last executing test programs: 2m33.585279856s ago: executing program 0 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x400c014) socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r7, 0x89e4) ioctl$int_in(r4, 0x40000000af01, 0x0) close(0xffffffffffffffff) 2m32.627117898s ago: executing program 0 (id=300): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xb67d, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 2m31.201310185s ago: executing program 0 (id=312): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 2m30.142070646s ago: executing program 0 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x1b, &(0x7f0000000380)=ANY=[]) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0xa2, 0x6, 0xfffffff8, 0x400005}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lseek(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x80080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f00008af000/0x10000)=nil, 0x10000, 0x2000006, 0x12, r0, 0xdbbc9000) mlock2(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(0xffffffffffffffff, 0x6c, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c0003"], 0xf) 2m28.935183542s ago: executing program 0 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) 2m28.216890541s ago: executing program 0 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) syz_usbip_server_init(0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) 2m13.119199699s ago: executing program 32 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) syz_usbip_server_init(0x1) syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) 1m21.511007271s ago: executing program 3 (id=589): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.510545971s ago: executing program 4 (id=590): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$radio(0x0, 0x2, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) acct(0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000005002a000200000008000300", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x20004810) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0xf0f05a, 0x0, @value}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="38010000100013070000000000000000000000000000fe88000001a70000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000ac14140000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0002000000000000000000480001006469676573745f6e756c6c00"/240], 0x138}}, 0x0) 1m20.26565104s ago: executing program 4 (id=591): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 1m20.26454683s ago: executing program 3 (id=593): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m19.347403388s ago: executing program 3 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 1m19.215053221s ago: executing program 4 (id=599): mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r4 = socket(0x10, 0x3, 0x0) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f00000000c0)=0x33) write(r4, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0) 1m18.301243129s ago: executing program 3 (id=601): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/pm_freeze_timeout', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xa) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) fadvise64(0xffffffffffffffff, 0x80000075, 0x0, 0x5) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000340)) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) recvmsg(r5, &(0x7f0000002940)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000002900)=""/5, 0x5}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 1m17.498432186s ago: executing program 4 (id=604): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000001080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '+`\x8a\x05&K\xf8\x13\xc7\x16x\xd0\xbc\t\x7f\xa8\xc5EX\xc7\x1cEk\xc0\xab\xb5YJ\xd5\xec\xb7`\x9aBx\t\'\b>\xc7\f\x84\xa0\xb8\xbd\xa09\x82CL\xc3\xf9e\xf7\x18\xba\x95*\x85\x10/KT\x95\xc2\x9fiZ\xa3s\x00\x17\xa6\x01\xef\"\xc3\x9e\'\xb0\x1a\xe6\xb4\xfe\x1cZ\x95e\x7f|\xf3\x99\xfd\xbb\x14\xb4AR\a\xa0\xfb4F\xb6V1\xbeo\xc2\x0fJ\xb3\x95[q(s\xa1&\x99\x15\xb1\xd7\xfb\x99\xc8$#!\xfa~\xb3\xdf\xea\x88\xe4\xcadX\xd7!\xae(~0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 1m15.197953246s ago: executing program 4 (id=607): socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae000a5000003000500001e001e02"], 0x80}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 1m15.087094297s ago: executing program 3 (id=608): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m15.000397285s ago: executing program 5 (id=609): socket$netlink(0x10, 0x3, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet(0x2, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000006c0)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0x5) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1m14.899646375s ago: executing program 3 (id=610): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000380)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r0) 1m13.980417123s ago: executing program 5 (id=612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) pwritev(r5, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xb67d, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1m13.165694701s ago: executing program 4 (id=613): syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x145, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trr'], 0xa) write$cgroup_devices(r3, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) 1m12.960430571s ago: executing program 5 (id=615): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e37803c492d7256200000000002000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000880)=""/4096, 0x1000, 0x0, &(0x7f00000000c0)=""/21, 0x15}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='sys_enter\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() prctl$PR_SET_SECUREBITS(0x1b, 0x0) syz_open_dev$video4linux(0x0, 0x20, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x22, 0x2, 0x3) recvfrom$phonet(r6, 0x0, 0x0, 0x3, 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c00", @ANYRES16=r8, @ANYBLOB="0100000000000000000007000000080001"], 0x1c}}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001ec0)="1400000016001963d25a80648c56915a17aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x7e}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.idle_time\x00', 0x275a, 0x0) 1m11.116569508s ago: executing program 5 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file1/file4/file7\x00', 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x0, 0x0, 0x0}) r5 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000000800)={0x9}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000004c0)="87", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) 1m10.207837555s ago: executing program 5 (id=620): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 59.320918869s ago: executing program 33 (id=610): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f0000000380)=0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r0) 58.078536579s ago: executing program 34 (id=613): syz_pidfd_open(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x80, 0x0, 0x1, 0x145, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trr'], 0xa) write$cgroup_devices(r3, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) 55.006410703s ago: executing program 35 (id=620): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x40}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 23.671047139s ago: executing program 8 (id=715): mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0) 20.84591428s ago: executing program 6 (id=720): syz_usb_connect(0x2, 0x4a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000300)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4000014) r3 = socket(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8fba724f8d8f46ff88fdf1e61dceef4ac7bb085eb915eb2f14927a5caef0f5224ef0e7219c3fe37b272f27e9aab8a31e258d6c14be1f1a31a8e68d00"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) getsockopt(r3, 0x200000000114, 0x2714, 0x0, &(0x7f0000000180)) 17.338335297s ago: executing program 1 (id=726): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x5c}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r5 = socket(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000000c0)=0x33) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) write(r5, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) 17.024244987s ago: executing program 8 (id=728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 14.644387035s ago: executing program 1 (id=734): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x1, 0x8000) 14.613325318s ago: executing program 8 (id=735): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 13.832270164s ago: executing program 6 (id=736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) lseek(r3, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xb67d, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 11.772023631s ago: executing program 1 (id=738): mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0) 11.658360792s ago: executing program 6 (id=739): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030b6303030303034303030302c757365725f9627c1660baec7ff0c3a8f4e675bae0e9cd7dad821e167eda3252e5763b521bd19554940f8e657b53e9a8c09b7bbe3130c61ff4edea2560f76f31980f9330ac1d3dc63d8ba6891a60a327d461d7fd05486", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005f, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x40000000000055}}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@minixdf}, {@nolazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0xb}}, {@usrquota}, {@user_xattr}], [{@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81009431, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(0x4) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="010006000000030000000100000000000000014100000018001700000016000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) ioctl$FIOCLEX(r2, 0x5451) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty, 0x5}}, 0x7, 0x80, 0x6, 0x83, 0x3}, &(0x7f0000000300)=0x98) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0x1d, &(0x7f0000000280)=ANY=[], 0x4) 10.805619363s ago: executing program 8 (id=740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) lseek(r3, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 10.805330713s ago: executing program 2 (id=741): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 10.702816794s ago: executing program 1 (id=742): socket$netlink(0x10, 0x3, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 10.469318776s ago: executing program 6 (id=743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 9.013681466s ago: executing program 2 (id=744): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="b2", 0x34000}], 0x4}, 0x0) 8.582879627s ago: executing program 8 (id=745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, 0x0, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 8.053761997s ago: executing program 1 