last executing test programs: 2.263220429s ago: executing program 0 (id=1): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004}) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x2b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) sched_getparam(0xffffffffffffffff, &(0x7f00000010c0)) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x240000c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x0, 0x8400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1) write$binfmt_elf32(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x7}}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="c1a33324", @ANYRES32=r7, @ANYRES32=0x41424344, @ANYBLOB="54d076c6157d7900", @ANYRES8=r0, @ANYRESDEC=r0], 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000001100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 2.241783693s ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) 1.80102823s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x6e}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x20780, 0x40, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000008c0)='rxrpc_call_reset\x00', r5, 0x0, 0x1}, 0x18) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r8 = dup3(r6, r7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r8, 0x10f, 0x88) 1.699056172s ago: executing program 0 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c", 0x71, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) pselect6(0x40, &(0x7f0000000240)={0xffffffffffff4557, 0x4, 0xfffffffffffffff7, 0x1, 0x62a, 0x1, 0x7, 0x2}, &(0x7f0000000280)={0x3, 0x3e, 0x4, 0x7, 0x3, 0x1ccc200000000, 0x1, 0x3ec4d2c1}, &(0x7f0000000300)={0x9, 0xfffffffffffffffe, 0x8, 0xb, 0xb, 0x3, 0x8000, 0x7f}, &(0x7f0000000340), &(0x7f00000003c0)={&(0x7f0000000380)={[0x5]}, 0x8}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) r6 = syz_pidfd_open(0x0, 0x0) setns(r6, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.602183859s ago: executing program 3 (id=7): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) 1.520817454s ago: executing program 2 (id=8): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@jqfmt_vfsv1}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x3c8, 0x0) 547.361571ms ago: executing program 3 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$RTC_WIE_ON(r0, 0x700f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 414.404524ms ago: executing program 2 (id=10): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 315.513024ms ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x18) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff000000000800000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) 0s ago: executing program 0 (id=11): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004", 0x56}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 84.999351][ T5810] cgroup: Unknown subsys name 'net' [ 85.189953][ T5810] cgroup: Unknown subsys name 'cpuset' [ 85.199615][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.930119][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.389751][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.408568][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.416848][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.426876][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.427389][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.436058][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.442485][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.449223][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.456385][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.463662][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.480652][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.485245][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.488475][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.496914][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.503514][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.514034][ T5143] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.523430][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.531023][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.532560][ T5143] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.547092][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.554482][ T5143] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.569838][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.581406][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.614874][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.626648][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.984017][ T794] cfg80211: failed to load regulatory.db [ 92.214164][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 92.408886][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 92.513112][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.521409][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.529399][ T5824] bridge_slave_0: entered allmulticast mode [ 92.537160][ T5824] bridge_slave_0: entered promiscuous mode [ 92.546013][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 92.558539][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.600899][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.608148][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.615299][ T5824] bridge_slave_1: entered allmulticast mode [ 92.622846][ T5824] bridge_slave_1: entered promiscuous mode [ 92.714470][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 92.809358][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.863386][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.905737][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.912971][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.920926][ T5822] bridge_slave_0: entered allmulticast mode [ 92.928352][ T5822] bridge_slave_0: entered promiscuous mode [ 92.937614][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.944789][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.952180][ T5821] bridge_slave_0: entered allmulticast mode [ 92.959741][ T5821] bridge_slave_0: entered promiscuous mode [ 