last executing test programs: 14.204388119s ago: executing program 1 (id=24): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x10020, 0x3, 0x0, 0x2471}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000600), 0x1, 0x80800) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f00000001c0)={0x6, [0x8001, 0x0, 0xfffffffb], [{0x7, 0x80000001, 0x1, 0x1, 0x1}, {0x7f, 0x40007fff, 0x1, 0x0, 0x1}, {0x80000000, 0x8d, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x8a8, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x10000, 0x0, 0x1, 0x1, 0x1}, {0xfffffffc, 0x6, 0x1, 0x0, 0x1}, {0x7fff, 0x3, 0x0, 0x0, 0x0, 0x1}, {0x7fffffff, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x0, 0x1}, {0x5, 0x80000001, 0x1, 0x0, 0x1, 0x1}, {0xffff, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x400, 0x2, 0x0, 0x0, 0x0, 0x1}], 0x9e33}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) sendto$inet6(r2, &(0x7f0000000000)="4646a855a21197738df94718da84c9f0e07108c691ae974221d039e7484bfe69908cb9d1a7a1a431af233b148e2265c2fa68010bac85", 0x36, 0x4000014, &(0x7f0000000040)={0xa, 0x4e24, 0x1, @mcast1, 0x6599}, 0x1c) 13.853907381s ago: executing program 1 (id=27): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = eventfd2(0x0, 0x0) epoll_pwait2(r3, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000180)={0x20000005}) 12.3191673s ago: executing program 1 (id=33): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) write$nbd(r0, &(0x7f0000000280)={0x67446698, 0x0, 0x0, 0x2, 0x3}, 0x10) 10.509897197s ago: executing program 1 (id=36): syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201fb00e066e040810705000500000000010902120001000000000904"], 0x0) 10.222383412s ago: executing program 3 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) lsm_set_self_attr(0x68, 0x0, 0x20, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(0x0, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x121000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f0000000100)='barrier') r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r3, 0x3, 0x0, @void}, 0x62) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) 10.219973604s ago: executing program 2 (id=41): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000001000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00000004fcff", 0x58}], 0x1) 8.955229759s ago: executing program 2 (id=42): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 8.853432313s ago: executing program 3 (id=44): recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x12000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x1, 0x555) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) semop(0x0, &(0x7f0000000100)=[{0x3, 0xfffb}], 0x1) syz_emit_vhci(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 7.838398341s ago: executing program 3 (id=45): io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.759172139s ago: executing program 4 (id=46): memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xa3\xfb_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc3<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\xa9tG\x8b\xae\xf9\xa7\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\x18G(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x9e\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\xc1\t\xc2cP=\x03\xd5\xe2I\x85\xc2\xaa\xbd\xc9r\xeff\x8d\xb9\xe2\xce:\x1bH\xa0\xb9U\x1d\xd8C+^\n\xa6\xb2o\"9\x885#Yd_9\xb8[$v\xcbd\xc3=\x1fwF(%5\x19vf\x16\xd6A\x18\xdc~\x9b$<\xef\xe3\xb7\x9e\xd8\x9fK@\'\x9a\xe8\x11y6]\x19\xb3\xe1td?4', 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) msgget$private(0x0, 0x790) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000006900100026bd7000fedbdf250000000000000000080001000184ccc60b00010000000000108c182c27d3a60800b9174ff344e46dc82901000200000008000100010000000800010001000000080001000100000008080100000000"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c000280f7fd0100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc0000000000000000000000000000ff3c000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014"], 0xc8}}, 0x0) fallocate(r3, 0x0, 0x9, 0x4) 7.645727673s ago: executing program 0 (id=47): pselect6(0x40, &(0x7f00000001c0)={0xcd, 0x0, 0x0, 0x0, 0x20000000001, 0x4a92, 0xff, 0x2}, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000200)={0x2, 0x4001, @remote}, 0xd, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) close(r6) setsockopt$inet6_int(r3, 0x29, 0xb, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket(0x11, 0xa, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001440)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0xb1, 0x4, 0x2, 0x2, 0x9, 0x9, 0x3, 0x2}}}}]}, 0x58}, 0x1, 0x7a00}, 0x0) sendto$packet(r8, &(0x7f0000000080)="ed5349ff79d043654924019ee328474064f56f0ba115ed298c8807d97c69da1559bd714e005c743533a05b1870", 0x2d, 0x14004040, &(0x7f0000000000)={0x11, 0x10, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 6.657648329s ago: executing program 1 (id=48): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000440)='thermal_power_devfreq_limit\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_LINKMODE={0x5, 0x11, 0x7}]}, 0x3c}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000080)=[{r6, 0x5020}], 0x1, 0x7) 6.583382315s ago: executing program 2 (id=49): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000480)=[{0x1, 0x0, {0x1, 0xff, 0x1}, {0x0, 0xf0, 0x3}, 0xfd, 0xfe}, {0x0, 0x2, {0x2, 0xf0, 0x4}, {0x1, 0x1, 0x3}, 0xfd, 0x1}, {0x1, 0x2, {0x2, 0xf0}, {0x0, 0xf, 0x2}, 0xfd, 0xfd}, {0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0xf0, 0x2}, 0xfe, 0xfe}, {0x3, 0x0, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x3}, 0xfe, 0x1}, {0x0, 0x2, {0x1, 