last executing test programs: 1m16.283946245s ago: executing program 2 (id=62): sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000240)=0x3) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x3, 0x5}}) r7 = accept$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r7, &(0x7f0000001580), 0x49249249249256f, 0x40484) 1m14.841893111s ago: executing program 2 (id=68): unshare(0xa020480) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) 1m11.763085858s ago: executing program 2 (id=100): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x51, 0x0, 0xac, {0x5, 0x1}, {0x4d, 0x2}, @const={0x7, {0x7fff, 0x806, 0x2, 0x7}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1m11.378814731s ago: executing program 2 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x640003, 0xc) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 1m10.46435976s ago: executing program 2 (id=107): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m9.82426477s ago: executing program 2 (id=110): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 1m9.327787076s ago: executing program 32 (id=110): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 38.602350468s ago: executing program 1 (id=340): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240)={0x80, 0x3, 0x3, 0x3}, 0x8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) 38.125349363s ago: executing program 1 (id=344): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xfffffffe, 0xe0, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x201}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) 37.424288775s ago: executing program 1 (id=350): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2002806c, &(0x7f00000016c0)=ANY=[@ANYRES8, @ANYRES64], 0xfe, 0x152b, &(0x7f0000000140)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xa0502, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r1, 0x0, 0x0, 0x2, 0x2) 35.044879461s ago: executing program 1 (id=358): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x2c020400) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) 33.992340874s ago: executing program 1 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) unshare(0x22020600) ppoll(&(0x7f0000000380)=[{r0, 0x508a}], 0x1, 0x0, 0x0, 0x0) 33.642250285s ago: executing program 1 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 18.443745446s ago: executing program 33 (id=364): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 11.268323053s ago: executing program 4 (id=448): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x28}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) 11.089736599s ago: executing program 4 (id=449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) 10.897473295s ago: executing program 4 (id=450): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x14}]}, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 10.73238177s ago: executing program 4 (id=451): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000200)=0x7, 0x4) 8.53026501s ago: executing program 4 (id=459): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x20f, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)=0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x6c, r5}, 0x38) 3.752461471s ago: executing program 0 (id=481): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) write(r0, 0x0, 0x0) 3.13644096s ago: executing program 0 (id=485): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x7, 0x0, 0x0, 0xa1}}) 2.765321233s ago: executing program 3 (id=487): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000500000000000000000000008500000023004bdbcf34c6374e1b6c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}, 0x1, 0x0, 0x0, 0x8064040}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.656464725s ago: executing program 0 (id=488): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 2.557911749s ago: executing program 4 (id=489): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ed03010000000000000000000200000a14000000ed03010000000000000700000a000000dc533e8079380726b0ce0469617c6c0b23c13983"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1, 0x8008000}]}]}}, 0x0, 0x32}, 0x28) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000ffff21000b00000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r4}, 0x38) 2.491668531s ago: executing program 3 (id=490): pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xed0e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = semget$private(0x0, 0x6, 0x1b5) semop(r3, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000000c0), 0x1001) semop(r3, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2.17644972s ago: executing program 5 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000068000106000000000000000002000000000000000800010001000000040004"], 0x24}}, 0x0) 1.371006246s ago: executing program 3 (id=492): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xf, 0x3, '\\^]!${{%@:\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x0, 0xe4ffffff, 0xfffffffc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 1.127415194s ago: executing program 3 (id=493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000000, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x84) flock(r3, 0x1) flock(r3, 0x1) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x820000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$TIOCSPTLCK(r4, 0x40045431, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x12) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$TCSETAW(r4, 0x5407, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)="306663353a313232373ad36c06c0f1", 0xf) 1.032396397s ago: executing program 5 (id=494): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xd, 0x7, @mcast2, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="671723d7c6013394717e3b6903ff3f503e825efa5390be209eeb9a44f302f1307c2127811e5e9f08", 0x28}], 0x1}, 0x20008b88) 1.031941177s ago: executing program 0 (id=495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000080008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x10000000, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xd81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "cc7be2", 0xd4b, 0x2f, 0xff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "082706fc1f9131360d5d2922f46523106b5abca2db52549e491eb78a7d7d364aa2d8dc0dfedeb0645ddb517c0ad0d5bfc7eaa09305759b3d30493d3b91d9daf4dffbf5b6d53553302b5ca7b6614c96626e399bedf8bbed1a2c76ec503f851e8f646eb703e48336bbe8feaaf7140c8e5b8c66dca4ba2f46ea0bd47b13cdf8f673bf35719424be7e3b70823e5f3fccef50f719dd2c3a984bd2881d39e8435b47"}, {0x8, 0x88be, 0x4, {{0xb, 0x1, 0x10, 0x1, 0x1, 0x1, 0x2, 0xd}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x4, 0x2, 0x7, 0x2, 0x1, 0x2, 0x0, 0x1}, 0x2, {0xe6f, 0x800, 0x2, 0x4, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "d9bb57242405aec9ef50e759383cbc4186acfb268f8b52756d6eea6bd3e962c402d4ba9b9619abfa4be43b4db3dc459aa04d5ed50d17967699bbf3db593a40ffc33b6fe96c9ab198f32cdf1cbe8c17ff84a8969fe658b4455dd7de7a4a2fbfdba17e701bb6301a9ad41c353de09d12233b67e3c7cf0ac10ead4d4b9974eb88c907d7de6636d154dc422a7e2e5610b0dded616bd7f977d95e61c32442cb5f630e575518af253874"}}}}}}}, 0x0) 916.6144ms ago: executing program 3 (id=496): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@minixdf}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 784.500255ms ago: executing program 5 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) 488.259634ms ago: executing program 5 (id=498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000010000007901f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003"], 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000000}, @generic={0x66, 0x8}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) shutdown(r5, 0x1) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 488.026574ms ago: executing program 0 (id=499): r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/softnet_stat\x00') readv(r0, &(0x7f0000002780)=[{&(0x7f0000000000)=""/211, 0xd3}], 0x1) 261.177661ms ago: executing program 5 (id=500): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 133.938266ms ago: executing program 0 (id=501): pwrite64(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0xed0e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = semget$private(0x0, 0x6, 0x1b5) semop(r3, &(0x7f0000000040)=[{0x0, 0xff43}], 0x1) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f00000000c0), 0x1001) semop(r3, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 28.402448ms ago: executing program 3 (id=502): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 0s ago: executing program 5 (id=503): bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x1234}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 61.620919][ T4174] cgroup: Unknown subsys name 'net' [ 61.758909][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.202770][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.149488][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 65.164418][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 65.236762][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 65.320357][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 65.347149][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.355014][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.363401][ T4190] device bridge_slave_0 entered promiscuous mode [ 65.376652][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.384422][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.392725][ T4190] device bridge_slave_1 entered promiscuous mode [ 65.400393][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.407871][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.416067][ T4191] device bridge_slave_0 entered promiscuous mode [ 65.454517][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.461669][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.469977][ T4191] device bridge_slave_1 entered promiscuous mode [ 65.490181][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.497504][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.505780][ T4186] device bridge_slave_0 entered promiscuous mode [ 65.513775][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 65.538619][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.548113][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.555345][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.563445][ T4186] device bridge_slave_1 entered promiscuous mode [ 65.587414][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.623536][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.635369][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.656540][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.666211][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.673468][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.681235][ T4194] device bridge_slave_0 entered promiscuous mode [ 65.697855][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.732820][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.740009][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.748651][ T4194] device bridge_slave_1 entered promiscuous mode [ 65.760953][ T4190] team0: Port device team_slave_0 added [ 65.768983][ T4190] team0: Port device team_slave_1 added [ 65.783466][ T4186] team0: Port