] ? load_image+0x400/0x400 [ 307.462481][ C0] panic+0x2e5/0x810 [ 307.466414][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 307.470970][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 307.476726][ C0] __warn+0x248/0x2b0 [ 307.480741][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 307.486502][ C0] report_bug+0x1b7/0x2e0 [ 307.490901][ C0] handle_bug+0x3a/0x70 [ 307.495084][ C0] exc_invalid_op+0x16/0x40 [ 307.499621][ C0] asm_exc_invalid_op+0x16/0x20 [ 307.504505][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 307.510866][ C0] Code: ff ff ff 48 c7 c7 20 ec 31 96 be 04 00 00 00 e8 8a df 58 00 48 89 df b8 01 00 00 00 87 05 dc 9b cc 14 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 2f 32 8c 74 47 48 c7 c0 c4 0f 8a 8d 48 c1 e8 03 [ 307.530690][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 307.536789][ C0] RAX: 0000000000000000 RBX: ffffffff8c322f00 RCX: ffffffff81655036 [ 307.544787][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8c322f00 [ 307.552784][ C0] RBP: ffffc90000007e10 R08: 0000000000000003 R09: 0000000000000004 [ 307.560785][ C0] R10: dffffc0000000000 R11: fffffbfff2c63d84 R12: 0000000000002904 [ 307.568786][ C0] R13: ffff8880b903b258 R14: 0000000000000a02 R15: dffffc0000000000 [ 307.576794][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 307.582555][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 307.588340][ C0] rcu_core+0x62b/0x1670 [ 307.592841][ C0] ? lock_chain_count+0x20/0x20 [ 307.597730][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 307.602791][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 307.608192][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 307.613430][ C0] ? local_bh_disable+0x20/0x20 [ 307.618314][ C0] ? __run_timers+0x79c/0x800 [ 307.623027][ C0] ? __run_timers+0x75f/0x800 [ 307.627753][ C0] ? detach_timer+0x2b0/0x2b0 [ 307.632489][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 307.638519][ C0] ? detach_timer+0x2b0/0x2b0 [ 307.643241][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 307.648130][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 307.653493][ C0] handle_softirqs+0x339/0x830 [ 307.658308][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 307.663201][ C0] ? do_softirq+0x210/0x210 [ 307.667746][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 307.672983][ C0] __irq_exit_rcu+0x13b/0x230 [ 307.677700][ C0] ? irq_exit_rcu+0x20/0x20 [ 307.682257][ C0] irq_exit_rcu+0x5/0x20 [ 307.686535][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 307.692208][ C0] [ 307.695173][ C0] [ 307.698176][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 307.704204][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 307.710044][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ee ea 97 f7 48 89 df e8 26 c3 98 f7 e8 91 b5 b9 f7 fb bf 01 00 00 00 a6 c9 8c f7 65 8b 05 47 d7 3c 76 85 c0 74 02 5b c3 e8 94 e4 3a [ 307.729698][ C0] RSP: 0018:ffffc9000335fbc0 EFLAGS: 00000282 [ 307.735813][ C0] RAX: b890a6cb6d220c00 RBX: ffff888073dd3780 RCX: b890a6cb6d220c00 [ 307.743907][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001 [ 307.752033][ C0] RBP: 0000000000000000 R08: ffff888073dd3783 R09: 1ffff1100e7ba6f0 [ 307.760047][ C0] R10: dffffc0000000000 R11: ffffed100e7ba6f1 R12: ffff888073dd3780 [ 307.768095][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 000000001c000004 [ 307.776122][ C0] get_signal+0x11d6/0x12c0 [ 307.780691][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 307.786364][ C0] ? _copy_from_user+0x111/0x170 [ 307.791378][ C0] ? load_gs_index+0x130/0x130 [ 307.796267][ C0] ? get_sigframe_size+0x10/0x10 [ 307.801384][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 307.806881][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 307.812205][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 307.817786][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 307.823278][ C0] do_syscall_64+0x58/0xa0 [ 307.827730][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.832440][ C0] ? clear_bhb_loop+0x30/0x80 [ 307.837169][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 307.843100][ C0] RIP: 0033:0x7f1abe0b2627 [ 307.847552][ C0] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 307.867417][ C0] RSP: 002b:00007f1abc30c028 EFLAGS: 00000246 [ 307.873529][ C0] RAX: 0000000000000048 RBX: 00007f1abe32bfa0 RCX: 00007f1abe0b2629 [ 307.881538][ C0] RDX: 0000200000000280 RSI: 0000000000000026 RDI: 0000000000000003 [ 307.889538][ C0] RBP: 00007f1abe148b39 R08: 0000000000000000 R09: 0000000000000000 [ 307.897540][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.905542][ C0] R13: 00007f1abe32c038 R14: 00007f1abe32bfa0 R15: 00007ffcfbc75778 [ 307.913577][ C0] [ 307.916914][ C0] Kernel Offset: disabled [ 307.922081][ C0] Rebooting in 86400 seconds..