last executing test programs: 12.468522451s ago: executing program 4 (id=113): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="20681f399cb518000000ffffffff000000000000000036"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setns(0xc9, 0x0) mmap(&(0x7f0000114000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0xb95f8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000100)) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000340)={0x0, 0xeb2, 0xaa, "dd82ebff78c0a7126a96cbb5337c9628c78a9581f280597de42a82d9bfd67458b4d66c35f0a789c5ba8fd889fa8f0f28a8b73252ba894e965bfba72b06ef8d6b86dc7180eae80cc2c8e4c3c076ff7c314d5c9c99ef6559eabe33f4c998ce6e12135502f9eec9adc408f9e65904f3da71bc7932d2532f3b68294f348f7812ad37682f6b3473770d386e838e10f894c5794a0cb46196f20da20c902a278eced11ea80c7a8dada89b83e58f"}, 0xb2) writev(r0, 0x0, 0x0) 11.482094314s ago: executing program 4 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000100)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x74, r2, {0x4, 0xfff2}, {0xafabc05531515610, 0xd}, {0xc, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x401c005}, 0x24048004) 10.116383697s ago: executing program 0 (id=121): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 10.050913478s ago: executing program 4 (id=123): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) eventfd2(0x1, 0x0) creat(&(0x7f0000000040)='./trace/set_event\x00', 0x0) 8.546108325s ago: executing program 1 (id=126): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xe, 0x0, &(0x7f0000000780)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.518155799s ago: executing program 1 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20000040) 7.447161051s ago: executing program 1 (id=131): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRqsvW+3KpZS6F6uUYkPbtewiU5tC7eLSSw+F9lqwkFdGaP2BpOJK1mHV/gOlzTmQSyCJSfAhPvuSQK65JM41JoEQExQrARMShdkPeW3t6sNeaYT0+8GreV+9M/s8z47XMy/ecQAH1kj2I404GhGXkohi4/dpRPTVegMR1fp+K8uLE18vL04ksbr6ty+SSCLi0fLiRPO1ksb2cGMwEBHv/zGJH/1nfdzZ+YXp8UqlPNMYn5y7euPk7PzCb6aujl8pXylfO3Xmd2Onx86Mnh3rWq2PPz5/96uf//mT6jevf3v7y/+/msT5GGrMtdbRLSMxsvaetCpExHi3g+Wkp1FPa51JYZOD0h1OCgCAjtKWe7ifRDF64snNWzHe+SDX5AAAAICuWO2JWAUAAAD2ucT6HwAAAPa55vcAHi0vTjRbvt9I2F0PL0TEcL3+lUarzxSiWtsORG9EHHqUROtjrUn9sBc2EhEPPjr7VtZih55D3kh1KSJ+2u78J7X6h2tPca+vP42I0S7EH3lmvNfq/3Vf5/rPdyF+3vUDcDDdu1C/kK2//qVr9z8Rj2v/TtR6/Su0uXY9j5HBp8e7ff1r3v+trLv/e1J/T4f7v79uMcat116+2Wkuew9/f/dPbzZbFj/bvlBR2/BwKeJnhXb1J2v1Jx3qv/TUK/V1jFH87ma501ze9a++EnE82tfflGz8/xOdnJyqlEfrP9vGWHpv7I1O8fOuPzv/hzrUv9n5v7HFGP+4ePFOp7nN608/60v+Xus1/4T9a3xubuZURF/yl/W/P914oL2D5j7N18jqP/GLjT//7erPQlQb70O2FlhqbLPxv5+J+Yfbt97eqP5s7Zfn+b/8nOf/v1uM8ct3/3ei01zr+jdrWfwHSX0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNaUQMRZKW1vppWipFHI6IH8ehtHJ9du5Xk9f/ee1yNhcxHL3p5FSlPBoRxfo4ycanav0n49PPjH8bEUci4qXiYG1cmrheuZx38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw5HBFDkaSliEgjYqWYpqVS3lkBAAAAXTecdwIAAADAjrP+BwAAgP1vg/V/UtjNRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANivjhy7dz+JiOq5wVrL9DXmenPNDNhpad4JALnpyTsBIDeFvBMAcrPNNb7bBdiHkk3mBzrO9Hc9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2ruNH791PIqJ6brDWMn2Nud62RxzbxeyAnZTmnQCQm56NJgu7lwew+3zE4eBqv8YHDo6eSDbZYyCiuU/16Zn+bcb6/NNtHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHjJUa0laioi01k/TUiniBxExHL3J5FSlPBoRP4yID4u9/dm4P++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LrZ+YXp8UqlPKOjo5NvJ9kbadQ7ef/NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHmbnF6bHK5XyzGzemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m51fmB6vVMozW+jc2c7OLZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/fBwAA//9VihLz") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xc8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740), 0x208e24b) 7.254718895s ago: executing program 0 (id=132): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) listen(r0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./sec/tomoyo/query\x00') r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) 7.093874669s ago: executing program 0 (id=133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0xcb, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, &(0x7f00000006c0)=0x10001, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="020602000200000002"], 0x10}}, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24008044) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg2\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xd, 0x8, 0xcdc, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x7800, 0x8, 0xa, 0xffffff4a}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x50, r6, 0x8, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x8000000000000000, 0x100000000000}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0xfffffffe, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 6.857990835s ago: executing program 3 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000480)={[0x4]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x10a0, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockname(r4, 0x0, &(0x7f0000000280)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x8) eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./trace/set_event\x00', 0x0) 5.415302969s ago: executing program 1 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x9e, 0x4) sendto$inet6(r3, 0x0, 0x21, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) unshare(0x2040400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x7ff, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) recvmmsg(r3, &(0x7f0000000940), 0x0, 0x40022063, 0x0) 5.075778518s ago: executing program 3 (id=138): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/ip_tables_targets\x00') setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000580)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @none, 0x7}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xa}, [@typed={0x25, 0x1, 0x0, 0x0, @str='A.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x00'}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) pipe2$watch_queue(&(0x7f0000000180), 0x80) add_key(&(0x7f0000000200)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f8", 0x1, 0xfffffffffffffffe) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 4.914425942s ago: executing program 2 (id=139): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 4.913929762s ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "245f48edcb63b703", "32d8ea43b6bfb410c5913d8c904f3a01", "a2913283", "866c88900778f2a3"}, 0x28) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f00000001c0)=0xa, 0x1959cc36) openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/net/bridge0/bridge/multicast_querier\x00', 0x2, 0xe) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fanotify_init(0x8, 0x80000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000300)={0x400a, 0x7, 0x80, 0x40e0, 0xc}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540), 0x42003, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {0x1, 0x6, 0x4006}, 0x189, 0x0, 0x0, 0x10000002, 0x5, 0x8, 0x38, 0xa, 0x7b, 0x4, 0x2, 0x1, 0x84, 0x10001, 0x9, 0xfff, 0x100000004, 0x40000000000000ae}}, 0xa0) unlinkat(0xffffffffffffff9c, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4.680018537s ago: executing program 2 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20000040) 4.080063592s ago: executing program 3 (id=142): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='27', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.069105382s ago: executing program 1 (id=143): r0 = syz_open_dev$sndctrl(&(0x7f0000001280), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000101c0)={0x0, 0x49dc1e16, 0x0, 0x2, '\x00', '\x00', '\x00', 0xffdfffff, 0x1ff, 0xfffffffd, 0x1000000, "b6855a32474ffa64f778ddcf29c94337"}) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xf3b36000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000200)=0x9, 0x8, 0x0) io_setup(0x7f, &(0x7f0000001440)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 3.974368584s ago: executing program 2 (id=144): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="20681f399cb518000000ffffffff000000000000000036"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setns(0xc9, 0x0) mmap(&(0x7f0000114000/0x2000)=nil, 0x2000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0xb95f8000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @any, 0x1}}}, 0xe) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000000c0), 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) write$tun(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000100)) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000340)={0x0, 0xeb2, 0xaa, "dd82ebff78c0a7126a96cbb5337c9628c78a9581f280597de42a82d9bfd67458b4d66c35f0a789c5ba8fd889fa8f0f28a8b73252ba894e965bfba72b06ef8d6b86dc7180eae80cc2c8e4c3c076ff7c314d5c9c99ef6559eabe33f4c998ce6e12135502f9eec9adc408f9e65904f3da71bc7932d2532f3b68294f348f7812ad37682f6b3473770d386e838e10f894c5794a0cb46196f20da20c902a278eced11ea80c7a8dada89b83e58f"}, 0xb2) writev(r0, 0x0, 0x0) 3.939331125s ago: executing program 4 (id=145): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) listen(r0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) acct(&(0x7f0000000140)='./sec/tomoyo/query\x00') r4 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, 0x0, 0x0) 3.250310972s ago: executing program 4 (id=146): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000a580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x30000894}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 3.114249825s ago: executing program 2 (id=147): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@txtime={{0x14}}], 0x14}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = openat$cgroup_procs(r5, 0x0, 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000006c0), 0x12) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xc8}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a00000008000000ff0f000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000280), 0x0, 0x0, 0x0, 0x5, r8}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000740), 0x208e24b) 3.030486007s ago: executing program 3 (id=148): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x20, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 2.158456057s ago: executing program 4 (id=149): r0 = socket$inet(0x2, 0x3, 0x2f) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x15, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x39}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000700)='cpuset.sched_load_balance\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r6, &(0x7f0000000740)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0xd) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r9}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)}, 