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) lseek(r3, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 8.052854298s ago: executing program 6 (id=748): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) 7.935321059s ago: executing program 2 (id=749): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 7.871960395s ago: executing program 6 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_freezer_state(r3, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, 0x0, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) 7.779287454s ago: executing program 2 (id=751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) lseek(r3, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)='E', 0x1}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xb67d, 0x10100}, &(0x7f0000000100), &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 5.858464768s ago: executing program 1 (id=752): mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) r6 = socket(0x10, 0x3, 0x0) r7 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r7, 0xc0044dff, &(0x7f00000000c0)=0x33) write(r6, &(0x7f0000000000)="240000001a005f0414f9f407000901000aff8000034000030000000008001d0001000000", 0x24) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, 0x1b) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000b0000000c000580080001"], 0x20}}, 0x0) 5.850656829s ago: executing program 8 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030b6303030303034303030302c757365725f9627c1660baec7ff0c3a8f4e675bae0e9cd7dad821e167eda3252e5763b521bd19554940f8e657b53e9a8c09b7bbe3130c61ff4edea2560f76f31980f9330ac1d3dc63d8ba6891a60a327d461d7fd05486", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005f, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@errors_continue}, {@stripe={'stripe', 0x3d, 0x40000000000055}}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@minixdf}, {@nolazytime}, {@noload}, {@stripe={'stripe', 0x3d, 0xb}}, {@usrquota}, {@user_xattr}], [{@euid_gt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81009431, 0xfffffffffffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ppoll(&(0x7f0000000180)=[{r5}], 0x1, 0x0, 0x0, 0x0) close(0x4) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0x5) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="04000000", @ANYRES16=r3, @ANYBLOB="010006000000030000000100000000000000014100000018001700000016000000007564703a73797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) ioctl$FIOCLEX(r2, 0x5451) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x1, @empty, 0x5}}, 0x7, 0x80, 0x6, 0x83, 0x3}, &(0x7f0000000300)=0x98) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0x1d, &(0x7f0000000280)=ANY=[], 0x4) 4.251017112s ago: executing program 2 (id=754): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r4, 0x0, 0xffffffffffffffff}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) close_range(r0, 0xffffffffffffffff, 0x0) 2.730686098s ago: executing program 2 (id=757): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0x10, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x3, 0x8000000003c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) bpf$ITER_CREATE(0x1d, &(0x7f0000000040)={r3, 0x7}, 0x8) 2.19067799s ago: executing program 7 (id=758): socket$netlink(0x10, 0x3, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.933905455s ago: executing program 7 (id=759): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, 0x0, 0x0) 1.883866309s ago: executing program 7 (id=760): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x1}], 0x1}, 0xff03}], 0x2, 0x8000) 1.851854103s ago: executing program 7 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 970.753697ms ago: executing program 7 (id=762): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000500000009000100ee797a300000000014000000020a0103000000000000000000000000140000001100010000000000000000000000000a76e54a8d3397d7c8a18dfa869960f0bd426c95e0c0b8158dffd781544cf54890313cfe52e3dd67b597c39c62e61a4febc77762492bcaccff05f8c3d958313ec4338b99dffc91e378d48d31235c58c2824eb1b18001be017839b381171ac0e27293669f782a8e3869f4ece38839794895b780676ac6ba244b2f8aec81782fbdf0b96554569b0e45a98795c8a9b96f7c19b3da54727bee5018ba34353daf98e1ae99ef510b3770ae96522fd966fd5d908dfa05fc28121c284428a434846143604cf768cfcb481534999b367dae37f580bfeffb789f36"], 0x5c}}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3, 0x0, 0x2}}) 0s ago: executing program 7 (id=763): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x10fff9) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = memfd_create(0x0, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x10e, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0xb67d, 0x10100}, 0x0, &(0x7f0000000340)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 34.575924][ T4283] cgroup: Unknown subsys name 'net' [ 34.823656][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 35.134498][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.281835][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.282109][ T4303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 36.285985][ T4303] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.287824][ T4303] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.289820][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 36.291673][ T4303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 36.294593][ T4303] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.296558][ T4303] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.296758][ T4309] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 36.298205][ T4303] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.300884][ T4303] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 36.301235][ T4309] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 36.304143][ T4303] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 36.305639][ T4303] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.305754][ T4309] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 36.307089][ T4303] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.309551][ T4309] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.310733][ T4303] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 36.312563][ T4309] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.312979][ T4303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 36.314307][ T4309] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.316549][ T4296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.318687][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.320005][ T4310] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.320156][ T4310] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.321643][ T4303] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.324949][ T4296] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.356573][ T4301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.358852][ T4301] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 36.360477][ T4301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.574535][ T4304] chnl_net:caif_netlink_parms(): no params data found [ 36.618670][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 36.645530][ T4294] chnl_net:caif_netlink_parms(): no params data found [ 36.697909][ T4304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.700060][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.703069][ T4304] device bridge_slave_0 entered promiscuous mode [ 36.707661][ T4304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.709858][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.711832][ T4304] device bridge_slave_1 entered promiscuous mode [ 36.722076][ T4307] chnl_net:caif_netlink_parms(): no params data found [ 36.782466][ T4304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.784554][ T4294] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.786042][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.788181][ T4294] device bridge_slave_0 entered promiscuous mode [ 36.790667][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.792085][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.794179][ T4300] device bridge_slave_0 entered promiscuous mode [ 36.809412][ T4304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.823476][ T4294] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.824991][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.827223][ T4294] device bridge_slave_1 entered promiscuous mode [ 36.829620][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.831031][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.833083][ T4300] device bridge_slave_1 entered promiscuous mode [ 36.844435][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.845972][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.847921][ T4307] device bridge_slave_0 entered promiscuous mode [ 36.872318][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.873959][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.875981][ T4307] device bridge_slave_1 entered promiscuous mode [ 36.890960][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.894402][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.904725][ T4304] team0: Port device team_slave_0 added [ 36.918615][ T4294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.922245][ T4295] chnl_net:caif_netlink_parms(): no params data found [ 36.926394][ T4304] team0: Port device team_slave_1 added [ 36.929893][ T4300] team0: Port device team_slave_0 added [ 36.932521][ T4300] team0: Port device team_slave_1 added [ 36.940290][ T4307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.950055][ T4294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.965775][ T4307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.987508][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.989003][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.994039][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.011367][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.012782][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.017676][ T4304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.021975][ T4304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.023505][ T4304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.030112][ T4304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.033314][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.034694][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.040415][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.049979][ T4294] team0: Port device team_slave_0 added [ 37.067104][ T4307] team0: Port device team_slave_0 added [ 37.074391][ T4294] team0: Port device team_slave_1 added [ 37.087677][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.089336][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.091400][ T4295] device bridge_slave_0 entered promiscuous mode [ 37.094734][ T4307] team0: Port device team_slave_1 added [ 37.130386][ T4300] device hsr_slave_0 entered promiscuous mode [ 37.178763][ T4300] device