last executing test programs: 8.256443963s ago: executing program 3 (id=187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 8.092551026s ago: executing program 3 (id=191): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) r5 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/130, 0x82}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/96, 0x60}], 0x5, &(0x7f00000009c0)=""/92, 0x5c}, 0xfff}, {{&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3, &(0x7f0000000c40)=""/181, 0xb5}, 0x8000}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000000f00)=""/143, 0x8f}, {&(0x7f0000000fc0)=""/77, 0x4d}, {&(0x7f0000001040)=""/154, 0x9a}, {&(0x7f0000001100)=""/14, 0xe}, {&(0x7f0000001140)=""/49, 0x31}, {&(0x7f0000001180)=""/39, 0x27}, {&(0x7f00000011c0)=""/50, 0x32}, {&(0x7f0000001200)=""/193, 0xc1}], 0x9, &(0x7f00000013c0)=""/99, 0x63}, 0x4}, {{&(0x7f0000001440)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=""/87, 0x57}, 0x80000001}, {{&(0x7f0000002100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002180)=""/126, 0x7e}], 0x1, &(0x7f0000002240)=""/132, 0x84}, 0x200}], 0x5, 0x2000, 0x0) 3.547874836s ago: executing program 3 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) 3.485257377s ago: executing program 0 (id=207): socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000500)=0xe8) open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) 3.393425398s ago: executing program 2 (id=209): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) r5 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025"], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000040000000400000007000000000100000fc8b8f2ad30c9a33714f1dab5638dce6acae51e9cdb997d2aabcf633641fadd63d8c9cbaff6417ecbf434755966b6d15af362ff00000000000000e54f398b5a5519c6774bc6e685f2a5aff4f5371dafe690a113b0bf6e2d6ade8d93d0574c6e2d20f20678a3b7edcbc80387edd863cf239d56d7f9e9cb4b99564e5e4dceaec98e2ce8352788ba1ff154e740986aa96395f59ec830c7e807ca7a27bd008156e2846050cdcd79abc23762cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="02000010011000"/27], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xa7, &(0x7f0000000400)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x3, 0x12) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 3.28556976s ago: executing program 0 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 2.945603765s ago: executing program 0 (id=212): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) lchown(0x0, 0x0, 0x0) open(0x0, 0x145842, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_DISCARDURB(r4, 0x550b, 0x0) 2.662832929s ago: executing program 1 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.549981916s ago: executing program 1 (id=216): syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000c50900001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1.507972257s ago: executing program 4 (id=217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.237030782s ago: executing program 2 (id=218): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950323030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.197038782s ago: executing program 1 (id=219): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000aabc000000009500000000000000098e9efec8c7405159ace08659120954f8e7955a4e310cfcc4a23c733d4d49b9e8cc141ac177e1a1c575"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x2001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000800)={0x400, 0x6, 0x0, 'queue1\x00', 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe752", 0x53}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb3", 0xb7}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 999.127215ms ago: executing program 1 (id=220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) close(r0) 918.754406ms ago: executing program 2 (id=221): sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000500)=0xe8) open(&(0x7f00000000c0)='.\x00', 0x50080, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10) 899.853456ms ago: executing program 4 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r2, 0x40044591, 0x0) 830.342497ms ago: executing program 1 (id=223): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000640)=""/130, 0x82}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f0000000700)=""/183, 0xb7}, {&(0x7f00000007c0)=""/248, 0xf8}, {&(0x7f00000008c0)=""/96, 0x60}], 0x5, &(0x7f00000009c0)=""/92, 0x5c}, 0xfff}, {{&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000ac0)=""/134, 0x86}, {&(0x7f0000000b80)=""/72, 0x48}], 0x3, &(0x7f0000000c40)=""/181, 0xb5}, 0x8000}, {{&(0x7f0000000d00)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000000f00)=""/143, 0x8f}, {&(0x7f0000000fc0)=""/77, 0x4d}, {&(0x7f0000001040)=""/154, 0x9a}, {&(0x7f0000001100)=""/14, 0xe}, {&(0x7f0000001140)=""/49, 0x31}, {&(0x7f0000001180)=""/39, 0x27}, {&(0x7f00000011c0)=""/50, 0x32}, {&(0x7f0000001200)=""/193, 0xc1}], 0x9, &(0x7f00000013c0)=""/99, 0x63}, 0x4}, {{&(0x7f0000001440)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000002040), 0x0, &(0x7f0000002080)=""/87, 0x57}, 0x80000001}, {{&(0x7f0000002100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}, 0x80, &(0x7f0000002200)=[{&(0x7f0000002180)=""/126, 0x7e}], 0x1, &(0x7f0000002240)=""/132, 0x84}, 0x200}], 0x5, 0x2000, 0x0) 786.610928ms ago: executing program 2 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x9, 0x5, 0x80000001}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 642.58838ms ago: executing program 4 (id=225): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000004e80)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0xfffffffc, @remote, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1, &(0x7f0000000740)=[@sndrcv={0x30, 0x84, 0x1, {0x3, 0x5, 0x2, 0x200, 0x3, 0xa1, 0x80, 0x3fe1, r3}}], 0x30, 0x810}], 0x1, 0x0) 551.949182ms ago: executing program 2 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 469.281843ms ago: executing program 2 (id=227): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3", 0x5}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 440.115134ms ago: executing program 4 (id=228): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 433.760394ms ago: executing program 0 (id=229): syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800) socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x1000080002, 0x100000000000088) socket$inet6(0xa, 0x802, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000c50900001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 315.763196ms ago: executing program 0 (id=230): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(0xffffffffffffffff) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) r5 = syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') readv(r5, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 92.316351][ T4272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.321227][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.329173][ T4272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.336808][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.346727][ T4273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.351944][ T4271] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.358896][ T4273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.365829][ T4271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.374380][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.387178][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.387941][ T4273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.395124][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.403601][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.409294][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.419640][ T4273] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.425666][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.434442][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.443411][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.452291][ T4273] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.459639][ T4271] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.466516][ T4273] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.474652][ T4271] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.481893][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.497962][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.498687][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.507394][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.528487][ T4268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.564699][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.573367][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.345273][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 93.379384][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 93.390471][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 93.462605][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 93.492334][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 93.643168][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.652565][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.663436][ T4259] device bridge_slave_0 entered promiscuous mode [ 93.673449][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.682223][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.691571][ T4255] device bridge_slave_0 entered promiscuous mode [ 93.710764][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.719210][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.729046][ T4254] device bridge_slave_0 entered promiscuous mode [ 93.739347][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.747971][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.757490][ T4254] device bridge_slave_1 entered promiscuous mode [ 93.766399][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.774807][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.784145][ T4259] device bridge_slave_1 entered promiscuous mode [ 93.793164][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.805653][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.818038][ T4255] device bridge_slave_1 entered promiscuous mode [ 93.927988][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.935978][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.947219][ T4251] device bridge_slave_0 entered promiscuous mode [ 93.955165][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.962939][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.972664][ T4252] device bridge_slave_0 entered promiscuous mode [ 93.984790][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.998036][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.011258][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.024279][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.036519][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.047060][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.055785][ T4251] device bridge_slave_1 entered promiscuous mode [ 94.065211][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.074541][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.084669][ T4252] device bridge_slave_1 entered promiscuous mode [ 94.094161][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.119647][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.220172][ T4259] team0: Port device team_slave_0 added [ 94.245458][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.258719][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.270907][ T4254] team0: Port device team_slave_0 added [ 94.280728][ T4259] team0: Port device team_slave_1 added [ 94.290251][ T4255] team0: Port device team_slave_0 added [ 94.303571][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.316654][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.327682][ T4254] team0: Port device team_slave_1 added [ 94.344024][ T4255] team0: Port device team_slave_1 added [ 94.422942][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.431088][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.458216][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.483480][ T4251] team0: Port device team_slave_0 added [ 94.490935][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.499457][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.528946][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.547209][ T4252] team0: Port device team_slave_0 added [ 94.554043][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.561723][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.589763][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.589878][ T4261] Bluetooth: hci1: command 0x0409 tx timeout [ 94.602733][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.608643][ T4273] Bluetooth: hci2: command 0x0409 tx timeout [ 94.617003][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.622261][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 94.655934][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.667517][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 94.675159][ T4268] Bluetooth: hci4: command 0x0409 tx timeout [ 94.676878][ T4251] team0: Port device team_slave_1 added [ 94.689329][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.696826][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.723457][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.738012][ T4252] team0: Port device team_slave_1 added [ 94.746626][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.754844][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.785661][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.850214][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.858197][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.887701][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.922177][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.929691][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.960570][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.973599][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.981871][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.010865][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.052651][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.060536][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.089427][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.110411][ T4254] device hsr_slave_0 entered promiscuous mode [ 95.118405][ T4254] device hsr_slave_1 entered promiscuous mode [ 95.140568][ T4255] device hsr_slave_0 entered promiscuous mode [ 95.148296][ T4255] device hsr_slave_1 entered promiscuous mode [ 95.157344][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.166351][ T4255] Cannot create hsr debugfs directory [ 95.192828][ T4259] device hsr_slave_0 entered promiscuous mode [ 95.203482][ T4259] device hsr_slave_1 entered promiscuous mode [ 95.212765][ T4259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.221804][ T4259] Cannot create hsr debugfs directory [ 95.307957][ T4252] device hsr_slave_0 entered promiscuous mode [ 95.317832][ T4252] device hsr_slave_1 entered promiscuous mode [ 95.324715][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.332621][ T4252] Cannot create hsr debugfs directory [ 95.352753][ T4251] device hsr_slave_0 entered promiscuous mode [ 95.360102][ T4251] device hsr_slave_1 entered promiscuous mode [ 95.367159][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.374845][ T4251] Cannot create hsr debugfs directory [ 95.758340][ T4255] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.776883][ T4255] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.798696][ T4255] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.813884][ T4255] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.862660][ T4254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.877656][ T4254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.888418][ T4254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.903101][ T4254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.987439][ T4259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.016440][ T4259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.026997][ T4259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.042706][ T4259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.169636][ T4251] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.210292][ T4251] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.230172][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.255007][ T4251] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.268563][ T4251] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.289188][ T4252] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.300416][ T4252] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.332033][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.343535][ T4252] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.374765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.386843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.398580][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.416892][ T4252] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.438701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.449146][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.461188][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.517062][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.527529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.538119][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.545830][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.556531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.565853][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.574389][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.581684][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.591867][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.601620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.610445][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.617924][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.641743][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.661680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.666404][ T4268] Bluetooth: hci3: command 0x041b tx timeout [ 96.672649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.676474][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 96.676519][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 96.686586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.711878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.723398][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.730804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.743757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.753299][ T4261] Bluetooth: hci4: command 0x041b tx timeout [ 96.755883][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 96.796441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.804504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.813173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.824104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.854670][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.878023][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.887706][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.897405][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.907812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.918354][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.927384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.937396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.946646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.956543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.966129][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.979190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.003929][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.016244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.030572][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.040315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.060856][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.075454][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.086026][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.097240][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.109624][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.120239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.129446][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.138458][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.145646][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.163989][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.183012][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.193744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.205760][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.221284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.231134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.238562][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.262505][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.308654][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.327412][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.345601][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.356492][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.388565][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.406776][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.416503][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.453337][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.464450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.480881][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.497790][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.508390][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.522080][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.562361][ T4259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.595532][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.627321][ T126] cfg80211: failed to load regulatory.db [ 97.642105][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.663234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.681261][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.688682][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.714337][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.736217][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.756018][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.763297][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.786252][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.801487][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.814138][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.821519][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.831094][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.840139][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.849120][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.859253][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.868381][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.878748][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.887803][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.896812][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.904123][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.912300][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.923703][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.000198][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.010564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.019910][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.029379][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.039745][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.050487][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.061749][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.071190][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.080500][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.089988][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.099579][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.108041][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.156271][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.170282][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.178618][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.191959][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.201297][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.211067][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.220504][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.228886][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.246623][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.260048][ T4252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.272519][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.286051][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.301780][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.312491][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.327172][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.341202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.382425][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.400050][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.430824][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.501070][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.513299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.543729][ T4254] device veth0_vlan entered promiscuous mode [ 98.573761][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.583602][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.603428][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.614815][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.629730][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.640406][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.653909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.664777][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.702746][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.721552][ T4254] device veth1_vlan entered promiscuous mode [ 98.731802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 98.745205][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 98.745222][ T4270] Bluetooth: hci3: command 0x040f tx timeout [ 98.745259][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 98.771854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 98.781718][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.814039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.827064][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 98.833425][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 98.860942][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.878626][ T4255] device veth0_vlan entered promiscuous mode [ 98.918212][ T4255] device veth1_vlan entered promiscuous mode [ 98.976036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.012412][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.032000][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.072820][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.096713][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.139503][ T4254] device veth0_macvtap entered promiscuous mode [ 99.167846][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.188418][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.215596][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.235871][ T4254] device veth1_macvtap entered promiscuous mode [ 99.250064][ T4255] device veth0_macvtap entered promiscuous mode [ 99.273825][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.284022][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.296099][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.306902][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.332654][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.347687][ T4255] device veth1_macvtap entered promiscuous mode [ 99.361974][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.381783][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.394179][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.403549][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.421922][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.447044][ T4254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.457422][ T4254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.467491][ T4254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.476499][ T4254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.490938][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.500071][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.510094][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.517704][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.539489][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.566976][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.579267][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.592012][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.604602][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.614306][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.624307][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.634836][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.661840][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.673877][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.686177][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.733610][ T4251] device veth0_vlan entered promiscuous mode [ 99.750425][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.761028][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.770659][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.779790][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.790320][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.799076][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.820203][ T4255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.830374][ T4255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.840586][ T4255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.849988][ T4255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.921395][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.930848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.942237][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.951698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.965384][ T4251] device veth1_vlan entered promiscuous mode [ 99.976078][ T4252] device veth0_vlan entered promiscuous mode [ 99.998877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.009254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.017815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.027940][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.037428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.113527][ T4252] device veth1_vlan entered promiscuous mode [ 100.113580][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.132466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.154170][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.166735][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.176692][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.187546][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.234610][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.244229][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.254131][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.262348][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.272520][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.284837][ T4259] device veth0_vlan entered promiscuous mode [ 100.304972][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.310759][ T4251] device veth0_macvtap entered promiscuous mode [ 100.313029][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.328048][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.338396][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.357208][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.366571][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.374778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.383748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.406757][ T4251] device veth1_macvtap entered promiscuous mode [ 100.422606][ T4259] device veth1_vlan