0x20) close(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) 2.105602159s ago: executing program 0 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r0, 0x8, &(0x7f0000000480)={[0x4]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x10a0, &(0x7f0000ffa000/0x3000)=nil) shmat(r3, &(0x7f0000ffa000/0x4000)=nil, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getsockname(r4, 0x0, &(0x7f0000000280)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x8) eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./trace/set_event\x00', 0x0) 1.296923388s ago: executing program 1 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x4, 0x400, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000340), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b924, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="27030200affd14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 1.153055422s ago: executing program 2 (id=152): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x4e22, 0x2, @local, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0x8001}}], 0x10}, 0x4) 1.086344703s ago: executing program 3 (id=153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x9, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) socket$inet(0x2, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000380)=0x9e, 0x4) sendto$inet6(r3, 0x0, 0x21, 0x10004004, &(0x7f0000000140)={0xa, 0x4e21, 0x765, @empty, 0x905e3b80}, 0x1c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x82) unshare(0x2040400) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x7ff, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0x6}, {0x5, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20000000) recvmmsg(r3, &(0x7f0000000940), 0x0, 0x40022063, 0x0) 560.412766ms ago: executing program 0 (id=154): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/ip_tables_targets\x00') setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000580)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) close(0x3) connect(r0, &(0x7f00000004c0)=@rc={0x1f, @none, 0x7}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xa}, [@typed={0x25, 0x1, 0x0, 0x0, @str='A.AAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x00'}]}, 0x3c}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x5) accept4(r4, 0x0, 0x0, 0x800) pipe2$watch_queue(&(0x7f0000000180), 0x80) setsockopt$inet_tcp_int(r4, 0x6, 0x9, &(0x7f0000000040)=0xa, 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 309.823932ms ago: executing program 2 (id=155): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) eventfd2(0x1, 0x0) creat(&(0x7f0000000040)='./trace/set_event\x00', 0x0) 0s ago: executing program 3 (id=156): syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r5, 0x0, 0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@debug={'debug', 0x3d, 0xada3}}, {@noxattr}, {@posixacl}, {@access_client}, {@dfltgid}, {@cache_mmap}]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 60.654036][ T4169] cgroup: Unknown subsys name 'net' [ 60.785568][ T4169] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.233879][ T4169] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.943756][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.953109][ T4188] rdma_rxe: rxe_register_device failed with error -23 [ 63.978761][ T4188] rdma_rxe: failed to add rxe_eth0 [ 63.987709][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.015485][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.018604][ T4194] rdma_rxe: rxe_register_device failed with error -23 [ 64.034360][ T4192] rdma_rxe: rxe_register_device failed with error -23 [ 64.044541][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 64.069357][ T4192] rdma_rxe: failed to add rxe_eth0 [ 64.079305][ T4194] rdma_rxe: failed to add rxe_eth0 [ 64.087827][ T4193] rdma_rxe: failed to add rxe_eth0 [ 64.204689][ T4183] infiniband rxe0: set active [ 64.210405][ T4183] infiniband rxe0: added rxe_eth0 [ 64.237695][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.320148][ T4183] RDS/IB: rxe0: added [ 64.324756][ T4183] smc: adding ib device rxe0 with port count 1 [ 64.331276][ T4183] smc: ib device rxe0 port 1 has pnetid [ 64.354178][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.363581][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.439506][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 64.522814][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 64.582991][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.657302][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.689240][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.725755][ T4188] device bridge_slave_0 entered promiscuous mode [ 64.753142][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.760637][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.768954][ T4188] device bridge_slave_1 entered promiscuous mode [ 64.793104][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.800815][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.810599][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 64.838160][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 64.854455][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.872213][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.882987][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.891716][ T4193] device bridge_slave_0 entered promiscuous mode [ 64.944366][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.957149][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.966825][ T4193] device bridge_slave_1 entered promiscuous mode [ 64.976606][ T4188] team0: Port device team_slave_0 added [ 65.002012][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.014901][ T4188] team0: Port device team_slave_1 added [ 65.025849][ T3849] infiniband rxe0: set active [ 65.063171][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.085043][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.131997][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.142555][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.159292][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.198457][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.247971][ T4193] team0: Port device team_slave_0 added [ 65.255802][ T4193] team0: Port device team_slave_1 added [ 65.262102][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.269601][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.295876][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.322252][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.329510][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.337611][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.352970][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.361330][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.369181][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.377300][ T4192] device bridge_slave_0 entered promiscuous mode [ 65.396555][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.405872][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.417927][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.434694][ T4183] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.434758][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.453728][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.461894][ T4192] device bridge_slave_1 entered promiscuous mode [ 65.486973][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.509187][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.547808][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.598719][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.625358][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.655746][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.669313][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.680311][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.696159][ T4188] device hsr_slave_0 entered promiscuous mode [ 65.703469][ T4188] device hsr_slave_1 entered promiscuous mode [ 65.723104][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.736700][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.825223][ T4193] device hsr_slave_0 entered promiscuous mode [ 65.834504][ T4193] device hsr_slave_1 entered promiscuous mode [ 65.844081][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.854361][ T4193] Cannot create hsr debugfs directory [ 65.873853][ T4192] team0: Port device team_slave_0 added [ 65.883269][ T4194] team0: Port device team_slave_0 added [ 65.891914][ T4194] team0: Port device team_slave_1 added [ 65.923811][ T4192] team0: Port device team_slave_1 added [ 65.930453][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 65.937252][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 65.952770][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.959977][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.986163][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.998759][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.006694][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.015146][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 66.034872][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 66.044826][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.055954][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 66.078466][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.100279][ T3849] infiniband rxe0: set active [ 66.106381][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.114536][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.140961][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.176490][ T21] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.187669][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.195047][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.222682][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.265381][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.272669][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.279978][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.287568][ T4194] Cannot create hsr debugfs directory [ 66.337876][ T4192] device hsr_slave_0 entered promiscuous mode [ 66.344803][ T4192] device hsr_slave_1 entered promiscuous mode [ 66.352094][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.360110][ T4192] Cannot create hsr debugfs directory [ 66.567696][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 