last executing test programs: 4m51.243611008s ago: executing program 3 (id=1672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) eventfd2(0xd, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b73", 0x98}, {&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac539985bac8624c50b527c68b0ff250261953f2da79a78104c2d00000000", 0x78}], 0x2}}], 0x1, 0x2090) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m48.463852785s ago: executing program 3 (id=1677): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="f6b679ad1f2c3695c31f7aab5b01ea0d66e03af70ffa29", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setreuid(r5, r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x6a, 0x2002) close(r0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000001500000000c70000000000", @ANYRESOCT=r4, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x8, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000000000000000000000b7020000000000007b9a20fe00000000b6090800020000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280092dc34000000000000000d147479d1b36e05abc9c848df8da1386d49f9a3c047222514b7d9e1093f09da63cf03e1bb54604ef9fbaf6d02ff0d0c2aaac7117f2c83a0b1738219086fff224bebe11056ac889432d3e3593c8850558dcaba75613e116bd5127a7b4a0b40b473bffec5e10d4812092d1f9406c419a5473eac9bbcb8dd897bb1afac9563cd2ebdacf7b08d1ee3807221cf6fc7cfd125e63b43a4a6fbb7ed8914bbaa4ad6f02dd2df28dd580ff40e0060be4c272fe4ab220d653a63cbf7f9a37198f656642394be222ee6350618eeac5b47cd2fb8717f933a", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000001500000086ffffffbf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) 4m47.355889804s ago: executing program 3 (id=1679): socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@loopback, @local, 0x0, 0x0, 'sit0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) io_uring_enter(r2, 0x6eff, 0x708c, 0x4b, 0x0, 0x0) preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r8, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 4m44.787922904s ago: executing program 3 (id=1685): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/unix\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) userfaultfd(0x801) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r2 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x82) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, 0x0, 0x2, 0x1}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m44.245209023s ago: executing program 3 (id=1687): socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x98, r4, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x74, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 4m41.48596554s ago: executing program 3 (id=1690): openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 4m26.27293341s ago: executing program 32 (id=1690): openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 3m28.383824053s ago: executing program 5 (id=1852): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="f6b679ad1f2c3695c31f7aab5b01ea0d66e03af70ffa29", @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYBLOB="0000000001"], 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setreuid(r5, r6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000020000001500000000c70000000000", @ANYRESOCT=r4, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000200)={0x60, 0x0, 0x0, {{0x4, 0x7, 0x2, 0xfff, 0x3, 0x1ff, 0x1, 0x80000000}}}, 0x60) 3m25.094347897s ago: executing program 5 (id=1859): socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@loopback, @local, 0x0, 0x0, 'sit0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r2, 0x6eff, 0x708c, 0x4b, 0x0, 0x0) preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3m22.179571419s ago: executing program 5 (id=1865): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4"], 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x60000000000000) 3m17.538500712s ago: executing program 5 (id=1870): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x4, 0x8000446, {}, {0x7, 0x0, 0x0, 0x0, 0x3}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x405}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x44830) 3m15.394617907s ago: executing program 5 (id=1876): socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@security={'security\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0xe8, 0xe8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'veth0_to_team\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ip={@loopback, @local, 0x0, 0x0, 'sit0\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r2 = syz_io_uring_setup(0x2229, &(0x7f0000000200)={0x0, 0x87cf, 0x2, 0x1003, 0x8c}, &(0x7f0000000000), &(0x7f0000000340), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r2, 0x6eff, 0x708c, 0x4b, 0x0, 0x0) preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3m13.859977408s ago: executing program 5 (id=1882): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4"], 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x60000000000000) 2m58.455566657s ago: executing program 33 (id=1882): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4"], 0x10b8}, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x60000000000000) 1m51.714861638s ago: executing program 2 (id=2030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="500087cb7978050000f800000600000005000500020400000000000900020073797a31000010002de2dce91500031dd9264a60ccf3742c706f72742c6e65740000000000000000"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x05\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1m47.133265176s ago: executing program 2 (id=2035): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40088d4) r3 = getpgid(0x0) r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m41.47556556s ago: executing program 2 (id=2040): syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m40.957830367s ago: executing program 2 (id=2044): openat(0xffffffffffffff9c, 0x0, 0x181341, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000003a80)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @empty, @remote, @broadcast}}}}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 1m37.048524634s ago: executing program 2 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) getuid() r3 = syz_open_procfs(0xffffffffffffffff, 0x0) statx(r3, 0x0, 0x6400, 0x10, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f0000000000)=""/4118, 0x1016) 1m34.445032428s ago: executing program 2 (id=2049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020000000000000009317d078a66c5f59b7e0f0db9975ade18179b617d9d4527539a558f1c1ef815028965b34b6bd5f315ef4f887ff73c0513d677b99b15cd348fc4aade0a64a88998834affdd98106d235e19aa532a4b71af7fc4c644fdc05d992cb6d5b57d09e45062b2c1b21deeacc33f4e903ee6e4fd71040b3ef3d7a366988829618a5a947f845a2e03d413af2ef5297574593b4ab11a5b36cc338c75676ef553a5236a1d52d13206843b132299bdfc846a3c68b"], 0x24, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) 1m16.460567911s ago: executing program 34 (id=2049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020000000000000009317d078a66c5f59b7e0f0db9975ade18179b617d9d4527539a558f1c1ef815028965b34b6bd5f315ef4f887ff73c0513d677b99b15cd348fc4aade0a64a88998834affdd98106d235e19aa532a4b71af7fc4c644fdc05d992cb6d5b57d09e45062b2c1b21deeacc33f4e903ee6e4fd71040b3ef3d7a366988829618a5a947f845a2e03d413af2ef5297574593b4ab11a5b36cc338c75676ef553a5236a1d52d13206843b132299bdfc846a3c68b"], 0x24, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) 23.41407819s ago: executing program 1 (id=2146): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000040)={0x2f, &(0x7f0000000140)}) 12.677958348s ago: executing program 6 (id=2162): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a00", 0x14, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 10.726320222s ago: executing program 4 (id=2164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) 10.549031847s ago: executing program 1 (id=2166): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x6, 0x5, 0x6, 0x6, 0x4, 0x11, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x8001, 0x5, 0x7, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x2, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0xa, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb34, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x6cb, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.979016776s ago: executing program 1 (id=2167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 9.750723333s ago: executing program 4 (id=2168): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)='`', 0x1}], 0x1}, 0x41) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @win={{0x0, 0xfff, 0x1, 0xc59}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x90) close(0x3) 9.749906693s ago: executing program 0 (id=2178): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) r0 = socket$inet6(0xa, 0x80003, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000001e0001012cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="100000001404000008000a00", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x400, 0x72e, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3, 0x3, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 9.55599771s ago: executing program 6 (id=2170): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r0, &(0x7f0000000880)=""/228, 0xe4, 0x1) 8.474780824s ago: executing program 6 (id=2171): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") 8.384184577s ago: executing program 1 (id=2172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) 8.351819758s ago: executing program 0 (id=2173): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) statx(r3, 0x0, 0x6400, 0x10, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f0000000000)=""/4118, 0x1016) 8.29600512s ago: executing program 7 (id=2174): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x2080, 0x0, 0x0) 6.554431867s ago: executing program 4 (id=2175): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40088d4) getpgid(0x0) r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r3, 0x66020000) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 6.534645397s ago: executing program 6 (id=2176): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000040)={0x2f, &(0x7f0000000140)}) 6.503748849s ago: executing program 0 (id=2177): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x4, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x6, 0x5, 0x6, 0x6, 0x4, 0x11, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x8001, 0x5, 0x7, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x2, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0xa, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb34, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x6cb, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.411928341s ago: executing program 7 (id=2179): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9cfa, 0x0) getdents(0xffffffffffffffff, 0x0, 0x416d) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r5, 0x80, 0x2, 0x8}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050) 5.039097716s ago: executing program 0 (id=2180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) eventfd2(0xd, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.884899881s ago: executing program 1 (id=2181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c3cb5b0006020000009b7a00", 0x14, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, 0x0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 4.872628101s ago: executing program 7 (id=2182): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r0, &(0x7f0000000880)=""/228, 0xe4, 0x1) 4.777334754s ago: executing program 4 (id=2183): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 4.693229157s ago: executing program 7 (id=2184): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000c3000000000000009500000000000000a45c8b106d45385a1964b904e462de529745a4cd61a7a0d25ddfd38b8b9a36c14ae1ee5ae29051b28b53a4182d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @flow_dissector}, 0x94) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x202000, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f0000000280)=""/237, 0x37, 0xed, 0x1}, 0x20) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000240), &(0x7f00000003c0)={'L-', 0x8000}, 0x16, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.795836426s ago: executing program 4 (id=2185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020000000000000009317d078a66c5f59b7e0f0db9975ade18179b617d9d4527539a558f1c1ef815028965b34b6bd5f315ef4f887ff73c0513d677b99b15cd348fc4aade0a64a88998834affdd98106d235e19aa532a4b71af7fc4c644fdc05d992cb6d5b57d09e45062b2c1b21deeacc33f4e903ee6e4fd71040b3ef3d7a366988829618a5a947f845a2e03d413af2ef5297574593b4ab11a5b36cc338c75676ef553a5236a1d52d13206843b132299bdfc846a3c68b"], 0x24, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) 3.788371817s ago: executing program 0 (id=2195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) eventfd2(0xd, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.709583729s ago: executing program 6 (id=2186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x240, 0x460, 0x460, 0x240, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x150, 0xd8000000, {0x9402}, [@common=@hl={{0x28}, {0x0, 0x9b}}, @common=@unspec=@statistic={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x8, 'syz1\x00', {0x1}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x72) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@dioread_lock}]}, 0x3, 0x451, &(0x7f0000000340)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020000000000000009317d078a66c5f59b7e0f0db9975ade18179b617d9d4527539a558f1c1ef815028965b34b6bd5f315ef4f887ff73c0513d677b99b15cd348fc4aade0a64a88998834affdd98106d235e19aa532a4b71af7fc4c644fdc05d992cb6d5b57d09e45062b2c1b21deeacc33f4e903ee6e4fd71040b3ef3d7a366988829618a5a947f845a2e03d413af2ef5297574593b4ab11a5b36cc338c75676ef553a5236a1d52d13206843b132299bdfc846a3c68b"], 0x24, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c1, 0x9c37611dc13d0da6) fchown(r5, 0xffffffffffffffff, 