device team_slave_0 added [ 65.791128][ T4191] team0: Port device team_slave_0 added [ 65.817375][ T4191] team0: Port device team_slave_1 added [ 65.824465][ T4186] team0: Port device team_slave_1 added [ 65.852956][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.859965][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.886126][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.907402][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.926050][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.948630][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.955871][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.982077][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.010998][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.018473][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.044704][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.062657][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.069623][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.095849][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.109086][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.116399][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.142824][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.154552][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.161628][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.169584][ T4198] device bridge_slave_0 entered promiscuous mode [ 66.178288][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.185572][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.211856][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.225400][ T4194] team0: Port device team_slave_0 added [ 66.247442][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.254670][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.262714][ T4198] device bridge_slave_1 entered promiscuous mode [ 66.290292][ T4194] team0: Port device team_slave_1 added [ 66.321967][ T4186] device hsr_slave_0 entered promiscuous mode [ 66.328739][ T4186] device hsr_slave_1 entered promiscuous mode [ 66.345174][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.357753][ T4190] device hsr_slave_0 entered promiscuous mode [ 66.365040][ T4190] device hsr_slave_1 entered promiscuous mode [ 66.371708][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.379732][ T4190] Cannot create hsr debugfs directory [ 66.401675][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.430060][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.437700][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.464837][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.480530][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.487843][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.514415][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.539665][ T4198] team0: Port device team_slave_0 added [ 66.547884][ T4198] team0: Port device team_slave_1 added [ 66.571472][ T4191] device hsr_slave_0 entered promiscuous mode [ 66.578631][ T4191] device hsr_slave_1 entered promiscuous mode [ 66.585465][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.593296][ T4191] Cannot create hsr debugfs directory [ 66.638362][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.645666][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.671703][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.707964][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.715384][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.741612][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.787447][ T4194] device hsr_slave_0 entered promiscuous mode [ 66.794272][ T4194] device hsr_slave_1 entered promiscuous mode [ 66.800972][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.809357][ T4194] Cannot create hsr debugfs directory [ 66.843121][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 66.849876][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 66.853326][ T4187] Bluetooth: hci1: command 0x0409 tx timeout [ 66.862261][ T4187] Bluetooth: hci3: command 0x0409 tx timeout [ 66.913037][ T4198] device hsr_slave_0 entered promiscuous mode [ 66.919966][ T4198] device hsr_slave_1 entered promiscuous mode [ 66.923527][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 66.933375][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.941059][ T4198] Cannot create hsr debugfs directory [ 67.140434][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.157036][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.172111][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.191763][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.233739][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.243496][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.254688][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.270770][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.335056][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.361347][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.369084][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.379489][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.397708][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.407865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.417618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.430520][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.477916][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.487009][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.501558][ T1276] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508848][ T1276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.540121][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.548587][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.559059][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.568671][ T1276] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.575797][ T1276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.585109][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.594427][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.613138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.623172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.631960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.640847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.652914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.661289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.671630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.700328][ T4198] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.710511][ T4198] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.730304][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.739116][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.747920][ T4198] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.761155][ T4198] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.772456][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.784845][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.828303][ T4194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.844508][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.858423][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.874008][ T4194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.891173][ T4194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.910251][ T4194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.945405][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.975395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.990857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.000354][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.007481][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.024669][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.038134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.048079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.057208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.067865][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.074993][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.099230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.130213][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.140649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.149738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.157796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.166705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.177187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.186112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.213505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.222116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.231169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.239774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.248255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.257002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.266129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.275116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.284759][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.291841][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.299999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.308851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.318073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.325199][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.338313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.350337][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.363522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.377627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.417182][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.434034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.451097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.460869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.474956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.484078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.492994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.501470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.519433][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.535810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.555365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.578206][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.597941][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.616622][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.625969][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.642957][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.667863][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.705232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.715525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.743751][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.763646][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.793283][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.819211][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.828251][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.835378][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.846559][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.857965][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.879234][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.891082][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.903785][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.910883][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.922507][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 