0x0, 0x1}, {0x1, 0x1}, 0xff}], 0xc0) 6.213324352s ago: executing program 0 (id=50): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x140c, 0x8ef4c66501765c3b, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4800) 5.618349241s ago: executing program 3 (id=51): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(0x0) pread64(r6, &(0x7f0000000000)=""/14, 0xe, 0xfffffffffffffc01) userfaultfd(0x80801) 5.570160706s ago: executing program 2 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 5.517990117s ago: executing program 0 (id=53): mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 5.51747266s ago: executing program 4 (id=54): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TCGETA(r2, 0x8924, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0x80000000}]}}]}, 0x44}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 5.25624608s ago: executing program 2 (id=55): capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000007c0)={0xf0003, 0x0, [0x440000000, 0x8, 0x7f, 0xffff7ffffffffffd, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x7fffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.576438823s ago: executing program 0 (id=56): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_async', 0xa000, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mbind(&(0x7f00002ad000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 4.449849283s ago: executing program 3 (id=57): r0 = io_uring_setup(0x4f01, &(0x7f0000000180)) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r1, 0x4, 0x24, &(0x7f0000000000), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r2, 0x0, 0x0, 0x6}]) io_destroy(r1) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x400000001ffffffd) r4 = accept4(r3, 0x0, 0x0, 0x0) close_range(r0, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="09ba35a1b9b9ed41359b17218b9908a37306a804d144bd083af932e3b46988002a47e550456933718c419b1fe542f9d1e735f7ab719698873fefff3dae2a37cde9fafe100da3a6eb1243d68f3332130f4ffcf4ff0260053787"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x4e26, 0x5, @remote, 0xb}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.15701719s ago: executing program 4 (id=58): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x67ce626eb9b39ab3, 0x4008072, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7fd}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a40)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x48, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @broadcast}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}]}, 0x5c}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='htcp\x00', 0x5) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 3.218743703s ago: executing program 0 (id=59): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000814, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0xc00, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfb, {0x1001}}, 0x18}, 0x1, 0x0, 0x0, 0x20040094}, 0x80) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) 1.265892392s ago: executing program 4 (id=60): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.256665054s ago: executing program 3 (id=61): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffbfffffffe}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="020101030c0000009f0000000000000005000500000000000a000000de00000000000000000000000000ffff00000000000000000000000005000600000000000a0000"], 0x60}}, 0x0) 1.175619414s ago: executing program 0 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 1.175381946s ago: executing program 2 (id=63): socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0) 1.112283858s ago: executing program 4 (id=64): r0 = socket(0x10, 0x803, 0x0) r1 = getpid() sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500000000001c0012800900010069706970000000000c000280080014000800000008000d004f00000008001f0000020000", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 133.764747ms ago: executing program 1 (id=65): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) r5 = geteuid() setreuid(r4, r5) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000004c0)={0x1ff, "461cc58baa3d7431e70197d3e2ec93ce403adbb196ecbae07b09997dd5fc245d", 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x18) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x3) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000000440)=0x6) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) 0s ago: executing program 4 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af00000000b0a030000000000000000000000000510001180090001006c6173740000000045000d402aee891928208e1d695b6c3387cc05fafbbf6e89fb08e34436cb6825e1287e279e378dc0575d62be31e41d7bbc0f11e40b0f99bf15bd6178f7db69465d4fcd1b0300000008000f40000000030800074000000005140012"], 0x19c}, 0x1, 0x0, 0x0, 0x40}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 77.775131][ T5825] cgroup: Unknown subsys name 'net' [ 77.927087][ T5825] cgroup: Unknown subsys name 'cpuset' [ 77.936641][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.548119][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.453712][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.473591][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.481804][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.482776][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.500228][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.506266][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.513081][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.516143][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.522546][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.529828][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.538500][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.544606][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.549630][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.556974][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.564716][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.579707][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.580079][ T5856] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.589201][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.596253][ T5856] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.601971][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.608468][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.615839][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.629606][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.638252][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.647290][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.648409][ T5856] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.655128][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.662181][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.678815][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 82.687131][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.268049][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 83.622096][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.630254][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.639938][ T5836] bridge_slave_0: entered allmulticast mode [ 83.648615][ T5836] bridge_slave_0: entered promiscuous mode [ 83.661687][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.669244][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.677151][ T5836] bridge_slave_1: entered allmulticast mode [ 83.684466][ T5836] bridge_slave_1: entered promiscuous mode [ 83.718666][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 83.858622][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 83.905569][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.960090][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.985993][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 84.119900][ T5836] team0: Port device team_slave_0 added [ 84.141480][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.149013][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.156304][ T5838] bridge_slave_0: entered allmulticast mode [ 84.164473][ T5838] bridge_slave_0: entered promiscuous mode [ 84.171833][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 84.188880][ T5836] team0: Port device team_slave_1 added [ 84.241038][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.248625][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.256448][ T5838] bridge_slave_1: entered allmulticast mode [ 84.264547][ T5838] bridge_slave_1: entered promiscuous mode [ 84.362043][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.369357][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.395461][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.436006][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.449894][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.486196][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.493469][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.519444][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.616198][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.623488][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.630640][ T5835] bridge_slave_0: entered allmulticast mode [ 84.639056][ T5835] bridge_slave_0: entered promiscuous mode [ 84.664414][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.671585][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.678988][ T5837] bridge_slave_0: entered allmulticast mode [ 84.686396][ T5837] bridge_slave_0: entered promiscuous mode [ 84.693676][ T5848] Bluetooth: hci1: command tx timeout [ 84.749547][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757311][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.764589][ T5144] Bluetooth: hci3: command tx timeout [ 84.765055][ T5848] Bluetooth: hci2: command tx timeout [ 84.772650][ T5835] bridge_slave_1: entered allmulticast mode [ 84.776046][ T5144] Bluetooth: hci4: command tx timeout [ 84.781485][ T5841] Bluetooth: hci0: command tx timeout [ 84.795070][ T5835] bridge_slave_1: entered promiscuous mode [ 84.802257][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.809653][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.817117][ T5837] bridge_slave_1: entered allmulticast mode [ 84.824533][ T5837] bridge_slave_1: entered promiscuous mode [ 84.835443][ T5838] team0: Port device team_slave_0 added [ 84.856745][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.864026][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.871388][ T5840] bridge_slave_0: entered allmulticast mode [ 84.880194][ T5840] bridge_slave_0: entered promiscuous mode [ 84.937124][ T5838] team0: Port device team_slave_1 added [ 84.960044][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.967363][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.974749][ T5840] bridge_slave_1: entered allmulticast mode [ 84.981998][ T5840] bridge_slave_1: entered promiscuous mode [ 84.997835][ T5836] hsr_slave_0: entered promiscuous mode [ 85.004481][ T5836] hsr_slave_1: entered promiscuous mode [ 