last executing test programs: 1m9.700169648s ago: executing program 2 (id=879): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 1m7.434743043s ago: executing program 2 (id=894): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000006f0e0000"]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000380)={0x0, 0xb0, 0xfffb, 0xd, 0x7ff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r9, 0x80184151, &(0x7f0000000340)={0x0, &(0x7f00000002c0)="686bd581f936b4aa36f6e14e114456e426724391351af7277389f131243c3bc64a0abcd247c5b9f5841f1274c09afc8e0ce48ae62a595efa", 0x38}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$inet6(0xa, 0x2, 0x0) setfsuid(0xee00) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) setresuid(r10, 0x0, r10) 1m5.449030463s ago: executing program 2 (id=899): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m5.300906386s ago: executing program 2 (id=901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f00000001c0)) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x19) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x3) socket$kcm(0xa, 0x922000000003, 0x11) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r5, 0x40045431, &(0x7f00000001c0)) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000000000)) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x9, 0x9, 0xfdfffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x6, 0x4, 0x8, 0x24000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x786d3dec2cf376ea) close(r0) 1m4.134755213s ago: executing program 2 (id=907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4804) 1m3.815712118s ago: executing program 2 (id=908): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) write$cgroup_type(r2, &(0x7f0000000140), 0x9) 1m3.127429089s ago: executing program 32 (id=908): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) write$cgroup_type(r2, &(0x7f0000000140), 0x9) 6.240915842s ago: executing program 0 (id=1262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) 5.271953127s ago: executing program 0 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x98, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.508697069s ago: executing program 0 (id=1271): syz_open_dev$admmidi(0x0, 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x4000000000002e6, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xe24) 4.189631074s ago: executing program 4 (id=1273): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f00000000c0)=r0, 0x18) 4.064686616s ago: executing program 4 (id=1276): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 3.933498058s ago: executing program 4 (id=1278): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r0) 3.84531098s ago: executing program 3 (id=1279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) 3.84403351s ago: executing program 5 (id=1280): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x2, 0x8, 0xdfe, 0xa4, 0x100, 0xebf, 0x2b1}}}}]}, 0x58}}, 0x4044880) 3.300928338s ago: executing program 4 (id=1281): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2.280882084s ago: executing program 5 (id=1284): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2.060368997s ago: executing program 3 (id=1285): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) close(r1) 2.004923928s ago: executing program 4 (id=1286): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.977469929s ago: executing program 3 (id=1287): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 1.848750511s ago: executing program 4 (id=1289): ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0xeec, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x35}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 1.833285071s ago: executing program 5 (id=1291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="150000001000000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) 1.794772182s ago: executing program 3 (id=1292): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x12002, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) io_uring_setup(0x2a2e, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 1.730180683s ago: executing program 1 (id=1293): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.729781492s ago: executing program 5 (id=1294): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x2, 0x8, 0xdfe, 0xa4, 0x100, 0xebf, 0x2b1}}}}]}, 0x58}}, 0x4044880) 1.500879236s ago: executing program 1 (id=1295): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 804.044337ms ago: executing program 3 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047440, &(0x7f0000001200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 642.18408ms ago: executing program 1 (id=1297): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 573.474931ms ago: executing program 5 (id=1298): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x4b001000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 456.968923ms ago: executing program 3 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010002000000fedb9f25020000000000000008000600fffffff7"], 0x24}}, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="910418026421b54fa0aaaa050004424203"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 446.650263ms ago: executing program 1 (id=1300): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2b, 'cpu'}]}, 0xb) 305.002255ms ago: executing program 1 (id=1301): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 301.434015ms ago: executing program 0 (id=1302): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xd, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) 146.400107ms ago: executing program 1 (id=1303): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @remote}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 72.962028ms ago: executing program 0 (id=1304): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000700)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x0, 0x0}, 0x10) 72.726319ms ago: executing program 5 (id=1305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) syz_clone(0x1400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 0 (id=1306): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 48.850364][ T4158] cgroup: Unknown subsys name 'net' [ 48.987186][ T4158] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.216680][ T4158] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.029611][ T4168] chnl_net:caif_netlink_parms(): no params data found [ 52.151580][ T4170] chnl_net:caif_netlink_parms(): no params data found [ 52.204820][ T4168] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.212093][ T4168] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.220024][ T4168] device bridge_slave_0 entered promiscuous mode [ 52.243042][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 52.255821][ T4168] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.262911][ T4168] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.270513][ T4168] device bridge_slave_1 entered promiscuous mode [ 52.332876][ T4168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.366920][ T4176] chnl_net:caif_netlink_parms(): no params data found [ 52.378332][ T4168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.387672][ T4170] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.394867][ T4170] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.403628][ T4170] device bridge_slave_0 entered promiscuous mode [ 52.434710][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.441855][ T4170] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.449841][ T4170] device bridge_slave_1 entered promiscuous mode [ 52.469391][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.477010][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.485288][ T4169] device bridge_slave_0 entered promiscuous mode [ 52.495215][ T4168] team0: Port device team_slave_0 added [ 52.507411][ T4178] chnl_net:caif_netlink_parms(): no params data found [ 52.529041][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.536198][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.544205][ T4169] device bridge_slave_1 entered promiscuous mode [ 52.552268][ T4168] team0: Port device team_slave_1 added [ 52.563633][ T4170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.605443][ T4170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.627394][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.642556][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.649509][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.675619][ T4168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.700923][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.720870][ T4168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.728045][ T4168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.754356][ T4168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.805697][ T4170] team0: Port device team_slave_0 added [ 52.811675][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.818969][ T4176] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.827205][ T4176] device bridge_slave_0 entered promiscuous mode [ 52.836732][ T4169] team0: Port device team_slave_0 added [ 52.844479][ T4169] team0: Port device team_slave_1 added [ 52.868865][ T4170] team0: Port device team_slave_1 added [ 52.874974][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.882357][ T4176] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.890017][ T4176] device bridge_slave_1 entered promiscuous mode [ 52.912685][ T4168] device hsr_slave_0 entered promiscuous mode [ 52.919653][ T4168] device hsr_slave_1 entered promiscuous mode [ 52.947753][ T4178] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.955030][ T4178] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.963285][ T4178] device bridge_slave_0 entered promiscuous mode [ 52.971477][ T4178] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.978958][ T4178] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.986774][ T4178] device bridge_slave_1 entered promiscuous mode [ 53.011531][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.018590][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.044934][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.070704][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.077813][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.103763][ T4170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.122562][ T4176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.132374][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.139332][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.171247][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.193198][ T4170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.200159][ T4170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.226213][ T4170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.238990][ T4176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.268789][ T4178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.301474][ T4178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.336594][ T4169] device hsr_slave_0 entered promiscuous mode [ 53.344396][ T4169] device hsr_slave_1 entered promiscuous mode [ 53.350993][ T4169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.358816][ T4169] Cannot create hsr debugfs directory [ 53.366683][ T4176] team0: Port device team_slave_0 added [ 53.381325][ T4178] team0: Port device team_slave_0 added [ 53.400452][ T4176] team0: Port device team_slave_1 added [ 53.418376][ T4170] device hsr_slave_0 entered promiscuous mode [ 53.425379][ T4170] device hsr_slave_1 entered promiscuous mode [ 53.432092][ T4170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.439694][ T4170] Cannot create hsr debugfs directory [ 53.449301][ T4178] team0: Port device team_slave_1 added [ 53.496766][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.504063][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.530273][ T4176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.555549][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.562908][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.589167][ T4178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.600583][ T4176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.607876][ T4176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.634054][ T4176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.664381][ T4178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.671336][ T4178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.697530][ T4178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.792876][ T1683] Bluetooth: hci4: command 0x0409 tx timeout [ 53.793540][ T4171] Bluetooth: hci0: command 0x0409 tx timeout [ 53.806107][ T4171] Bluetooth: hci1: command 0x0409 tx timeout [ 53.812598][ T4171] Bluetooth: hci2: command 0x0409 tx timeout [ 53.842806][ T4176] device hsr_slave_0 entered promiscuous mode [ 53.849372][ T4176] device hsr_slave_1 entered promiscuous mode [ 53.858972][ T4176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.866702][ T4176] Cannot create hsr debugfs directory [ 53.872175][ T4171] Bluetooth: hci3: command 0x0409 tx timeout [ 53.880485][ T4178] device hsr_slave_0 entered promiscuous mode [ 53.887274][ T4178] device hsr_slave_1 entered promiscuous mode [ 53.894559][ T4178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.902521][ T4178] Cannot create hsr debugfs directory [ 54.034840][ T4168] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.052955][ T4168] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.061798][ T4168] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.076783][ T4168] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.128233][ T4170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.140549][ T4170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.157658][ T4170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.167223][ T4170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.224019][ T4169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.234523][ T4169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.257534][ T4169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.267214][ T4169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.313095][ T4176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.326672][ T4176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.339706][ T4168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.355105][ T4176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.365993][ T4176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.428621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.438193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.450637][ T4168] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.462356][ T4178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.476265][ T4178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.487803][ T4170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.504059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.514598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.524025][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.531201][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.539947][ T4178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.563224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.571371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.579520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.587807][ T4178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.615172][ T4170] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.628505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.637481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.647365][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.654469][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.663803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.673116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.681380][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.688459][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.697278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.706365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.714926][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.722021][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.729707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.738923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.755031][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.785698][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.798546][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.807732][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.831102][ T4176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.845182][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.856786][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.866151][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.875493][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.885251][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.894314][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.903768][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.912725][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.920386][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.928197][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.937190][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.953311][ T4170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.964024][ T4170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.985114][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.995259][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.004877][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.013554][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.023749][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.031468][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.039261][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.048554][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.057181][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.064254][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.077582][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.085964][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.094026][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.102802][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.111696][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.120634][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.131384][ T4176] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.150894][ T4168] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.164952][ T4168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.176221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.185388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.194112][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.201154][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.209191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.218834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.227967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.236944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.245997][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.253090][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.266522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.277546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.290431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.299521][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.306657][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.341594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.352448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.375197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.390614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.412830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.421654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.433302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.441811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.450447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.459116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.481782][ T4169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.493335][ T4169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.501256][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.518907][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.529405][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.546491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.556181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.565490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.575047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.589244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.618004][ T4176] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.629280][ T4176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.643278][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.651825][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.667177][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.676471][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.685385][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.693165][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.700888][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.722876][ T4178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.730262][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.740759][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.758476][ T4168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.784387][ T4170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.795437][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.809450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.841565][ T4178] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.853911][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.867428][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.882408][ T4214] Bluetooth: hci2: command 0x041b tx timeout [ 55.888481][ T4214] Bluetooth: hci1: command 0x041b tx timeout [ 55.898834][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.900437][ T4214] Bluetooth: hci0: command 0x041b tx timeout [ 55.929475][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.942897][ T4214] Bluetooth: hci4: command 0x041b tx timeout [ 55.950762][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.956696][ T4215] Bluetooth: hci3: command 0x041b tx timeout [ 55.961695][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.973165][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.981477][ T4219] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.988567][ T4219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.996346][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.005025][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.013619][ T4219] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.020663][ T4219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.028415][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.037347][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.046488][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.078014][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.087156][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.096026][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.108017][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.116719][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.125567][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.134379][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.143271][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.151883][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.168548][ T4168] device veth0_vlan entered promiscuous mode [ 56.176145][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.184890][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.193957][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.203476][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.220519][ T4178] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.231533][ T4178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.259203][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.272455][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.280419][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.297215][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.305207][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.314553][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.323707][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.332096][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.340621][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.348302][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.356626][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.378522][ T4168] device veth1_vlan entered promiscuous mode [ 56.393343][ T4170] device veth0_vlan entered promiscuous mode [ 56.403755][ T4176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.429020][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.437839][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.447762][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.456451][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.466638][ T4169] device veth0_vlan entered promiscuous mode [ 56.480514][ T4170] device veth1_vlan entered promiscuous mode [ 56.508319][ T4178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.516950][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.525647][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.537542][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.547340][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.573805][ T4169] device veth1_vlan entered promiscuous mode [ 56.583405][ T4168] device veth0_macvtap entered promiscuous mode [ 56.615045][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.627457][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.639935][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.654185][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.679653][ T4168] device veth1_macvtap entered promiscuous mode [ 56.697988][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.709039][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.717808][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.729998][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.740083][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.754040][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.768047][ T4170] device veth0_macvtap entered promiscuous mode [ 56.775859][ T4176] device veth0_vlan entered promiscuous mode [ 56.796883][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.805601][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.814243][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.824952][ T4170] device veth1_macvtap entered promiscuous mode [ 56.840025][ T4169] device veth0_macvtap entered promiscuous mode [ 56.853235][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.865096][ T4176] device veth1_vlan entered promiscuous mode [ 56.883061][ T4170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.894821][ T4170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.907608][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.915737][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.925063][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.933430][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.942548][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.950966][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.960095][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.969144][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.978122][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.988017][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.015789][ T4170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.026837][ T4170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.036298][ T4170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.045450][ T4170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.054377][ T4170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.066359][ T4169] device veth1_macvtap entered promiscuous mode [ 57.075371][ T4168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.086678][ T4168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.098128][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.107760][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.117488][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.125926][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.134963][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.143877][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.153065][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.161686][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.170755][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.202991][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.211746][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.220820][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.231776][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.259372][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.267981][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.276663][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.287015][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.299537][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.308712][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.327464][ T4178] device veth0_vlan entered promiscuous mode [ 57.348444][ T4176] device veth0_macvtap entered promiscuous mode [ 57.358413][ T4176] device veth1_macvtap entered promiscuous mode [ 57.384478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.395544][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.414489][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.426243][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.436631][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.447482][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.460651][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.468876][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.480366][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.490505][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.501260][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.511364][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.521851][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.534873][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.545994][ T4178] device veth1_vlan entered promiscuous mode [ 57.559691][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.571184][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.581200][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.590919][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.602716][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.613835][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.624135][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.636145][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.647463][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.656156][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.667182][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.677817][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.688540][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.699380][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.710106][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.722143][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.759066][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.769277][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.778510][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.787225][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.799317][ T4176] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.808513][ T4176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.817496][ T4176] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.826818][ T4176] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.839915][ T4169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.849687][ T4169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.858780][ T4169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.868096][ T4169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.908177][ T4219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.916422][ T4219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.952994][ T4215] Bluetooth: hci4: command 0x040f tx timeout [ 57.959536][ T4215] Bluetooth: hci0: command 0x040f tx timeout [ 57.966340][ T4215] Bluetooth: hci1: command 0x040f tx timeout [ 57.969480][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.974033][ T4215] Bluetooth: hci2: command 0x040f tx timeout [ 57.994481][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.004845][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.017978][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.028046][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.036760][ T4216] Bluetooth: hci3: command 0x040f tx timeout [ 58.049750][ T4178] device veth0_macvtap entered promiscuous mode [ 58.052439][ T4223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.067880][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.076735][ T4223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.080095][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.093247][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.129824][ T4178] device veth1_macvtap entered promiscuous mode [ 58.140953][ T4219] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.163373][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.171327][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.209432][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.223813][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.233800][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.244443][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.255748][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.266904][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.277959][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.288662][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.299689][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.307834][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.315945][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.324654][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.354395][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.383223][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.397003][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.407827][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.421994][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.422761][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.439680][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.456995][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.467314][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.483830][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.498277][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.519482][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.529537][ T4223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.537821][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.546284][ T4223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.557474][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.566550][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.587799][ T4178] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.599285][ T4178] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.613503][ T4178] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.625444][ T4178] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.664509][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.722816][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.797727][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.407436][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.485111][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.688851][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.836393][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.032970][ T4171] Bluetooth: hci2: command 0x0419 tx timeout [ 60.043226][ T4171] Bluetooth: hci1: command 0x0419 tx timeout [ 60.064740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.078810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.086500][ T4171] Bluetooth: hci0: command 0x0419 tx timeout [ 60.125334][ T4171] Bluetooth: hci4: command 0x0419 tx timeout [ 60.161011][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 60.267586][ T26] audit: type=1326 audit(1750234452.132:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4267 comm="syz.2.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86fac46929 code=0x0 [ 60.272181][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.342204][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.358929][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.415749][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 61.657920][ T4292] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 61.669799][ T4292] overlayfs: missing 'lowerdir' [ 62.710513][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.746231][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.908943][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.918273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.927310][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.948285][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.160521][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.262672][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 63.272261][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #42!!! [ 63.467937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 63.902580][ T26] audit: type=1326 audit(1750234455.762:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4335 comm="syz.3.21" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f047beaa929 code=0x0 [ 64.141215][ T4346] syz.1.32 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 64.158165][ T4346] netlink: 176 bytes leftover after parsing attributes in process `syz.1.32'. [ 64.766846][ T4351] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 64.778517][ T4351] overlayfs: missing 'lowerdir' [ 64.952020][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 64.960991][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 64.969994][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #9a!!! [ 67.900851][ T4377] netlink: 'syz.1.31': attribute type 2 has an invalid length. [ 67.908469][ T4377] netlink: 'syz.1.31': attribute type 8 has an invalid length. [ 67.916112][ T4377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 68.512631][ T4398] netlink: 176 bytes leftover after parsing attributes in process `syz.1.38'. [ 70.080561][ T4420] netlink: 176 bytes leftover after parsing attributes in process `syz.2.42'. [ 