hsr_slave_1 entered promiscuous mode [ 37.233956][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.235423][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.237423][ T4295] device bridge_slave_1 entered promiscuous mode [ 37.255279][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.256732][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.262076][ T4294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.280876][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.282260][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.287297][ T4307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.340196][ T4304] device hsr_slave_0 entered promiscuous mode [ 37.378978][ T4304] device hsr_slave_1 entered promiscuous mode [ 37.428840][ T4304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.430509][ T4304] Cannot create hsr debugfs directory [ 37.432193][ T4294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.433641][ T4294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.439411][ T4294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.449551][ T4295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.451759][ T4307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.453164][ T4307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.458262][ T4307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.474347][ T4295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.509508][ T4295] team0: Port device team_slave_0 added [ 37.535655][ T4295] team0: Port device team_slave_1 added [ 37.620534][ T4294] device hsr_slave_0 entered promiscuous mode [ 37.658956][ T4294] device hsr_slave_1 entered promiscuous mode [ 37.698992][ T4294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.700657][ T4294] Cannot create hsr debugfs directory [ 37.727194][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.728815][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.733970][ T4295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.780421][ T4307] device hsr_slave_0 entered promiscuous mode [ 37.818767][ T4307] device hsr_slave_1 entered promiscuous mode [ 37.878507][ T4307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.879961][ T4307] Cannot create hsr debugfs directory [ 37.893239][ T4295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.894695][ T4295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.900129][ T4295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.030344][ T4295] device hsr_slave_0 entered promiscuous mode [ 38.068909][ T4295] device hsr_slave_1 entered promiscuous mode [ 38.108653][ T4295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.110251][ T4295] Cannot create hsr debugfs directory [ 38.203582][ T4300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.240490][ T4300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.281849][ T4300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.332132][ T4300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.339088][ T4301] Bluetooth: hci2: command tx timeout [ 38.340370][ T4301] Bluetooth: hci0: command tx timeout [ 38.341498][ T4301] Bluetooth: hci1: command tx timeout [ 38.414298][ T4304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.418774][ T4306] Bluetooth: hci4: command tx timeout [ 38.420012][ T4306] Bluetooth: hci3: command tx timeout [ 38.450252][ T4304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.500392][ T4304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.550184][ T4304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.635588][ T4294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.665024][ T4307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.700171][ T4294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.743744][ T4307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.796135][ T4294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.831426][ T4294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.870806][ T4307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.913715][ T4307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.029499][ T4295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.051637][ T4295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.105525][ T4295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.144065][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.148292][ T4295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.217211][ T4304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.231899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.234890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.238142][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.249175][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.251451][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.257750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.260626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.262941][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.264539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.273287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.282528][ T4304] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.287241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.289740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.291632][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.293082][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.303726][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.305825][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.307721][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.309292][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.311668][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.323994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.326237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.328326][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.329948][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.334106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.358161][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.361145][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.371506][ T4294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.382229][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.388268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.390928][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.401913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.403968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.406322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.408707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.422351][ T4307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.424978][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.427229][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.434339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.436338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.438327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.441975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.447738][ T4294] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.452545][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.454776][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.470596][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.476293][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.480418][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.482445][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.484447][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.491625][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.497413][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.501825][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.503983][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.505452][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.507389][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.518158][ T4304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.526088][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.537182][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.539566][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.541634][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.543853][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.545711][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.547227][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.550534][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.552566][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.560435][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.562718][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.565502][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.569833][ T4307] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.586496][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.589327][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.591562][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.605458][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.607101][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.609724][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.612924][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.615211][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.616761][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.624886][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.627806][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.645074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 39.647206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.650211][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.651682][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.653472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 39.655834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.670141][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.671543][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.673265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 39.683399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 39.685901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.688175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.692027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.694173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.711494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.713710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 39.716011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.718447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.725548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.727690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 39.732296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.734367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.736447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.753767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.756054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.758297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.772737][ T4304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.783266][ T4307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.785257][ T4307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.788746][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 39.790907][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.793180][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.795012][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.796562][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.800126][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.802377][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.804196][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.805838][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.808001][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.812507][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.814836][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.817474][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.826561][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 39.829024][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.835734][ T4295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.844779][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.846979][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.860464][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.865161][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 39.867202][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.879390][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.895029][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.905710][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.921819][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.924164][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.935316][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.940334][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.957906][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.961339][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.975221][ T4304] device veth0_vlan entered promiscuous mode [ 40.000884][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.002987][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.005192][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.007299][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.026578][ T4304] device veth1_vlan entered promiscuous mode [ 40.033754][ T4300] device veth0_vlan entered promiscuous mode [ 40.053756][ T4300] device veth1_vlan entered promiscuous mode [ 40.066132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.068199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.071251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.073776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.075875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.077984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.097950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.106553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.114349][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.116110][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.120459][ T4295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.125963][ T4304] device veth0_macvtap entered promiscuous mode [ 40.140350][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.142345][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.144551][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.156390][ T4307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.158933][ T4304] device veth1_macvtap entered promiscuous mode [ 40.166686][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.171216][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.172950][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.184331][ T4300] device veth0_macvtap entered promiscuous mode [ 40.195234][ T4294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.203520][ T4300] device veth1_macvtap entered promiscuous mode [ 40.209734][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.215315][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.217273][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.220825][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.223259][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.231440][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.233728][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.240722][ T4304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.252289][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.254372][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.259877][ T4304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.261789][ T4304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.263416][ T4304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.265081][ T4304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.274329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.276490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.283732][ T4307] device veth0_vlan entered promiscuous mode [ 40.291370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.293334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.295585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.297556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.312672][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.314919][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.317979][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.333053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.335275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.341728][ T4307] device veth1_vlan entered promiscuous mode [ 40.383651][ T4300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.385681][ T4300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.389171][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.394590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.396733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.400055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.402073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.405045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.407158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.418726][ T4301] Bluetooth: hci1: command tx timeout [ 40.419978][ T4301] Bluetooth: hci0: command tx timeout [ 40.421011][ T4301] Bluetooth: hci2: command tx timeout [ 40.425576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.429424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.431631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.433738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.436745][ T4300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.440149][ T4300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.442027][ T4300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443705][ T4300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.457413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.459762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.465041][ T4307] device veth0_macvtap entered promiscuous mode [ 40.467176][ T4294] device veth0_vlan entered promiscuous mode [ 40.474723][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.476371][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.490027][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.492098][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.496860][ T4294] device veth1_vlan entered promiscuous mode [ 40.499262][ T4306] Bluetooth: hci3: command tx timeout [ 40.500335][ T4306] Bluetooth: hci4: command tx timeout [ 40.532015][ T4307] device veth1_macvtap entered promiscuous mode [ 40.547333][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.553127][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.556021][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.558220][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.560739][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.562986][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.566151][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.578648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.580753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.582802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.584850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.586851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.592095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.594265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 40.596243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.602761][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.604934][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.606885][ T4307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.610570][ T4307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.613510][ T4307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.620864][ T4295] device veth0_vlan entered promiscuous mode [ 40.630296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.632226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.634151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.636164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.648054][ T4294] device veth0_macvtap entered promiscuous mode [ 40.659911][ T4307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.661742][ T4307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.663438][ T4307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.665116][ T4307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.667957][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.670313][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.683644][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.685213][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.688080][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.691961][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.694705][ T4295] device veth1_vlan entered promiscuous mode [ 40.697091][ T4294] device veth1_macvtap entered promiscuous mode [ 40.760463][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.762112][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.766251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.768293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.772241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.774323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.796103][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.798211][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.801324][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.803467][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.805385][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 