85.102003][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.117186][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.129644][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.144823][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.154960][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.161928][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.188262][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.203773][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.210764][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.236847][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.254200][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.266994][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.465055][ T5835] team0: Port device team_slave_0 added [ 85.475211][ T5840] team0: Port device team_slave_0 added [ 85.490112][ T5837] team0: Port device team_slave_0 added [ 85.501587][ T5837] team0: Port device team_slave_1 added [ 85.544320][ T5838] hsr_slave_0: entered promiscuous mode [ 85.551169][ T5838] hsr_slave_1: entered promiscuous mode [ 85.558312][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.566469][ T5838] Cannot create hsr debugfs directory [ 85.574991][ T5835] team0: Port device team_slave_1 added [ 85.584101][ T5840] team0: Port device team_slave_1 added [ 85.701980][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.709207][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.735824][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.800909][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.808122][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.835286][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.892175][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.899379][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.929039][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.943143][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.950109][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.976418][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.025296][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.032275][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.059142][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.071641][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.078636][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.104736][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.210002][ T5837] hsr_slave_0: entered promiscuous mode [ 86.216671][ T5837] hsr_slave_1: entered promiscuous mode [ 86.223506][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.231081][ T5837] Cannot create hsr debugfs directory [ 86.357137][ T5835] hsr_slave_0: entered promiscuous mode [ 86.364579][ T5835] hsr_slave_1: entered promiscuous mode [ 86.371321][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.379289][ T5835] Cannot create hsr debugfs directory [ 86.418824][ T5840] hsr_slave_0: entered promiscuous mode [ 86.425928][ T5840] hsr_slave_1: entered promiscuous mode [ 86.433186][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.440787][ T5840] Cannot create hsr debugfs directory [ 86.706039][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.758866][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.763226][ T5841] Bluetooth: hci1: command tx timeout [ 86.774397][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.819218][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.842690][ T5841] Bluetooth: hci4: command tx timeout [ 86.843116][ T5144] Bluetooth: hci2: command tx timeout [ 86.848135][ T5841] Bluetooth: hci3: command tx timeout [ 86.853605][ T5144] Bluetooth: hci0: command tx timeout [ 87.124833][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.137175][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.148988][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.171165][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.270091][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.299449][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.339214][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.361044][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.602998][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.660292][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.708563][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.773161][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.857089][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.893039][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.941376][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.969238][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.981485][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.017582][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.081009][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.107538][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.145455][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.152904][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.191865][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.199129][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.210385][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.217567][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.289977][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.297161][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.334505][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.448199][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.466886][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.538878][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.546126][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.589862][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.597153][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.641714][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.688791][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.707100][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714368][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.741845][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.749187][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.843659][ T5144] Bluetooth: hci1: command tx timeout [ 88.859244][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.923410][ T5144] Bluetooth: hci3: command tx timeout [ 88.928896][ T5144] Bluetooth: hci0: command tx timeout [ 88.929145][ T5841] Bluetooth: hci2: command tx timeout [ 88.934584][ T5144] Bluetooth: hci4: command tx timeout [ 88.947674][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.954938][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.969304][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.976596][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.100056][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.250246][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.461551][ T5838] veth0_vlan: entered promiscuous mode [ 89.544136][ T5838] veth1_vlan: entered promiscuous mode [ 89.583580][ T5836] veth0_vlan: entered promiscuous mode [ 89.647609][ T5836] veth1_vlan: entered promiscuous mode [ 89.716434][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.737027][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.754465][ T5838] veth0_macvtap: entered promiscuous mode [ 89.766513][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.795666][ T5838] veth1_macvtap: entered promiscuous mode [ 89.870441][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.897365][ T5836] veth0_macvtap: entered promiscuous mode [ 89.936976][ T5836] veth1_macvtap: entered promiscuous mode [ 89.993288][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.006867][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.018989][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.031846][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.062245][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.074393][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.084079][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.092949][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.112298][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.125577][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.137435][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.170037][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.179119][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.188538][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.199164][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.217938][ T5837] veth0_vlan: entered promiscuous mode [ 90.261217][ T5840] veth0_vlan: entered promiscuous mode [ 90.338038][ T5840] veth1_vlan: entered promiscuous mode [ 90.352012][ T5837] veth1_vlan: entered promiscuous mode [ 90.457750][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.468738][ T5835] veth0_vlan: entered promiscuous mode [ 90.479225][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.545703][ T5835] veth1_vlan: entered promiscuous mode [ 90.599430][ T5840] veth0_macvtap: entered promiscuous mode [ 90.610722][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.612911][ T5840] veth1_macvtap: entered promiscuous mode [ 90.633865][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.669522][ T5837] veth0_macvtap: entered promiscuous mode [ 90.731433][ T5837] veth1_macvtap: entered promiscuous mode [ 90.752529][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.771480][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.782139][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.791360][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804103][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.815540][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.829847][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.851275][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.869054][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.879811][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.891018][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.904316][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.922537][ T5144] Bluetooth: hci1: command tx timeout [ 90.951803][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.955433][ T5835] veth0_macvtap: entered promiscuous mode [ 90.988509][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997837][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.007500][ T5144] Bluetooth: hci4: command tx timeout [ 91.009244][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.013768][ T5144] Bluetooth: hci2: command tx timeout [ 91.013809][ T5144] Bluetooth: hci0: command tx timeout [ 91.022689][ T5841] Bluetooth: hci3: command tx timeout [ 91.029068][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.062136][ T5835] veth1_macvtap: entered promiscuous mode [ 