entered promiscuous mode [ 100.464417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.478840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.492954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.504832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.528481][ T4252] device veth0_macvtap entered promiscuous mode [ 100.567107][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.586846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.599685][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.615038][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.625215][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.638406][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.651392][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.662395][ T4252] device veth1_macvtap entered promiscuous mode [ 100.680958][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.685298][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.701751][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.715656][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.720880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.737505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.754797][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.788667][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.799543][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.811664][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.824376][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.831943][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 100.831984][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 100.836965][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 100.848567][ T4259] device veth0_macvtap entered promiscuous mode [ 100.872639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.881845][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.890770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.900612][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.907976][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 100.910372][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 100.919510][ T4251] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.937177][ T4251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.949147][ T4251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.961895][ T4251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.992753][ T4259] device veth1_macvtap entered promiscuous mode [ 101.061275][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.078555][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.089848][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.102094][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.113536][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.124539][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.152598][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.179454][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.193457][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.212732][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.230967][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.254394][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.271416][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.282315][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.295847][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.308495][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.321464][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.333083][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.351949][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.368384][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.407989][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.420565][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.444962][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.455857][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.469757][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.481888][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.492800][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.502796][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.512111][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.522144][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.539094][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.557198][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.570639][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.582261][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.596482][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.609679][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.621879][ T4259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.633022][ T4259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.645810][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.670045][ T4252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.680012][ T4252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.688905][ T4252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.703190][ T4252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.730801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.748999][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.766743][ T4259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.776150][ T4259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.786622][ T4259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.808236][ T4259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.833333][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.851895][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.893792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.919465][ T4379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 101.951390][ T4379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 102.023291][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.036769][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.056149][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.083886][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.155037][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.199399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.344273][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.347825][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.377025][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.415075][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.427172][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.456239][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.481435][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.535643][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.572985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.742427][ T4394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 102.962871][ T4398] loop2: detected capacity change from 0 to 512 [ 102.972295][ T4402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15'. [ 102.991509][ T4402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15'. [ 103.004861][ T4398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.045676][ T4398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 103.088097][ T4398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.158461][ T4398] EXT4-fs (loop2): 1 truncate cleaned up [ 103.164220][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 103.200642][ T4407] loop0: detected capacity change from 0 to 512 [ 103.208869][ T4407] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.215617][ T4407] ext4: Unknown parameter 'seclabel' [ 103.329321][ T4398] EXT4-fs (loop2): shut down requested (0) [ 103.526092][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 103.758068][ T22] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 103.768863][ T22] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 103.798744][ T22] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 103.853785][ T22] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 104.208615][ T4420] fido_id[4420]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 104.783015][ T4445] tipc: Started in network mode [ 104.816341][ T4445] tipc: Node identity 3625ad55f0b8, cluster identity 4711 [ 104.847145][ T4445] tipc: Enabled bearer , priority 0 [ 104.854266][ T4446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 104.933059][ T4448] device syzkaller0 entered promiscuous mode [ 104.969135][ T4445] tipc: Resetting bearer [ 104.993022][ T4444] tipc: Resetting bearer [ 105.051587][ T4444] tipc: Disabling bearer [ 106.019849][ T27] audit: type=1326 audit(1751344709.103:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.130890][ T27] audit: type=1326 audit(1751344709.153:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.249676][ T27] audit: type=1326 audit(1751344709.153:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.328891][ T4479] loop1: detected capacity change from 0 to 512 [ 106.360649][ T27] audit: type=1326 audit(1751344709.153:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.411764][ T4479] EXT4-fs: Ignoring removed oldalloc option [ 106.441977][ T4484] loop2: detected capacity change from 0 to 512 [ 106.449709][ T27] audit: type=1326 audit(1751344709.153:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.453285][ T4487] syz.3.50[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.481464][ T27] audit: type=1326 audit(1751344709.153:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.527163][ T4487] syz.3.50[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.542461][ T4484] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.49: Parent and EA inode have the same ino 15 [ 106.579547][ T4479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.595188][ T4479] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.612149][ T4487] mmap: syz.3.50 (4487) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.635373][ T27] audit: type=1326 audit(1751344709.153:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.679027][ T4484] EXT4-fs (loop2): 1 orphan inode deleted [ 106.725012][ T4484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.755918][ T27] audit: type=1326 audit(1751344709.153:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.794030][ T4484] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.49: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 106.829349][ T4493] tipc: Started in network mode [ 106.865072][ T4493] tipc: Node identity fe68e9aa1888, cluster identity 4711 [ 106.872554][ T4493] tipc: Enabled bearer , priority 0 [ 106.886574][ T27] audit: type=1326 audit(1751344709.153:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 106.937339][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 107.096897][ T27] audit: type=1326 audit(1751344709.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4473 comm="syz.0.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f9e98e929 code=0x7ffc0000 [ 107.188946][ T4494] device syzkaller0 entered promiscuous mode [ 107.206910][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 107.216489][ T4494] tipc: Resetting bearer [ 107.959107][ T22] tipc: Node number set to 3873499562 [ 108.153088][ T46] tipc: Resetting bearer [ 108.182690][ T4492] tipc: Resetting bearer [ 108.279785][ T4515] loop1: detected capacity change from 0 to 4096 [ 108.305078][ T4515] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.561072][ T14] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.728639][ T14] usb 4-1: device descriptor read/64, error -71 [ 109.009467][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 109.019550][ T14] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.189347][ T14] usb 4-1: device descriptor read/64, error -71 [ 109.201401][ T4537] loop1: detected capacity change from 0 to 512 [ 109.218116][ T4537] EXT4-fs: Ignoring removed oldalloc option [ 109.264048][ T4537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.279191][ T4537] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.319835][ T14] usb usb4-port1: attempt power cycle [ 109.357152][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 109.756446][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.817449][ T14] usb 4-1: device descriptor read/8, error -71 [ 110.085137][ T14] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.126966][ T14] usb 4-1: device descriptor read/8, error -71 [ 110.249117][ T14] usb usb4-port1: unable to enumerate USB device [ 110.454545][ T4492] tipc: Disabling bearer [ 110.834729][ T4554] loop4: detected capacity change from 0 to 512 [ 110.860001][ T4554] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.70: Parent and EA inode have the same ino 15 [ 110.881453][ T4554] EXT4-fs (loop4): 1 orphan inode deleted [ 110.889812][ T4554] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 110.904778][ T4554] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.4.70: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 110.956163][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 111.246646][ T4566] loop4: detected capacity change from 0 to 512 [ 111.276507][ T4566] EXT4-fs: Ignoring removed oldalloc option [ 111.338642][ T4568] 9pnet_fd: Insufficient options for proto=fd [ 111.351437][ T4566] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.384024][ T4566] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.424076][ T27] kauditd_printk_skb: 74 callbacks suppressed [ 111.424092][ T27] audit: type=1326 audit(1751344714.503:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.535646][ T27] audit: type=1326 audit(1751344714.563:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.575752][ T27] audit: type=1326 audit(1751344714.573:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.599614][ T4572] tipc: Started in network mode [ 111.604549][ T4572] tipc: Node identity c604297cd4c6, cluster identity 4711 [ 111.622406][ T4572] tipc: Enabled bearer , priority 0 [ 111.630021][ T27] audit: type=1326 audit(1751344714.573:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.653516][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 111.656316][ T27] audit: type=1326 audit(1751344714.573:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.788093][ T27] audit: type=1326 audit(1751344714.583:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.819865][ T4577] device syzkaller0 entered promiscuous mode [ 111.851342][ T4577] tipc: Resetting bearer [ 111.895479][ T27] audit: type=1326 audit(1751344714.583:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.939624][ T4586] loop1: detected capacity change from 0 to 128 [ 111.950609][ T27] audit: type=1326 audit(1751344714.583:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 111.973792][ T4571] tipc: Resetting bearer [ 112.000487][ T27] audit: type=1326 audit(1751344714.583:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 112.064005][ T27] audit: type=1326 audit(1751344714.583:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4565 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f086658e929 code=0x7ffc0000 [ 112.246270][ T4509] kworker/u4:7: attempt to access beyond end of device [ 112.246270][ T4509] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 113.000690][ T4258] tipc: Node number set to 314714492 [ 113.172720][ T4607] loop1: detected capacity change from 0 to 512 [ 113.196057][ T4607] EXT4-fs: Ignoring removed oldalloc option [ 113.288589][ T4607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.298262][ T4607] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.454112][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 114.969786][ T4571] tipc: Disabling bearer [ 115.370974][ T4645] loop1: detected capacity change from 0 to 512 [ 115.392954][ T4645] EXT4-fs: Ignoring removed oldalloc option [ 115.511206][ T4645] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.551210][ T4645] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.777272][ T4251] EXT4-fs (loop1): unmounting filesystem. [ 115.924720][ T4656] device wg2 entered promiscuous mode [ 116.274174][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.109'. [ 116.288026][ T4665] device veth1_macvtap left promiscuous mode [ 116.359655][ T4669] loop0: detected capacity change from 0 to 512 [ 116.432183][ T4669] EXT4-fs error (device loop0): ext4_xattr_inode_iget:400: comm syz.0.110: Parent and EA inode have the same ino 15 [ 116.490310][ T4669] EXT4-fs (loop0): 1 orphan inode deleted [ 116.514527][ T4669] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.530054][ T4672] tipc: Enabled bearer , priority 0 [ 116.729786][ T4668] device syzkaller0 entered promiscuous mode [ 116.757284][ T4668] tipc: Resetting bearer [ 116.773098][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 116.779735][ T4666] tipc: Resetting bearer [ 116.924592][ T4677] loop0: detected capacity change from 0 to 128 [ 117.596477][ T4683] loop0: detected capacity change from 0 to 512 [ 117.633359][ T4683] EXT4-fs: Ignoring removed oldalloc option [ 117.709296][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.735844][ T4683] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.811817][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 117.811833][ T27] audit: type=1800 audit(1751344720.893:114): pid=4683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 117.953297][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 118.134760][ T4689] loop0: detected capacity change from 0 to 1024 [ 118.160398][ T4689] ======================================================= [ 118.160398][ T4689] WARNING: The mand mount option has been deprecated and [ 118.160398][ T4689] and is ignored by this kernel. Remove the mand [ 118.160398][ T4689] option from the mount to silence this warning. [ 118.160398][ T4689] ======================================================= [ 118.220751][ T4689] EXT4-fs: Ignoring removed nobh option [ 118.231101][ T4689] EXT4-fs: Ignoring removed bh option [ 118.298696][ T4689] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 118.439745][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 118.838666][ T4634] Set syz1 is full, maxelem 65536 reached [ 119.152937][ T4705] loop3: detected capacity change from 0 to 128 [ 120.378698][ T4719] loop0: detected capacity change from 0 to 512 [ 120.403510][ T4719] EXT4-fs: Ignoring removed oldalloc option [ 120.427305][ T4719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 120.451017][ T4719] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.475684][ T27] audit: type=1800 audit(1751344723.563:115): pid=4719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.128" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 120.542798][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 120.604845][ T4666] tipc: Disabling bearer [ 120.650877][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.123'. [ 120.676108][ T4715] device wg2 entered promiscuous mode [ 121.212443][ T4743] loop4: detected capacity change from 0 to 512 [ 121.226561][ T4743] EXT4-fs: Ignoring removed oldalloc option [ 121.453060][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.486990][ T4743] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.591874][ T27] audit: type=1800 audit(1751344724.673:116): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.139" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 121.791790][ T4753] tipc: Started in network mode [ 121.880269][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 121.898364][ T4753] tipc: Node identity 0eb54ce45aa7, cluster identity 4711 [ 122.011572][ T4753] tipc: Enabled bearer , priority 0 [ 122.247582][ T4757] device syzkaller0 entered promiscuous mode [ 122.288428][ T4757] tipc: Resetting bearer [ 122.416419][ T4762] device wg2 left promiscuous mode [ 122.506596][ T4765] device wg2 entered promiscuous mode [ 122.527746][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 122.543690][ T4751] tipc: Resetting bearer [ 122.978386][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e19000: rx timeout, send abort [ 123.125745][ T22] tipc: Node number set to 1410485476 [ 123.478794][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e18800: rx timeout, send abort [ 123.487776][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e19000: abort rx timeout. Force session deactivation [ 123.754742][ T4786] netlink: 'syz.2.152': attribute type 2 has an invalid length. [ 123.987143][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e18800: abort rx timeout. Force session deactivation [ 124.999991][ T4751] tipc: Disabling bearer [ 125.008089][ T4770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 125.241317][ T4794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 125.479814][ T4802] loop0: detected capacity change from 0 to 512 [ 125.515909][ T4802] EXT4-fs: Ignoring removed oldalloc option [ 125.555275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.564967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 125.574942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 125.583471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 125.591830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 125.600326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 125.608675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 125.617012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.625980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.636187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 125.779845][ T4802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.794823][ T4802] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.880621][ T4817] loop4: detected capacity change from 0 to 128 [ 125.880981][ T27] audit: type=1800 audit(1751344728.963:117): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.160" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 126.112074][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 126.342995][ T4820] tipc: Enabled bearer , priority 0 [ 126.691620][ T4825] device syzkaller0 entered promiscuous mode [ 126.740555][ T4825] tipc: Resetting bearer [ 126.845395][ T4819] tipc: Resetting bearer [ 128.212162][ T4855] loop2: detected capacity change from 0 to 512 [ 128.236647][ T4855] EXT4-fs: Ignoring removed oldalloc option [ 128.312476][ T4855] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.328312][ T4855] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.369900][ T27] audit: type=1800 audit(1751344731.463:118): pid=4855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.178" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 128.416804][ T4255] EXT4-fs (loop2): unmounting filesystem. [ 129.909166][ T4819] tipc: Disabling bearer [ 129.918841][ T4830] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 129.944326][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.170'. [ 130.032561][ T4853] device wg2 entered promiscuous mode [ 130.667738][ T4885] loop4: detected capacity change from 0 to 512 [ 130.685594][ T4885] EXT4-fs: Ignoring removed oldalloc option [ 130.796648][ T4885] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.889572][ T4885] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.051983][ T27] audit: type=1800 audit(1751344734.133:119): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 131.153628][ T4900] tipc: Enabled bearer , priority 0 [ 131.258359][ T4259] EXT4-fs (loop4): unmounting filesystem. [ 131.937834][ T4902] device syzkaller0 entered promiscuous mode [ 131.958301][ T4895] 9pnet_fd: Insufficient options for proto=fd [ 131.966664][ T4902] tipc: Resetting bearer [ 131.984696][ T4907] device wg2 left promiscuous mode [ 131.986242][ T4895] netlink: 52 bytes leftover after parsing attributes in process `syz.3.191'. [ 132.019142][ T4908] device wg2 entered promiscuous mode [ 132.036777][ T4899] tipc: Resetting bearer [ 132.498221][ T4917] loop3: detected capacity change from 0 to 128 [ 134.926130][ T4899] tipc: Disabling bearer [ 136.013362][ T4959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.213'. [ 136.790074][ T4946] 9pnet_fd: Insufficient options for proto=fd [ 136.806804][ T4946] netlink: 52 bytes leftover after parsing attributes in process `syz.2.209'. [ 138.009204][ T4988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'. [ 138.314698][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 