68.928527][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.929246][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 68.937001][ T4240] Bluetooth: hci3: command 0x041b tx timeout [ 68.948880][ T4240] Bluetooth: hci1: command 0x041b tx timeout [ 68.959721][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.971628][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.983903][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.997458][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.004569][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.012183][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 69.018362][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.028898][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.037718][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.048256][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.090369][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.097629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.110165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.119066][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.126171][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.133994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.141570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.149190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.158064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.167814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.177275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.185933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.196640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.205633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.214857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.223303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.230718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.238279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.247669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.257155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.269015][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.277507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.286626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.313530][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.343045][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.351653][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.361648][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.371240][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.385119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.394403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.410804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.420921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.432146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.441654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.497881][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.511577][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.521111][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.538666][ T4191] device veth0_vlan entered promiscuous mode [ 69.555631][ T4186] device veth0_vlan entered promiscuous mode [ 69.568948][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.580223][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.589628][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.599889][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.609312][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.617881][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.627145][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.635454][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.644087][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.651993][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.676886][ T4190] device veth0_vlan entered promiscuous mode [ 69.684723][ T4186] device veth1_vlan entered promiscuous mode [ 69.707487][ T4191] device veth1_vlan entered promiscuous mode [ 69.720190][ T4190] device veth1_vlan entered promiscuous mode [ 69.778847][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.789837][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.799160][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.808600][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.819543][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.828475][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.837297][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.846725][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.866997][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.875042][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.884624][ T4186] device veth0_macvtap entered promiscuous mode [ 69.910676][ T4191] device veth0_macvtap entered promiscuous mode [ 69.927646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.937596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.946799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.956363][ T4186] device veth1_macvtap entered promiscuous mode [ 69.972221][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.982440][ T4191] device veth1_macvtap entered promiscuous mode [ 69.994885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.003971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.012191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.021106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.032171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.042238][ T4190] device veth0_macvtap entered promiscuous mode [ 70.064415][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.075746][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.084363][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.093590][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.104994][ T4190] device veth1_macvtap entered promiscuous mode [ 70.114965][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.126087][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.139756][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.153841][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.171527][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.183691][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.194778][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.206241][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.218268][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.226684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.235494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.244456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.254432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.263553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.272179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.279724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.288236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.298838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.307988][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.318842][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.330306][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.342669][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.351508][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.362432][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.371209][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.385356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.394689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.414978][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.424115][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.433909][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.443461][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.454962][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.466203][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.477245][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.487791][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.499045][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.508839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.518356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.531381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.540305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.571887][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.581576][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.591091][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.601003][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.610897][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.625733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.634778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.643904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.651679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.682925][ T4198] device veth0_vlan entered promiscuous mode [ 70.780068][ T4198] device veth1_vlan entered promiscuous mode [ 70.787890][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.796206][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.808396][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.825780][ T4194] device veth0_vlan entered promiscuous mode [ 70.857733][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.867121][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.876394][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.885388][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.893745][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.909009][ T4194] device veth1_vlan entered promiscuous mode [ 70.928584][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.937265][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.947253][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.959332][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.999045][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.007018][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 71.011875][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.022230][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 71.029867][ T4265] Bluetooth: hci2: command 0x040f tx timeout [ 71.030956][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.036484][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 71.055926][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.063909][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.091912][ T4194] device veth0_macvtap entered promiscuous mode [ 71.100163][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.108058][ T4187] Bluetooth: hci4: command 0x040f tx timeout [ 71.109948][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.123675][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.133400][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.143558][ T4198] device veth0_macvtap