91.096268][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.123039][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.178651][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.194235][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.204164][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.214642][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.224609][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.235057][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.247130][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.272734][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.298102][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.331993][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.342655][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.352559][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.363149][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.373024][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.389762][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.406636][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.425136][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.437791][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.448143][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.459699][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.470090][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.481106][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.495038][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.507717][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.539069][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.559358][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.580948][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.593311][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.604229][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.614519][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.640520][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.657244][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.677557][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.718491][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.757109][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.769797][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.174342][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252992][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.267106][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.278679][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413118][ T2150] cfg80211: failed to load regulatory.db [ 92.898220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.836345][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.936462][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.174815][ T23] IPVS: starting estimator thread 0... [ 94.303088][ T5943] IPVS: using max 19 ests per chain, 45600 per kthread [ 94.529486][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.305713][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.328740][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.457900][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.710979][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.766635][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.784856][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.971479][ T5960] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 97.379003][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.361298][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.652830][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.683375][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.124912][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.140776][ T5994] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 101.433308][ T5996] trusted_key: syz.3.17 sent an empty control message without MSG_MORE. [ 101.721796][ T5998] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.603952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.109063][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.233367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.403828][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 103.433429][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.527309][ T9] usb 5-1: config 0 descriptor?? [ 103.565916][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 103.627230][ T6010] fuse: Unknown parameter 'group_i00000000000000000000' [ 103.810396][ T6013] loop6: detected capacity change from 0 to 524287999 [ 103.843707][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.853215][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.893033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.902243][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.910314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.919160][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 103.928379][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 103.936536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 103.972618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 103.985562][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 104.018492][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.027735][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.031616][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 104.048475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.056936][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.066134][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.076771][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.086030][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.094768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 104.103793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 104.112085][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.121304][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.129909][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.142074][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.151379][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.159555][ T6013] ldm_validate_partition_table(): Disk read failed. [ 104.171305][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.180564][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.189050][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 104.198374][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 104.219909][ T6013] Dev loop6: unable to read RDB block 0 [ 104.254365][ T9] usb 5-1: USB disconnect, device number 2 [ 104.278507][ T6013] loop6: unable to read partition table [ 104.348792][ T6013] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 104.410955][ T6014] ldm_validate_partition_table(): Disk read failed. [ 104.478307][ T6014] Dev loop6: unable to read RDB block 0 [ 104.541141][ T6014] loop6: unable to read partition table [ 104.592753][ T6014] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 104.762521][ T5842] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.492922][ T6041] warning: `syz.3.