138.587778][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.594824][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 243.744927][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 243.752173][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4513/1:b..l P5005/1:b..l [ 243.761929][ C0] (detected by 0, t=10502 jiffies, g=17633, q=226 ncpus=2) [ 243.769275][ C0] task:modprobe state:R running task stack:24352 pid:5005 ppid:46 flags:0x00004002 [ 243.781171][ C0] Call Trace: [ 243.784496][ C0] [ 243.787652][ C0] __schedule+0x10e9/0x40d0 [ 243.792413][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 243.798596][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 243.804587][ C0] ? preempt_schedule+0xa7/0xb0 [ 243.809573][ C0] preempt_schedule_common+0x82/0xd0 [ 243.815088][ C0] preempt_schedule+0xa7/0xb0 [ 243.819813][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 243.825496][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 243.830667][ C0] preempt_schedule_thunk+0x16/0x18 [ 243.835930][ C0] _raw_spin_unlock+0x36/0x40 [ 243.840665][ C0] filemap_map_pages+0xe27/0x10d0 [ 243.845951][ C0] ? filemap_map_pages+0x18b/0x10d0 [ 243.851213][ C0] ? filemap_read_folio+0x760/0x760 [ 243.856556][ C0] ? count_memcg_event_mm+0x8f/0x3b0 [ 243.862011][ C0] handle_mm_fault+0x2889/0x3e70 [ 243.867114][ C0] ? mt_find+0x145/0x810 [ 243.871423][ C0] ? numa_migrate_prep+0x250/0x250 [ 243.876594][ C0] ? lock_chain_count+0x20/0x20 [ 243.881495][ C0] ? user_path_at_empty+0x48/0x60 [ 243.886567][ C0] ? lock_mm_and_find_vma+0xae/0x2f0 [ 243.891906][ C0] do_user_addr_fault+0x51f/0xb10 [ 243.896996][ C0] exc_page_fault+0x60/0x100 [ 243.901648][ C0] asm_exc_page_fault+0x22/0x30 [ 243.906723][ C0] RIP: 0033:0x7fe5a9bd06c0 [ 243.911198][ C0] RSP: 002b:00007ffcd1507f30 EFLAGS: 00010246 [ 243.917306][ C0] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000000 [ 243.925316][ C0] RDX: 00007fe5a9d0db40 RSI: 0000000000000000 RDI: 00007fe5a9d699e0 [ 243.933431][ C0] RBP: 00007fe5a9d27c96 R08: 00007fe5a9d699e0 R09: 0000000000000000 [ 243.941843][ C0] R10: 000000000000006c R11: 0000000000000217 R12: 00007fe5a9d281e4 [ 243.950132][ C0] R13: ffffffffffffff88 R14: 0000000000000002 R15: 0000000000000000 [ 243.959473][ C0] [ 243.962639][ C0] task:kworker/u4:8 state:R running task stack:25568 pid:4513 ppid:2 flags:0x00004000 [ 243.973604][ C0] Workqueue: bat_events batadv_nc_worker [ 243.980025][ C0] Call Trace: [ 243.983895][ C0] [ 243.987779][ C0] __schedule+0x10e9/0x40d0 [ 243.994718][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 244.002120][ C0] ? lock_chain_count+0x20/0x20 [ 244.007592][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 244.014268][ C0] preempt_schedule_irq+0xb1/0x150 [ 244.019750][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 244.026047][ C0] ? rcu_is_watching+0x11/0xa0 [ 244.031322][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 244.037373][ C0] irqentry_exit+0x63/0x70 [ 244.042582][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 244.050380][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x7e/0x80 [ 244.058806][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 90 48 8b 04 24 65 48 8b 0d d4 93 81 7e 65 8b 15 d5 93 81 7e 81 [ 244.080227][ C0] RSP: 0018:ffffc90005287bd8 EFLAGS: 00000293 [ 244.086446][ C0] RAX: ffffffff89d9d96b RBX: 0000000000000001 RCX: 0000000000000000 [ 244.094733][ C0] RDX: ffff888026b61dc0 RSI: 0000000000000001 RDI: 0000000000000000 [ 244.103117][ C0] RBP: fffffffffffffe38 R08: dffffc0000000000 R09: fffffbfff2117249 [ 244.111523][ C0] R10: fffffbfff2117249 R11: 1ffffffff2117248 R12: dffffc0000000000 [ 244.121404][ C0] R13: ffffffff89d9d83e R14: ffff888058954c80 R15: 000000000000012d [ 244.130059][ C0] ? batadv_nc_worker+0xce/0x600 [ 244.135074][ C0] ? batadv_nc_worker+0x1fb/0x600 [ 244.140253][ C0] batadv_nc_worker+0x1fb/0x600 [ 244.145359][ C0] ? process_one_work+0x7a1/0x1160 [ 244.150705][ C0] process_one_work+0x898/0x1160 [ 244.155905][ C0] ? worker_detach_from_pool+0x240/0x240 [ 244.161868][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 244.167589][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 244.173134][ C0] ? kthread_data+0x4b/0xc0 [ 244.177952][ C0] worker_thread+0xaa2/0x1250 [ 244.182702][ C0] ? __kthread_parkme+0x162/0x1c0 [ 244.187964][ C0] kthread+0x29d/0x330 [ 244.192703][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 244.197799][ C0] ? kthread_blkcg+0xd0/0xd0 [ 244.202575][ C0] ret_from_fork+0x1f/0x30 [ 244.207442][ C0] [ 244.211683][ C0] rcu: rcu_preempt kthread starved for 9711 jiffies! g17633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 244.224539][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 244.235345][ C0] rcu: RCU grace-period kthread stack dump: [ 244.241387][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 244.252242][ C0] Call Trace: [ 244.255911][ C0] [ 244.258885][ C0] __schedule+0x10e9/0x40d0 [ 244.263496][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 244.269832][ C0] schedule+0xb9/0x180 [ 244.274235][ C0] schedule_timeout+0x15c/0x280 [ 244.279152][ C0] ? console_conditional_schedule+0x40/0x40 [ 244.285282][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 244.291427][ C0] ? update_process_times+0x1b0/0x1b0 [ 244.296966][ C0] ? prepare_to_swait_event+0x335/0x350 [ 244.302662][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 244.308096][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 244.314470][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 244.319419][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 244.324425][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 244.330033][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 244.335291][ C0] rcu_gp_kthread+0x95/0x380 [ 244.340222][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.345781][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 244.353066][ C0] ? __kthread_parkme+0x162/0x1c0 [ 244.358189][ C0] kthread+0x29d/0x330 [ 244.362318][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 244.367738][ C0] ? kthread_blkcg+0xd0/0xd0 [ 244.373382][ C0] ret_from_fork+0x1f/0x30 [ 244.379294][ C0] [ 244.382358][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 244.388845][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.142-syzkaller #0 [ 244.396969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.407956][ C0] RIP: 0010:default_idle+0xb/0x10 [ 244.414925][ C0] Code: 48 89 df e8 07 98 b8 f7 e9 4c ff ff ff e8 bd 15 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d d7 e3 4c 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 244.436944][ C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6 [ 244.444748][ C0] RAX: e007f17930dcac00 RBX: ffffffff8a19bfb7 RCX: e007f17930dcac00 [ 244.454865][ C0] RDX: 0000000000000001 RSI: ffffffff8a6bffe0 RDI: ffffffff8abf14a0 [ 244.464482][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6af6 [ 244.473499][ C0] R10: ffffed10171c6af6 R11: 1ffff110171c6af5 R12: 0000000000000000 [ 244.481797][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd1e6 [ 244.491693][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 244.502255][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 244.509523][ C0] CR2: 00007f14ebc24e80 CR3: 0000000024026000 CR4: 00000000003506f0 [ 244.518003][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 244.527539][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 244.536465][ C0] Call Trace: [ 244.541037][ C0] [ 244.544668][ C0] default_idle_call+0x84/0xc0 [ 244.550916][ C0] do_idle+0x1fc/0x570 [ 244.556706][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 244.562386][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 244.568552][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 244.575051][ C0] ? _raw_spin_unlock+0x40/0x40 [ 244.580171][ C0] cpu_startup_entry+0x3f/0x60 [ 244.585189][ C0] rest_init+0x2dc/0x300 [ 244.589884][ C0] ? time_init+0x33/0x33 [ 244.594899][ C0] arch_call_rest_init+0xa/0xa [ 244.599733][ C0] start_kernel+0x490/0x539 [ 244.605099][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 244.611064][ C0]