0xee01) 3.68918707s ago: executing program 7 (id=2187): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)='`', 0x1}], 0x1}, 0x41) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x1, @win={{0x0, 0xfff, 0x1, 0xc59}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x90) close(0x3) 563.124631ms ago: executing program 6 (id=2188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) statx(r3, 0x0, 0x6400, 0x10, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/meminfo\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f0000000000)=""/4118, 0x1016) 355.991148ms ago: executing program 0 (id=2189): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvfrom(r1, 0x0, 0x0, 0x2080, 0x0, 0x0) 285.61148ms ago: executing program 4 (id=2190): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 51.606078ms ago: executing program 7 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = io_uring_setup(0x1612, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, 0x0, 0x0) 0s ago: executing program 1 (id=2192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 59.442392][ T4175] cgroup: Unknown subsys name 'net' [ 59.599165][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.980211][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.354285][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.412143][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 62.458289][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 62.498738][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 62.534801][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 62.547686][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.555435][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.563820][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.590032][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.598102][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.606493][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.685253][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.692372][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.700826][ T4201] device bridge_slave_0 entered promiscuous mode [ 62.716270][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.735414][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.742725][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.750765][ T4201] device bridge_slave_1 entered promiscuous mode [ 62.758144][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.765273][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.773602][ T4188] device bridge_slave_0 entered promiscuous mode [ 62.782059][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.822058][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.829324][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.837910][ T4188] device bridge_slave_1 entered promiscuous mode [ 62.845130][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.852186][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.860516][ T4194] device bridge_slave_0 entered promiscuous mode [ 62.876972][ T4189] team0: Port device team_slave_0 added [ 62.896599][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.903873][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.911932][ T4194] device bridge_slave_1 entered promiscuous mode [ 62.919166][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.926336][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.934520][ T4187] device bridge_slave_0 entered promiscuous mode [ 62.942921][ T4189] team0: Port device team_slave_1 added [ 62.950360][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.978910][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.986358][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.994603][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.014904][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.025982][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.037197][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.053963][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.078629][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.096371][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.103483][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.129529][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.148328][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.159883][ T4201] team0: Port device team_slave_0 added [ 63.174515][ T4201] team0: Port device team_slave_1 added [ 63.180646][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.187855][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.214034][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.238073][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.261516][ T4188] team0: Port device team_slave_0 added [ 63.269900][ T4194] team0: Port device team_slave_0 added [ 63.278569][ T4194] team0: Port device team_slave_1 added [ 63.303505][ T4188] team0: Port device team_slave_1 added [ 63.309595][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.316625][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.342756][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.360723][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.367975][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.394316][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.429212][ T4187] team0: Port device team_slave_0 added [ 63.443603][ T4187] team0: Port device team_slave_1 added [ 63.457719][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.464904][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.491153][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.533753][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.540825][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.566989][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.578849][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.586238][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.612219][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.627585][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.634758][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.641801][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.648840][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.675034][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.689522][ T4201] device hsr_slave_0 entered promiscuous mode [ 63.696352][ T4201] device hsr_slave_1 entered promiscuous mode [ 63.703481][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.711262][ T4201] Cannot create hsr debugfs directory [ 63.720759][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.727884][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.754226][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.770071][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.777157][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.803443][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.862699][ T4194] device hsr_slave_0 entered promiscuous mode [ 63.869385][ T4194] device hsr_slave_1 entered promiscuous mode [ 63.876705][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.884504][ T4194] Cannot create hsr debugfs directory [ 63.951647][ T4187] device hsr_slave_0 entered promiscuous mode [ 63.958995][ T4187] device hsr_slave_1 entered promiscuous mode [ 63.966142][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.974326][ T4187] Cannot create hsr debugfs directory [ 63.995575][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.002185][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.008809][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.016887][ T4188] Cannot create hsr debugfs directory [ 64.103421][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 64.110025][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 64.112876][ T1111] Bluetooth: hci4: command 0x0409 tx timeout [ 64.131101][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 64.138177][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 64.320319][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.342008][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.351416][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.365096][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.376263][ T4201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.388559][ T4201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.397887][ T4201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.406929][ T4201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.469471][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.484728][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.508673][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.536021][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.590454][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.600499][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.629775][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.657356][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.670641][ T4188] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.700060][ T4188] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.713542][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.725909][ T4188] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.739363][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.754019][ T4188] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.771650][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.789206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.799739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.809704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.818969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.828095][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.835405][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.844055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.853256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.861605][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.868693][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.876521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.911533][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.933656][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.949159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.958631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.966561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.976355][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.985486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.995408][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.004399][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.014001][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.022355][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.029438][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.038646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.046727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.068718][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.089874][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.100297][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.109763][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.119748][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.128704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.137648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.146922][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.154043][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.161832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.171429][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.180052][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.188741][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.195893][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.204628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.213102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.221595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.241193][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.255826][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.274757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.284450][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.296025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.305455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.314718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.323347][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.330418][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.338449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.348648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.357584][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.367060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.376852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.399208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.409797][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.418884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.429899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.438747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.448571][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.458262][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.477914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.493252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.521013][ T4189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.533200][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.557556][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.575161][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.587627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.596810][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.605754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.615778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.625157][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.634542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.673912][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.689075][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.704542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.745374][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.763507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.784827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.793508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.804491][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.816422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.824314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.836412][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.861060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.876358][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.887634][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.894757][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.903796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.914858][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.927319][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.934448][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.950740][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.959999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.970538][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.977661][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.986065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.994184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.004480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.019487][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.028642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.038424][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.045565][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.055230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.077750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.091461][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.103423][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.144054][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.151248][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.165349][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.180503][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.191271][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.193984][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 66.209212][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.212889][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 66.227692][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.233451][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 66.242072][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.243011][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 66.260284][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.269057][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 66.279181][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.288230][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.297961][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.306608][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.320395][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.328719][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.337637][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.347882][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.357096][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.365615][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.384869][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.413080][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.426549][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.447569][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.473892][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.482269][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.492731][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.500177][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.519273][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.545049][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.574130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.590104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.633423][ T4189] device veth0_vlan entered promiscuous mode [ 66.651320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.681066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.709492][ T4189] device veth1_vlan entered promiscuous mode [ 66.720692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.730193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.740043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.785443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.794438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.809701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.820700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.830486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.839213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.849696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.859101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.867074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.880681][ T4187] device veth0_vlan entered promiscuous mode [ 66.894715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.905117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.915840][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.928923][ T4189] device veth0_macvtap entered promiscuous mode [ 66.948840][ T4189] device veth1_macvtap entered promiscuous mode [ 66.961920][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.973930][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.981815][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.990941][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.001725][ T4187] device veth1_vlan entered promiscuous mode [ 67.018860][ T4201] device veth0_vlan entered promiscuous mode [ 67.029605][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.037773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.046322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.055948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.066020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.075550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.086863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.096795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.111534][ T4201] device veth1_vlan entered promiscuous mode [ 67.126165][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.151933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.160293][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.170021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.179794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.194382][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.201699][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.210228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.219892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.238900][ T4194] device veth0_vlan entered promiscuous mode [ 67.256043][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.265849][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.274616][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.285335][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.309146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.320200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.329120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.338319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.346847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.359871][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.368890][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.391268][ T4194] device veth1_vlan entered promiscuous mode [ 67.401672][ T4201] device veth0_macvtap entered promiscuous mode [ 67.437673][ T4188] device veth0_vlan entered promiscuous mode [ 67.449971][ T4201] device veth1_macvtap entered promiscuous mode [ 67.462259][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.473457][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.481579][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.491121][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.499890][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.509261][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.518340][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.527391][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.536075][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.544562][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.557006][ T4188] device veth1_vlan entered promiscuous mode [ 67.565724][ T4187] device veth0_macvtap entered promiscuous mode [ 67.580796][ T4187] device veth1_macvtap entered promiscuous mode [ 67.618222][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.629494][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.642002][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.667589][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.678952][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.689156][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.699858][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.712799][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.720364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.730347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.739234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.748645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.760559][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.771468][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.785005][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.799346][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.810455][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.820615][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.831405][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.842825][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.850705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.859739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.869317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.878237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.887819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.896541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.907082][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.915552][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.928869][ T4194] device veth0_macvtap entered promiscuous mode [ 67.939650][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.949427][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.958644][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.967596][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.980692][ T4201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.989708][ T4201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.999022][ T4201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.009564][ T4201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.029854][ T4188] device veth0_macvtap entered promiscuous mode [ 68.040369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.049495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.058376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.067748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.078771][ T4194] device veth1_macvtap entered promiscuous mode [ 68.111866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.124352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.147057][ T4188] device veth1_macvtap entered promiscuous mode [ 68.170388][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.205203][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.228186][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.240207][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.251525][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.262228][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.273964][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 68.278547][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.280220][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 68.296833][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 68.303003][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.314516][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.334418][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.343447][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 68.350111][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 