40.807355][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.811298][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.833970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.836182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.858915][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.862253][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.864764][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.866924][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.871580][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.873647][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.885761][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.911323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.913579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.915719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.917926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.946882][ T4295] device veth0_macvtap entered promiscuous mode [ 40.956925][ T4294] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.967397][ T4294] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.970489][ T4294] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.974175][ T4294] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.990089][ T4295] device veth1_macvtap entered promiscuous mode [ 41.024227][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.026540][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.042158][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.044235][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.047148][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.054449][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.056476][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.061207][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.063320][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.065362][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.067416][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.074630][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.076682][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.083078][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.090110][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.093075][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.107408][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.116722][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.121943][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.124046][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.126278][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.128889][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.131044][ T4295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.133228][ T4295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.136811][ T4295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.156284][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.159094][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.173776][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.175878][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.179412][ T132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.186336][ T4295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.188315][ T4295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.191485][ T4295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.193424][ T4295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.207690][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.209883][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.217956][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.261249][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.263255][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.267309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.289175][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.294543][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.337676][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.348316][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.352748][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.355587][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.379147][ T4386] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.455257][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.603979][ T4394] binder: BINDER_SET_CONTEXT_MGR already set [ 41.605420][ T4394] binder: 4389:4394 ioctl 4018620d 20000040 returned -16 [ 42.180203][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.288809][ T4386] usb 1-1: Using ep0 maxpacket: 32 [ 42.313485][ T4405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.330850][ T4405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.511200][ T4301] Bluetooth: hci2: command tx timeout [ 42.521999][ T4301] Bluetooth: hci0: command tx timeout [ 42.522351][ T4306] Bluetooth: hci1: command tx timeout [ 42.548750][ T4386] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 42.550530][ T4386] usb 1-1: config 0 has no interface number 0 [ 42.551734][ T4386] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 42.553669][ T4386] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 42.555720][ T4386] usb 1-1: config 0 interface 12 has no altsetting 0 [ 42.628996][ T4306] Bluetooth: hci4: command tx timeout [ 42.630811][ T4306] Bluetooth: hci3: command tx timeout [ 43.164100][ T4410] Bluetooth: MGMT ver 1.22 [ 43.379801][ T4386] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 43.381669][ T4386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.383416][ T4386] usb 1-1: Product: syz [ 43.384251][ T4386] usb 1-1: Manufacturer: syz [ 43.385324][ T4386] usb 1-1: SerialNumber: syz [ 43.395503][ T4386] usb 1-1: config 0 descriptor?? [ 43.433198][ T4386] f81534 1-1:0.12: unsupported endpoint max packet size [ 43.832608][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 44.452377][ T4346] usb 1-1: USB disconnect, device number 2 [ 44.579209][ T4310] Bluetooth: hci0: command tx timeout [ 44.580364][ T4310] Bluetooth: hci2: command tx timeout [ 44.588635][ T4306] Bluetooth: hci1: command tx timeout [ 44.738909][ T4310] Bluetooth: hci3: command tx timeout [ 44.739309][ T4306] Bluetooth: hci4: command tx timeout [ 45.837555][ T4445] binder: BINDER_SET_CONTEXT_MGR already set [ 45.838873][ T4445] binder: 4439:4445 ioctl 4018620d 20000040 returned -16 [ 46.814664][ T4301] Bluetooth: hci3: hardware error 0x00 [ 46.951848][ T4450] sched: RT throttling activated [ 47.676580][ T4456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.729328][ T4456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.135190][ T4301] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 50.651513][ T4480] usb usb1: usbfs: process 4480 (syz.2.34) did not claim interface 23 before use [ 51.038439][ T4491] binder: BINDER_SET_CONTEXT_MGR already set [ 51.039908][ T4491] binder: 4481:4491 ioctl 4018620d 20000040 returned -16 [ 51.789974][ T4493] tmpfs: Unknown parameter 'usrquota' [ 53.557500][ T4520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 53.934125][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.052296][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.123381][ T4527] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 54.123381][ T4527] The task syz.1.44 (4527) triggered the difference, watch for misbehavior. [ 55.039146][ T4540] binder: BINDER_SET_CONTEXT_MGR already set [ 55.040487][ T4540] binder: 4535:4540 ioctl 4018620d 20000040 returned -16 [ 58.910333][ T4572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.55'. [ 61.909824][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 64.868226][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.873267][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.972072][ T4301] Bluetooth: hci1: hardware error 0x00 [ 66.287106][ T4660] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.289620][ T4660] netlink: 1 bytes leftover after parsing attributes in process `syz.3.85'. [ 67.773127][ T4301] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 68.613020][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 68.625274][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.94'. [ 69.628907][ T1515] cfg80211: failed to load regulatory.db [ 71.896351][ T4740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 73.817956][ T4765] netlink: 'syz.4.118': attribute type 33 has an invalid length. [ 74.304489][ T4782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.122'. [ 74.429727][ T4301] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 74.432133][ T4301] Bluetooth: hci4: Injecting HCI hardware error event [ 74.435500][ T4306] Bluetooth: hci4: hardware error 0x00 [ 77.084339][ T4306] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 77.877919][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 83.736572][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 84.513363][ T4935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.540128][ T4935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.968127][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.038846][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.053913][ T27] audit: type=1326 audit(88.030:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.080659][ T27] audit: type=1326 audit(88.060:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.085141][ T27] audit: type=1326 audit(88.060:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.163472][ T27] audit: type=1326 audit(88.060:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.167774][ T27] audit: type=1326 audit(88.