66.615377][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.642573][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.655345][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.684312][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.724152][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.731796][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.740315][ T4183] device bridge_slave_0 entered promiscuous mode [ 66.748665][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.756055][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.764411][ T4183] device bridge_slave_1 entered promiscuous mode [ 66.798865][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.813376][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.831594][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.847233][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.857364][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.885202][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.902537][ T4183] team0: Port device team_slave_0 added [ 66.911615][ T4183] team0: Port device team_slave_1 added [ 66.932912][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.940157][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.966380][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.980247][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.987209][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.014285][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.061579][ T4192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.072737][ T4192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.082055][ T4192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.096822][ T4183] device hsr_slave_0 entered promiscuous mode [ 67.104024][ T4183] device hsr_slave_1 entered promiscuous mode [ 67.110790][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.118359][ T4183] Cannot create hsr debugfs directory [ 67.124875][ T4192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.152286][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.190975][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.204517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.213930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.250882][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.260457][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.269648][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.277086][ T4253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.286385][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.319661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.328995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.337766][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.344838][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.353865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.380330][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.436756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.446011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.456076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.465149][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.490376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.500845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.521157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.529992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.538543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.547283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.556044][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.579246][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.597569][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.607341][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.624306][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.641264][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.678367][ T4183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.706593][ T4183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.722550][ T4183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.742001][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.760591][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.768967][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.777566][ T4183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.806778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.816260][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.827128][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.834253][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.846971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.855386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.863833][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.875291][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.884565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.897378][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.906210][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.913348][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.937207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.946192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.955188][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.962313][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.999797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.007750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.016973][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 68.023921][ T4236] Bluetooth: hci1: command 0x041b tx timeout [ 68.031388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.042304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.051341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.060487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.069853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.078234][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.085463][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.089645][ T4236] Bluetooth: hci3: command 0x041b tx timeout [ 68.095339][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 68.105854][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 68.112610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.146839][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.164768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.174352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.184877][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.208598][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.241189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.251255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.260682][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.271733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.280862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.290150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.297949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.305822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.314785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.323877][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.330979][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.338878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.348276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.357211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.366202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.375511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.386590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.395115][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.404475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.418196][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.425871][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.437417][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.451653][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.465807][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.473138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.482851][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.492773][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.499887][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.519034][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.530614][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.561601][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.571654][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.580966][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.590072][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.622070][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.631370][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.645991][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.667141][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.703416][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.714133][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.724273][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.750349][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.763101][ T4188] device veth0_vlan entered promiscuous mode [ 68.786132][ T4194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.814476][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.827032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.838478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.848231][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.862266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.875888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.884785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.893858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.903238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.911886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.919920][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.927891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.940372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.950242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.958670][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.965779][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.975043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.988452][ T4188] device veth1_vlan entered promiscuous mode [ 