68.356483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.365692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.374869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.398832][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.416243][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.427158][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.438264][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.448419][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.459078][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.469601][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.480575][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.498849][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.512286][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.531432][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.541575][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.558496][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.568523][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.579113][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.591352][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.601806][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.612304][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.622777][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.633791][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.643805][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.654685][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.665241][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.680622][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.691876][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.712880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.723314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.732206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.741111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.751258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.760423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.774357][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.787155][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.799688][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.814531][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.833969][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.848953][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.858507][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.867340][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.894235][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.931766][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.016138][ T4269] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.871853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.125572][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.193369][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.342990][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 70.350224][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 70.373532][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 70.433269][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 70.454879][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 70.907764][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.964240][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.979256][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.995664][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.028796][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.077715][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.089542][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.157519][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.203032][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.421846][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.526716][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.670986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.911821][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.962171][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.974759][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.762498][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.770370][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.055265][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.074706][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.700372][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.785469][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.692474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 75.912487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.922488][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.932484][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.942482][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.952483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.962490][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 75.972480][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.982479][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 75.992483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 76.626004][ T4332] autofs4:pid:4332:autofs_fill_super: called with bogus options [ 79.852441][ C0] sched: RT throttling activated [ 79.942597][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 80.873908][ T146] Bluetooth: hci5: sending frame failed (-49) [ 82.365650][ T4384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.27'. [ 83.595022][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 83.602315][ T146] Bluetooth: hci5: sending frame failed (-49) [ 85.015669][ T4420] netlink: 64 bytes leftover after parsing attributes in process `syz.1.35'. [ 85.806486][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 86.426068][ T1108] cfg80211: failed to load regulatory.db [ 92.911335][ T4517] netlink: 64 bytes leftover after parsing attributes in process `syz.4.60'. [ 93.533496][ T4526] device batadv_slave_1 entered promiscuous mode [ 94.439071][ T4525] device batadv_slave_1 left promiscuous mode [ 94.854365][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 94.860624][ T146] Bluetooth: hci5: sending frame failed (-49) [ 96.071430][ T4554] device syzkaller0 entered promiscuous mode [ 97.411601][ T4263] Bluetooth: hci5: command 0x1001 tx timeout [ 97.417898][ T146] Bluetooth: hci5: sending frame failed (-49) [ 98.919493][ T4601] device syzkaller0 entered promiscuous mode [ 99.099415][ T4609] Zero length message leads to an empty skb [ 99.472653][ T4234] Bluetooth: hci5: command 0x1009 tx timeout [ 101.139855][ T4643] device syzkaller0 entered promiscuous mode [ 102.884794][ T4672] device syzkaller0 entered promiscuous mode [ 104.892643][ T4712] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.124'. [ 105.799364][ T4735] device syzkaller0 entered promiscuous mode [ 106.330740][ T4747] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.136'. [ 108.170992][ T4787] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.150'. [ 108.219649][ T4778] device syzkaller0 entered promiscuous mode [ 110.475009][ T4832] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.161'. [ 110.721752][ T4843] device syzkaller0 entered promiscuous mode [ 110.771348][ T4844] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.168'. [ 111.846584][ T4859] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.175'. [ 112.151742][ T4874] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.180'. [ 113.040837][ T4890] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.186'. [ 114.219555][ T4908] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.191'. [ 123.402689][ T5047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.239'. [ 128.828351][ T5170] device syzkaller0 entered promiscuous mode [ 129.457224][ T4429] udevd[4429]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 132.507514][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.515221][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.720151][ T5283] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.324'. [ 137.680501][ T5331] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.340'. [ 140.952939][ T5363] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.351'. [ 141.254606][ T5383] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.360'. [ 143.594583][ T5413] netlink: 'syz.0.367': attribute type 72 has an invalid length. [ 144.005815][ T5423] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.371'. [ 145.372643][ T5441] netlink: 64 bytes leftover after parsing attributes in process `syz.0.375'. [ 145.928321][ T5451] netlink: 'syz.0.380': attribute type 72 has an invalid length. [ 149.158781][ T5492] netlink: 'syz.0.392': attribute type 72 has an invalid length. [ 151.364325][ T4283] Bluetooth: hci5: Frame reassembly failed (-84) [ 151.427428][ T4283] Bluetooth: hci5: Frame reassembly failed (-84) [ 153.392691][ T4234] Bluetooth: hci5: command 0x1003 tx timeout [ 153.409110][ T146] Bluetooth: hci5: sending frame failed (-49) [ 153.666685][ T5536] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.405'. [ 155.903282][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 155.911349][ T146] Bluetooth: hci5: sending frame failed (-49) [ 156.272248][ T5575] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.417'. [ 158.586115][ T13] Bluetooth: hci5: command 0x1009 tx timeout [ 158.976003][ T5609] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.429'. [ 167.837252][ T5728] device batadv_slave_1 entered promiscuous mode [ 168.625426][ T5727] device batadv_slave_1 left promiscuous mode [ 176.427157][ T5859] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.505'. [ 179.509996][ T5895] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.517'. [ 182.384734][ T5940] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.531'. [ 185.724916][ T5972] netlink: 'syz.3.543': attribute type 72 has an invalid length. [ 185.804199][ T1108] Bluetooth: hci1: command 0x0406 tx timeout [ 185.841282][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 185.850025][ T5964] netlink: 64 bytes leftover after parsing attributes in process `syz.1.541'. [ 185.862573][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 185.873136][ T1108] Bluetooth: hci4: command 0x0406 tx timeout [ 185.887425][ T1108] Bluetooth: hci3: command 0x0406 tx timeout [ 187.261173][ T6005] netlink: 'syz.3.554': attribute type 72 has an invalid length. [ 191.411908][ T6051] netlink: 64 bytes leftover after parsing attributes in process `syz.3.566'. [ 192.067131][ T6081] loop0: detected capacity change from 0 to 1024 [ 192.876266][ T6092] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.580'. [ 192.923398][ T6081] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.576: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.047742][ T6081] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 193.071154][ T6081] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.576: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.132102][ T6081] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 193.141462][ T6081] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.576: Failed to acquire dquot type 0 [ 193.161800][ T6081] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 193.328410][ T6081] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.576: mark_inode_dirty error [ 193.502007][ T6081] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 193.706684][ T6081] EXT4-fs (loop0): 1 orphan inode deleted [ 193.749285][ T6081] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 193.909523][ T4321] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.953494][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.959842][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.039698][ T4321] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 194.099610][ T4321] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0 [ 194.402223][ T6111] netlink: 64 bytes leftover after parsing attributes in process `syz.1.584'. [ 194.449379][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 194.673141][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 195.085352][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 195.186300][ T4283] Bluetooth: hci5: Frame reassembly failed (-84) [ 196.955968][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 196.962112][ T146] Bluetooth: hci5: sending frame failed (-49) [ 197.329499][ T6134] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.591'. [ 198.630562][ T6157] device syzkaller0 entered promiscuous mode [ 198.982496][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 198.988771][ T146] Bluetooth: hci5: sending frame failed (-49) [ 199.304800][ T6167] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.603'. [ 201.089083][ T4233] Bluetooth: hci5: command 0x1009 tx timeout [ 214.266705][ T6340] loop0: detected capacity change from 0 to 1024 [ 220.353247][ T6421] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.685'. [ 221.318468][ T6433] netlink: 64 bytes leftover after parsing attributes in process `syz.2.688'. [ 223.836245][ T6459] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.698'. [ 223.856448][ T6448] ubi0: attaching mtd0 [ 224.112446][ T1108] Bluetooth: hci5: command 0x1003 tx timeout [ 224.118731][ T146] Bluetooth: hci5: sending frame failed (-49) [ 226.238633][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 226.244841][ T146] Bluetooth: hci5: sending frame failed (-49) [ 227.319186][ T6497] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.709'. [ 228.262523][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 230.294853][ T6523] netlink: 64 bytes leftover after parsing attributes in process `syz.1.716'. [ 231.527830][ T6537] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.720'. [ 234.452761][ T6576] autofs4:pid:6576:autofs_fill_super: called with bogus options [ 235.191964][ T6582] netlink: 64 bytes leftover after parsing attributes in process `syz.2.731'. [ 235.979246][ T6586] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.733'. [ 245.508089][ T6706] loop0: detected capacity change from 0 to 1024 [ 246.929207][ T6719] device syzkaller0 entered promiscuous mode [ 247.048144][ T6706] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.766: lblock 2 mapped to illegal pblock 2 (length 1) [ 247.270612][ T6706] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 247.411969][ T6706] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.766: lblock 0 mapped to illegal pblock 48 (length 1) [ 247.617618][ T6706] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 247.763479][ T6706] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.766: Failed to acquire dquot type 0 [ 247.966980][ T6706] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 248.109498][ T6706] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.766: mark_inode_dirty error [ 248.260882][ T6706] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 248.271501][ T6706] EXT4-fs (loop0): 1 orphan inode deleted [ 248.277347][ T6706] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 248.300110][ T4483] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.913581][ T4483] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 248.922077][ T4483] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:12: Failed to release dquot type 0 [ 248.998360][ T6739] udevd[6739]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 249.009541][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 249.051173][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 249.061665][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 249.383657][ T6747] loop2: detected capacity change from 0 to 1024 [ 250.064049][ T6747] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.790: lblock 2 mapped to illegal pblock 2 (length 1) [ 250.471426][ T6747] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 250.542533][ T6747] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.790: lblock 0 mapped to illegal pblock 48 (length 1) [ 250.777286][ T6760] netlink: 64 bytes leftover after parsing attributes in process `syz.1.782'. [ 250.982663][ T6747] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 251.008074][ T6755] netlink: 64 bytes leftover after parsing attributes in process `syz.0.779'. [ 251.026087][ T6747] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.790: Failed to acquire dquot type 0 [ 251.098071][ T6747] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 251.115988][ T6747] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.790: mark_inode_dirty error [ 251.127992][ T6747] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 251.140064][ T6747] EXT4-fs (loop2): 1 orphan inode deleted [ 251.152625][ T6747] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 251.182570][ T144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 251.208276][ T144] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 251.228319][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 251.834401][ T4194] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 252.036391][ T4194] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 252.504326][ T4194] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 252.919635][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.992518][ T4264] Bluetooth: hci5: command 0x1003 tx timeout [ 255.000420][ T146] Bluetooth: hci5: sending frame failed (-49) [ 255.589264][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.597282][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.809356][ T6806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.793'. [ 257.437583][ T4230] Bluetooth: hci5: command 0x1001 tx timeout [ 259.756256][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 259.774058][ T4231] Bluetooth: hci6: command 0x1003 tx timeout [ 259.780167][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 260.926045][ T6820] netlink: 64 bytes leftover after parsing attributes in process `syz.1.795'. [ 261.881890][ T4231] Bluetooth: hci5: command 0x1009 tx timeout [ 262.816538][ T4231] Bluetooth: hci6: command 0x1001 tx timeout [ 262.822934][ T4199] Bluetooth: hci6: sending frame failed (-49) [ 264.164242][ T6837] netlink: 64 bytes leftover after parsing attributes in process `syz.0.804'. [ 264.335113][ T6848] device batadv_slave_1 entered promiscuous mode [ 265.075508][ T6847] device batadv_slave_1 left promiscuous mode [ 265.208376][ T5936] Bluetooth: hci6: command 0x1009 tx timeout [ 272.538100][ T6908] loop1: detected capacity change from 0 to 1024 [ 272.858781][ T6908] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.821: lblock 2 mapped to illegal pblock 2 (length 1) [ 273.046411][ T6908] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 273.086394][ T6908] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.821: lblock 0 mapped to illegal pblock 48 (length 1) [ 273.275755][ T6908] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 273.653108][ T6908] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.821: Failed to acquire dquot type 0 [ 273.764134][ T6908] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 273.870473][ T6908] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.821: mark_inode_dirty error [ 273.997405][ T6908] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 274.240992][ T6908] EXT4-fs (loop1): 1 orphan inode deleted [ 275.035362][ T1278] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.109915][ T6908] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 275.180531][ T1278] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 275.290619][ T1278] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:4: Failed to release dquot type 0 [ 275.732771][ T4187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 275.890547][ T4187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 275.981411][ T4187] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 278.183734][ T6938] netlink: 64 bytes leftover after parsing attributes in process `syz.4.828'. [ 281.177411][ T6983] netlink: 64 bytes leftover after parsing attributes in process `syz.1.840'. [ 281.285724][ T6972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.837'. [ 281.549954][ T6991] netlink: 64 bytes leftover after parsing attributes in process `syz.2.841'. [ 283.067752][ T7005] blk-mq: reduced tag depth (128 -> 1) [ 284.333090][ T7027] netlink: 64 bytes leftover after parsing attributes in process `syz.1.853'. [ 290.743161][ T7092] ======================================================= [ 290.743161][ T7092] WARNING: The mand mount option has been deprecated and [ 290.743161][ T7092] and is ignored by this kernel. Remove the mand [ 290.743161][ T7092] option from the mount to silence this warning. [ 290.743161][ T7092] ======================================================= [ 290.870380][ T7086] loop1: detected capacity change from 0 to 1024 [ 291.375381][ T7086] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.870: lblock 2 mapped to illegal pblock 2 (length 1) [ 291.413537][ T7086] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 291.421712][ T7086] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.870: lblock 0 mapped to illegal pblock 48 (length 1) [ 291.471276][ T7086] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 291.528460][ T7086] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.870: Failed to acquire dquot type 0 [ 291.631849][ T7086] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 291.675639][ T7086] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.870: mark_inode_dirty error [ 291.703080][ T7086] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 291.733783][ T7086] EXT4-fs (loop1): 1 orphan inode deleted [ 291.766413][ T7086] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 291.839396][ T4321] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 291.892207][ T4321] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 291.940472][ T4321] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:9: Failed to release dquot type 0 [ 292.742737][ T7110] netlink: 64 bytes leftover after parsing attributes in process `syz.2.876'. [ 292.763632][ T7108] ubi0: attaching mtd0 [ 292.963750][ T7108] ubi0: scanning is finished [ 292.968495][ T7108] ubi0: empty MTD device detected [ 293.420562][ T4187] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 293.481500][ T4187] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 293.523231][ T4187] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 293.562709][ T7108] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 293.592759][ T7108] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 293.632816][ T7108] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 293.641234][ T7108] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 293.706644][ T7108] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 293.770936][ T7108] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 293.896230][ T7108] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1721854420 [ 294.071258][ T7108] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 294.240109][ T7122] ubi0: background thread "ubi_bgt0d" started, PID 7122 [ 295.777885][ T7145] device syzkaller0 entered promiscuous mode [ 299.822107][ T7201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.901'. [ 299.910723][ T7195] device syzkaller0 entered promiscuous mode [ 301.114415][ T7209] vivid-000: kernel_thread() failed [ 306.614585][ T7266] vivid-000: kernel_thread() failed [ 313.764779][ T7344] udevd[7344]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 314.048372][ T7348] vivid-000: kernel_thread() failed [ 317.762144][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.768500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.711492][ T7433] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.962'. [ 326.555252][ T7468] udevd[7468]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 327.668725][ T7486] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.975'. [ 330.036955][ T7519] loop1: detected capacity change from 0 to 256 [ 330.237429][ T7519] FAT-fs (loop1): Unrecognized mount option "iocharset=" or missing value [ 332.645814][ T7541] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.991'. [ 333.263180][ T7465] udevd[7465]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 365.768840][ T7852] sctp: failed to load transform for md5: -2 [ 367.393304][ T7873] vivid-000: kernel_thread() failed [ 378.276141][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.291581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.045717][ T7990] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1113'. [ 388.929412][ T8042] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.1129'. [ 390.810232][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 394.157536][ T8089] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1141'. [ 394.205002][ T8086] udevd[8086]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 401.629420][ T8148] netlink: 'syz.1.1157': attribute type 72 has an invalid length. [ 405.410037][ T8186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 405.578231][ T8185] netlink: 'syz.1.1168': attribute type 72 has an invalid length. [ 408.791212][ T8223] netlink: 'syz.2.1180': attribute type 72 has an invalid length. [ 410.026431][ T8236] vivid-000: kernel_thread() failed [ 412.812121][ T8269] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1192'. [ 413.248372][ T8276] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1204'. [ 418.483631][ T8327] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1209'. [ 429.159867][ T8418] vivid-000: kernel_thread() failed [ 439.708053][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.714495][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.528965][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1288'. [ 451.796865][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1311'. [ 465.860050][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 486.280316][ T9048] capability: warning: `syz.1.1413' uses 32-bit capabilities (legacy support in use) [ 492.970763][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 501.523453][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530231][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.657028][ T9297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 515.254503][ T1278] Bluetooth: hci5: Frame reassembly failed (-84) [ 515.313609][ T1278] Bluetooth: hci5: Frame reassembly failed (-84) [ 516.032581][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 516.279029][ T9313] sctp: failed to load transform for md5: -2 [ 517.435553][ T4230] Bluetooth: hci5: command 0x1003 tx timeout [ 517.441670][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 518.661995][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 519.472411][ T4232] Bluetooth: hci5: command 0x1001 tx timeout [ 519.480119][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 521.552505][ T1108] Bluetooth: hci5: command 0x1009 tx timeout [ 523.701661][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 523.715252][ T154] Bluetooth: hci6: Frame reassembly failed (-84) [ 524.687979][ T9372] loop0: detected capacity change from 0 to 128 [ 525.851372][ T7976] Bluetooth: hci6: command 0x1003 tx timeout [ 525.858980][ T146] Bluetooth: hci6: sending frame failed (-49) [ 527.255068][ T9372] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 527.366061][ T9372] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 527.968738][ T8354] Bluetooth: hci6: command 0x1001 tx timeout [ 527.976436][ T146] Bluetooth: hci6: sending frame failed (-49) [ 530.151506][ T9356] Bluetooth: hci6: command 0x1009 tx timeout [ 536.193828][ T9450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 536.861094][ T9451] sctp: failed to load transform for md5: -2 [ 547.491050][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 558.190906][ T9647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 558.368288][ T9649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.943012][ T9659] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.877347][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.952590][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.135191][ T9749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 576.368930][ T9761] loop0: detected capacity change from 0 to 128 [ 576.905244][ T9761] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 576.928712][ T9761] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 577.006655][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1611'. [ 578.082666][ T4242] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 582.313008][ T9816] xt_CT: You must specify a L4 protocol and not use inversions on it [ 584.252969][ T9822] loop0: detected capacity change from 0 to 512 [ 585.198579][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 585.622565][ T9822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 585.635877][ T9822] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 586.915352][ T9822] EXT4-fs: failed to create workqueue [ 586.920813][ T9822] EXT4-fs (loop0): mount failed [ 593.945872][ T9884] xt_CT: You must specify a L4 protocol and not use inversions on it [ 594.436431][ T9888] loop0: detected capacity change from 0 to 512 [ 594.592915][ T9888] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 594.878531][ T9888] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 594.896974][ T9888] EXT4-fs (loop0): 1 truncate cleaned up [ 594.903122][ T9888] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 596.927773][ T9900] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.383553][ T9952] xt_CT: You must specify a L4 protocol and not use inversions on it [ 602.708221][ T9960] loop0: detected capacity change from 0 to 512 [ 603.746127][ T9960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 603.969338][ T9960] EXT4-fs (loop0): 1 truncate cleaned up [ 603.975355][ T9960] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 610.403263][T10008] vivid-000: kernel_thread() failed [ 624.835451][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.841834][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 633.037670][ T4283] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.409871][ T4283] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.677794][ T4283] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.018271][ T4283] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.029440][T10197] chnl_net:caif_netlink_parms(): no params data found [ 635.143737][ T7976] Bluetooth: hci1: command 0x0409 tx timeout [ 635.677995][T10197] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.763099][T10197] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.785227][T10197] device bridge_slave_0 entered promiscuous mode [ 635.830530][T10197] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.852373][T10197] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.897187][T10197] device bridge_slave_1 entered promiscuous mode [ 636.022938][T10197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.068617][T10197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.413420][T10197] team0: Port device team_slave_0 added [ 636.456558][T10197] team0: Port device team_slave_1 added [ 637.078488][T10197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.118981][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.182937][T10197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.195645][T10197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.202865][T10197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.229140][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 637.236588][T10197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.325222][T10197] device hsr_slave_0 entered promiscuous mode [ 637.344487][T10197] device hsr_slave_1 entered promiscuous mode [ 637.369631][T10197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.405952][T10197] Cannot create hsr debugfs directory [ 640.834992][ T7976] Bluetooth: hci1: command 0x040f tx timeout [ 641.331158][ T4283] device hsr_slave_0 left promiscuous mode [ 641.362376][ T4283] device hsr_slave_1 left promiscuous mode [ 641.432715][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.460601][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.519537][ T4283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.564542][ T4283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.787831][ T4283] device bridge_slave_1 left promiscuous mode [ 642.817130][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.896227][ T4283] device bridge_slave_0 left promiscuous mode [ 642.904600][ T7976] Bluetooth: hci1: command 0x0419 tx timeout [ 642.923600][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.022994][ T4283] device veth1_macvtap left promiscuous mode [ 644.030665][ T4283] device veth0_macvtap left promiscuous mode [ 645.074849][ T4283] team0 (unregistering): Port device team_slave_1 removed [ 645.138277][ T4283] team0 (unregistering): Port device team_slave_0 removed [ 645.165117][ T4283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.181758][ T4283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.286723][ T4283] bond0 (unregistering): Released all slaves [ 646.431037][T10197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 646.511930][T10197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 646.522000][T10197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 646.531855][T10197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.099693][T10197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.176772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 649.228583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 649.283173][T10197] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.317050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 649.335196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 649.443368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.450503][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.557654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 649.583632][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 649.593678][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 649.603425][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.610937][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.649158][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 649.681655][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 649.712397][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 649.740271][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 649.760860][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 649.784291][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 649.804667][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 649.838044][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 649.857011][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 649.899239][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 649.922730][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 650.012149][T10197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 650.630228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 650.649529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 650.698767][T10197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.120483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.159861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.294956][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.343258][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.393759][T10197] device veth0_vlan entered promiscuous mode [ 654.415118][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.455267][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.689295][T10197] device veth1_vlan entered promiscuous mode [ 655.453308][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 655.508389][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 655.569331][T10197] device veth0_macvtap entered promiscuous mode [ 655.614652][T10197] device veth1_macvtap entered promiscuous mode [ 655.631935][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.643990][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.664209][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.777863][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.789892][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.800719][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.828159][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.979388][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.305652][T10197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.572374][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.581126][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.592681][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 656.600831][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 656.610786][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 656.620760][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 656.642417][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.675578][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.702421][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.735261][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.777042][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.876219][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.942497][T10197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.953758][T10197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.990765][T10197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.004216][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.029605][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.075353][T10197] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.093917][T10197] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.133771][T10197] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.158703][T10197] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.203950][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.262423][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.367670][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.911459][ T4239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.942298][ T4239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.012299][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 662.009406][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1796'. [ 683.773071][ C1] Unknown status report in ack skb [ 685.493786][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.505466][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.798233][T10791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'. [ 695.464626][T10853] loop0: detected capacity change from 0 to 1024 [ 695.687391][T10853] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 2: comm syz.0.1864: lblock 2 mapped to illegal pblock 2 (length 1) [ 695.797030][T10853] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 695.859188][T10853] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 48: comm syz.0.1864: lblock 0 mapped to illegal pblock 48 (length 1) [ 695.876052][T10853] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 695.885094][T10853] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1864: Failed to acquire dquot type 0 [ 695.897761][T10853] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 696.211780][T10853] EXT4-fs error (device loop0): ext4_evict_inode:284: inode #11: comm syz.0.1864: mark_inode_dirty error [ 696.712367][T10853] EXT4-fs warning (device loop0): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 696.732606][T10853] EXT4-fs (loop0): 1 orphan inode deleted [ 696.738404][T10853] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 696.763877][ T4283] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 696.823954][ T4283] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 696.868546][ T4283] EXT4-fs error (device loop0): ext4_release_dquot:6272: comm kworker/u4:8: Failed to release dquot type 0 [ 696.966550][T10879] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1868'. [ 699.047259][ T4189] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 699.135744][ T4189] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 699.196366][ T4189] EXT4-fs error (device loop0): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 702.219382][T10917] vivid-000: kernel_thread() failed [ 721.961462][T11064] chnl_net:caif_netlink_parms(): no params data found [ 722.123133][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1911'. [ 722.994781][T10954] Bluetooth: hci5: command 0x0409 tx timeout [ 723.242839][T11064] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.250093][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.258665][T11064] device bridge_slave_0 entered promiscuous mode [ 723.267787][T11064] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.277369][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.303662][T11064] device bridge_slave_1 entered promiscuous mode [ 723.444749][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.520082][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.218045][T11064] team0: Port device team_slave_0 added [ 724.230716][T11064] team0: Port device team_slave_1 added [ 724.390477][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.438479][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.508605][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.712394][T10954] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 724.826611][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.865201][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 724.976028][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.104817][ T5936] Bluetooth: hci5: command 0x041b tx timeout [ 725.126866][T11064] device hsr_slave_0 entered promiscuous mode [ 725.149264][T11064] device hsr_slave_1 entered promiscuous mode [ 725.164029][T11064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 725.179526][T11064] Cannot create hsr debugfs directory [ 725.338820][T10954] usb 2-1: config 0 has no interfaces? [ 725.667015][T11064] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 725.760370][T11064] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 725.776320][T11064] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 725.791819][T11064] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 725.842565][T10954] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 725.866827][T10954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.895382][T10954] usb 2-1: Product: syz [ 725.899986][T10954] usb 2-1: Manufacturer: syz [ 725.922254][T10954] usb 2-1: SerialNumber: syz [ 725.963700][T10954] usb 2-1: config 0 descriptor?? [ 725.972861][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.104928][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 726.113346][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 726.225345][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.237383][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 