entered promiscuous mode [ 71.152050][ T4194] device veth1_macvtap entered promiscuous mode [ 71.181988][ T4198] device veth1_macvtap entered promiscuous mode [ 71.199103][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.210714][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.233146][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.245011][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.256335][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.261130][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.273300][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.279250][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.296066][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.306782][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.327250][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.338777][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.348241][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.357183][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.365816][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.374315][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.383312][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.398079][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.418607][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.426581][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.429208][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.450770][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.459204][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.469228][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.479823][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.491181][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.501854][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.517552][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.529405][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.537528][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.546832][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.559699][ T1247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.584263][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.600655][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.611193][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.621915][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.632590][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.647115][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.657279][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.668619][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.680673][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.698631][ T4194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.712103][ T4194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.725120][ T4194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.740409][ T4194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.767159][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.777135][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.788581][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.800234][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.815478][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.826071][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.835953][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.846753][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.858301][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.869008][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.880950][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.894467][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.924931][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.935002][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.967781][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.976835][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.989049][ T4198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.998856][ T4198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.007743][ T4198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.016758][ T4198] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.043172][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 72.265646][ T1205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.290985][ T1205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.317696][ T4276] loop2: detected capacity change from 0 to 2048 [ 72.332896][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.340229][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.360120][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.439746][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.463295][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.473867][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.488617][ T4276] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.544966][ T1205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.691520][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.725057][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.740995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.089244][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 73.106172][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 73.120878][ T4235] Bluetooth: hci1: command 0x0419 tx timeout [ 73.133630][ T4235] Bluetooth: hci0: command 0x0419 tx timeout [ 73.939747][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 73.953524][ T4306] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.12'. [ 74.133860][ T4315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 74.152476][ T4315] netlink: 'syz.0.15': attribute type 2 has an invalid length. [ 74.314927][ T4321] device syzkaller0 entered promiscuous mode [ 74.337149][ T4326] netlink: 'syz.3.20': attribute type 29 has an invalid length. [ 74.370938][ T4326] netlink: 'syz.3.20': attribute type 29 has an invalid length. [ 74.425737][ T4328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 74.779031][ T4336] loop1: detected capacity change from 0 to 8192 [ 74.843037][ T4336] ======================================================= [ 74.843037][ T4336] WARNING: The mand mount option has been deprecated and [ 74.843037][ T4336] and is ignored by this kernel. Remove the mand [ 74.843037][ T4336] option from the mount to silence this warning. [ 74.843037][ T4336] ======================================================= [ 75.034473][ T26] audit: type=1800 audit(1786732651.713:2): pid=4336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.25" name="file2" dev="loop1" ino=1048590 res=0 errno=0 [ 75.057853][ T4354] tun0: tun_chr_ioctl cmd 2147767519 [ 75.081920][ T4336] attempt to access beyond end of device [ 75.081920][ T4336] loop1: rw=2049, want=57848, limit=8192 [ 75.138265][ T4336] Buffer I/O error on dev loop1, logical block 57847, lost async page write [ 75.343386][ T4361] process 'syz.3.38' launched './file0' with NULL argv: empty string added [ 75.749077][ T4386] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.893224][ T4389] loop3: detected capacity change from 0 to 1024 [ 76.109277][ T4389] EXT4-fs (loop3): inline encryption not supported [ 76.222230][ T4389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.246891][ T4389] EXT4-fs (loop3): 1 truncate cleaned up [ 76.266886][ T4389] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 76.787803][ T4403] Zero length message leads to an empty skb [ 76.825550][ T4402] device syzkaller0 entered promiscuous mode [ 77.037502][ T4413] loop1: detected capacity change from 0 to 512 [ 77.722328][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.742327][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 77.752315][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.762321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.772317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.782324][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.792321][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 77.802317][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.812318][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 77.822319][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 78.262544][ T4413] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 78.350035][ T4418] "syz.2.62" (4418) uses obsolete ecb(arc4) skcipher [ 78.371589][ T4418] syz.2.62 sent an empty control message without MSG_MORE. [ 78.432567][ T4413] FAT-fs (loop1): Filesystem has been set read-only [ 78.579758][ T4431] loop4: detected capacity change from 0 to 512 [ 78.737121][ T4431] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,errors=continue,noblock_validity,,errors=continue. Quota mode: none. [ 79.498520][ T4460] loop4: detected capacity change from 0 to 512 [ 79.781205][ T4460] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 79.833024][ T4460] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.054108][ T4477] loop3: detected capacity change from 0 to 164 [ 80.169186][ T4477] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.411647][ T4492] loop1: detected capacity change from 0 to 512 [ 80.511984][ T4496] loop4: detected capacity change from 0 to 512 [ 80.537914][ T4492] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 80.628004][ T4496] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 80.672058][ T4492] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 80.714298][ T4496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0102] [ 80.734035][ T4492] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.772801][ T4496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.849553][ T4496] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.93: attempt to clear invalid blocks 1024 len 1 [ 80.865904][ T4496] EXT4-fs (loop4): Remounting filesystem read-only [ 80.874494][ T4496] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.93: bg 0: block 361: padding at end of block bitmap is not set [ 80.889291][ T4496] EXT4-fs (loop4): Remounting filesystem read-only [ 80.897584][ T4496] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 80.907040][ T4496] EXT4-fs (loop4): Remounting filesystem read-only [ 80.913998][ T4496] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.93: invalid indirect mapped block 1811939328 (level 0) [ 80.928432][ T4496] EXT4-fs (loop4): Remounting filesystem read-only [ 80.962557][ T4496] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.93: invalid indirect mapped block 2185560079 (level 1) [ 80.992870][ T4496] EXT4-fs (loop4): Remounting filesystem read-only [ 81.010255][ T4496] EXT4-fs (loop4): 1 truncate cleaned up [ 81.024712][ T4496] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,abort. Quota mode: none. [ 81.524629][ T4511] loop1: detected capacity change from 0 to 512 [ 81.592014][ T4511] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 81.616665][ T4513] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 81.634909][ T4511] EXT4-fs (loop1): orphan cleanup on readonly fs [ 81.693811][ T4511] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 81.739613][ T4513] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 81.754242][ T4511] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.97: invalid indirect mapped block 1819239214 (level 1) [ 82.502614][ T4520] "syz.0.102" (4520) uses obsolete ecb(arc4) skcipher [ 82.736027][ T4511] EXT4-fs (loop1): Remounting filesystem read-only [ 82.752664][ T4511] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.97: bg 0: block 408: padding at end of block bitmap is not set [ 82.923552][ T4511] EXT4-fs (loop1): Remounting filesystem read-only [ 82.945324][ T4530] lo speed is unknown, defaulting to 1000 [ 82.951247][ T4530] lo speed is unknown, defaulting to 1000 [ 82.958407][ T4530] lo speed is unknown, defaulting to 1000 [ 82.966773][ T4530] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.977598][ T4530] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 82.998012][ T4530] lo speed is unknown, defaulting to 1000 [ 83.005095][ T4530] lo speed is unknown, defaulting to 1000 [ 83.011492][ T4530] lo speed is unknown, defaulting to 1000 [ 83.018747][ T4530] lo speed is unknown, defaulting to 1000 [ 83.025170][ T4530] lo speed is unknown, defaulting to 1000 [ 83.031941][ T4511] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 83.054101][ T4528] loop3: detected capacity change from 0 to 2048 [ 83.091376][ T4511] EXT4-fs (loop1): Remounting filesystem read-only [ 83.103533][ T4511] EXT4-fs (loop1): 1 truncate cleaned up [ 83.109216][ T4511] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000006,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback. [ 83.157627][ T4528] loop3: p2 < > p3 < > [ 83.209014][ T4534] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.237423][ T4535] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 83.425948][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 83.426461][ T4180] udevd[4180]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 83.493512][ T4191] syz-executor (4191) used greatest stack depth: 21136 bytes left [ 84.284252][ T4552] e1000e: probe of 0000:00:00.0 failed with error -5 [ 85.092505][ T4554] "syz.1.115" (4554) uses obsolete ecb(arc4) skcipher [ 85.403290][ T4561] netlink: 'syz.3.116': attribute type 29 has an invalid length. [ 85.466584][ T4566] loop0: detected capacity change from 0 to 256 [ 85.473607][ T4561] netlink: 'syz.3.116': attribute type 29 has an invalid length. [ 85.519640][ T4559] lo speed is unknown, defaulting to 1000 [ 85.548766][ T4566] FAT-fs (loop0): Directory bread(block 1285) failed [ 85.591633][ T4566] FAT-fs (loop0): Directory bread(block 1286) failed [ 85.618327][ T4566] FAT-fs (loop0): Directory bread(block 1287) failed [ 85.629008][ T4566] FAT-fs (loop0): Directory bread(block 1288) failed [ 85.810841][ T4566] FAT-fs (loop0): Directory bread(block 1285) failed [ 85.863577][ T4566] FAT-fs (loop0): Directory bread(block 1286) failed [ 85.940999][ T4566] FAT-fs (loop0): Directory bread(block 1287) failed [ 85.961079][ T4566] FAT-fs (loop0): Directory bread(block 1288) failed [ 86.172225][ T4577] loop4: detected capacity change from 0 to 1764 [ 86.319122][ T4577] device syzkaller1 entered promiscuous mode [ 86.500126][ T4559] chnl_net:caif_netlink_parms(): no params data found [ 86.616417][ T1107] cfg80211: failed to load regulatory.db [ 86.749454][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.757228][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.767909][ T4559] device bridge_slave_0 entered promiscuous mode [ 86.776652][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.783891][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.798054][ T4559] device bridge_slave_1 entered promiscuous mode [ 86.834031][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.850340][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.889362][ T4559] team0: Port device team_slave_0 added [ 86.925226][ T4593] loop4: detected capacity change from 0 to 1024 [ 86.954282][ T4559] team0: Port device team_slave_1 added [ 87.019618][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.057582][ T4593] EXT4-fs (loop4): inline encryption not supported [ 87.071962][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.183730][ T4593] EXT4-fs (loop4): orphan cleanup on readonly fs [ 87.270763][ T4559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.354542][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.361621][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.375675][ T4593] EXT4-fs (loop4): 1 truncate cleaned up [ 87.391364][ T4606] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 87.452448][ T4559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.474562][ T4593] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 87.492070][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 87.505421][ T4606] netlink: 'syz.1.131': attribute type 29 has an invalid length. [ 87.517195][ T4608] loop0: detected capacity change from 0 to 128 [ 87.603741][ T4559] device hsr_slave_0 entered promiscuous mode [ 87.641779][ T4559] device hsr_slave_1 entered promiscuous mode [ 87.713378][ T4608] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 87.752551][ T4608] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.778492][ T4559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.799734][ T4559] Cannot create hsr debugfs directory [ 88.687627][ T4559] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.697818][ T4559] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.707972][ T4559] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.729220][ T4559] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 88.982584][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.036147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.056141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.109720][ T4559] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.132682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.151717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.179949][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.187154][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.215040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.259767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.287020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.296541][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.303675][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.311912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.334425][ T4640] netlink: 456 bytes leftover after parsing attributes in process `syz.0.144'. [ 89.367372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.377835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.413102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.440021][ T4641] siw: device registration error -23 [ 89.447682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.484208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.558332][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.572561][ T4187] Bluetooth: hci1: command 0x041b tx timeout [ 89.586906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.626920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.661110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.671029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.691320][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.002663][ T4666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.156'. [ 90.062736][ T4669] siw: device registration error -23 [ 90.168945][ T4674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.159'. [ 90.214160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.221661][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.241997][ T4676] loop3: detected capacity change from 0 to 512 [ 90.323113][ T4676] EXT4-fs (loop3): Ignoring removed orlov option [ 90.339427][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.371005][ T4680] loop1: detected capacity change from 0 to 512 [ 90.453769][ T4680] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.473612][ T4676] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,orlov,,errors=continue. Quota mode: writeback. [ 90.495841][ T4676] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.514294][ T4676] capability: warning: `syz.3.160' uses 32-bit capabilities (legacy support in use) [ 90.568089][ T4680] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.626480][ T4680] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 90.649458][ T4680] Quota error (device loop1): write_blk: dquota write failed [ 90.658091][ T4680] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 90.667460][ T4680] Quota error (device loop1): write_blk: dquota write failed [ 90.675292][ T4680] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 90.685602][ T4680] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.162: Failed to acquire dquot type 1 [ 90.707622][ T4680] EXT4-fs (loop1): 1 truncate cleaned up [ 90.743780][ T4680] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noblock_validity,noquota,nouid32,norecovery,abort,init_itable=0x0000000000000080,noauto_da_alloc,resuid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 91.000806][ T4699] loop1: detected capacity change from 0 to 512 [ 91.031532][ T4703] loop4: detected capacity change from 0 to 512 [ 91.052233][ T4699] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.089792][ T4699] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.090076][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.118269][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.163512][ T4703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.192676][ T4699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 91.206919][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.215626][ T4699] System zones: 1-12 [ 91.220637][ T4699] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.166: bad orphan inode 131072 [ 91.239086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.248577][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.257678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.266406][ T4709] siw: device registration error -23 [ 91.270001][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,data=journal,norecovery,,errors=continue. Quota mode: none. [ 91.289469][ T4559] device veth0_vlan entered promiscuous mode [ 91.339544][ T4559] device veth1_vlan entered promiscuous mode [ 91.465389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.493196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.520818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.546048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.566074][ T4559] device veth0_macvtap entered promiscuous mode [ 91.588801][ T4559] device veth1_macvtap entered promiscuous mode [ 91.596479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.606528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.649542][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.653928][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 