69.036179][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.057909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.069032][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.077327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.090542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.099131][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.106227][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.116541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.125862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.135626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.146158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.155339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.163925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.172624][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.181171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.200124][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.211079][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.224866][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.239198][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.247084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.256888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.265958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.274864][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.284206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.293810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.344370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.359903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.368594][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.386455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.410458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.457548][ T4188] device veth0_macvtap entered promiscuous mode [ 69.466299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.474798][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.483913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.493118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.502810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.511773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.519813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.547730][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.568978][ T4193] device veth0_vlan entered promiscuous mode [ 69.588735][ T4188] device veth1_macvtap entered promiscuous mode [ 69.604353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.618324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.628855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.637063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.651432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.664201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.674570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.685969][ T4192] device veth0_vlan entered promiscuous mode [ 69.718035][ T4193] device veth1_vlan entered promiscuous mode [ 69.729810][ T4192] device veth1_vlan entered promiscuous mode [ 69.761524][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.785554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.800152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.811925][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.828327][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.841054][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.853423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.875000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.891189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.905817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.917231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.934996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.946322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.957873][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.967242][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.976415][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.985378][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.998382][ T4193] device veth0_macvtap entered promiscuous mode [ 70.032716][ T4193] device veth1_macvtap entered promiscuous mode [ 70.042906][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.054133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.062634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.072084][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.089615][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 70.095769][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 70.118506][ T4192] device veth0_macvtap entered promiscuous mode [ 70.126375][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.136011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.145248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.154105][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.163292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.170143][ T4184] Bluetooth: hci3: command 0x040f tx timeout [ 70.173442][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 70.185724][ T4183] device veth0_vlan entered promiscuous mode [ 70.195252][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 70.207864][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.216532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.232687][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.244005][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.255873][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.269893][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.280736][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.292337][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.305566][ T4183] device veth1_vlan entered promiscuous mode [ 70.320542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.331540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.340528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.349596][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.358150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.373137][ T4192] device veth1_macvtap entered promiscuous mode [ 70.386782][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.400410][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.409929][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.418660][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.447805][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.458994][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.469865][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.480390][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.492680][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.511072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.519627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.527759][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.536244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.544837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.553659][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.563544][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.571940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.606983][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.621328][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.631721][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.642449][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.654735][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.664548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.673512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.682677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.691965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.702208][ T4183] device veth0_macvtap entered promiscuous mode [ 70.712018][ T4194] device veth0_vlan entered promiscuous mode [ 70.732617][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.742623][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.751940][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.761165][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.770124][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.784490][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.803622][ T4183] device veth1_macvtap entered promiscuous mode [ 70.820117][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.835422][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.859433][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.867388][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.886480][ T4194] device veth1_vlan entered promiscuous mode [ 70.904832][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.917505][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.927836][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.938901][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.949312][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.960771][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.972915][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.985316][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.996076][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.006174][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.017153][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.027017][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.037645][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.048964][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.057660][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.066144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.075046][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.084943][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.094020][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.121105][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.130473][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.162137][ T4183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.171105][ T4183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180236][ T4183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.188965][ T4183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201291][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.213177][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.219806][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.292542][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.315716][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.330334][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.332041][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.352645][ T4194] device veth0_macvtap entered promiscuous mode [ 71.383700][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.394853][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.406309][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.414883][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.426610][ T4194] device veth1_macvtap entered promiscuous mode [ 71.455613][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.480217][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.501446][ T4293] autofs4:pid:4293:autofs_fill_super: called with bogus options [ 71.529002][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.550594][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.561009][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.572039][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.582014][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.592550][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.602627][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.614493][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.626267][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.638184][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.649057][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.666842][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.678343][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.693954][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.713078][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.733625][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.744817][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.756919][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.818108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.846094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.867405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.900441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.976977][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.996842][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.006092][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.015749][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.265375][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 72.390429][ T4304] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 72.657007][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.669632][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 72.675792][ T4235] Bluetooth: hci4: command 0x0419 tx timeout [ 72.697099][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.713932][ T4294] Bluetooth: hci1: command 0x0419 tx timeout [ 72.726011][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 72.781235][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.788836][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.810926][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.886382][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.952353][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.986853][ T4309] Zero length message leads to an empty skb [ 72.998975][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.021304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.099493][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.126458][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.184166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.215420][ T4316] UBIFS error (pid: 4316): cannot open "./file0", error -22 [ 73.220602][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.339841][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.426957][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.439876][ T4323] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.470731][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.808679][ T4253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.818807][ T4253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.854044][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.099446][ T4335] FAULT_INJECTION: forcing a failure. [ 74.099446][ T4335] name fail_futex, interval 1, probability 0, space 0, times 1 [ 74.170783][ T4335] CPU: 0 PID: 4335 Comm: syz.4.5 Not tainted syzkaller #0 [ 74.177971][ T4335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 74.188077][ T4335] Call Trace: [ 74.191384][ T4335] [ 74.194345][ T4335] dump_stack_lvl+0x188/0x250 [ 74.199076][ T4335] ? stack_trace_snprint+0xe0/0xe0 [ 74.204221][ T4335] ? show_regs_print_info+0x20/0x20 [ 74.209451][ T4335] ? load_image+0x410/0x410 [ 74.213989][ T4335] ? __kasan_slab_alloc+0xa9/0xc0 [ 74.219050][ T4335] ? slab_post_alloc_hook+0x4c/0x380 [ 74.224369][ T4335] ? kmem_cache_alloc+0x15d/0x280 [ 74.229420][ T4335] ? security_file_alloc+0x30/0x110 [ 74.234665][ T4335] ? __alloc_file+0xc2/0x240 [ 74.239284][ T4335] ? alloc_empty_file+0x90/0x180 [ 74.244260][ T4335] ? alloc_file+0x5c/0x510 [ 74.248714][ T4335] should_fail+0x383/0x4b0 [ 74.253204][ T4335] get_futex_key+0x1a1/0x12d0 [ 74.257929][ T4335] ? __lock_acquire+0x13b3/0x7d40 [ 74.262991][ T4335] ? futex_wait_restart+0x250/0x250 [ 74.268347][ T4335] futex_wake+0x101/0x540 [ 74.272725][ T4335] ? futex_wait+0x680/0x680 [ 74.277277][ T4335] ? verify_lock_unused+0x140/0x140 [ 74.282524][ T4335] ? verify_lock_unused+0x140/0x140 [ 74.287764][ T4335] do_futex+0xd83/0x12b0 [ 74.292037][ T4335] ? __raw_spin_lock_init+0x41/0x100 [ 74.297370][ T4335] ? futex_exit_release+0x1c0/0x1c0 [ 74.302618][ T4335] ? __context_tracking_exit+0x4c/0x80 [ 74.308152][ T4335] __se_sys_futex+0x389/0x420 [ 74.312896][ T4335] ? __x64_sys_futex+0xf0/0xf0 [ 74.317707][ T4335] ? __x64_sys_futex+0x1d/0xf0 [ 74.322514][ T4335] do_syscall_64+0x4c/0xa0 [ 74.326960][ T4335] ? clear_bhb_loop+0x30/0x80 [ 74.331664][ T4335] ? clear_bhb_loop+0x30/0x80 [ 74.336373][ T4335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.342345][ T4335] RIP: 0033:0x7f9b93b1e559 [ 74.346804][ T4335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.366440][ T4335] RSP: 002b:00007f9b91d760e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 74.374895][ T4335] RAX: ffffffffffffffda RBX: 00007f9b93da5fa8 RCX: 00007f9b93b1e559 [ 74.382891][ T4335] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b93da5fac [ 74.390890][ T4335] RBP: 00007f9b93da5fa0 R08: 0002c99de02f6fba R09: 0000000000000000 [ 74.398898][ T4335] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 74.406901][ T4335] R13: 00007f9b93da6038 R14: 00007ffd325340c0 R15: 00007ffd325341a8 [ 74.414940][ T4335] [ 75.748900][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.874835][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.978682][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.096145][ T4314] syz.1.2 (4314) used greatest stack depth: 20832 bytes left [ 76.109881][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.227239][ T4363] ======================================================= [ 76.227239][ T4363] WARNING: The mand mount option has been deprecated and [ 76.227239][ T4363] and is ignored by this kernel. Remove the mand [ 76.227239][ T4363] option from the mount to silence this warning. [ 76.227239][ T4363] ======================================================= [ 76.326771][ T4363] 9pnet_virtio: no channels available for device 127.0.0.1 [ 76.660465][ T4375] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.880507][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 76.996199][ T4387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.079861][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 77.111327][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 77.240425][ T4390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.297280][ T4390] bond1: (slave bond0): making interface the new active one [ 77.433132][ T4409] FAULT_INJECTION: forcing a failure. [ 77.433132][ T4409] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 77.464877][ T4390] bond1: (slave bond0): Enslaving as an active interface with an up link [ 77.561635][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 77.628505][ T4409] CPU: 1 PID: 4409 Comm: syz.1.27 Not tainted syzkaller #0 [ 77.635870][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 77.645952][ T4409] Call Trace: [ 77.649256][ T4409] [ 77.652218][ T4409] dump_stack_lvl+0x188/0x250 [ 77.656930][ T4409] ? show_regs_print_info+0x20/0x20 [ 77.662158][ T4409] ? load_image+0x410/0x410 [ 77.666697][ T4409] ? pcpu_alloc+0x11e6/0x16d0 [ 77.671419][ T4409] ? __lock_acquire+0x7d40/0x7d40 [ 77.676475][ T4409] should_fail+0x383/0x4b0 [ 77.680924][ T4409] _copy_from_user+0x2e/0x170 [ 77.685628][ T4409] bpf_prog_create_from_user+0xff/0x420 [ 77.691201][ T4409] ? seccomp_attach_filter+0xbb0/0xbb0 [ 77.696696][ T4409] do_seccomp+0x808/0x16a0 [ 77.701145][ T4409] ? __lock_acquire+0x7d40/0x7d40 [ 77.706203][ T4409] ? prctl_set_seccomp+0x60/0x60 [ 77.711175][ T4409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 77.717197][ T4409] ? lockdep_hardirqs_on+0x94/0x140 [ 77.722425][ T4409] do_syscall_64+0x4c/0xa0 [ 77.726871][ T4409] ? clear_bhb_loop+0x30/0x80 [ 77.731578][ T4409] ? clear_bhb_loop+0x30/0x80 [ 77.736290][ T4409] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 77.742214][ T4409] RIP: 0033:0x7fd8bc4db559 [ 77.746652][ T4409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.766362][ T4409] RSP: 002b:00007fd8ba733028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 77.774802][ T4409] RAX: ffffffffffffffda RBX: 00007fd8bc762fa0 RCX: 00007fd8bc4db559 [ 77.782825][ T4409] RDX: 0000200000000980 RSI: 000000000000000c RDI: 0000000000000001 [ 77.790831][ T4409] RBP: 00007fd8bc572ab8 R08: 0000000000000000 R09: 0000000000000000 [ 77.798828][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.806817][ T4409] R13: 00007fd8bc763038 R14: 00007fd8bc762fa0 R15: 00007ffe7733e668 [ 77.814844][ T4409] [ 78.366356][ T4390] syz.2.22 (4390) used greatest stack depth: 19568 bytes left [ 78.484096][ T4422] device syzkaller0 entered promiscuous mode [ 78.569388][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 78.901861][ T4448] tmpfs: Unknown parameter 'noswap' [ 80.659319][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 80.741758][ T4375] chnl_net:caif_netlink_parms(): no params data found [ 82.213326][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.374837][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.451756][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.480133][ T4375] device bridge_slave_0 entered promiscuous mode [ 82.495656][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.511466][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.520321][ T4375] device bridge_slave_1 entered promiscuous mode [ 82.558769][ T144] device hsr_slave_0 left promiscuous mode [ 82.573746][ T144] device hsr_slave_1 left promiscuous mode [ 