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=261 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.222038][ T27] audit: type=1326 audit(88.060:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.271392][ T27] audit: type=1326 audit(88.060:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.275687][ T27] audit: type=1326 audit(88.060:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.353177][ T5018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.410509][ T5018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.480407][ T27] audit: type=1326 audit(88.060:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 88.668148][ T27] audit: type=1326 audit(88.060:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5003 comm="syz.2.180" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa874bfe8 code=0x7ffc0000 [ 89.030690][ T5022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.138800][ T5022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.527048][ T5075] netlink: 32 bytes leftover after parsing attributes in process `syz.1.204'. [ 95.301594][ T5125] netlink: 'syz.1.220': attribute type 33 has an invalid length. [ 95.524474][ T5129] loop2: detected capacity change from 0 to 7 [ 95.734699][ T5129] Dev loop2: unable to read RDB block 7 [ 95.734953][ T5129] loop2: unable to read partition table [ 95.735659][ T5129] loop2: partition table beyond EOD, truncated [ 95.735772][ T5129] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.350888][ T5168] netlink: 'syz.0.232': attribute type 33 has an invalid length. [ 97.607004][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.655582][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.402865][ T5209] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.249'. [ 99.505228][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.558255][ T5220] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 99.559078][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.559784][ T5220] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 99.563333][ T5220] vhci_hcd vhci_hcd.0: Device attached [ 99.572081][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.575516][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.578956][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.581989][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.585035][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.588569][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.591621][ T5220] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 99.619597][ T5220] vhci_hcd vhci_hcd.0: port 0 already used [ 99.771164][ T4471] vhci_hcd: vhci_device speed not set [ 99.838497][ T4471] usb 10-1: new full-speed USB device number 2 using vhci_hcd [ 100.303120][ T5221] vhci_hcd: connection reset by peer [ 100.306392][ T5100] vhci_hcd: stop threads [ 100.307903][ T5100] vhci_hcd: release socket [ 100.310067][ T5100] vhci_hcd: disconnect device [ 106.139258][ T4471] vhci_hcd: vhci_device speed not set [ 107.027983][ T5356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.070102][ T5356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.550989][ T5375] netlink: 'syz.4.306': attribute type 33 has an invalid length. [ 107.742638][ T5388] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 107.743946][ T5388] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.746779][ T5388] vhci_hcd vhci_hcd.0: Device attached [ 107.751717][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.757027][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.760739][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.764162][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.767422][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.770535][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.773590][ T5388] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.792666][ T5388] vhci_hcd vhci_hcd.0: port 0 already used [ 108.546195][ T5389] vhci_hcd: connection closed [ 108.547782][ T24] vhci_hcd: vhci_device speed not set [ 108.559469][ T4434] vhci_hcd: stop threads [ 108.560419][ T4434] vhci_hcd: release socket [ 108.561450][ T4434] vhci_hcd: disconnect device [ 108.628531][ T24] usb 6-1: new full-speed USB device number 2 using vhci_hcd [ 108.630437][ T24] usb 6-1: enqueue for inactive port 0 [ 108.708709][ T24] vhci_hcd: vhci_device speed not set [ 109.559100][ T5416] netlink: 'syz.1.318': attribute type 33 has an invalid length. [ 110.937992][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.971079][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.638110][ T5450] netlink: 'syz.4.330': attribute type 33 has an invalid length. [ 111.662570][ T5451] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 111.664034][ T5451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 111.665626][ T5451] vhci_hcd vhci_hcd.0: Device attached [ 111.670522][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.674455][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.677937][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.681679][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.686433][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.691248][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.694537][ T5451] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.705998][ T5451] vhci_hcd vhci_hcd.0: port 0 already used [ 111.889008][ T4342] vhci_hcd: vhci_device speed not set [ 111.996188][ T4342] usb 2-1: new full-speed USB device number 2 using vhci_hcd [ 112.947956][ T5468] device wireguard0 entered promiscuous mode [ 113.842243][ T5495] netlink: 'syz.2.342': attribute type 33 has an invalid length. [ 116.297027][ T5533] Zero length message leads to an empty skb [ 116.389152][ T5536] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 118.129154][ T4306] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 118.131347][ T4306] Bluetooth: hci2: Injecting HCI hardware error event [ 118.134858][ T4310] Bluetooth: hci2: hardware error 0x00 [ 120.936954][ T4310] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 121.223554][ T5596] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.245387][ T5611] netlink: 'syz.1.380': attribute type 11 has an invalid length. [ 124.608724][ T5644] netlink: 'syz.3.385': attribute type 29 has an invalid length. [ 125.732267][ T5658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.788803][ T5658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.380204][ T4310] Bluetooth: hci0: ACL packet for unknown connection handle 6 [ 126.440072][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.444377][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.874667][ T4306] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 126.888963][ T4306] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 126.943212][ T4306] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.024681][ T4306] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.335589][ T4301] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 127.549842][ T4301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.876633][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.908604][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.923593][ T5682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.988656][ T5682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.062012][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 128.150751][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.154533][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.164527][ T5667] device bridge_slave_0 entered promiscuous mode [ 128.172786][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.176612][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.187537][ T5667] device bridge_slave_1 entered promiscuous mode [ 128.233665][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.247602][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.303915][ T5667] team0: Port device team_slave_0 added [ 128.307284][ T5667] team0: Port device team_slave_1 added [ 128.346503][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.348129][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.373639][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.384298][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.386023][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.393234][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.432089][ T5667] device hsr_slave_0 entered promiscuous mode [ 129.644112][ T4310] Bluetooth: hci5: command tx timeout [ 129.648982][ T5667] device hsr_slave_1 entered promiscuous mode [ 129.948665][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.950314][ T5667] Cannot create hsr debugfs directory [ 130.082948][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 130.616791][ T5705] tipc: Enabling of bearer rejected, failed to enable media [ 130.793903][ T5667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.463135][ T5667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.536354][ T5667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.600264][ T5667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.698523][ T4301] Bluetooth: hci5: command tx timeout [ 131.926314][ T5722] netlink: 'syz.4.415': attribute type 29 has an invalid length. [ 131.954702][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.975990][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.982789][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.993405][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.007235][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.009581][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.011607][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.013081][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.128688][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.159138][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.166748][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.178281][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.179890][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.199784][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.881665][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.908226][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.922653][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.929084][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.942414][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.959384][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.051503][ T5667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 133.053622][ T5667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.079206][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.095570][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.104215][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.111769][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.125303][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.714213][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.422'. [ 133.778724][ T4310] Bluetooth: hci5: command tx timeout [ 134.208207][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.224832][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.226611][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.759628][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.762160][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.768525][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 135.770667][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 135.773516][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 135.780041][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.802968][ T5667] device veth0_vlan entered promiscuous mode [ 135.814908][ T5667] device veth1_vlan entered promiscuous mode [ 135.858699][ T4310] Bluetooth: hci5: command tx timeout [ 135.864103][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 135.866664][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 135.872492][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 135.882186][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 135.990403][ T5667] device veth0_macvtap entered promiscuous mode [ 136.015200][ T5667] device veth1_macvtap entered promiscuous mode [ 