726.253898][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.272870][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.280001][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.336194][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 726.356455][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 726.376223][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 726.397410][ T9356] usb 2-1: USB disconnect, device number 2 [ 726.422743][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.429944][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 726.463041][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 726.483300][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 726.510716][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 726.544706][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 726.566661][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 726.606851][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 726.625946][ T4676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 726.685202][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 726.708067][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 726.742108][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 726.775911][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 726.805684][T11064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 727.142689][ T5936] Bluetooth: hci5: command 0x040f tx timeout [ 727.273442][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 727.281039][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 727.314481][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.176796][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.222901][ T5936] Bluetooth: hci5: command 0x0419 tx timeout [ 729.229614][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.343170][T11064] device veth0_vlan entered promiscuous mode [ 729.381837][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 729.411835][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.458695][T11064] device veth1_vlan entered promiscuous mode [ 729.507072][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.582782][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.749080][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 730.878673][T11064] device veth0_macvtap entered promiscuous mode [ 730.916195][T11064] device veth1_macvtap entered promiscuous mode [ 730.932637][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.964049][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.993101][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 731.031697][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 731.072923][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.092327][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.122758][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.162219][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.192237][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.242198][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.322822][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.388180][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.422294][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.452265][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.499962][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.580093][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 731.611323][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 731.645017][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.668380][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.695541][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.736560][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.764731][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.823678][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.837089][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.848374][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.858736][T11064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.877856][T11064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.891619][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.911361][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 731.934211][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 731.986245][T11064] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.005535][T11064] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.035913][T11064] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.094920][T11064] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.570740][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.601083][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.714801][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.742819][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.842726][T11226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 735.120932][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 735.129337][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 739.703856][ T4676] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.937406][ T4676] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.031057][ T4676] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.180248][ T4676] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.618661][T11322] xt_CT: You must specify a L4 protocol and not use inversions on it [ 747.064449][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.077207][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.876864][T11356] xt_CT: You must specify a L4 protocol and not use inversions on it [ 750.754694][T11372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1971'. [ 755.912322][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 756.332951][ T4229] usb 2-1: config 0 has no interfaces? [ 756.832491][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 756.843417][ T4229] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 756.872310][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.918124][ T4229] usb 2-1: config 0 descriptor?? [ 757.131258][ T4229] usb 2-1: can't set config #0, error -71 [ 757.929794][ T4229] usb 2-1: USB disconnect, device number 3 [ 759.114764][ T4676] device hsr_slave_0 left promiscuous mode [ 759.137693][ T4676] device hsr_slave_1 left promiscuous mode [ 759.168114][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.190912][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.219536][ T4676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.258866][ T4676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.300329][ T4676] device bridge_slave_1 left promiscuous mode [ 759.346186][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.410067][ T4676] device bridge_slave_0 left promiscuous mode [ 760.152313][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.187112][ T4676] device veth1_macvtap left promiscuous mode [ 760.203578][ T4676] device veth0_macvtap left promiscuous mode [ 760.209701][ T4676] device veth1_vlan left promiscuous mode [ 761.376123][ T4676] device veth0_vlan left promiscuous mode [ 764.676523][ T4676] team0 (unregistering): Port device team_slave_1 removed [ 764.759205][ T4676] team0 (unregistering): Port device team_slave_0 removed [ 764.842648][ T4676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.913568][ T4676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.274438][ T4676] bond0 (unregistering): Released all slaves [ 768.483117][T11536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.979089][T11601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 778.979370][T11609] xt_CT: You must specify a L4 protocol and not use inversions on it [ 782.783642][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2020'. [ 788.562728][T11674] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.460710][T11703] xt_CT: You must specify a L4 protocol and not use inversions on it [ 800.422192][ T4229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 803.184441][T11760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 803.418942][ T4229] usb 5-1: device descriptor read/all, error -71 [ 803.726365][T11770] autofs4:pid:11770:autofs_fill_super: called with bogus options [ 805.300753][T11786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 806.200918][T11792] ODEBUG: Out of memory. ODEBUG disabled [ 808.862835][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.869175][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.169540][T11824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 814.513573][T11837] loop0: detected capacity change from 0 to 512 [ 814.727090][T11837] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 814.894569][T11837] EXT4-fs (loop0): 1 truncate cleaned up [ 814.900310][T11837] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 817.645909][T11860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.787759][T11866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 817.827789][T11865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 818.142554][T11870] loop0: detected capacity change from 0 to 512 [ 820.879423][T11870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 820.890373][T11870] EXT4-fs: failed to create workqueue [ 820.895828][T11870] EXT4-fs (loop0): mount failed [ 828.476627][ T7136] Bluetooth: hci1: command 0x0409 tx timeout [ 828.770362][T11942] xt_CT: You must specify a L4 protocol and not use inversions on it [ 830.592178][ T1108] Bluetooth: hci1: command 0x041b tx timeout [ 832.672502][ T4264] Bluetooth: hci1: command 0x040f tx timeout [ 833.295292][T11899] chnl_net:caif_netlink_parms(): no params data found [ 834.861348][ T7136] Bluetooth: hci1: command 0x0419 tx timeout [ 836.790840][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.808632][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.868366][T11899] device bridge_slave_0 entered promiscuous mode [ 836.962048][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.022243][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.083365][T12007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 837.111653][T11899] device bridge_slave_1 entered promiscuous mode [ 837.480470][T12015] loop0: detected capacity change from 0 to 512 [ 837.550746][T12015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 838.543116][T12015] EXT4-fs (loop0): 1 truncate cleaned up [ 838.548895][T12015] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 838.677592][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.083462][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.117113][T12023] xt_CT: You must specify a L4 protocol and not use inversions on it [ 841.097669][T11899] team0: Port device team_slave_0 added [ 841.592452][T12036] sctp: failed to load transform for md5: -2 [ 841.915578][T11899] team0: Port device team_slave_1 added [ 843.344695][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.830419][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.936590][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.077403][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.121727][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.272151][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.348476][T11899] device hsr_slave_0 entered promiscuous mode [ 845.403321][T11899] device hsr_slave_1 entered promiscuous mode [ 845.423586][T11899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.471469][T11899] Cannot create hsr debugfs directory [ 846.492876][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 846.631142][T12094] xt_CT: You must specify a L4 protocol and not use inversions on it [ 848.941593][T11899] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 848.989516][T11899] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 849.063907][T11899] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 849.125593][T11899] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 849.603229][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.650603][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.671531][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.693688][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.711735][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.723687][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.743503][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.750624][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.798851][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.821161][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.906507][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.965205][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.972368][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.018903][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 850.053050][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 850.062092][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.073389][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.082696][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.102824][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 851.796525][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 851.806209][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 851.814962][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 851.835797][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.851792][T11899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 851.902440][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 851.911068][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 852.588334][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 852.686819][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 852.793501][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.658935][T12161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 853.902377][T12164] xt_CT: You must specify a L4 protocol and not use inversions on it [ 856.939207][T12186] process 'syz.0.2120' launched './file0' with NULL argv: empty string added [ 