93.004406][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.011700][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.019512][ T5822] bridge_slave_1: entered allmulticast mode [ 93.027814][ T5822] bridge_slave_1: entered promiscuous mode [ 93.047602][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.054785][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.062258][ T5821] bridge_slave_1: entered allmulticast mode [ 93.069774][ T5821] bridge_slave_1: entered promiscuous mode [ 93.141186][ T5824] team0: Port device team_slave_0 added [ 93.149475][ T5824] team0: Port device team_slave_1 added [ 93.155193][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.162568][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.170384][ T5834] bridge_slave_0: entered allmulticast mode [ 93.177903][ T5834] bridge_slave_0: entered promiscuous mode [ 93.202295][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.239485][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.246795][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.253964][ T5834] bridge_slave_1: entered allmulticast mode [ 93.261727][ T5834] bridge_slave_1: entered promiscuous mode [ 93.284497][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.297202][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.333596][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.342111][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.349514][ T5832] bridge_slave_0: entered allmulticast mode [ 93.357179][ T5832] bridge_slave_0: entered promiscuous mode [ 93.380189][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.404912][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.412070][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.438648][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.452311][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.459353][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.485331][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.511234][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.519103][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.526397][ T5832] bridge_slave_1: entered allmulticast mode [ 93.533724][ T5832] bridge_slave_1: entered promiscuous mode [ 93.576523][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.602163][ T5822] team0: Port device team_slave_0 added [ 93.610845][ T5821] team0: Port device team_slave_0 added [ 93.620713][ T5821] team0: Port device team_slave_1 added [ 93.628906][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.656766][ T5833] Bluetooth: hci3: command tx timeout [ 93.662544][ T5833] Bluetooth: hci2: command tx timeout [ 93.668575][ T5830] Bluetooth: hci0: command tx timeout [ 93.669563][ T5827] Bluetooth: hci4: command tx timeout [ 93.674597][ T5830] Bluetooth: hci1: command tx timeout [ 93.688457][ T5822] team0: Port device team_slave_1 added [ 93.697729][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.711369][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.802229][ T5834] team0: Port device team_slave_0 added [ 93.850884][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.858228][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.884896][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.898871][ T5834] team0: Port device team_slave_1 added [ 93.905340][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.912730][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.938749][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.956499][ T5824] hsr_slave_0: entered promiscuous mode [ 93.963154][ T5824] hsr_slave_1: entered promiscuous mode [ 93.972362][ T5832] team0: Port device team_slave_0 added [ 93.979120][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.986200][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.012568][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.038333][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.045299][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.071876][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.091786][ T5832] team0: Port device team_slave_1 added [ 94.131422][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.138586][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.164759][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.178280][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.185249][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.211396][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.284358][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.291819][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.317837][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.330922][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.337994][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.364738][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.477423][ T5822] hsr_slave_0: entered promiscuous mode [ 94.483990][ T5822] hsr_slave_1: entered promiscuous mode [ 94.490820][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 94.497347][ T5822] Cannot create hsr debugfs directory [ 94.509224][ T5821] hsr_slave_0: entered promiscuous mode [ 94.515818][ T5821] hsr_slave_1: entered promiscuous mode [ 94.522035][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 94.527845][ T5821] Cannot create hsr debugfs directory [ 94.581345][ T5834] hsr_slave_0: entered promiscuous mode [ 94.587928][ T5834] hsr_slave_1: entered promiscuous mode [ 94.594146][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 94.599961][ T5834] Cannot create hsr debugfs directory [ 94.697481][ T5832] hsr_slave_0: entered promiscuous mode [ 94.704093][ T5832] hsr_slave_1: entered promiscuous mode [ 94.710559][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 94.716850][ T5832] Cannot create hsr debugfs directory [ 