82.592288][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.607725][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.627376][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.637438][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.648688][ T144] device bridge_slave_1 left promiscuous mode [ 82.662718][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.709992][ T144] device bridge_slave_0 left promiscuous mode [ 82.726537][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.736297][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 82.784893][ T144] device veth1_macvtap left promiscuous mode [ 82.806200][ T144] device veth0_macvtap left promiscuous mode [ 82.823821][ T144] device veth1_vlan left promiscuous mode [ 82.843119][ T144] device veth0_vlan left promiscuous mode [ 83.697682][ T144] team0 (unregistering): Port device team_slave_1 removed [ 83.747296][ T144] team0 (unregistering): Port device team_slave_0 removed [ 83.805363][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.849203][ T4517] Invalid ELF header magic: != ELF [ 83.871669][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.239128][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 84.249130][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 84.259107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 85.289102][ C0] sched: RT throttling activated [ 85.318056][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 85.342375][ T4524] 9pnet_virtio: no channels available for device 127.0.0.1 [ 85.358867][ T144] bond0 (unregistering): Released all slaves [ 85.659107][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 85.699113][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 85.908952][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.998141][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.352904][ T4375] team0: Port device team_slave_0 added [ 86.374554][ T4375] team0: Port device team_slave_1 added [ 86.467061][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.525538][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.573169][ T1108] cfg80211: failed to load regulatory.db [ 86.657059][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.747380][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.762107][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.871418][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.971308][ T4551] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 87.053752][ T4551] bond1: (slave lo): Enslaving as an active interface with an up link [ 87.091701][ T4551] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 87.431759][ T4375] device hsr_slave_0 entered promiscuous mode [ 87.446582][ T4375] device hsr_slave_1 entered promiscuous mode [ 87.480346][ T4375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.487963][ T4375] Cannot create hsr debugfs directory [ 88.237479][ T4598] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.321227][ T4600] Invalid ELF header magic: != ELF [ 88.821216][ T4601] netlink: 168 bytes leftover after parsing attributes in process `syz.1.60'. [ 89.025899][ T4598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.60'. [ 90.513268][ T4375] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.590486][ T4375] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.632452][ T4375] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.674373][ T4375] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.784987][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.821542][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.857641][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.886623][ T4375] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.949833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.973352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.103614][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.110835][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.164495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.173398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.182049][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.189162][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.208095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.217019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.278873][ T4648] device lo entered promiscuous mode [ 92.530629][ T4662] 9pnet_virtio: no channels available for device 127.0.0.1 [ 92.799427][ T4648] device tunl0 entered promiscuous mode [ 92.912282][ T4648] device gre0 entered promiscuous mode [ 93.009404][ T4648] device gretap0 entered promiscuous mode [ 93.203827][ T4648] device erspan0 entered promiscuous mode [ 93.360987][ T4648] device ip_vti0 entered promiscuous mode [ 93.538938][ T4648] device ip6_vti0 entered promiscuous mode [ 93.752232][ T4648] device sit0 entered promiscuous mode [ 93.825020][ T4684] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'. [ 93.873236][ T4648] device ip6tnl0 entered promiscuous mode [ 94.005266][ T4648] device ip6gre0 entered promiscuous mode [ 94.120574][ T4648] device syz_tun entered promiscuous mode [ 94.196108][ T4648] device ip6gretap0 entered promiscuous mode [ 94.271343][ T4648] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.280196][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.312877][ T4648] device bridge0 entered promiscuous mode [ 94.421305][ T4648] device vcan0 entered promiscuous mode [ 94.447468][ T4648] device bond0 entered promiscuous mode [ 94.459232][ T4648] device bond_slave_0 entered promiscuous mode [ 94.486961][ T4648] device bond_slave_1 entered promiscuous mode [ 94.529035][ T4648] device team0 entered promiscuous mode [ 94.551009][ T4648] device team_slave_0 entered promiscuous mode [ 94.563965][ T4648] device team_slave_1 entered promiscuous mode [ 94.653394][ T4648] device dummy0 entered promiscuous mode [ 94.758222][ T4648] device nlmon0 entered promiscuous mode [ 94.782069][ T4648] device caif0 entered promiscuous mode [ 94.847702][ T4692] Invalid ELF header magic: != ELF [ 94.895866][ T4648] device batadv0 entered promiscuous mode [ 95.136639][ T4648] device vxcan0 entered promiscuous mode [ 95.187057][ T4648] device vxcan1 entered promiscuous mode [ 95.226150][ T4648] device veth0 entered promiscuous mode [ 95.285496][ T4648] device veth1 entered promiscuous mode [ 95.439753][ T4648] device wg0 entered promiscuous mode [ 95.479877][ T4648] device wg1 entered promiscuous mode [ 95.511010][ T4648] device wg2 entered promiscuous mode [ 95.539658][ T4648] device veth0_to_bridge entered promiscuous mode [ 95.598760][ T4648] device veth1_to_bridge entered promiscuous mode [ 95.639170][ T4703] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.670254][ T4648] device veth0_to_bond entered promiscuous mode [ 95.729295][ T4648] device veth1_to_bond entered promiscuous mode [ 95.786434][ T4648] device veth0_to_team entered promiscuous mode [ 95.844243][ T4648] device veth1_to_team entered promiscuous mode [ 95.902414][ T4648] device veth0_to_batadv entered promiscuous mode [ 95.921506][ T4648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.944891][ T4648] device batadv_slave_0 entered promiscuous mode [ 95.978699][ T4648] device veth1_to_batadv entered promiscuous mode [ 96.003114][ T4648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.027951][ T4648] device batadv_slave_1 entered promiscuous mode [ 96.073972][ T4648] device xfrm0 entered promiscuous mode [ 96.117503][ T4648] device veth0_to_hsr entered promiscuous mode [ 96.188972][ T4648] device veth1_to_hsr entered promiscuous mode [ 96.220626][ T4648] device hsr0 entered promiscuous mode [ 96.233841][ T4648] device veth1_virt_wifi entered promiscuous mode [ 96.244620][ T4648] device veth0_virt_wifi entered promiscuous mode [ 96.262056][ T4648] device virt_wifi0 entered promiscuous mode [ 96.314834][ T4648] device vlan0 entered promiscuous mode [ 96.330029][ T4648] device vlan1 entered promiscuous mode [ 96.338099][ T4648] device macvlan0 entered promiscuous mode [ 96.354494][ T4648] device macvlan1 entered promiscuous mode [ 96.364440][ T4648] device ipvlan0 entered promiscuous mode [ 96.371106][ T4648] device ipvlan1 entered promiscuous mode [ 96.459815][ T4648] device macvtap0 entered promiscuous mode [ 96.469746][ T4648] device macsec0 entered promiscuous mode [ 96.494437][ T4648] device geneve0 entered promiscuous mode [ 96.509725][ T4648] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.524469][ T4648] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.534016][ T4648] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.547832][ T4648] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.557336][ T4648] device geneve1 entered promiscuous mode [ 96.599398][ T4648] device netdevsim0 entered promiscuous mode [ 96.614889][ T4648] device netdevsim1 entered promiscuous mode [ 96.633675][ T4648] device netdevsim2 entered promiscuous mode [ 96.651795][ T4648] device netdevsim3 entered promiscuous mode [ 96.674409][ T4648] device wlan0 entered promiscuous mode [ 96.706571][ T4648] device wlan1 entered promiscuous mode [ 96.719259][ T4648] device bond1 entered promiscuous mode [ 96.764665][ T4680] netlink: 16 bytes leftover after parsing attributes in process `syz.1.74'. [ 96.779420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.815095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.861293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.879192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.946689][ T4716] netlink: 260 bytes leftover after parsing attributes in process `syz.1.78'. [ 96.965143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.982286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.005134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.116155][ T4375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.160941][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.177880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.198395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.225667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.310465][ T4732] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 97.838962][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.861936][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.903113][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.981275][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.001438][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.085137][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.112330][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.178827][ T4375] device veth0_vlan entered promiscuous