71.316481][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333078][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.242225][ T4438] netlink: 'syz.3.49': attribute type 2 has an invalid length. [ 72.251341][ T4438] netlink: 'syz.3.49': attribute type 8 has an invalid length. [ 72.259798][ T4438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.49'. [ 72.873026][ T4217] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 73.142052][ T4217] usb 5-1: Using ep0 maxpacket: 32 [ 73.742680][ T4217] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 73.752497][ T4217] usb 5-1: config 0 has no interface number 0 [ 73.758701][ T4217] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 74.850134][ T4461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.966243][ T4461] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 74.974983][ T4217] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 74.984495][ T4217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.993070][ T4217] usb 5-1: Product: syz [ 75.001466][ T4217] usb 5-1: Manufacturer: syz [ 75.015593][ T4217] usb 5-1: SerialNumber: syz [ 75.038017][ T4217] usb 5-1: config 0 descriptor?? [ 75.182227][ T4217] usb 5-1: can't set config #0, error -71 [ 75.218543][ T4217] usb 5-1: USB disconnect, device number 2 [ 75.508515][ T4475] netlink: 176 bytes leftover after parsing attributes in process `syz.4.59'. [ 76.794649][ T1324] cfg80211: failed to load regulatory.db [ 78.432229][ C1] sched: RT throttling activated [ 78.823502][ T4497] netlink: 176 bytes leftover after parsing attributes in process `syz.3.66'. [ 80.088579][ T4521] netlink: 176 bytes leftover after parsing attributes in process `syz.0.72'. [ 81.269648][ T4538] netlink: 176 bytes leftover after parsing attributes in process `syz.0.90'. [ 81.322117][ T4539] netlink: 176 bytes leftover after parsing attributes in process `syz.3.81'. [ 83.031780][ T26] audit: type=1326 audit(1750234474.892:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 83.095441][ T26] audit: type=1326 audit(1750234474.952:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 83.670042][ T26] audit: type=1326 audit(1750234475.532:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 83.757116][ T26] audit: type=1326 audit(1750234475.532:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 83.903997][ T4558] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 83.930642][ T4560] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.944110][ T4558] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.987054][ T26] audit: type=1326 audit(1750234475.572:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 84.038952][ T26] audit: type=1326 audit(1750234475.572:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 84.142158][ T26] audit: type=1326 audit(1750234475.572:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4548 comm="syz.0.83" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5340b06929 code=0x7ffc0000 [ 86.544695][ T4592] netlink: 176 bytes leftover after parsing attributes in process `syz.2.95'. [ 88.292619][ T4584] netlink: 176 bytes leftover after parsing attributes in process `syz.3.94'. [ 88.479887][ T150] block nbd0: Attempted send on invalid socket [ 88.487152][ T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 89.041360][ T4632] netlink: 176 bytes leftover after parsing attributes in process `syz.0.109'. [ 89.092500][ T4631] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 89.105232][ T4631] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 92.034790][ T263] block nbd0: Attempted send on invalid socket [ 92.041739][ T263] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.648015][ T4670] fuse: Bad value for 'fd' [ 93.084295][ T4681] netlink: 176 bytes leftover after parsing attributes in process `syz.3.124'. [ 95.743727][ T263] block nbd1: Attempted send on invalid socket [ 95.750016][ T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 96.410834][ T4716] netlink: 176 bytes leftover after parsing attributes in process `syz.3.135'. [ 97.752989][ T4729] netlink: 176 bytes leftover after parsing attributes in process `syz.3.139'. [ 100.738950][ T4770] netlink: set zone limit has 8 unknown bytes [ 107.192806][ T4853] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 109.441722][ T4887] netlink: set zone limit has 8 unknown bytes [ 115.015771][ T4955] netlink: set zone limit has 8 unknown bytes [ 119.372190][ T2401] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.251995][ T2401] usb 4-1: Using ep0 maxpacket: 32 [ 120.372193][ T2401] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 120.380387][ T2401] usb 4-1: config 0 has no interface number 0 [ 120.412885][ T2401] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 120.612284][ T2401] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 120.631663][ T2401] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.661988][ T2401] usb 4-1: Product: syz [ 120.666180][ T2401] usb 4-1: Manufacturer: syz [ 120.670782][ T2401] usb 4-1: SerialNumber: syz [ 120.710617][ T2401] usb 4-1: config 0 descriptor?? [ 120.781432][ T2401] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 121.034400][ T2401] em28xx 4-1:0.132: Video interface 132 found: [ 122.222493][ T2401] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 124.398963][ T2401] em28xx 4-1:0.132: failed to read eeprom (err=-110) [ 124.406031][ T2401] em28xx 4-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 124.512326][ T2401] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 124.520353][ T2401] em28xx 4-1:0.132: analog set to bulk mode. [ 124.577554][ T2401] usb 4-1: USB disconnect, device number 2 [ 124.597722][ T2401] em28xx 4-1:0.132: Disconnecting em28xx [ 124.608160][ T4717] em28xx 4-1:0.132: Registering V4L2 extension [ 124.937924][ T5048] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 125.045728][ T5050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.063742][ T5057] llc_conn_state_process: llc_conn_service failed [ 125.104445][ T5050] bond0: (slave rose0): Enslaving as an active interface with an up link [ 125.226312][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 125.253166][ T4717] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 125.606204][ T4717] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 125.613894][ T4717] em28xx 4-1:0.132: No AC97 audio processor [ 125.624223][ T4717] usb 4-1: Decoder not found [ 125.629274][ T4717] em28xx 4-1:0.132: failed to create media graph [ 125.636114][ T4717] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 125.655011][ T4717] em28xx 4-1:0.132: Remote control support is not available for this card. [ 125.692285][ T2401] em28xx 4-1:0.132: Closing input extension [ 125.740996][ T2401] em28xx 4-1:0.132: Freeing device [ 128.732373][ T1683] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.012001][ T1683] usb 5-1: Using ep0 maxpacket: 16 [ 129.153291][ T1683] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 129.174649][ T1683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.230450][ T1683] usb 5-1: config 0 descriptor?? [ 129.408135][ T1683] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 129.979936][ T5127] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 130.032056][ T4249] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 130.482524][ T4249] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.553509][ T4249] usb 1-1: config 0 interface 0 has no altsetting 0 [ 130.722441][ T1683] gspca_sonixj: reg_w1 err -71 [ 130.803241][ T1683] sonixj: probe of 5-1:0.0 failed with error -71 [ 130.853122][ T4249] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.904306][ T1683] usb 5-1: USB disconnect, device number 3 [ 130.915022][ T4249] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.991558][ T4249] usb 1-1: Product: syz [ 131.021072][ T4249] usb 1-1: Manufacturer: syz [ 131.038265][ T4249] usb 1-1: SerialNumber: syz [ 131.072818][ T4249] usb 1-1: config 0 descriptor?? [ 131.826699][ T4249] usb 1-1: selecting invalid altsetting 0 [ 132.282720][ T4249] usb 1-1: USB disconnect, device number 2 [ 133.242230][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.248580][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.048443][ T5191] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 136.367441][ T5201] process 'syz.1.256' launched './file0' with NULL argv: empty string added [ 140.835618][ T5240] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.846744][ T5240] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.181390][ T5247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 143.088252][ T1324] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.902045][ T1324] usb 1-1: Using ep0 maxpacket: 16 [ 143.942711][ T5272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.092212][ T1324] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 144.101273][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.845040][ T1324] usb 1-1: config 0 descriptor?? [ 144.893891][ T1324] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 146.182354][ T1324] gspca_sonixj: reg_w1 err -71 [ 146.212433][ T1324] sonixj: probe of 1-1:0.0 failed with error -71 [ 146.287447][ T1324] usb 1-1: USB disconnect, device number 3 [ 150.356435][ T5323] Zero length message leads to an empty skb [ 150.886554][ T5327] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 150.897650][ T5327] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 151.589110][ T5342] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 151.596942][ T5342] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 151.611618][ T5342] Error parsing options; rc = [-22] [ 153.722256][ T5355] vivid-008: kernel_thread() failed [ 154.556818][ T4249] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.852286][ T4249] usb 3-1: Using ep0 maxpacket: 16 [ 155.042503][ T4249] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 