95.202200][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.215253][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.227362][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.239042][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.309584][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.350860][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.362735][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.383041][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.438041][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.457472][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.469005][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.486627][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.589685][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.606861][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.621637][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.632409][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.736935][ T5830] Bluetooth: hci1: command tx timeout [ 95.746296][ T5830] Bluetooth: hci2: command tx timeout [ 95.746341][ T5143] Bluetooth: hci4: command tx timeout [ 95.751736][ T5830] Bluetooth: hci0: command tx timeout [ 95.759034][ T5833] Bluetooth: hci3: command tx timeout [ 95.778575][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.796841][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.821656][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.833794][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.865223][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.873124][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.904762][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.951576][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.959087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.997112][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.004279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.067585][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.110873][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.118101][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.137452][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.144618][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.161576][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.201102][ T5824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.231512][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.261653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.268915][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.298270][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.314746][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.322029][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.401854][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.464795][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.477995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.485227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.512062][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.519439][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.600692][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.673758][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.681000][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.719488][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.726802][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.748998][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.772886][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.969544][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.042823][ T5824] veth0_vlan: entered promiscuous mode [ 97.122362][ T5824] veth1_vlan: entered promiscuous mode [ 97.198835][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.276286][ T5822] veth0_vlan: entered promiscuous mode [ 97.302150][ T5824] veth0_macvtap: entered promiscuous mode [ 97.325144][ T5822] veth1_vlan: entered promiscuous mode [ 97.364710][ T5824] veth1_macvtap: entered promiscuous mode [ 97.441589][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.469264][ T5822] veth0_macvtap: entered promiscuous mode [ 97.495208][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.515289][ T5822] veth1_macvtap: entered promiscuous mode [ 97.551296][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.613004][ T5925] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.625292][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.647323][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.660439][ T5832] veth0_vlan: entered promiscuous mode [ 97.667818][ T5925] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.678350][ T5925] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709031][ T5925] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.729302][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.765235][ T5832] veth1_vlan: entered promiscuous mode [ 97.781879][ T5925] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.793162][ T5925] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.813888][ T5925] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.822847][ T5833] Bluetooth: hci0: command tx timeout [ 97.826638][ T5143] Bluetooth: hci2: command tx timeout [ 97.829219][ T5833] Bluetooth: hci1: command tx timeout [ 97.833689][ T5827] Bluetooth: hci3: command tx timeout [ 97.839965][ T5830] Bluetooth: hci4: command tx timeout [ 97.847647][ T5925] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947554][ T5832] veth0_macvtap: entered promiscuous mode [ 97.967707][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.980541][ T5832] veth1_macvtap: entered promiscuous mode [ 97.987911][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.048234][ T5821] veth0_vlan: entered promiscuous mode [ 98.095279][ T5821] veth1_vlan: entered promiscuous mode [ 98.141029][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.148938][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.155274][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.164087][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.172207][ T5925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.181231][ T5925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.191608][ T5834] veth0_vlan: entered promiscuous mode [ 98.243664][ T3008] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.259428][ T3008] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.275712][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.283641][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295100][ T3008] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304818][ T3008] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.322486][ T5821] veth0_macvtap: entered promiscuous mode [ 98.322580][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.330824][ T5834] veth1_vlan: entered promiscuous mode [ 98.370688][ T5821] veth1_macvtap: entered promiscuous mode [ 98.504472][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.566736][ T5834] veth0_macvtap: entered promiscuous mode [ 98.587245][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.614291][ T5834] veth1_macvtap: entered promiscuous mode [ 98.636551][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.648412][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.667308][ T5945] loop0: detected capacity change from 0 to 512 [ 98.711001][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.727673][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.730695][ T5945] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.756290][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.764535][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.791793][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.808939][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.817817][ T5945] EXT4-fs (loop0): shut down requested (0) [ 98.840082][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.859972][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.870473][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.890706][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.942517][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981640][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.032477][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.045260][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.063622][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.079050][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.114959][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.278313][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.295444][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.391730][ T5958] loop2: detected capacity change from 0 to 1024 [ 99.421894][ T5958] EXT4-fs: Ignoring removed orlov option [ 99.905737][ T5830] Bluetooth: hci4: command tx timeout [ 99.913091][ T5830] Bluetooth: hci3: command tx timeout [ 99.924135][ T5830] Bluetooth: hci1: command tx timeout [ 99.933124][ T5830] Bluetooth: hci0: command tx timeout [ 99.939078][ T5833] Bluetooth: hci2: command tx timeout [ 100.137309][ T5958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.311547][ T5965] loop3: detected capacity change from 0 to 1024 [ 100.331725][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.332651][ T5965] ======================================================= [ 100.332651][ T5965] WARNING: The mand mount option has been deprecated and [ 100.332651][ T5965] and is ignored by this kernel. Remove the mand [ 100.332651][ T5965] option from the mount to silence this warning. [ 100.332651][ T5965] ======================================================= [ 100.383756][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.416906][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.483359][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.694914][ T30] audit: type=1800 audit(1762605288.619:2): pid=5965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 100.737244][ C0] ------------[ cut here ]------------ [ 100.743017][ C0] WARNING: ./include/linux/ns_common.h:255 at delayed_free_pidns+0x118/0x150, CPU#0: kworker/0:2/794 [ 100.754013][ C0] Modules linked in: [ 100.758076][ C0] CPU: 0 UID: 0 PID: 794 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 100.758106][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.758122][ C0] Workqueue: mld mld_dad_work [ 100.758157][ C0] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 100.758189][ C0] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 100.758209][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010246 [ 100.758232][ C0] RAX: ffffffff81bde0b7 RBX: ffff8880297e05b8 RCX: ffff888024a4db80 [ 100.758251][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 100.758266][ C0] RBP: 0000000000000002 R08: ffff888028ec0193 R09: 1ffff110051d8032 [ 100.758284][ C0] R10: dffffc0000000000 R11: ffffed10051d8033 R12: dffffc0000000000 [ 100.758300][ C0] R13: ffffffff81a903d7 R14: ffff888028ec0000 R15: ffff888028ec0190 [ 100.758319][ C0] FS: 0000000000000000(0000) GS:ffff888125ec2000(0000) knlGS:0000000000000000 [ 100.758338][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.758354][ C0] CR2: 00002000000bd038 CR3: 00000000763dc000 CR4: 00000000003526f0 [ 100.758376][ C0] Call Trace: [ 100.758386][ C0] [ 100.758398][ C0] ? __pfx_delayed_free_pidns+0x10/0x10 [ 100.758425][ C0] rcu_core+0xcab/0x1770 [ 100.758484][ C0] ? __pfx_rcu_core+0x10/0x10 [ 100.898601][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 100.903847][ C0] ? sched_clock_cpu+0x74/0x430 [ 100.908771][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 100.914103][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 100.919987][ C0] ? handle_softirqs+0x717/0x870 [ 100.924983][ C0] handle_softirqs+0x286/0x870 [ 100.929820][ C0] ? do_softirq+0xec/0x180 [ 100.934283][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 100.939640][ C0] ? ipv6_get_lladdr+0x2aa/0x3f0 [ 100.944621][ C0] do_softirq+0xec/0x180 [ 100.948926][ C0] [ 100.951880][ C0] [ 100.954834][ C0] ? __pfx_do_softirq+0x10/0x10 [ 100.959754][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 100.965076][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 100.970348][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 100.976156][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 100.981221][ C0] ipv6_get_lladdr+0x2aa/0x3f0 [ 100.986058][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 100.990971][ C0] mld_newpack+0x420/0xc40 [ 100.995458][ C0] ? mld_newpack+0x2aa/0xc40 [ 