861.151983][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2126'. [ 862.732808][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 862.746385][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 862.782644][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 862.808717][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 862.823965][T12229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 863.008117][T11899] device veth0_vlan entered promiscuous mode [ 863.061263][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 863.093923][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 864.799817][T11899] device veth1_vlan entered promiscuous mode [ 864.831875][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 864.912840][T12245] xt_CT: You must specify a L4 protocol and not use inversions on it [ 865.163111][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 865.203258][ T6285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 865.243819][T11899] device veth0_macvtap entered promiscuous mode [ 865.316246][T11899] device veth1_macvtap entered promiscuous mode [ 866.777700][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 867.403166][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.597358][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.628582][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.778189][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.789108][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.799043][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 868.820177][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 868.898395][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.660248][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.802605][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.809115][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.896402][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.101008][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 870.110122][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 870.133645][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 870.413383][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 871.015127][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.102157][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.364997][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.393531][T12306] xt_CT: You must specify a L4 protocol and not use inversions on it [ 871.852678][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.863518][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.086971][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.096863][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.119634][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.664971][T12311] loop0: detected capacity change from 0 to 512 [ 872.831187][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.877088][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.051329][T12311] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 873.218812][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.270517][T12311] EXT4-fs (loop0): 1 truncate cleaned up [ 873.276323][T12311] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 873.877482][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 873.928901][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 874.245593][T11899] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.305231][T11899] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.371075][T11899] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.422929][T11899] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.672580][T12325] xt_CT: You must specify a L4 protocol and not use inversions on it [ 876.001861][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.028948][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.179533][ T4283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.203188][ T4283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.122980][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 877.131050][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 880.302279][ T4676] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.352951][T12373] xt_CT: You must specify a L4 protocol and not use inversions on it [ 880.605452][ T4676] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.121684][ T4676] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.639601][ T4676] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.994789][T12450] xt_CT: You must specify a L4 protocol and not use inversions on it [ 893.514413][T12500] xt_CT: You must specify a L4 protocol and not use inversions on it [ 893.774586][T12509] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.432064][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1002.439072][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12542/1:b..l [ 1002.447567][ C0] (detected by 0, t=10502 jiffies, g=48365, q=104) [ 1002.454179][ C0] task:dhcpcd-run-hook state:R running task stack:26544 pid:12542 ppid: 12541 flags:0x00004002 [ 1002.465945][ C0] Call Trace: [ 1002.469326][ C0] [ 1002.472358][ C0] __schedule+0x11ef/0x43c0 [ 1002.477013][ C0] ? __lock_acquire+0x12e8/0x7d10 [ 1002.482119][ C0] ? ktime_get_coarse_real_ts64+0x10c/0x120 [ 1002.488091][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1002.494111][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.500129][ C0] ? step_into+0x37b/0xd10 [ 1002.504627][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1002.509948][ C0] preempt_schedule_irq+0xbb/0x160 [ 1002.515104][ C0] ? __cond_resched+0xd0/0xd0 [ 1002.519823][ C0] ? rcu_is_watching+0x11/0xa0 [ 1002.524686][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1002.530519][ C0] irqentry_exit+0x63/0x70 [ 1002.535021][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1002.541077][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2c/0x80 [ 1002.548004][ C0] Code: 04 24 65 48 8b 0d 44 36 89 7e 65 8b 15 45 36 89 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 34 16 00 00 00 74 52 <8b> 91 10 16 00 00 83 fa 03 75 47 48 8b 91 18 16 00 00 44 8b 89 14 [ 1002.567698][ C0] RSP: 0018:ffffc9000356f838 EFLAGS: 00000246 [ 1002.573846][ C0] RAX: ffffffff81ccb206 RBX: ffffc9000356fc70 RCX: ffff8880265e9dc0 [ 1002.581858][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffff6 [ 1002.589850][ C0] RBP: ffffc9000356f970 R08: ffffc9000356fc4f R09: 1ffff920006adf89 [ 1002.597859][ C0] R10: dffffc0000000000 R11: fffff520006adf8a R12: 0000000000000000 [ 1002.605890][ C0] R13: dffffc0000000000 R14: ffffffff8c1cd040 R15: ffffc9000356fc40 [ 1002.613904][ C0] ? link_path_walk+0x286/0xd70 [ 1002.618822][ C0] link_path_walk+0x286/0xd70 [ 1002.623550][ C0] ? handle_lookup_down+0x130/0x130 [ 1002.628783][ C0] ? percpu_counter_add_batch+0x13b/0x160 [ 1002.634656][ C0] path_openat+0x28d/0x2fa0 [ 1002.639246][ C0] ? verify_lock_unused+0x140/0x140 [ 1002.644485][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 1002.649854][ C0] ? do_filp_open+0x410/0x410 [ 1002.654587][ C0] do_filp_open+0x1e2/0x410 [ 1002.659125][ C0] ? vfs_tmpfile+0x300/0x300 [ 1002.663782][ C0] ? _raw_spin_unlock+0x24/0x40 [ 1002.668670][ C0] ? alloc_fd+0x598/0x630 [ 1002.673120][ C0] do_sys_openat2+0x150/0x4b0 [ 1002.677861][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1002.682926][ C0] ? do_sys_open+0xe0/0xe0 [ 1002.687369][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1002.693522][ C0] ? lock_chain_count+0x20/0x20 [ 1002.698417][ C0] ? vtime_user_exit+0x2c8/0x3e0 [ 1002.703485][ C0] __x64_sys_openat+0x135/0x160 [ 1002.708379][ C0] do_syscall_64+0x4c/0xa0 [ 1002.712919][ C0] ? clear_bhb_loop+0x30/0x80 [ 1002.717626][ C0] ? clear_bhb_loop+0x30/0x80 [ 1002.722342][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1002.728280][ C0] RIP: 0033:0x7f87b0822c3a [ 1002.732722][ C0] RSP: 002b:00007ffd44035188 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1002.741172][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f87b0822c3a [ 1002.749173][ C0] RDX: 0000000000090800 RSI: 0000561642c01150 RDI: 00000000ffffff9c [ 1002.757164][ C0] RBP: 0000561642bf6def R08: 00007f87b08feac0 R09: 0000000000000000 [ 1002.765160][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd440352e8 [ 1002.773164][ C0] R13: 0000561642bf6de8 R14: 0000000000000001 R15: 0000561642c01177 [ 1002.781177][ C0] [ 1002.784231][ C0] rcu: rcu_preempt kthread starved for 10533 jiffies! g48365 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1002.795450][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1002.805443][ C0] rcu: RCU grace-period kthread stack dump: [ 1002.811350][ C0] task:rcu_preempt state:R running task stack:28016 pid: 15 ppid: 2 flags:0x00004000 [ 1002.822165][ C0] Call Trace: [ 1002.825469][ C0] [ 1002.828428][ C0] __schedule+0x11ef/0x43c0 [ 1002.832975][ C0] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 1002.838476][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.843708][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.849661][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1002.854573][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1002.860505][ C0] ? __mod_timer+0x91e/0xd00 [ 1002.865208][ C0] schedule+0x11b/0x1e0 [ 1002.869403][ C0] schedule_timeout+0x184/0x2d0 [ 1002.874283][ C0] ? console_conditional_schedule+0x40/0x40 [ 1002.880210][ C0] ? update_process_times+0x200/0x200 [ 1002.885622][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1002.891206][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 1002.896088][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.901324][ C0] ? rcu_gp_init+0xd6c/0x10f0 [ 1002.906026][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 1002.910829][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1002.916142][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1002.921374][ C0] rcu_gp_kthread+0x9b/0x370 [ 1002.925998][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.931920][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1002.937061][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1002.942978][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1002.948100][ C0] kthread+0x436/0x520 [ 1002.952207][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1002.957342][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1002.961972][ C0] ret_from_fork+0x1f/0x30 [ 1002.966458][ C0] [ 1002.969500][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1002.975856][ C0] NMI backtrace for cpu 0 [ 1002.980213][ C0] CPU: 0 PID: 12543 Comm: syz.7.2191 Not tainted syzkaller #0 [ 1002.987699][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1002.997776][ C0] Call Trace: [ 1003.001082][ C0] [ 1003.003951][ C0] dump_stack_lvl+0x188/0x250 [ 1003.008694][ C0] ? show_regs_print_info+0x20/0x20 [ 1003.013921][ C0] ? load_image+0x400/0x400 [ 1003.018459][ C0] ? irq_work_queue+0xbf/0x140 [ 1003.023474][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1003.028500][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1003.034684][ C0] ? _printk+0xda/0x130 [ 1003.038873][ C0] ? cpu_online+0x1d/0x30 [ 1003.043235][ C0] ? load_image+0x400/0x400 [ 1003.047768][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1003.053910][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1003.059913][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 1003.066098][ C0] print_other_cpu_stall+0x1110/0x1270 [ 1003.071590][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 1003.076570][ C0] rcu_sched_clock_irq+0x843/0x1120 [ 1003.081804][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 1003.086679][ C0] ? account_process_tick+0x22a/0x3a0 [ 1003.092073][ C0] update_process_times+0x193/0x200 [ 1003.097304][ C0] tick_sched_timer+0x37d/0x560 [ 1003.102270][ C0] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 1003.107842][ C0] __hrtimer_run_queues+0x4b4/0xb70 [ 1003.113094][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1003.118236][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1003.124344][ C0] hrtimer_interrupt+0x3bb/0x8d0 [ 1003.129359][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1003.135380][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1003.141050][ C0] [ 1003.143997][ C0] [ 1003.146953][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1003.152959][ C0] RIP: 0010:syscall_enter_from_user_mode+0x2a/0x70 [ 1003.159489][ C0] Code: 41 56 53 48 89 f3 49 89 fe 48 8b 7c 24 10 e8 3d f6 ff ff eb 31 eb 35 e8 f4 8e c2 f7 e8 ef 8c c2 f7 fb 65 48 8b 05 d6 9a 45 76 <48> 8b 70 08 40 f6 c6 3f 74 0b 4c 89 f7 5b 41 5e e9 71 8c aa f7 48 [ 1003.179128][ C0] RSP: 0018:ffffc9000311ff08 EFLAGS: 00000286 [ 1003.185233][ C0] RAX: ffff8880230fd940 RBX: 000000000000000f RCX: a73b95075f09b600 [ 1003.193233][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b3100 RDI: ffffffff8a7a0700 [ 1003.201224][ C0] RBP: ffffc9000311ff48 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05 [ 1003.209245][ C0] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: 0000000000000000 [ 1003.217244][ C0] R13: 0000000000000000 R14: ffffc9000311ff58 R15: 0000000000000000 [ 1003.225257][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 1003.231193][ C0] do_syscall_64+0x24/0xa0 [ 1003.235645][ C0] ? clear_bhb_loop+0x30/0x80 [ 1003.240365][ C0] ? clear_bhb_loop+0x30/0x80 [ 1003.245074][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1003.250988][ C0] RIP: 0033:0x7f40576771d9 [ 1003.255438][ C0] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 1003.275082][ C0] RSP: 002b:00007f40558ecb40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 1003.283540][ C0] RAX: ffffffffffffffda RBX: 00007f405794f188 RCX: 00007f40576771d9 [ 1003.291549][ C0] RDX: 00007f40558ecb40 RSI: 00007f40558ecc70 RDI: 0000000000000021 [ 1003.299548][ C0] RBP: 00007f405794f180 R08: 0000000000000000 R09: 0000000000000000 [ 1003.307549][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1003.315551][ C0] R13: 00007f405794f218 R14: 00007ffd13b0aed0 R15: 00007ffd13b0afb8 [ 1003.323567][ C0]