155.079561][ T4249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.812575][ T4249] usb 3-1: config 0 descriptor?? [ 155.877230][ T4249] usb 3-1: can't set config #0, error -71 [ 155.902302][ T4249] usb 3-1: USB disconnect, device number 2 [ 156.424925][ T5392] netlink: 16 bytes leftover after parsing attributes in process `syz.1.301'. [ 158.433697][ T5430] netlink: 176 bytes leftover after parsing attributes in process `syz.3.310'. [ 162.350620][ T5468] input: syz1 as /devices/virtual/input/input8 [ 163.324407][ T5477] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 163.331856][ T5477] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 163.345125][ T5477] Error parsing options; rc = [-22] [ 168.449791][ T4215] hid-generic 0000:0007:0000.0001: unknown main item tag 0x0 [ 168.573089][ T4215] hid-generic 0000:0007:0000.0001: unknown main item tag 0x0 [ 168.607858][ T4215] hid-generic 0000:0007:0000.0001: unknown main item tag 0x0 [ 168.636925][ T5527] ======================================================= [ 168.636925][ T5527] WARNING: The mand mount option has been deprecated and [ 168.636925][ T5527] and is ignored by this kernel. Remove the mand [ 168.636925][ T5527] option from the mount to silence this warning. [ 168.636925][ T5527] ======================================================= [ 168.671871][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.785689][ T4215] hid-generic 0000:0007:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 168.804795][ T5534] netlink: 176 bytes leftover after parsing attributes in process `syz.3.339'. [ 170.817417][ T5535] fido_id[5535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.969033][ T5527] ODEBUG: Out of memory. ODEBUG disabled [ 171.652853][ T1683] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 173.121675][ T5562] netlink: 176 bytes leftover after parsing attributes in process `syz.0.347'. [ 173.604708][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.615421][ T5571] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 173.623015][ T5571] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 173.639239][ T1683] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 173.648880][ T1683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.895870][ T5578] netlink: 176 bytes leftover after parsing attributes in process `syz.4.351'. [ 175.675103][ T1683] usb 3-1: config 0 descriptor?? [ 175.752551][ T1683] usb 3-1: can't set config #0, error -71 [ 175.792816][ T4215] Bluetooth: hci0: command 0x0406 tx timeout [ 175.798699][ T1683] usb 3-1: USB disconnect, device number 3 [ 175.798944][ T4215] Bluetooth: hci4: command 0x0406 tx timeout [ 176.079951][ T4215] Bluetooth: hci1: command 0x0406 tx timeout [ 176.412153][ T4215] Bluetooth: hci2: command 0x0406 tx timeout [ 176.519759][ T5592] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.207700][ T5632] netlink: 176 bytes leftover after parsing attributes in process `syz.2.365'. [ 180.412606][ T4717] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 181.012088][ T4717] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 181.029905][ T4717] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.076257][ T4717] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 181.292001][ T4717] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 181.313509][ T4717] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.352376][ T4717] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 181.442176][ T4717] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 181.454785][ T4717] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.481479][ T5638] syz.0.368 (5638) used greatest stack depth: 18592 bytes left [ 181.510901][ T4717] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 182.462195][ T4717] usb 2-1: string descriptor 0 read error: -22 [ 182.500283][ T4717] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 182.514452][ T4717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.604141][ T4717] adutux 2-1:168.0: interrupt endpoints not found [ 182.729245][ T4717] usb 2-1: USB disconnect, device number 2 [ 186.522166][ C0] hrtimer: interrupt took 34122 ns [ 187.429123][ T5724] netlink: 176 bytes leftover after parsing attributes in process `syz.4.389'. [ 188.235232][ T5739] autofs4:pid:5739:autofs_fill_super: called with bogus options [ 190.805262][ T5768] mmap: syz.0.409 (5768) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 191.884155][ T5783] netlink: 176 bytes leftover after parsing attributes in process `syz.4.410'. [ 192.913887][ T5794] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 194.201000][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.210623][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.576261][ T5817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.588801][ T5817] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 197.198053][ T5841] netlink: 176 bytes leftover after parsing attributes in process `syz.2.427'. [ 200.834579][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 205.873022][ T5970] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 205.884170][ T5970] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 206.544485][ T5976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.450'. [ 208.676860][ T5999] netlink: 176 bytes leftover after parsing attributes in process `syz.3.454'. [ 209.230764][ T5980] binder: 5979:5980 ioctl 4018620d 0 returned -22 [ 210.763396][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 212.848993][ T6073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.465'. [ 215.459595][ T6099] binder: 6088:6099 ioctl 4018620d 0 returned -22 [ 218.007747][ T26] audit: type=1326 audit(1750234609.872:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 218.032047][ T6125] sd 0:0:1:0: device reset [ 218.052143][ T6131] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 218.094773][ T26] audit: type=1326 audit(1750234609.892:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f047bea9290 code=0x7ffc0000 [ 218.352223][ T26] audit: type=1326 audit(1750234609.892:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 218.684925][ T26] audit: type=1326 audit(1750234609.892:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 218.749620][ T26] audit: type=1326 audit(1750234609.892:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 218.819793][ T26] audit: type=1326 audit(1750234609.962:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 218.935001][ T26] audit: type=1326 audit(1750234609.962:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.3.481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047beaa929 code=0x7ffc0000 [ 219.801091][ T6144] binder: 6140:6144 ioctl 4018620d 0 returned -22 [ 221.883323][ T6170] netlink: 32 bytes leftover after parsing attributes in process `syz.4.492'. [ 225.714270][ T6209] binder: 6206:6209 ioctl 4018620d 0 returned -22 [ 233.097862][ T6278] device syzkaller0 entered promiscuous mode [ 245.708052][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 255.634189][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.642432][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.886858][ T6489] binder: 6488:6489 ioctl c018620b 0 returned -14 [ 257.472981][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.497649][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.144876][ T6561] device batadv1 entered promiscuous mode [ 264.698977][ T6606] netlink: 176 bytes leftover after parsing attributes in process `syz.1.627'. [ 267.199108][ T6651] netlink: 176 bytes leftover after parsing attributes in process `syz.2.641'. [ 267.249770][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060e6a000: rx timeout, send abort [ 267.259887][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888060e6a000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 268.853369][ T6652] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.864233][ T6652] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.270689][ T6808] netlink: 'syz.4.689': attribute type 10 has an invalid length. [ 278.278603][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.289689][ T6808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.466289][ T6808] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 279.942363][ T6833] device batadv1 entered promiscuous mode [ 280.963284][ T6848] netlink: 176 bytes leftover after parsing attributes in process `syz.3.698'. [ 282.589860][ T6856] netlink: 2 bytes leftover after parsing attributes in process `syz.4.701'. [ 282.638876][ T6856] netlink: 384 bytes leftover after parsing attributes in process `syz.4.701'. [ 282.716747][ T6856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 296.093595][ T6975] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 300.143711][ T4171] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 300.947482][ T4171] usb 4-1: Using ep0 maxpacket: 16 [ 301.072895][ T4171] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.101655][ T4171] usb 4-1: config 0 has no interfaces? [ 301.112690][ T4171] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 301.121742][ T4171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.145976][ T4171] usb 4-1: config 0 descriptor?? [ 301.386053][ T4171] usb 4-1: USB disconnect, device number 3 [ 302.621586][ T7029] orangefs_mount: mount request failed with -4 [ 305.041952][ T4171] Bluetooth: hci3: command 0x0406 tx timeout [ 308.412012][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 309.571473][ T7095] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 309.610111][ T7095] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.715990][ T7] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 309.737824][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 310.762367][ T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 310.792015][ T7] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 