mode [ 98.199848][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.255981][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.322646][ T4375] device veth1_vlan entered promiscuous mode [ 98.465150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.505554][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 98.546483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 98.598447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.610975][ T4375] device veth0_macvtap entered promiscuous mode [ 98.631538][ T4375] device veth1_macvtap entered promiscuous mode [ 98.681917][ T4766] netlink: 16 bytes leftover after parsing attributes in process `syz.0.89'. [ 98.716790][ T4375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.768392][ T4772] netlink: 168 bytes leftover after parsing attributes in process `syz.0.89'. [ 98.771912][ T4375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.787736][ T4756] 9pnet: Insufficient options for proto=fd [ 98.815632][ T4375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.836726][ T4375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.885152][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.913403][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 98.925366][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 98.964632][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.989273][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.021658][ T4375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.052576][ T4375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.079345][ T4375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.109100][ T4375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.144420][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.183850][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.200021][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.235822][ T4375] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.275433][ T4375] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.295650][ T4375] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.325985][ T4375] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.476840][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.506537][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.527554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.563856][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.582017][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.603667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.006709][ T4795] Invalid ELF header magic: != ELF [ 102.055045][ T4823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.262115][ T4823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.102'. [ 102.324734][ T4824] netlink: 168 bytes leftover after parsing attributes in process `syz.4.102'. [ 102.769244][ T4259] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.989206][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.182527][ T4259] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 103.230578][ T4259] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 103.281158][ T7] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 103.400080][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.410689][ T4259] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 103.464324][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.546706][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.624522][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 103.788195][ T4259] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 103.819509][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.858290][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.906275][ T4259] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 103.923547][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.060722][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.080433][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.100303][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.183636][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.200307][ T4828] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 104.208743][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.229178][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.239414][ T4828] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 104.269430][ T4828] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 104.329556][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.343048][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.364148][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.409628][ T4828] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 104.451626][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.470976][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.490834][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.512762][ T4260] usb 4-1: USB disconnect, device number 2 [ 104.540111][ T4260] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 104.562552][ T4260] spcp8x5 4-1:1.0: device disconnected [ 104.579383][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.598718][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.617878][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.699911][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.487496][ T7] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.498741][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.649245][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 105.671183][ T4870] loop3: detected capacity change from 0 to 4096 [ 105.709317][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 105.732192][ T7] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 105.747715][ T4870] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 105.747715][ T4870] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 105.747715][ T4870] [ 105.787504][ T7] usb 1-1: Product: syz [ 105.802601][ T7] usb 1-1: Manufacturer: syz [ 105.819230][ T4870] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 105.836532][ T7] usb 1-1: config 0 descriptor?? [ 105.859216][ T4870] EXT4-fs (loop3): Ignoring removed orlov option [ 105.879143][ T4870] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 105.879143][ T4870] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 105.879143][ T4870] [ 105.879836][ T7] usb 1-1: can't set config #0, error -71 [ 105.982298][ T4870] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 106.025181][ T7] usb 1-1: USB disconnect, device number 2 [ 106.309111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 106.329119][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 106.339106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 106.349101][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 106.359099][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 107.008744][ T4899] FAULT_INJECTION: forcing a failure. [ 107.008744][ T4899] name failslab, interval 1, probability 0, space 0, times 1 [ 107.072889][ T4899] CPU: 0 PID: 4899 Comm: syz.1.122 Not tainted syzkaller #0 [ 107.080327][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.090412][ T4899] Call Trace: [ 107.093733][ T4899] [ 107.096698][ T4899] dump_stack_lvl+0x188/0x250 [ 107.101430][ T4899] ? show_regs_print_info+0x20/0x20 [ 107.106659][ T4899] ? load_image+0x410/0x410 [ 107.111203][ T4899] ? __might_sleep+0xf0/0xf0 [ 107.115820][ T4899] ? __lock_acquire+0x7d40/0x7d40 [ 107.120878][ T4899] ? mutex_unlock+0x10/0x10 [ 107.125418][ T4899] should_fail+0x383/0x4b0 [ 107.129871][ T4899] should_failslab+0x5/0x20 [ 107.134408][ T4899] slab_pre_alloc_hook+0x51/0xc0 [ 107.139376][ T4899] kmem_cache_alloc_trace+0x47/0x290 [ 107.144725][ T4899] ? rfkill_fop_open+0x168/0x390 [ 107.149731][ T4899] ? rfkill_fill_event+0x297/0x3e0 [ 107.154886][ T4899] rfkill_fop_open+0x168/0x390 [ 107.159689][ T4899] ? rfkill_fop_ioctl+0x230/0x230 [ 107.164768][ T4899] misc_open+0x31f/0x390 [ 107.169061][ T4899] chrdev_open+0x585/0x5f0 [ 107.173518][ T4899] ? cd_forget+0x160/0x160 [ 107.177971][ T4899] ? fsnotify_perm+0x3a7/0x560 [ 107.182771][ T4899] ? cd_forget+0x160/0x160 [ 107.187222][ T4899] do_dentry_open+0x7f7/0xf90 [ 107.191940][ T4899] ? vfs_open+0x2b/0x80 [ 107.196157][ T4899] path_openat+0x2718/0x2fb0 [ 107.200808][ T4899] ? __kasan_slab_alloc+0xa9/0xc0 [ 107.205873][ T4899] ? do_filp_open+0x400/0x400 [ 107.210623][ T4899] do_filp_open+0x1df/0x400 [ 107.215169][ T4899] ? vfs_tmpfile+0x300/0x300 [ 107.219834][ T4899] ? _raw_spin_unlock+0x24/0x40 [ 107.224717][ T4899] ? alloc_fd+0x59e/0x650 [ 107.229109][ T4899] do_sys_openat2+0x14b/0x500 [ 107.233819][ T4899] ? __lock_acquire+0x7d40/0x7d40 [ 107.238891][ T4899] ? do_sys_open+0xe0/0xe0 [ 107.243333][ T4899] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 107.249351][ T4899] ? lock_chain_count+0x20/0x20 [ 107.254244][ T4899] __x64_sys_openat+0x135/0x160 [ 107.259129][ T4899] do_syscall_64+0x4c/0xa0 [ 107.263567][ T4899] ? clear_bhb_loop+0x30/0x80 [ 107.268269][ T4899] ? clear_bhb_loop+0x30/0x80 [ 107.272978][ T4899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.278923][ T4899] RIP: 0033:0x7fd8bc4db559 [ 107.283373][ T4899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.303094][ T4899] RSP: 002b:00007fd8ba733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.311542][ T4899] RAX: ffffffffffffffda RBX: 00007fd8bc762fa0 RCX: 00007fd8bc4db559 [ 107.319540][ T4899] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 107.327541][ T4899] RBP: 00007fd8bc572ab8 R08: 0000000000000000 R09: 0000000000000000 [ 107.335541][ T4899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.343538][ T4899] R13: 00007fd8bc763038 R14: 00007fd8bc762fa0 R15: 00007ffe7733e668 [ 107.351552][ T4899] [ 109.699428][ T4931] loop1: detected capacity change from 0 to 4096 [ 109.732676][ T4931] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 109.732676][ T4931] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.732676][ T4931] [ 109.782791][ T4931] EXT4-fs (loop1): Journaled quota options ignored when QUOTA feature is enabled [ 109.816641][ T4931] EXT4-fs (loop1): Ignoring removed orlov option [ 109.828148][ T4931] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5 [ 109.828148][ T4931] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 109.828148][ T4931] [ 109.892861][ T4931] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 112.081102][ T4963] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 113.043559][ T4977] FAULT_INJECTION: forcing a failure. [ 113.043559][ T4977] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.109228][ T4977] CPU: 0 PID: 4977 Comm: syz.3.142 