91.662080][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.676514][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.687598][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.697875][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.708925][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.719299][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.734193][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.744789][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.755679][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.767730][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.776227][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.800828][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.858975][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.899658][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.918739][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.939014][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.949981][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.961821][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.971915][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.983189][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.993768][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.004751][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.016867][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.031761][ T4559] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.041610][ T4559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.077971][ T4559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.099708][ T4559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.111928][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.126100][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.138906][ T4749] loop0: detected capacity change from 0 to 512 [ 92.311182][ T4757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.325352][ T4757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.358408][ T4731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.427161][ T4762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 92.473556][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.481424][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.558175][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.789336][ T4775] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.116889][ T4796] netlink: 2825 bytes leftover after parsing attributes in process `syz.5.188'. [ 93.161934][ T4796] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.188'. [ 93.195816][ T4796] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.188'. [ 93.267104][ T4800] loop3: detected capacity change from 0 to 512 [ 94.132449][ T4187] Bluetooth: hci1: command 0x0419 tx timeout [ 94.327945][ T4815] loop5: detected capacity change from 0 to 128 [ 94.347492][ T4813] lo speed is unknown, defaulting to 1000 [ 94.504497][ T4815] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 94.563565][ T4815] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.302533][ T4835] "syz.1.206" (4835) uses obsolete ecb(arc4) skcipher [ 96.716401][ T4845] netlink: 2825 bytes leftover after parsing attributes in process `syz.0.210'. [ 96.732563][ T4845] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.210'. [ 96.765812][ T4845] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.210'. [ 97.042192][ T4859] netlink: 32 bytes leftover after parsing attributes in process `syz.4.217'. [ 98.037374][ T4868] "syz.0.219" (4868) uses obsolete ecb(arc4) skcipher [ 99.825436][ T4894] netlink: 2825 bytes leftover after parsing attributes in process `syz.3.230'. [ 99.930034][ T4894] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.230'. [ 99.939597][ T4894] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.230'. [ 100.190774][ T4898] netlink: 112 bytes leftover after parsing attributes in process `syz.4.233'. [ 101.583574][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 102.107862][ T4914] loop4: detected capacity change from 0 to 128 [ 102.561523][ T4924] loop0: detected capacity change from 0 to 512 [ 102.581237][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 102.609488][ T4924] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.710289][ T4927] loop3: detected capacity change from 0 to 1024 [ 102.723652][ T4924] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3894: comm syz.0.221: Allocating blocks 41-42 which overlap fs metadata [ 102.752455][ T4933] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.246'. [ 102.835446][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 102.862864][ T4924] Quota error (device loop0): write_blk: dquota write failed [ 102.870302][ T4924] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 102.912626][ T4924] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 102.914497][ T4927] EXT4-fs (loop3): Ignoring removed oldalloc option [ 102.943766][ T4924] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.221: Failed to acquire dquot type 1 [ 102.955212][ T4927] EXT4-fs (loop3): Ignoring removed bh option [ 102.967523][ T4936] netlink: 'syz.5.247': attribute type 29 has an invalid length. [ 102.985746][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 102.993056][ T4936] netlink: 'syz.5.247': attribute type 29 has an invalid length. [ 103.004286][ T4927] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,oldalloc,errors=remount-ro,nodioread_nolock,bh,. Quota mode: none. [ 103.030971][ T4924] EXT4-fs error (device loop0): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 103.100515][ T4927] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.122432][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.129137][ T4924] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.221: corrupted inode contents [ 103.147920][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.154674][ T4924] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #12: comm syz.0.221: mark_inode_dirty error [ 103.207614][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.267537][ T4924] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.221: corrupted inode contents [ 103.269200][ T4927] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.244: Freeing blocks not in datazone - block = 0, count = 16 [ 103.340446][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.369716][ T4924] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #12: comm syz.0.221: mark_inode_dirty error [ 103.427205][ T4953] device syzkaller1 entered promiscuous mode [ 103.436891][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.462541][ T4924] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.221: corrupted inode contents [ 103.481217][ T4927] EXT4-fs (loop3): Remounting filesystem read-only [ 103.551739][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.588160][ T4924] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 103.603038][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.622045][ T4924] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #12: comm syz.0.221: corrupted inode contents [ 103.674311][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.719476][ T4924] EXT4-fs error (device loop0): ext4_truncate:4286: inode #12: comm syz.0.221: mark_inode_dirty error [ 103.873419][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.893642][ T4924] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 103.952385][ T4924] EXT4-fs (loop0): Remounting filesystem read-only [ 103.962437][ T4924] EXT4-fs (loop0): 1 truncate cleaned up [ 103.981959][ T4924] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,init_itable,resgid=0x00000000000000002. Quota mode: writeback. [ 104.105694][ T4971] netlink: 'syz.5.261': attribute type 29 has an invalid length. [ 104.143560][ T4971] netlink: 'syz.5.261': attribute type 29 has an invalid length. [ 104.541650][ T4982] loop4: detected capacity change from 0 to 512 [ 104.687787][ T4992] loop3: detected capacity change from 0 to 512 [ 104.795766][ T4982] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 104.819475][ T4982] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.828092][ T5001] netlink: 2825 bytes leftover after parsing attributes in process `syz.5.270'. [ 104.844515][ T4992] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 104.885849][ T5001] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.270'. [ 104.921036][ T4992] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 104.940321][ T4992] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.952734][ T5001] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.270'. [ 105.321096][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.355840][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.379577][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.450774][ T5017] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.469700][ T5023] loop1: detected capacity change from 0 to 256 [ 105.512684][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.531841][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.544710][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.566591][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.586655][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 105.606623][ T5017] hsr0 speed is unknown, defaulting to 1000 [ 107.878186][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 107.941763][ T5048] loop3: detected capacity change from 0 to 256 [ 108.353603][ T5059] netlink: 2825 bytes leftover after parsing attributes in process `syz.1.290'. [ 108.382168][ T5059] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.290'. [ 108.418409][ T5059] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.290'. [ 108.458301][ T5060] loop0: detected capacity change from 0 to 1024 [ 108.476513][ T5060] EXT4-fs (loop0): inline encryption not supported [ 108.540603][ T5060] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.291: Freeing blocks not in datazone - block = 0, count = 4096 [ 108.562554][ T5060] EXT4-fs (loop0): Remounting filesystem read-only [ 108.572105][ T5060] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.291: Invalid inode bitmap blk 0 in block_group 0 [ 108.611412][ T5060] EXT4-fs (loop0): Remounting filesystem read-only [ 108.620151][ T5060] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem [ 108.634959][ T5060] EXT4-fs (loop0): Remounting filesystem read-only [ 108.641623][ T5060] EXT4-fs (loop0): 1 orphan inode deleted [ 108.651239][ T5060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ; noblock_validity,nolazytime,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,inlinecrypt,errors=remount-ro,. Quota mode: writeback. [ 109.368999][ T5081] loop1: detected capacity change from 0 to 256 [ 109.409436][ T5080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 109.534749][ T5083] loop0: detected capacity change from 0 to 512 [ 109.543669][ T5080] 9pnet: p9_fd_create_tcp (5080): problem connecting socket to 127.0.0.1 [ 109.653088][ T5083] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.733011][ T5083] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.828831][ T5087] program syz.4.300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.860825][ T5083] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.917010][ T5090] loop3: detected capacity change from 0 to 512 [ 109.923453][ T5083] EXT4-fs (loop0): 1 truncate cleaned up [ 109.929255][ T5083] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 110.008801][ T5092] loop5: detected capacity change from 0 to 512 [ 110.111012][ T5092] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 110.149216][ T5092] System zones: 1-12 [ 110.165232][ T5092] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.289: error while reading EA inode 32 err=-116 [ 110.217505][ T5092] EXT4-fs (loop5): Remounting filesystem read-only [ 110.234715][ T5092] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.289: error while reading EA inode 32 err=-116 [ 110.268501][ T5092] EXT4-fs (loop5): Remounting filesystem read-only [ 110.303963][ T5092] EXT4-fs (loop5): 1 orphan inode deleted [ 110.339820][ T5092] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 110.555356][ T5110] netlink: 2825 bytes leftover after parsing attributes in process `syz.3.306'. [ 110.813789][ T5110] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.306'. [ 110.842603][ T5110] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.306'. [ 111.815607][ T5126] loop0: detected capacity change from 0 to 256 [ 111.822282][ C1] sched: RT throttling activated [ 112.830119][ T5126] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.140772][ T5142] loop1: detected capacity change from 0 to 256 [ 113.455363][ T5160] netlink: 56 bytes leftover after parsing attributes in process `syz.5.326'. [ 113.502075][ T5158] netlink: 'syz.3.325': attribute type 1 has an invalid length. [ 113.602863][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880601f2800: rx timeout, send abort [ 114.090961][ T5176] loop5: detected capacity change from 0 to 764 [ 114.108635][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880601f1c00: rx timeout, send abort [ 114.615732][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880601f2800: abort rx timeout. Force session deactivation [ 114.627726][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880601f1c00: abort rx timeout. Force session deactivation [ 114.889403][ T5196] netlink: 48 bytes leftover after parsing attributes in process `syz.4.339'. [ 115.782808][ T5204] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 116.037579][ T5217] netlink: 'syz.4.351': attribute type 83 has an invalid length. [ 116.313428][ T5218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.348'. [ 116.325800][ T5220] loop1: detected capacity change from 0 to 256 [ 117.126370][ T5231] "syz.4.354" (5231) uses obsolete ecb(arc4) skcipher [ 119.636905][ T5262] smpboot: CPU 1 is now offline [ 119.941072][ T5268] xt_hashlimit: size too large, truncated to 1048576 [ 120.104108][ T5271] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.264747][ T5270] Set syz1 is full, maxelem 2076 reached [ 120.588097][ T5279] loop5: detected capacity change from 0 to 256 [ 123.584627][ T5301] loop4: detected capacity change from 0 to 1024 [ 123.631886][ T5301] EXT4-fs (loop4): inline encryption not supported [ 123.655600][ T5301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 123.664010][ T5301] EXT4-fs (loop4): 1 truncate cleaned up [ 123.677495][ T5301] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 124.426925][ T5313] Set syz1 is full, maxelem 2076 reached [ 124.982211][ T5321] loop5: detected capacity change from 0 to 256 [ 125.018539][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.026889][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.457564][ T5323] loop4: detected capacity change from 0 to 2048 [ 125.541660][ T5323] loop4: p2 < > p3 < > [ 125.895738][ T4851] udevd[4851]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 125.939208][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 127.367672][ T5332] loop5: detected capacity change from 0 to 1024 [ 127.442905][ T5332] EXT4-fs (loop5): inline encryption not supported [ 127.463452][ T5332] EXT4-fs (loop5): orphan cleanup on readonly fs [ 127.471346][ T5332] EXT4-fs (loop5): 1 truncate cleaned up [ 127.477574][ T5332] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 127.808233][ T5338] usb usb8: usbfs: process 5338 (syz.5.389) did not claim interface 2 before use [ 129.613892][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.396'. [ 129.820475][ T5357] loop3: detected capacity change from 0 to 256 [ 130.015822][ T5362] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 130.531744][ T5367] loop4: detected capacity change from 0 to 1024 [ 130.552817][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.726920][ T5367] EXT4-fs (loop4): inline encryption not supported [ 130.748496][ T5362] bond0: (slave team0): Enslaving as an active interface with an up link [ 130.844172][ T5367] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.978487][ T5367] EXT4-fs (loop4): 1 truncate cleaned up [ 131.075824][ T5367] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x00000000000000ca,noauto_da_alloc,inlinecrypt,,errors=continue. Quota mode: writeback. [ 131.105763][ T5378] netlink: 2825 bytes leftover after parsing attributes in process `syz.5.403'. [ 131.255158][ T5378] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.403'. [ 131.291382][ T5378] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.403'. [ 132.685328][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.691659][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.761041][ T5388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.406'. [ 133.666477][ T5399] netlink: 'syz.5.410': attribute type 4 has an invalid length. [ 133.837265][ T5406] netlink: 'syz.5.410': attribute type 4 has an invalid length. [ 133.877729][ T5408] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 134.176678][ T5412] loop3: detected capacity change from 0 to 512 [ 134.320757][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.415: missing EA_INODE flag [ 134.362043][ T5412] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.415: error while reading EA inode 2 err=-117 [ 134.550662][ T5412] EXT4-fs (loop3): 1 orphan inode deleted [ 134.827918][ T5412] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 137.549973][ T5436] lo speed is unknown, defaulting to 1000 [ 137.573775][ T5445] device syzkaller0 entered promiscuous mode [ 137.643921][ T5436] hsr0 speed is unknown, defaulting to 1000 [ 137.703371][ T5445] 9pnet: Insufficient options for proto=fd [ 137.816349][ T5453] loop5: detected capacity change from 0 to 1024 [ 137.879408][ T5453] EXT4-fs (loop5): Ignoring removed bh option [ 139.088002][ T4187] Bluetooth: hci5: command 0x0409 tx timeout [ 139.125438][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 139.382459][ T5471] netlink: 172 bytes leftover after parsing attributes in process `syz.0.432'. [ 139.418976][ T5436] chnl_net:caif_netlink_parms(): no params data found [ 140.183798][ T5436] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.248929][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.328002][ T5436] device bridge_slave_0 entered promiscuous mode [ 140.425305][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.461668][ T5494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.481412][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.520147][ T5436] device bridge_slave_1 entered promiscuous mode [ 140.555180][ T5498] netlink: 2825 bytes leftover after parsing attributes in process `syz.3.441'. [ 140.622378][ T5498] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.441'. [ 140.795198][ T5498] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.441'. [ 141.768805][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 141.858893][ T5436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.991921][ T5436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.177257][ T5436] team0: Port device team_slave_0 added [ 142.242228][ T5436] team0: Port device team_slave_1 added [ 142.349502][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.407393][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.634994][ T5436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.706387][ T5436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.759601][ T5436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.910599][ T5436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.120311][ T5436] device hsr_slave_0 entered promiscuous mode [ 143.173185][ T5436] device hsr_slave_1 entered promiscuous mode [ 143.332733][ T5436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.781163][ T4187] Bluetooth: hci5: command 0x040f tx timeout [ 144.787293][ T5436] Cannot create hsr debugfs directory [ 144.890575][ T5544] loop5: detected capacity change from 0 to 1024 [ 144.912129][ T5543] device syzkaller0 entered promiscuous mode [ 145.040603][ T5544] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.232768][ T5544] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000006,bsddf,nojournal_checksum,norecovery,dioread_nolock,grpjquota=,noauto_da_alloc,acl,auto_da_alloc=0x0000000000000343,,errors=continue. Quota mode: none. [ 145.436232][ T5436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 145.614540][ T5436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 145.684942][ T5436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 145.749376][ T5436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 145.852956][ T5558] tipc: Started in network mode [ 145.902499][ T5558] tipc: Node identity -q_codel, cluster identity 4711 [ 147.284552][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 147.331959][ T5436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.372179][ T5577] netlink: 75 bytes leftover after parsing attributes in process `syz.5.469'. [ 147.468839][ T5436] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.632468][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.640210][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.767573][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.819491][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.883354][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.890486][ T4763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.006355][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.019741][ T5583] Set syz1 is full, maxelem 2076 reached [ 148.091802][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.159682][ T4763] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.166820][ T4763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.294009][ T5595] loop3: detected capacity change from 0 to 128 [ 148.312340][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.320176][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.423740][ T5595] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 148.483626][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.492220][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.642042][ T5595] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.588431][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.661362][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 149.739288][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.822628][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 149.897309][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.039915][ T5436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.137000][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.186792][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.234789][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 150.273891][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 150.320854][ T5614] netlink: 2825 bytes leftover after parsing attributes in process `syz.3.484'. [ 