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.134676][ T5842] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 106.169629][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.224990][ T5842] usb 3-1: config 0 has no interface number 0 [ 106.231180][ T5842] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 106.291420][ T5842] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.311262][ T6047] nvme_fabrics: unknown parameter or missing value 'gDf˜' in ctrl creation request [ 106.325172][ T5842] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=45.b9 [ 106.542738][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.564322][ T5842] usb 3-1: config 0 descriptor?? [ 107.441901][ T5842] gspca_main: spca561-2.14.0 probing abcd:cdee [ 107.983786][ T5842] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 108.027373][ T5842] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.055974][ T5842] usb 3-1: MIDIStreaming interface descriptor not found [ 108.306116][ T5842] usb 3-1: USB disconnect, device number 2 [ 108.402542][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.024739][ T6071] NILFS (loop3): device size too small [ 109.060863][ T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 109.091910][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.130102][ T9] usb 2-1: config 0 descriptor?? [ 109.158387][ T9] ums-usbat 2-1:0.0: USB Mass Storage device detected [ 109.576605][ T9] ums-usbat 2-1:0.0: Quirks match for vid 0781 pid 0005: 1 [ 109.661105][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.707029][ T9] usb 2-1: USB disconnect, device number 2 [ 112.081738][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.46'. [ 113.062643][ T5923] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.235191][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 113.298793][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.542388][ T5923] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.872221][ T5923] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 113.912697][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.954494][ T5923] usb 2-1: config 0 descriptor?? [ 114.002321][ T5923] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 114.042611][ T6117] syzkaller1: entered allmulticast mode [ 114.590159][ T6135] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.709968][ T6135] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.176692][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.185674][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.470284][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 117.525355][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.537757][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.693233][ T6156] Zero length message leads to an empty skb [ 118.177225][ T6141] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.188042][ T6141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.196974][ T6141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.206089][ T6141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.326218][ T9] usb 2-1: USB disconnect, device number 3 [ 118.487835][ T6160] UHID_CREATE from different security context by process 32 (syz.1.65), this is not allowed. [ 118.551318][ T6160] [ 118.554138][ T6160] ============================= [ 118.559000][ T6160] WARNING: suspicious RCU usage [ 118.563959][ T6160] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 118.570556][ T6160] ----------------------------- [ 118.575584][ T6160] fs/kernfs/mount.c:243 suspicious rcu_dereference_check() usage! [ 118.583558][ T6160] [ 118.583558][ T6160] other info that might help us debug this: [ 118.583558][ T6160] [ 118.594962][ T6160] [ 118.594962][ T6160] rcu_scheduler_active = 2, debug_locks = 1 [ 118.604043][ T6160] 2 locks held by syz.1.65/6160: [ 118.610787][ T6160] #0: ffff88803400e0e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: super_lock+0x196/0x400 [ 118.620947][ T6160] #1: ffff888026c66948 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 118.631333][ T6160] [ 118.631333][ T6160] stack backtrace: [ 118.637417][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.1.65 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 118.637433][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.637443][ T6160] Call Trace: [ 118.637448][ T6160] [ 118.637453][ T6160] dump_stack_lvl+0x241/0x360 [ 118.637472][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.637483][ T6160] ? __pfx__printk+0x10/0x10 [ 118.637491][ T6160] ? do_raw_spin_lock+0x14f/0x370 [ 118.637522][ T6160] lockdep_rcu_suspicious+0x226/0x340 [ 118.637536][ T6160] kernfs_node_dentry+0x24b/0x2d0 [ 118.637555][ T6160] cgroup_do_get_tree+0x248/0x390 [ 118.637571][ T6160] cgroup1_get_tree+0x737/0x8c0 [ 118.637594][ T6160] vfs_get_tree+0x90/0x2b0 [ 118.637610][ T6160] do_new_mount+0x2be/0xb40 [ 118.637630][ T6160] ? __pfx_do_new_mount+0x10/0x10 [ 118.637653][ T6160] __se_sys_mount+0x2d6/0x3c0 [ 118.637667][ T6160] ? __pfx___se_sys_mount+0x10/0x10 [ 118.637678][ T6160] ? do_syscall_64+0x100/0x230 [ 118.637694][ T6160] ? __x64_sys_mount+0x20/0xc0 [ 118.637706][ T6160] do_syscall_64+0xf3/0x230 [ 118.637719][ T6160] ? clear_bhb_loop+0x45/0xa0 [ 118.637735][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.637751][ T6160] RIP: 0033:0x7ff890d8d169 [ 118.637764][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.637772][ T6160] RSP: 002b:00007ff891b09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.637783][ T6160] RAX: ffffffffffffffda RBX: 00007ff890fa6080 RCX: 00007ff890d8d169 [ 118.637790][ T6160] RDX: 0000400000000040 RSI: 0000400000000100 RDI: 0000000000000000 [ 118.637796][ T6160] RBP: 00007ff890e0e2a0 R08: 00004000000000c0 R09: 0000000000000000 [ 118.637802][ T6160] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 118.637807][ T6160] R13: 0000000000000000 R14: 00007ff890fa6080 R15: 00007ffcfc82c6c8 [ 118.637826][ T6160] [ 118.965191][ T6160] [ 118.967572][ T6160] ============================================ [ 118.973732][ T6160] WARNING: possible recursive locking detected [ 118.979894][ T6160] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 118.986498][ T6160] -------------------------------------------- [ 118.992663][ T6160] syz.1.65/6160 is trying to acquire lock: [ 118.998501][ T6160] ffff888026c66948 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa2/0x5d0 [ 119.008540][ T6160] [ 119.008540][ T6160] but task is already holding lock: [ 119.015913][ T6160] ffff888026c66948 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 119.025694][ T6160] [ 119.025694][ T6160] other info that might help us debug this: [ 119.033739][ T6160] Possible unsafe locking scenario: [ 119.033739][ T6160] [ 119.041171][ T6160] CPU0 [ 119.044429][ T6160] ---- [ 119.047687][ T6160] lock(&root->kernfs_rwsem); [ 119.052434][ T6160] lock(&root->kernfs_rwsem); [ 119.057209][ T6160] [ 119.057209][ T6160] *** DEADLOCK *** [ 119.057209][ T6160] [ 119.065337][ T6160] May be due to missing lock nesting notation [ 119.065337][ T6160] [ 119.073664][ T6160] 2 locks held by syz.1.65/6160: [ 119.078579][ T6160] #0: ffff88803400e0e0 (&type->s_umount_key#43){+.+.}-{4:4}, at: super_lock+0x196/0x400 [ 119.088420][ T6160] #1: ffff888026c66948 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 119.098600][ T6160] [ 119.098600][ T6160] stack backtrace: [ 119.104497][ T6160] CPU: 0 UID: 0 PID: 6160 Comm: syz.1.65 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 119.104510][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.104516][ T6160] Call Trace: [ 119.104523][ T6160] [ 119.104528][ T6160] dump_stack_lvl+0x241/0x360 [ 119.104543][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.104554][ T6160] ? __pfx__printk+0x10/0x10 [ 119.104562][ T6160] ? lockdep_unlock+0x16a/0x300 [ 119.104578][ T6160] print_deadlock_bug+0x483/0x620 [ 119.104590][ T6160] validate_chain+0x15e2/0x5920 [ 119.104604][ T6160] ? validate_chain+0x15c0/0x5920 [ 119.104615][ T6160] ? __pfx_validate_chain+0x10/0x10 [ 119.104629][ T6160] ? __pfx_validate_chain+0x10/0x10 [ 119.104639][ T6160] ? __lock_acquire+0x1397/0x2100 [ 119.104652][ T6160] ? __pfx_validate_chain+0x10/0x10 [ 119.104663][ T6160] ? mark_lock+0x9a/0x360 [ 119.104673][ T6160] __lock_acquire+0x1397/0x2100 [ 119.104690][ T6160] lock_acquire+0x1ed/0x550 [ 119.104702][ T6160] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 119.104715][ T6160] ? __pfx_lock_acquire+0x10/0x10 [ 119.104736][ T6160] ? __pfx___might_resched+0x10/0x10 [ 119.104760][ T6160] down_read+0xb1/0xa40 [ 119.104780][ T6160] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 119.104796][ T6160] ? __pfx_lock_acquire+0x10/0x10 [ 119.104818][ T6160] ? kernfs_root+0x1c/0x230 [ 119.104830][ T6160] ? __pfx_down_read+0x10/0x10 [ 119.104857][ T6160] ? kernfs_root+0x1c/0x230 [ 119.104873][ T6160] kernfs_dop_revalidate+0xa2/0x5d0 [ 119.104894][ T6160] lookup_one_unlocked+0x23b/0x2d0 [ 119.104913][ T6160] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 119.104931][ T6160] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 119.104953][ T6160] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 119.104968][ T6160] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 119.104987][ T6160] lookup_positive_unlocked+0x2b/0xb0 [ 119.105006][ T6160] kernfs_node_dentry+0x139/0x2d0 [ 119.105027][ T6160] cgroup_do_get_tree+0x248/0x390 [ 119.105045][ T6160] cgroup1_get_tree+0x737/0x8c0 [ 119.105069][ T6160] vfs_get_tree+0x90/0x2b0 [ 119.105088][ T6160] do_new_mount+0x2be/0xb40 [ 119.105110][ T6160] ? __pfx_do_new_mount+0x10/0x10 [ 119.105132][ T6160] __se_sys_mount+0x2d6/0x3c0 [ 119.105150][ T6160] ? __pfx___se_sys_mount+0x10/0x10 [ 119.105165][ T6160] ? do_syscall_64+0x100/0x230 [ 119.105188][ T6160] ? __x64_sys_mount+0x20/0xc0 [ 119.105203][ T6160] do_syscall_64+0xf3/0x230 [ 119.105223][ T6160] ? clear_bhb_loop+0x45/0xa0 [ 119.105245][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.105266][ T6160] RIP: 0033:0x7ff890d8d169 [ 119.105281][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.105295][ T6160] RSP: 002b:00007ff891b09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 119.105309][ T6160] RAX: ffffffffffffffda RBX: 00007ff890fa6080 RCX: 00007ff890d8d169 [ 119.105316][ T6160] RDX: 0000400000000040 RSI: 0000400000000100 RDI: 0000000000000000 [ 119.105322][ T6160] RBP: 00007ff890e0e2a0 R08: 00004000000000c0 R09: 0000000000000000 [ 119.105328][ T6160] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 119.105333][ T6160] R13: 0000000000000000 R14: 00007ff890fa6080 R15: 00007ffcfc82c6c8 [ 119.105343][ T6160] [ 119.505763][ T6166] netlink: 96 bytes leftover after parsing attributes in process `syz.4.66'.