101.000155][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 101.005144][ C0] ? rcu_is_watching+0x15/0xb0 [ 101.009991][ C0] ? trace_contention_end+0x39/0x120 [ 101.015622][ C0] add_grhead+0x5a/0x2a0 [ 101.019906][ C0] ? add_grec+0x1360/0x1740 [ 101.024450][ C0] add_grec+0x1452/0x1740 [ 101.028854][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 101.033936][ C0] mld_send_initial_cr+0x288/0x550 [ 101.039109][ C0] mld_dad_work+0x46/0x490 [ 101.043582][ C0] ? process_one_work+0x868/0x15d0 [ 101.048756][ C0] process_one_work+0x94a/0x15d0 [ 101.053725][ C0] ? __lock_acquire+0xab9/0xd20 [ 101.058659][ C0] ? __pfx_process_one_work+0x10/0x10 [ 101.064078][ C0] ? assign_work+0x3a1/0x410 [ 101.068742][ C0] worker_thread+0x9b0/0xee0 [ 101.073400][ C0] kthread+0x711/0x8a0 [ 101.077529][ C0] ? __pfx_worker_thread+0x10/0x10 [ 101.082678][ C0] ? __pfx_kthread+0x10/0x10 [ 101.087324][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.092560][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.097823][ C0] ? __pfx_kthread+0x10/0x10 [ 101.102449][ C0] ret_from_fork+0x599/0xb30 [ 101.107106][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 101.112267][ C0] ? __switch_to_asm+0x39/0x70 [ 101.117518][ C0] ? __switch_to_asm+0x33/0x70 [ 101.122310][ C0] ? __pfx_kthread+0x10/0x10 [ 101.126960][ C0] ret_from_fork_asm+0x1a/0x30 [ 101.131776][ C0] [ 101.134817][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.142123][ C0] CPU: 0 UID: 0 PID: 794 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 101.151438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.161514][ C0] Workqueue: mld mld_dad_work [ 101.166231][ C0] Call Trace: [ 101.169536][ C0] [ 101.172407][ C0] dump_stack_lvl+0x99/0x250 [ 101.177038][ C0] ? __asan_memcpy+0x40/0x70 [ 101.181662][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.186904][ C0] ? __pfx__printk+0x10/0x10 [ 101.191540][ C0] vpanic+0x237/0x6d0 [ 101.195550][ C0] ? __pfx_vpanic+0x10/0x10 [ 101.200068][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 101.205309][ C0] panic+0xb9/0xc0 [ 101.209056][ C0] ? __pfx_panic+0x10/0x10 [ 101.213518][ C0] __warn+0x334/0x4c0 [ 101.217523][ C0] ? delayed_free_pidns+0x118/0x150 [ 101.222759][ C0] ? delayed_free_pidns+0x118/0x150 [ 101.227986][ C0] report_bug+0x2be/0x4f0 [ 101.232352][ C0] ? delayed_free_pidns+0x118/0x150 [ 101.237575][ C0] ? delayed_free_pidns+0x118/0x150 [ 101.242798][ C0] ? delayed_free_pidns+0x11a/0x150 [ 101.248023][ C0] handle_bug+0x84/0x160 [ 101.252294][ C0] exc_invalid_op+0x1a/0x50 [ 101.256836][ C0] asm_exc_invalid_op+0x1a/0x20 [ 101.261714][ C0] RIP: 0010:delayed_free_pidns+0x118/0x150 [ 101.267553][ C0] Code: 85 ed 7e 2b e8 99 9f 03 00 48 83 c3 a8 48 8b 3d 5e be c7 17 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 1e 1e 5f 00 e8 79 9f 03 00 90 <0f> 0b 90 eb b4 e8 6e 9f 03 00 4c 89 ff be 03 00 00 00 e8 01 fb d2 [ 101.287186][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010246 [ 101.293300][ C0] RAX: ffffffff81bde0b7 RBX: ffff8880297e05b8 RCX: ffff888024a4db80 [ 101.301311][ C0] RDX: 0000000000000100 RSI: 0000000000000002 RDI: 0000000000000000 [ 101.309316][ C0] RBP: 0000000000000002 R08: ffff888028ec0193 R09: 1ffff110051d8032 [ 101.317318][ C0] R10: dffffc0000000000 R11: ffffed10051d8033 R12: dffffc0000000000 [ 101.325319][ C0] R13: ffffffff81a903d7 R14: ffff888028ec0000 R15: ffff888028ec0190 [ 101.333362][ C0] ? rcu_core+0xc37/0x1770 [ 101.337831][ C0] ? delayed_free_pidns+0x117/0x150 [ 101.343074][ C0] ? __pfx_delayed_free_pidns+0x10/0x10 [ 101.348651][ C0] rcu_core+0xcab/0x1770 [ 101.352951][ C0] ? __pfx_rcu_core+0x10/0x10 [ 101.357670][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 101.362902][ C0] ? sched_clock_cpu+0x74/0x430 [ 101.367788][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 101.373091][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 101.378918][ C0] ? handle_softirqs+0x717/0x870 [ 101.383883][ C0] handle_softirqs+0x286/0x870 [ 101.388677][ C0] ? do_softirq+0xec/0x180 [ 101.393122][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 101.398432][ C0] ? ipv6_get_lladdr+0x2aa/0x3f0 [ 101.403389][ C0] do_softirq+0xec/0x180 [ 101.407655][ C0] [ 101.410592][ C0] [ 101.413527][ C0] ? __pfx_do_softirq+0x10/0x10 [ 101.418403][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 101.423715][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 101.428954][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 101.434707][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 101.439744][ C0] ipv6_get_lladdr+0x2aa/0x3f0 [ 101.444526][ C0] ? ipv6_get_lladdr+0x2b/0x3f0 [ 101.449392][ C0] mld_newpack+0x420/0xc40 [ 101.453828][ C0] ? mld_newpack+0x2aa/0xc40 [ 101.458435][ C0] ? __pfx_mld_newpack+0x10/0x10 [ 101.463395][ C0] ? rcu_is_watching+0x15/0xb0 [ 101.468173][ C0] ? trace_contention_end+0x39/0x120 [ 101.473493][ C0] add_grhead+0x5a/0x2a0 [ 101.477748][ C0] ? add_grec+0x1360/0x1740 [ 101.482264][ C0] add_grec+0x1452/0x1740 [ 101.486610][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 101.491664][ C0] mld_send_initial_cr+0x288/0x550 [ 101.496793][ C0] mld_dad_work+0x46/0x490 [ 101.501229][ C0] ? process_one_work+0x868/0x15d0 [ 101.506359][ C0] process_one_work+0x94a/0x15d0 [ 101.511395][ C0] ? __lock_acquire+0xab9/0xd20 [ 101.516278][ C0] ? __pfx_process_one_work+0x10/0x10 [ 101.521684][ C0] ? assign_work+0x3a1/0x410 [ 101.526318][ C0] worker_thread+0x9b0/0xee0 [ 101.530961][ C0] kthread+0x711/0x8a0 [ 101.535061][ C0] ? __pfx_worker_thread+0x10/0x10 [ 101.540217][ C0] ? __pfx_kthread+0x10/0x10 [ 101.544826][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 101.550048][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.555280][ C0] ? __pfx_kthread+0x10/0x10 [ 101.559890][ C0] ret_from_fork+0x599/0xb30 [ 101.564505][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 101.569643][ C0] ? __switch_to_asm+0x39/0x70 [ 101.574502][ C0] ? __switch_to_asm+0x33/0x70 [ 101.579280][ C0] ? __pfx_kthread+0x10/0x10 [ 101.583888][ C0] ret_from_fork_asm+0x1a/0x30 [ 101.588680][ C0] [ 101.592213][ C0] Kernel Offset: disabled [ 101.596560][ C0] Rebooting in 86400 seconds..