311.509976][ T7] usb 4-1: Product: syz [ 311.567349][ T7] usb 4-1: Manufacturer: syz [ 311.575692][ T7] usb 4-1: SerialNumber: syz [ 311.703551][ T7] usb 4-1: config 0 descriptor?? [ 311.889025][ T7] usb 4-1: can't set config #0, error -71 [ 311.914699][ T7] usb 4-1: USB disconnect, device number 4 [ 312.345013][ T7126] 9pnet: Insufficient options for proto=fd [ 315.187740][ T7156] netlink: 176 bytes leftover after parsing attributes in process `syz.2.796'. [ 317.079155][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.094341][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.872111][ T1683] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 319.944062][ T7195] netlink: 176 bytes leftover after parsing attributes in process `syz.2.808'. [ 324.615084][ T7249] netlink: 176 bytes leftover after parsing attributes in process `syz.1.824'. [ 327.732046][ T4249] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 328.037628][ T7289] netlink: 36 bytes leftover after parsing attributes in process `syz.1.840'. [ 328.462178][ T4249] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 328.564746][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.574338][ T4249] usb 3-1: Product: syz [ 328.578681][ T4249] usb 3-1: Manufacturer: syz [ 328.998333][ T4249] usb 3-1: SerialNumber: syz [ 329.053358][ T4249] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 330.352188][ T4249] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 330.366545][ T1324] usb 3-1: USB disconnect, device number 4 [ 330.409635][ T1324] usb 3-1: ath9k_htc: USB layer deinitialized [ 330.537101][ T7329] netlink: 2 bytes leftover after parsing attributes in process `syz.1.851'. [ 333.602045][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 333.653758][ T7363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 333.664791][ T7363] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 334.812109][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 334.831401][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.847348][ T7] usb 1-1: Product: syz [ 334.851675][ T7] usb 1-1: Manufacturer: syz [ 334.856475][ T7] usb 1-1: SerialNumber: syz [ 334.963555][ T7] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.182008][ T1683] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 335.612395][ T1683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 335.622354][ T1683] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 335.641639][ T1683] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 335.872112][ T7] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.292657][ T1683] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 336.301749][ T1683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.352574][ C0] usb 1-1: ath: unknown panic pattern! [ 336.497609][ T1683] usb 4-1: Product: syz [ 336.501812][ T1683] usb 4-1: Manufacturer: syz [ 336.506595][ T1683] usb 4-1: SerialNumber: syz [ 336.524155][ T1683] usb 4-1: config 0 descriptor?? [ 336.537614][ T1107] usb 1-1: USB disconnect, device number 4 [ 336.539392][ T7411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 336.555735][ T7411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 336.579638][ T1683] kvaser_usb 4-1:0.0: Cannot get usb endpoint(s) [ 336.870533][ T1683] usb 4-1: USB disconnect, device number 6 [ 337.629049][ T7] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 337.637518][ T7] ath9k_htc: Failed to initialize the device [ 337.645531][ T1107] usb 1-1: ath9k_htc: USB layer deinitialized [ 339.389702][ T7457] overlayfs: failed to clone lowerpath [ 339.398166][ T7457] overlayfs: failed to clone upperpath [ 339.442140][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 341.791712][ T7] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 341.811977][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.827846][ T7] usb 4-1: Product: syz [ 341.832129][ T7] usb 4-1: Manufacturer: syz [ 341.846924][ T7] usb 4-1: SerialNumber: syz [ 341.892909][ T7] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.896062][ T1107] usb 4-1: USB disconnect, device number 7 [ 342.902060][ T7] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 342.931832][ T1107] usb 4-1: ath9k_htc: USB layer deinitialized [ 344.236405][ T7492] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.247824][ T7492] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 344.743957][ T5937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.847296][ T5937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.935943][ T5937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.009959][ T5937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.068207][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 345.337342][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.350875][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.364727][ T7511] device bridge_slave_0 entered promiscuous mode [ 345.432528][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.449668][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.470954][ T7511] device bridge_slave_1 entered promiscuous mode [ 345.534075][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.596111][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.892454][ T7511] team0: Port device team_slave_0 added [ 345.939603][ T7511] team0: Port device team_slave_1 added [ 346.051794][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.162603][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.342422][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.672116][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 346.902356][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.052623][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.191982][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.266523][ T7511] device hsr_slave_0 entered promiscuous mode [ 347.282799][ T7511] device hsr_slave_1 entered promiscuous mode [ 347.299391][ T7511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.322492][ T7511] Cannot create hsr debugfs directory [ 348.046951][ T5937] device hsr_slave_0 left promiscuous mode [ 348.062743][ T5937] device hsr_slave_1 left promiscuous mode [ 348.079344][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.099345][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.120575][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.140063][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.161642][ T5937] device bridge_slave_1 left promiscuous mode [ 348.178720][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.238430][ T5937] device bridge_slave_0 left promiscuous mode [ 348.258575][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.337041][ T5937] device veth1_macvtap left promiscuous mode [ 348.353903][ T5937] device veth0_macvtap left promiscuous mode [ 348.401230][ T5937] device veth1_vlan left promiscuous mode [ 348.447328][ T5937] device veth0_vlan left promiscuous mode [ 348.832094][ T1107] Bluetooth: hci3: command 0x041b tx timeout [ 349.013093][ T5937] team0 (unregistering): Port device team_slave_1 removed [ 349.029001][ T5937] team0 (unregistering): Port device team_slave_0 removed [ 349.058317][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.077177][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.191041][ T5937] bond0 (unregistering): Released all slaves [ 350.130558][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.192871][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 350.201868][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 350.491003][ T7626] overlayfs: failed to clone lowerpath [ 350.516727][ T7626] overlayfs: failed to clone upperpath [ 351.076525][ T1107] Bluetooth: hci3: command 0x040f tx timeout [ 351.163971][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.293968][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 351.323180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 351.349472][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.356646][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.385347][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 351.397674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 351.415220][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.422416][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.492965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 351.536487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 351.584903][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 351.617029][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 351.643569][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 351.701602][ T7511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 351.737740][ T7511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 351.774068][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 351.789049][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 351.815556][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 351.850424][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 351.875737][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 351.896022][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 351.925747][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 351.948429][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 353.152139][ T4171] Bluetooth: hci3: command 0x0419 tx timeout [ 354.082641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 354.090216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 354.137778][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.780157][ T7705] overlayfs: failed to clone lowerpath [ 354.802174][ T7705] overlayfs: failed to clone upperpath [ 355.485999][ T7712] syz_tun: refused to change device tx_queue_len [ 355.885440][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 355.904070][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.949241][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 