150.376702][ T5614] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.484'. [ 150.444374][ T5614] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.484'. [ 152.052792][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.060262][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.142047][ T5436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.635593][ T5651] loop3: detected capacity change from 0 to 512 [ 152.723487][ T5651] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 152.900149][ T5651] EXT4-fs (loop3): 1 truncate cleaned up [ 152.930467][ T5651] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,minixdf,nombcache,,errors=continue. Quota mode: none. [ 153.008780][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.053554][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.207205][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.253062][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.327118][ T5436] device veth0_vlan entered promiscuous mode [ 153.393554][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.445086][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.616827][ T5436] device veth1_vlan entered promiscuous mode [ 258.622226][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 258.629229][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5672/1:b..l [ 258.637483][ C0] (detected by 0, t=10502 jiffies, g=15849, q=90) [ 258.643994][ C0] task:syz.5.503 state:R running task stack:26544 pid: 5672 ppid: 4559 flags:0x00004000 [ 258.655374][ C0] Call Trace: [ 258.658676][ C0] [ 258.661620][ C0] __schedule+0x11c3/0x4350 [ 258.666137][ C0] ? verify_lock_unused+0x140/0x140 [ 258.671339][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 258.676370][ C0] ? release_firmware_map_entry+0x190/0x190 [ 258.682263][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 258.688241][ C0] ? mark_lock+0x94/0x320 [ 258.692578][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 258.697860][ C0] preempt_schedule_irq+0xbb/0x160 [ 258.702969][ C0] ? __cond_resched+0xd0/0xd0 [ 258.707646][ C0] ? rcu_is_watching+0x11/0xa0 [ 258.712410][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 258.718314][ C0] irqentry_exit+0x63/0x70 [ 258.722728][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 258.728746][ C0] RIP: 0010:nl80211_netlink_notify+0x6ad/0x7c0 [ 258.735003][ C0] Code: 69 dc 84 f8 4c 89 ff e8 51 d9 90 00 48 8b 5c 24 08 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 d6 70 85 f8 48 8b 1b <48> 81 fb 40 63 64 8d 74 0a e8 05 4e 40 f8 e9 a8 fa ff ff e8 fb 4d [ 258.754702][ C0] RSP: 0018:ffffc900032cfc00 EFLAGS: 00000246 [ 258.760774][ C0] RAX: 1ffff1100551d001 RBX: ffff888029ac8008 RCX: c8b14136d4013800 [ 258.768743][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2be0 RDI: ffffffff8a7a4200 [ 258.776991][ C0] RBP: ffff88805ed14c90 R08: ffffffff901ee0f7 R09: 1ffffffff203dc1e [ 258.784995][ C0] R10: dffffc0000000000 R11: fffffbfff203dc1f R12: dffffc0000000000 [ 258.792984][ C0] R13: ffff88802a8e80f0 R14: ffff88802a8e80f0 R15: ffff88802a8e8100 [ 258.800986][ C0] blocking_notifier_call_chain+0x103/0x1b0 [ 258.806905][ C0] netlink_release+0xf03/0x1790 [ 258.811768][ C0] ? netlink_sock_destruct+0x190/0x190 [ 258.817244][ C0] sock_close+0xbf/0x210 [ 258.821513][ C0] ? sock_mmap+0x90/0x90 [ 258.825758][ C0] __fput+0x212/0x8c0 [ 258.829752][ C0] task_work_run+0x125/0x1a0 [ 258.834362][ C0] exit_to_user_mode_loop+0x10f/0x130 [ 258.839767][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 258.845319][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 258.850783][ C0] do_syscall_64+0x58/0xa0 [ 258.855286][ C0] ? clear_bhb_loop+0x30/0x80 [ 258.859975][ C0] ? clear_bhb_loop+0x30/0x80 [ 258.864665][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.870554][ C0] RIP: 0033:0x7f6fc55b290e [ 258.874967][ C0] RSP: 002b:00007f6fc3848f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 258.883412][ C0] RAX: 0000000000000000 RBX: 00007f6fc384a6c0 RCX: 00007f6fc55b290e [ 258.891390][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 258.899368][ C0] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 258.907342][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.915308][ C0] R13: 00007f6fc587a038 R14: 00007f6fc5879fa0 R15: 00007ffedbd83b28 [ 258.924412][ C0] [ 258.927460][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g15849 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 258.938649][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 258.948612][ C0] rcu: RCU grace-period kthread stack dump: [ 258.954507][ C0] task:rcu_preempt state:R running task stack:28080 pid: 15 ppid: 2 flags:0x00004000 [ 258.965287][ C0] Call Trace: [ 258.968564][ C0] [ 258.971492][ C0] __schedule+0x11c3/0x4350 [ 258.976014][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 258.981224][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 258.987200][ C0] ? _raw_spin_unlock+0x40/0x40 [ 258.992133][ C0] ? rcu_is_watching+0x11/0xa0 [ 258.996907][ C0] ? release_firmware_map_entry+0x190/0x190 [ 259.002806][ C0] schedule+0x11b/0x1e0 [ 259.006962][ C0] schedule_timeout+0x184/0x2d0 [ 259.011823][ C0] ? console_conditional_schedule+0x40/0x40 [ 259.017709][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 259.023594][ C0] ? update_process_times+0x200/0x200 [ 259.028967][ C0] ? prepare_to_swait_event+0x33d/0x360 [ 259.034514][ C0] rcu_gp_fqs_loop+0x2be/0x11f0 [ 259.039448][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 259.044652][ C0] ? dump_blkd_tasks+0x7f0/0x7f0 [ 259.049582][ C0] ? rcu_gp_init+0xd72/0x10f0 [ 259.054268][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 259.059116][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 259.064329][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 259.069533][ C0] rcu_gp_kthread+0x9a/0x370 [ 259.074294][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 259.079463][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 259.085506][ C0] ? __kthread_parkme+0x14e/0x1b0 [ 259.090539][ C0] kthread+0x42e/0x520 [ 259.094609][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 259.099723][ C0] ? kthread_blkcg+0xd0/0xd0 [ 259.104318][ C0] ret_from_fork+0x1f/0x30 [ 259.108751][ C0] [ 259.111784][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 259.118107][ C0] NMI backtrace for cpu 0 [ 259.122437][ C0] CPU: 0 PID: 5677 Comm: syz.3.502 Not tainted syzkaller #0 [ 259.129732][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.139785][ C0] Call Trace: [ 259.143063][ C0] [ 259.145902][ C0] dump_stack_lvl+0x188/0x250 [ 259.150843][ C0] ? show_regs_print_info+0x20/0x20 [ 259.156036][ C0] ? load_image+0x410/0x410 [ 259.160560][ C0] nmi_cpu_backtrace+0x3a2/0x3d0 [ 259.165505][ C0] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 259.171650][ C0] ? _printk+0xda/0x130 [ 259.175822][ C0] ? cpu_online+0x1d/0x30 [ 259.180247][ C0] ? load_image+0x410/0x410 [ 259.184761][ C0] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 259.190822][ C0] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 259.196800][ C0] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 259.202954][ C0] print_other_cpu_stall+0x1110/0x1270 [ 259.208416][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 259.213363][ C0] rcu_sched_clock_irq+0x845/0x1120 [ 259.218590][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 259.223435][ C0] ? hrtimer_run_queues+0x162/0x400 [ 259.228649][ C0] ? account_process_tick+0x22a/0x3a0 [ 259.234033][ C0] update_process_times+0x193/0x200 [ 259.239249][ C0] tick_sched_timer+0x37d/0x560 [ 259.244129][ C0] ? tick_setup_sched_timer+0x2b0/0x2b0 [ 259.249684][ C0] __hrtimer_run_queues+0x4b0/0xb60 [ 259.254883][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 259.260886][ C0] ? hrtimer_interrupt+0x8b0/0x8b0 [ 259.266017][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 259.272093][ C0] hrtimer_interrupt+0x397/0x8b0 [ 259.277044][ C0] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 259.283037][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 259.288675][ C0] [ 259.291597][ C0] [ 259.294520][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 259.300490][ C0] RIP: 0010:format_decode+0xa83/0x1330 [ 259.305975][ C0] Code: 10 0f b6 04 18 84 c0 0f 85 59 04 00 00 48 8b 44 24 18 0f b6 04 18 84 c0 0f 85 6a 04 00 00 48 8b 04 24 48 89 28 48 8b 44 24 10 <0f> b6 04 18 84 c0 0f 85 a4 03 00 00 48 8b 44 24 18 0f b6 04 18 84 [ 259.325572][ C0] RSP: 0018:ffffc9000327f3b0 EFLAGS: 00000246 [ 259.331636][ C0] RAX: 1ffff9200064fe8f RBX: dffffc0000000000 RCX: 0000000000080000 [ 259.339615][ C0] RDX: ffffc9000f61e000 RSI: 000000000007ffff RDI: 0000000000080000 [ 259.347584][ C0] RBP: ffff0000ffffff00 R08: ffff888027c8bb80 R09: 000000000000000a [ 259.355638][ C0] R10: 0000000000000078 R11: 0000000000000002 R12: ffff0a00ffffff00 [ 259.363613][ C0] R13: 1ffffffff1472cdc R14: ffffffff8a3966e4 R15: 0000000000000050 [ 259.371595][ C0] vsnprintf+0xef/0x1c20 [ 259.375849][ C0] seq_printf+0x185/0x280 [ 259.380184][ C0] ? seq_vprintf+0x180/0x180 [ 259.384771][ C0] ? memcpy+0x3c/0x60 [ 259.388778][ C0] show_stat+0x1789/0x1970 [ 259.393204][ C0] ? stat_open+0xc0/0xc0 [ 259.397457][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 259.402481][ C0] seq_read_iter+0x460/0xc50 [ 259.407092][ C0] generic_file_splice_read+0x3ed/0x5f0 [ 259.412650][ C0] ? splice_shrink_spd+0xc0/0xc0 [ 259.417594][ C0] ? common_file_perm+0x171/0x1c0 [ 259.422626][ C0] ? fsnotify_perm+0x254/0x560 [ 259.427392][ C0] splice_direct_to_actor+0x41f/0xc00 [ 259.432784][ C0] ? direct_file_splice_eof+0xa0/0xa0 [ 259.438153][ C0] ? pipe_to_sendpage+0x320/0x320 [ 259.443173][ C0] ? common_file_perm+0x171/0x1c0 [ 259.448196][ C0] ? fsnotify_perm+0x5d/0x560 [ 259.452877][ C0] ? security_file_permission+0x75/0xa0 [ 259.458420][ C0] do_splice_direct+0x1d4/0x2f0 [ 259.463267][ C0] ? verify_lock_unused+0x140/0x140 [ 259.468462][ C0] ? splice_direct_to_actor+0xc00/0xc00 [ 259.474002][ C0] ? do_splice_direct+0x2f0/0x2f0 [ 259.479038][ C0] ? common_file_perm+0x171/0x1c0 [ 259.484058][ C0] ? fsnotify_perm+0x5d/0x560 [ 259.488736][ C0] ? security_file_permission+0x75/0xa0 [ 259.494369][ C0] do_sendfile+0x524/0xe30 [ 259.498787][ C0] ? do_pwritev+0x3a0/0x3a0 [ 259.503298][ C0] ? __lock_acquire+0x7b50/0x7b50 [ 259.508320][ C0] __se_sys_sendfile64+0x141/0x1a0 [ 259.513426][ C0] ? lock_chain_count+0x20/0x20 [ 259.518267][ C0] ? __x64_sys_sendfile64+0xa0/0xa0 [ 259.523471][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 259.528668][ C0] do_syscall_64+0x4c/0xa0 [ 259.533093][ C0] ? clear_bhb_loop+0x30/0x80 [ 259.537763][ C0] ? clear_bhb_loop+0x30/0x80 [ 259.542437][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.548331][ C0] RIP: 0033:0x7fb164ed90d9 [ 259.552789][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.572394][ C0] RSP: 002b:00007fb163110028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 259.580812][ C0] RAX: ffffffffffffffda RBX: 00007fb165161090 RCX: 00007fb164ed90d9 [ 259.588796][ C0] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 259.596766][ C0] RBP: 00007fb164f70024 R08: 0000000000000000 R09: 0000000000000000 [ 259.604872][ C0] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000000 [ 259.612848][ C0] R13: 00007fb165161128 R14: 00007fb165161090 R15: 00007ffee2304e48 [ 259.620832][ C0]