Not tainted syzkaller #0 [ 113.116603][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.126700][ T4977] Call Trace: [ 113.130001][ T4977] [ 113.132960][ T4977] dump_stack_lvl+0x188/0x250 [ 113.137675][ T4977] ? show_regs_print_info+0x20/0x20 [ 113.142911][ T4977] ? load_image+0x410/0x410 [ 113.147456][ T4977] ? __lock_acquire+0x7d40/0x7d40 [ 113.152539][ T4977] should_fail+0x383/0x4b0 [ 113.157011][ T4977] prepare_alloc_pages+0x1e3/0x5b0 [ 113.162167][ T4977] __alloc_pages+0x11b/0x480 [ 113.166795][ T4977] ? zone_statistics+0x170/0x170 [ 113.171778][ T4977] ? count_memcg_event_mm+0x324/0x370 [ 113.177204][ T4977] ? remove_device_exclusive_entry+0xac0/0xac0 [ 113.183395][ T4977] alloc_pages_vma+0x2bc/0x790 [ 113.188212][ T4977] handle_mm_fault+0x23be/0x4440 [ 113.193196][ T4977] ? get_page+0xe0/0xe0 [ 113.197386][ T4977] ? follow_page_mask+0xa51/0x12b0 [ 113.202544][ T4977] __get_user_pages+0x952/0x11e0 [ 113.207522][ T4977] ? populate_vma_page_range+0x290/0x290 [ 113.213170][ T4977] ? read_lock_is_recursive+0x10/0x10 [ 113.218581][ T4977] populate_vma_page_range+0x213/0x290 [ 113.224069][ T4977] __mm_populate+0x275/0x3b0 [ 113.228692][ T4977] ? check_vma_flags+0x470/0x470 [ 113.233650][ T4977] ? up_write+0x1b6/0x410 [ 113.238007][ T4977] do_mlock+0x49c/0x550 [ 113.242181][ T4977] __x64_sys_mlock+0x5c/0x70 [ 113.246810][ T4977] do_syscall_64+0x4c/0xa0 [ 113.251254][ T4977] ? clear_bhb_loop+0x30/0x80 [ 113.255944][ T4977] ? clear_bhb_loop+0x30/0x80 [ 113.260646][ T4977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.266563][ T4977] RIP: 0033:0x7ff6bd550559 [ 113.270993][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.290608][ T4977] RSP: 002b:00007ff6bb7a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 113.299043][ T4977] RAX: ffffffffffffffda RBX: 00007ff6bd7d7fa0 RCX: 00007ff6bd550559 [ 113.307039][ T4977] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 113.315033][ T4977] RBP: 00007ff6bd5e7ab8 R08: 0000000000000000 R09: 0000000000000000 [ 113.323021][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.331005][ T4977] R13: 00007ff6bd7d8038 R14: 00007ff6bd7d7fa0 R15: 00007fffa8b5a368 [ 113.339025][ T4977] [ 114.011671][ T4988] loop2: detected capacity change from 0 to 4096 [ 114.141449][ T4990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 114.295228][ T4988] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 114.295228][ T4988] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 114.295228][ T4988] [ 114.608209][ T4988] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 114.792429][ T4988] EXT4-fs (loop2): Ignoring removed orlov option [ 114.820370][ T4988] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 114.820370][ T4988] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 114.820370][ T4988] [ 114.910334][ T4988] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=w5T)`)YFnA@T<3ڂ$rcnHwC" -8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 116.379036][ T5008] device syzkaller0 entered promiscuous mode [ 117.076912][ T5015] [ 117.079313][ T5015] ====================================================== [ 117.086529][ T5015] WARNING: possible circular locking dependency detected [ 117.093578][ T5015] syzkaller #0 Not tainted [ 117.098111][ T5015] ------------------------------------------------------ [ 117.105160][ T5015] syz.0.154/5015 is trying to acquire lock: [ 117.111064][ T5015] ffff88807aca57d8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 117.122487][ T5015] [ 117.122487][ T5015] but task is already holding lock: [ 117.129877][ T5015] ffff88807aca3960 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 117.138890][ T5015] [ 117.138890][ T5015] which lock already depends on the new lock. [ 117.138890][ T5015] [ 117.149311][ T5015] [ 117.149311][ T5015] the existing dependency chain (in reverse order) is: [ 117.158352][ T5015] [ 117.158352][ T5015] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 117.166144][ T5015] lock_sock_nested+0x44/0x100 [ 117.171467][ T5015] smc_listen_out+0xd4/0x3c0 [ 117.176608][ T5015] smc_listen_work+0x52a/0xd10 [ 117.181921][ T5015] process_one_work+0x867/0xff0 [ 117.187427][ T5015] worker_thread+0xad7/0x12a0 [ 117.192659][ T5015] kthread+0x42e/0x520 [ 117.197294][ T5015] ret_from_fork+0x1f/0x30 [ 117.202259][ T5015] [ 117.202259][ T5015] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 117.212450][ T5015] __lock_acquire+0x38f7/0x7d40 [ 117.217856][ T5015] lock_acquire+0x19f/0x400 [ 117.222908][ T5015] __flush_work+0x116/0x210 [ 117.227963][ T5015] __cancel_work_timer+0x3f4/0x560 [ 117.233641][ T5015] smc_clcsock_release+0x5c/0xe0 [ 117.239134][ T5015] __smc_release+0x644/0x7b0 [ 117.244277][ T5015] smc_close_non_accepted+0xd1/0x1f0 [ 117.250110][ T5015] smc_close_active+0xae2/0xea0 [ 117.255509][ T5015] __smc_release+0x9c/0x7b0 [ 117.260590][ T5015] smc_release+0x2c1/0x520 [ 117.265556][ T5015] sock_close+0xbf/0x210 [ 117.270346][ T5015] __fput+0x212/0x8c0 [ 117.274903][ T5015] task_work_run+0x125/0x1a0 [ 117.280039][ T5015] do_exit+0x635/0x2110 [ 117.284736][ T5015] do_group_exit+0x12c/0x2f0 [ 117.289869][ T5015] get_signal+0x7eb/0x12e0 [ 117.294832][ T5015] arch_do_signal_or_restart+0xe6/0x12a0 [ 117.301011][ T5015] exit_to_user_mode_loop+0x9e/0x130 [ 117.306846][ T5015] exit_to_user_mode_prepare+0xee/0x180 [ 117.312945][ T5015] syscall_exit_to_user_mode+0x16/0x40 [ 117.318950][ T5015] do_syscall_64+0x58/0xa0 [ 117.323908][ T5015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.330355][ T5015] [ 117.330355][ T5015] other info that might help us debug this: [ 117.330355][ T5015] [ 117.340602][ T5015] Possible unsafe locking scenario: [ 117.340602][ T5015] [ 117.348104][ T5015] CPU0 CPU1 [ 117.353490][ T5015] ---- ---- [ 117.358871][ T5015] lock(sk_lock-AF_SMC/1); [ 117.363403][ T5015] lock((work_completion)(&new_smc->smc_listen_work)); [ 117.372881][ T5015] lock(sk_lock-AF_SMC/1); [ 117.379944][ T5015] lock((work_completion)(&new_smc->smc_listen_work)); [ 117.386913][ T5015] [ 117.386913][ T5015] *** DEADLOCK *** [ 117.386913][ T5015] [ 117.395083][ T5015] 2 locks held by syz.0.154/5015: [ 117.400127][ T5015] #0: ffff88805fc8e210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 117.410385][ T5015] #1: ffff88807aca3960 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x249/0x520 [ 117.419832][ T5015] [ 117.419832][ T5015] stack backtrace: [ 117.425755][ T5015] CPU: 0 PID: 5015 Comm: syz.0.154 Not tainted syzkaller #0 [ 117.433090][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.443172][ T5015] Call Trace: [ 117.446470][ T5015] [ 117.449431][ T5015] dump_stack_lvl+0x188/0x250 [ 117.454129][ T5015] ? load_image+0x410/0x410 [ 117.458657][ T5015] ? show_regs_print_info+0x20/0x20 [ 117.463894][ T5015] ? print_circular_bug+0x12b/0x1a0 [ 117.469123][ T5015] check_noncircular+0x2f8/0x400 [ 117.474085][ T5015] ? look_up_lock_class+0x71/0x110 [ 117.479229][ T5015] ? print_deadlock_bug+0x5d0/0x5d0 [ 117.484457][ T5015] ? lockdep_lock+0xf1/0x1f0 [ 117.489076][ T5015] ? lock_release+0xb5/0x8a0 [ 117.493706][ T5015] ? mark_lock+0x94/0x320 [ 117.498065][ T5015] ? _find_first_zero_bit+0xd1/0xf0 [ 117.503301][ T5015] __lock_acquire+0x38f7/0x7d40 [ 117.508190][ T5015] ? deref_stack_reg+0xd0/0x120 [ 117.513097][ T5015] ? 0xffffffffa0030000 [ 117.517275][ T5015] ? __bfs+0x27a/0x560 [ 117.521367][ T5015] ? verify_lock_unused+0x140/0x140 [ 117.526599][ T5015] ? mark_lock+0x94/0x320 [ 117.530957][ T5015] ? __lock_acquire+0x13b3/0x7d40 [ 117.536011][ T5015] ? lockdep_lock+0xf1/0x1f0 [ 117.540635][ T5015] lock_acquire+0x19f/0x400 [ 117.545183][ T5015] ? __flush_work+0xfa/0x210 [ 117.549808][ T5015] ? verify_lock_unused+0x140/0x140 [ 117.555036][ T5015] ? read_lock_is_recursive+0x10/0x10 [ 117.560442][ T5015] __flush_work+0x116/0x210 [ 117.564969][ T5015] ? __flush_work+0xfa/0x210 [ 117.569583][ T5015] ? flush_work+0x20/0x20 [ 117.573936][ T5015] ? try_to_grab_pending+0xfb/0x820 [ 117.579163][ T5015] ? mark_lock+0x94/0x320 [ 117.583521][ T5015] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.589532][ T5015] ? lock_chain_count+0x20/0x20 [ 117.594422][ T5015] ? __cancel_work_timer+0x36a/0x560 [ 117.599737][ T5015] __cancel_work_timer+0x3f4/0x560 [ 117.604890][ T5015] ? cancel_work_sync+0x20/0x20 [ 117.609771][ T5015] ? __local_bh_enable_ip+0x136/0x1c0 [ 117.615173][ T5015] ? lockdep_hardirqs_on+0x94/0x140 [ 117.620501][ T5015] ? __local_bh_enable_ip+0x136/0x1c0 [ 117.625906][ T5015] ? _local_bh_enable+0xa0/0xa0 [ 117.630792][ T5015] smc_clcsock_release+0x5c/0xe0 [ 117.635760][ T5015] __smc_release+0x644/0x7b0 [ 117.640388][ T5015] smc_close_non_accepted+0xd1/0x1f0 [ 117.645728][ T5015] smc_close_active+0xae2/0xea0 [ 117.650649][ T5015] ? sock_no_sendpage_locked+0x1a0/0x1a0 [ 117.656327][ T5015] __smc_release+0x9c/0x7b0 [ 117.660872][ T5015] smc_release+0x2c1/0x520 [ 117.665358][ T5015] sock_close+0xbf/0x210 [ 117.669629][ T5015] ? sock_mmap+0x90/0x90 [ 117.673909][ T5015] __fput+0x212/0x8c0 [ 117.677922][ T5015] task_work_run+0x125/0x1a0 [ 117.682542][ T5015] do_exit+0x635/0x2110 [ 117.686725][ T5015] ? put_task_struct+0x80/0x80 [ 117.691529][ T5015] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.697546][ T5015] ? _raw_spin_lock_irq+0xb7/0xf0 [ 117.702613][ T5015] do_group_exit+0x12c/0x2f0 [ 117.707234][ T5015] ? lockdep_hardirqs_on+0x94/0x140 [ 117.712468][ T5015] get_signal+0x7eb/0x12e0 [ 117.716930][ T5015] arch_do_signal_or_restart+0xe6/0x12a0 [ 117.722603][ T5015] ? get_sigframe_size+0x10/0x10 [ 117.727568][ T5015] ? __might_sleep+0xf0/0xf0 [ 117.732203][ T5015] ? exit_to_user_mode_loop+0x3b/0x130 [ 117.737695][ T5015] exit_to_user_mode_loop+0x9e/0x130 [ 117.743011][ T5015] exit_to_user_mode_prepare+0xee/0x180 [ 117.748582][ T5015] syscall_exit_to_user_mode+0x16/0x40 [ 117.754064][ T5015] do_syscall_64+0x58/0xa0 [ 117.758595][ T5015] ? clear_bhb_loop+0x30/0x80 [ 117.763301][ T5015] ? clear_bhb_loop+0x30/0x80 [ 117.768004][ T5015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.773926][ T5015] RIP: 0033:0x7f19b77b6559 [ 117.778363][ T5015] Code: Unable to access opcode bytes at RIP 0x7f19b77b652f. [ 117.785763][ T5015] RSP: 002b:00007f19b5a0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 117.794213][ T5015] RAX: 0000000000000000 RBX: 00007f19b7a3dfa0 RCX: 00007f19b77b6559 [ 117.802241][ T5015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 117.810250][ T5015] RBP: 00007f19b784dab8 R08: 0000000000000000 R09: 0000000000000000 [ 117.818249][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.826242][ T5015] R13: 00007f19b7a3e038 R14: 00007f19b7a3dfa0 R15: 00007ffd11e06698 [ 117.834242][ T5015]