356.084478][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 356.209130][ T7511] device veth0_vlan entered promiscuous mode [ 356.775299][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 356.805559][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 356.881820][ T7511] device veth1_vlan entered promiscuous mode [ 356.939265][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 357.115315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 357.134029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 357.173456][ T7511] device veth0_macvtap entered promiscuous mode [ 357.200391][ T7511] device veth1_macvtap entered promiscuous mode [ 357.254143][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.287560][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.317981][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.345850][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.362226][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.382074][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.423645][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.479700][ T7774] tap0: tun_chr_ioctl cmd 1074025680 [ 357.487170][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 357.496396][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 357.508827][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 357.526641][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 357.547608][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.574248][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.599788][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.627256][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.644184][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.660371][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.673951][ T7511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.684756][ T7511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.696349][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.722064][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 357.944716][ T6046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.138814][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.163652][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.200184][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.222385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.232975][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.265232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 365.208111][ T7890] overlayfs: failed to clone lowerpath [ 365.265308][ T7897] overlayfs: failed to clone upperpath [ 366.028736][ T7914] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 368.538645][ T7992] overlayfs: failed to clone lowerpath [ 368.566196][ T7992] overlayfs: failed to clone upperpath [ 372.367781][ T8043] overlayfs: failed to clone lowerpath [ 372.414499][ T8043] overlayfs: failed to clone upperpath [ 377.030774][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1099'. [ 378.661587][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.675157][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.935124][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1113'. [ 402.512366][ T8715] overlayfs: missing 'lowerdir' [ 404.171865][ T8753] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 404.205418][ T8753] syzkaller0: linktype set to 512 [ 404.732381][ T8761] overlayfs: missing 'lowerdir' [ 406.232681][ T8800] overlayfs: missing 'lowerdir' [ 512.261951][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 512.268937][ C0] (detected by 0, t=10502 jiffies, g=27669, q=104) [ 512.275535][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294988352-4294977849), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 512.288894][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g27669 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 512.300090][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 512.310061][ C0] rcu: RCU grace-period kthread stack dump: [ 512.315952][ C0] task:rcu_preempt state:R running task stack:27656 pid: 15 ppid: 2 flags:0x00004000 [ 512.326758][ C0] Call Trace: [ 512.330042][ C0] [ 512.332974][ C0] __schedule+0x11b8/0x43b0 [ 512.337489][ C0] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 512.342972][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 512.348874][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 512.354768][ C0] ? _raw_spin_unlock+0x40/0x40 [ 512.359618][ C0] ? rcu_is_watching+0x11/0xa0 [ 512.364385][ C0] ? release_firmware_map_entry+0x190/0x190 [ 512.370290][ C0] schedule+0x11b/0x1e0 [ 512.374455][ C0] schedule_timeout+0x15c/0x280 [ 512.379306][ C0] ? console_conditional_schedule+0x40/0x40 [ 512.385197][ C0] ? update_process_times+0x200/0x200 [ 512.390580][ C0] ? prepare_to_swait_event+0x331/0x350 [ 512.396227][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 512.401079][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 512.406275][ C0] ? rcu_gp_init+0xd58/0x10e0 [ 512.410952][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 512.415718][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 512.420916][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 512.426637][ C0] rcu_gp_kthread+0x98/0x350 [ 512.431237][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 512.436351][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 512.442252][ C0] ? __kthread_parkme+0x157/0x1b0 [ 512.447281][ C0] kthread+0x436/0x520 [ 512.451349][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 512.456459][ C0] ? kthread_blkcg+0xd0/0xd0 [ 512.461054][ C0] ret_from_fork+0x1f/0x30 [ 512.465484][ C0] [ 512.468503][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 512.474816][ C0] NMI backtrace for cpu 0 [ 512.479136][ C0] CPU: 0 PID: 8817 Comm: syz.3.1299 Not tainted 5.15.185-syzkaller #0 [ 512.487282][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 512.497335][ C0] Call Trace: [ 512.500612][ C0] [ 512.503451][ C0] dump_stack_lvl+0x168/0x230 [ 512.508136][ C0] ? show_regs_print_info+0x20/0x20 [ 512.513420][ C0] ? load_image+0x3b0/0x3b0 [ 512.517928][ C0] ? irq_work_queue+0xbf/0x140 [ 512.522700][ C0] nmi_cpu_backtrace+0x397/0x3d0 [ 512.527641][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 512.533830][ C0] ? _printk+0xcc/0x110 [ 512.538010][ C0] ? cpu_online+0x1d/0x30 [ 512.542350][ C0] ? load_image+0x3b0/0x3b0 [ 512.546855][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 512.552927][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 512.558918][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 512.565083][ C0] print_other_cpu_stall+0x10c8/0x1220 [ 512.570551][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 512.575489][ C0] ? ktime_get+0x7b/0x270 [ 512.579824][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 512.584857][ C0] rcu_sched_clock_irq+0x831/0x1110 [ 512.590059][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 512.594911][ C0] ? account_process_tick+0x227/0x3a0 [ 512.600288][ C0] update_process_times+0x193/0x200 [ 512.605493][ C0] tick_sched_timer+0x37d/0x560 [ 512.610349][ C0] __hrtimer_run_queues+0x4fe/0xc40 [ 512.615561][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 512.621132][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 512.626264][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 512.632352][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 512.637327][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 512.643312][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 512.648954][ C0] [ 512.651880][ C0] [ 512.654810][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 512.660802][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 512.666616][ C0] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8e 9a b1 f7 48 89 df e8 56 6f b2 f7 e8 a1 13 d3 f7 fb bf 01 00 00 00 86 93 a6 f7 65 8b 05 27 a3 57 76 85 c0 74 02 5b c3 e8 d4 ad 55 [ 512.686231][ C0] RSP: 0018:ffffc9000319fbc0 EFLAGS: 00000282 [ 512.692305][ C0] RAX: 4a7926b42cf93200 RBX: ffff88801af81280 RCX: 4a7926b42cf93200 [ 512.700282][ C0] RDX: dffffc0000000000 RSI: ffffffff8a0b11c0 RDI: 0000000000000001 [ 512.708252][ C0] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10035f0251 [ 512.716226][ C0] R10: ffffed10035f0251 R11: 1ffff110035f0250 R12: ffff88801af81280 [ 512.724197][ C0] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000004000000 [ 512.732183][ C0] get_signal+0x11d6/0x12c0 [ 512.736708][ C0] arch_do_signal_or_restart+0xc1/0x1300 [ 512.742340][ C0] ? _copy_from_user+0x111/0x170 [ 512.747280][ C0] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 512.752915][ C0] ? rcu_lock_release+0x5/0x20 [ 512.757677][ C0] ? load_gs_index+0x120/0x120 [ 512.762442][ C0] ? get_sigframe_size+0x10/0x10 [ 512.767395][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 512.772857][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 512.778143][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 512.783692][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 512.789153][ C0] do_syscall_64+0x58/0xa0 [ 512.793571][ C0] ? clear_bhb_loop+0x30/0x80 [ 512.798244][ C0] ? clear_bhb_loop+0x30/0x80 [ 512.802914][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 512.808805][ C0] RIP: 0033:0x7f047beaa929 [ 512.813236][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.832847][ C0] RSP: 002b:00007f0479d120e8 EFLAGS: 00000246 [ 512.839005][ C0] RAX: fffffffffffffffc RBX: 00007f047c0d1fa8 RCX: 00007f047beaa929 [ 512.846976][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f047c0d1fa8 [ 512.854959][ C0] RBP: 00007f047c0d1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 512.862933][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f047c0d1fac [ 512.870899][ C0] R13: 0000000000000000 R14: 00007fff6ffd41d0 R15: 00007fff6ffd42b8 [ 512.878879][ C0]