136.055374][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.068634][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.071207][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.073681][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.075927][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.078221][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.081155][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.083643][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.087273][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.100418][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.314091][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.593675][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.615069][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.634417][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.656322][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.813143][ T5784] Process accounting resumed [ 136.852036][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.854204][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.856222][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.900481][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.909718][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.911692][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.941044][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.960528][ T5667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.962200][ T5667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.963960][ T5667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.965627][ T5667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.010688][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 137.013564][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 137.015692][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 137.020712][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.033899][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.043973][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.151388][ T4618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.155634][ T4618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.164687][ T4807] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.186612][ T5712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.197258][ T5712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.208202][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 138.307440][ T4343] libceph: connect (1)[c::]:6789 error -101 [ 138.309248][ T4343] libceph: mon0 (1)[c::]:6789 connect error [ 138.314142][ T5795] ceph: No mds server is up or the cluster is laggy [ 138.686615][ T5821] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4096 [ 140.693032][ T5840] netlink: 'syz.4.438': attribute type 29 has an invalid length. [ 141.423163][ T4471] libceph: connect (1)[c::]:6789 error -101 [ 141.424634][ T4471] libceph: mon0 (1)[c::]:6789 connect error [ 141.493602][ T5851] ceph: No mds server is up or the cluster is laggy [ 144.901249][ T1515] libceph: connect (1)[c::]:6789 error -101 [ 144.902610][ T1515] libceph: mon0 (1)[c::]:6789 connect error [ 144.905204][ T1515] libceph: connect (1)[c::]:6789 error -101 [ 144.906538][ T1515] libceph: mon0 (1)[c::]:6789 connect error [ 145.041506][ T5904] ceph: No mds server is up or the cluster is laggy [ 146.415102][ T5940] netlink: 'syz.4.470': attribute type 29 has an invalid length. [ 151.076192][ T5986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.639165][ T5986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.178834][ T4310] Bluetooth: hci0: command 0x0406 tx timeout [ 161.008595][ T6109] netlink: 'syz.5.526': attribute type 29 has an invalid length. [ 162.272856][ T6123] syz.3.529 uses obsolete (PF_INET,SOCK_PACKET) [ 164.752271][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.232566][ T6186] binder: 6177:6186 got transaction to invalid handle, 1 [ 165.234464][ T6186] binder: 6186:6177 cannot find target node [ 165.235855][ T6186] binder: 6177:6186 transaction async to 0:0 failed 14/29201/-22, size 0-0 line 3054 [ 165.241262][ T6186] IPv6: NLM_F_CREATE should be specified when creating new route [ 165.243747][ T6186] netlink: 1 bytes leftover after parsing attributes in process `syz.5.542'. [ 165.309049][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.602630][ T5974] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.606922][ T6199] netlink: 'syz.3.544': attribute type 29 has an invalid length. [ 168.445085][ T6243] binder: tried to use weak ref as strong ref [ 168.446482][ T6243] binder: 6237:6243 Acquire 1 refcount change on invalid ref 0 ret -22 [ 168.449264][ T6243] binder: 6237:6243 got transaction to invalid handle, 1 [ 168.450815][ T6243] binder: 6243:6237 cannot find target node [ 168.451952][ T6243] binder: 6237:6243 transaction async to 0:0 failed 17/29201/-22, size 0-0 line 3054 [ 168.454447][ T6243] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.456291][ T6243] netlink: 1 bytes leftover after parsing attributes in process `syz.1.559'. [ 169.550959][ T5974] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.044536][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 170.201458][ T6233] Process accounting paused [ 172.315033][ T6279] netlink: 'syz.4.571': attribute type 29 has an invalid length. [ 172.746965][ T6291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.575'. [ 174.525207][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 179.320767][ T6353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.529977][ T6353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.572892][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 181.451727][ T6375] netlink: 'syz.4.599': attribute type 29 has an invalid length. [ 184.687070][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 185.036102][ T4343] syzkaller0: tun_net_xmit 76 [ 185.037526][ T4343] syzkaller0: tun_net_xmit 48 [ 185.059166][ T111] syzkaller0: tun_net_xmit 76 [ 185.066887][ T6411] syzkaller0: create flow: hash 3451101801 index 2 [ 185.775113][ T4343] syzkaller0: tun_net_xmit 76 [ 185.776947][ T4343] syzkaller0: tun_net_xmit 76 [ 186.583289][ T6419] syzkaller0: delete flow: hash 3451101801 index 2 [ 186.676255][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.809728][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.641655][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.643047][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.762457][ T6482] Bluetooth: MGMT ver 1.22 [ 193.881555][ T6486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.925437][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.779570][ T4306] Bluetooth: hci0: command 0x0406 tx timeout [ 200.508034][ T4301] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 200.514725][ T4301] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 200.516828][ T4301] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 200.520408][ T4301] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 200.522465][ T4301] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 200.524102][ T4301] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.768898][ T4306] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 201.771572][ T4306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 201.773922][ T4306] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 201.776059][ T4306] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 201.778014][ T4306] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 201.779890][ T4306] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 202.588565][ T4310] Bluetooth: hci6: command tx timeout [ 203.868595][ T4306] Bluetooth: hci7: command tx timeout [ 204.658723][ T4306] Bluetooth: hci6: command tx timeout [ 204.840479][ T4310] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 204.843222][ T4310] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 204.845544][ T4310] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 204.848231][ T4310] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 204.852912][ T4310] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 204.854612][ T4310] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 205.477116][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.5.620'. [ 205.949779][ T4310] Bluetooth: hci7: command tx timeout [ 206.748884][ T4306] Bluetooth: hci6: command tx timeout [ 207.023513][ T4310] Bluetooth: hci8: command tx timeout [ 207.861811][ T4345] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.968121][ T4345] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.031958][ T4310] Bluetooth: hci7: command tx timeout [ 208.121808][ T4345] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.223472][ T4345] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.232056][ T6540] chnl_net:caif_netlink_parms(): no params data found [ 208.246069][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 208.335081][ T6540] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.336574][ T6540] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.339452][ T6540] device bridge_slave_0 entered promiscuous mode [ 208.343086][ T6540] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.344665][ T6540] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.346912][ T6540] device bridge_slave_1 entered promiscuous mode [ 208.365136][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 208.392690][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.394335][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.396455][ T6558] device bridge_slave_0 entered promiscuous mode [ 208.408662][ T6540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.419725][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.421414][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.423877][ T6558] device bridge_slave_1 entered promiscuous mode [ 208.427855][ T6540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.496892][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.536051][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.566968][ T6540] team0: Port device team_slave_0 added [ 208.581096][ T6558] team0: Port device team_slave_0 added [ 208.584763][ T6558] team0: Port device team_slave_1 added [ 208.587857][ T6540] team0: Port device team_slave_1 added [ 208.596525][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.600943][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.603274][ T6547] device bridge_slave_0 entered promiscuous mode [ 208.722885][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.724582][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.726931][ T6547] device bridge_slave_1 entered promiscuous mode [ 208.735383][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.737547][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.743429][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.747106][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.749167][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.754538][ T6540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.786951][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.788552][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.793989][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.828691][ T4306] Bluetooth: hci6: command tx timeout [ 208.853229][ T6540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.854775][ T6540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.864888][ T6540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.875645][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.886005][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.058653][ T4310] Bluetooth: hci8: command tx timeout [ 209.157111][ T6547] team0: Port device team_slave_0 added [ 209.200376][ T6540] device hsr_slave_0 entered promiscuous mode [ 209.238925][ T6540] device hsr_slave_1 entered promiscuous mode [ 209.278498][ T6540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.280914][ T6540] Cannot create hsr debugfs directory [ 209.340660][ T6558] device hsr_slave_0 entered promiscuous mode [ 209.378832][ T6558] device hsr_slave_1 entered promiscuous mode [ 209.418523][ T6558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.420531][ T6558] Cannot create hsr debugfs directory [ 209.424970][ T6547] team0: Port device team_slave_1 added [ 209.582226][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.583818][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.590432][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.627572][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.633519][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.639468][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.832083][ T6547] device hsr_slave_0 entered promiscuous mode [ 209.868854][ T6547] device hsr_slave_1 entered promiscuous mode [ 209.948788][ T6547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.950498][ T6547] Cannot create hsr debugfs directory [ 209.973434][ T6647] fuse: Bad value for 'rootmode' [ 209.983574][ T6647] loop1: detected capacity change from 0 to 512 [ 209.985385][ T6647] ======================================================= [ 209.985385][ T6647] WARNING: The mand mount option has been deprecated and [ 209.985385][ T6647] and is ignored by this kernel. Remove the mand [ 209.985385][ T6647] option from the mount to silence this warning. [ 209.985385][ T6647] ======================================================= [ 209.999233][ T6647] ext4: Bad value for 'stripe' [ 210.098644][ T4310] Bluetooth: hci7: command tx timeout [ 210.212766][ T6540] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.436684][ T6652] loop2: detected capacity change from 0 to 32768 [ 210.477546][ T6652] JBD2: Ignoring recovery information on journal [ 210.519505][ T6652] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.588857][ T6540] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.658587][ T6540] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.701094][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.2.664'. [ 210.710419][ T6540] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.743703][ T4300] ocfs2: Unmounting device (7,2) on (node local) [ 211.138788][ T4306] Bluetooth: hci8: command tx timeout [ 211.433940][ T6558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 211.542222][ T4345] device hsr_slave_0 left promiscuous mode [ 211.588634][ T4345] device hsr_slave_1 left promiscuous mode [ 211.678719][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.680838][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.683861][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.685582][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.688010][ T4345] device bridge_slave_1 left promiscuous mode [ 211.691173][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.729749][ T4345] device bridge_slave_0 left promiscuous mode [ 211.731235][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.909290][ T4345] device veth1_macvtap left promiscuous mode [ 211.910967][ T4345] device veth0_macvtap left promiscuous mode [ 211.913106][ T4345] device veth1_vlan left promiscuous mode [ 211.914512][ T4345] device veth0_vlan left promiscuous mode [ 213.218653][ T4310] Bluetooth: hci8: command tx timeout [ 214.683334][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 214.910981][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 215.589964][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.074679][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.614237][ T4345] bond0 (unregistering): Released all slaves [ 218.831950][ T6558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 218.909224][ T6558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 218.947338][ T6558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 219.107116][ T6540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.147018][ T6540] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.161038][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.162983][ T790] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.170987][ T6547] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 219.859537][ T6547] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.957191][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.960292][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.962244][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.963797][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.966823][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.981387][ T6547] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.991922][ T6724] loop1: detected capacity change from 0 to 32768 [ 220.021310][ T6724] JBD2: Ignoring recovery information on journal [ 220.048026][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.051394][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.053535][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.054923][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.074641][ T6547] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 220.159517][ T6724] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 220.162374][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.222315][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.224809][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.231712][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.257328][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.259585][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.264597][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.267072][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.269894][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.272169][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.274239][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.292286][ T6540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.451243][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.476384][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.498497][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.500524][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.514259][ T6748] netlink: 40 bytes leftover after parsing attributes in process `syz.1.673'. [ 220.520983][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.523248][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.532811][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.567542][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.581295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.583490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.585570][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.586976][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.606482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.622385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.628682][ T4294] ocfs2: Unmounting device (7,1) on (node local) [ 220.638964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.642621][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.644145][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.658230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.662042][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.664258][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.665814][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.704238][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.708948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.719606][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.721044][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.743135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.749394][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.751888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.764673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.867480][ T6731] loop2: detected capacity change from 0 to 32768 [ 221.142094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.144653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.148348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.151658][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.154074][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.159540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.161942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.416525][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.421290][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.425669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.428284][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.432399][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.436061][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.461868][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.464209][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.554663][ T4345] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.569431][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.571701][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.574336][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.582730][ T4758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.588790][ T6540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.595921][ T6547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.602352][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.609584][ T6558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.622729][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.624995][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.681557][ T4345] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.853176][ T4345] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.875324][ T6786] loop1: detected capacity change from 0 to 16 [ 221.894068][ T6786] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 221.982745][ T4345] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.076567][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.080497][ T6329] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.100815][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.276425][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.281096][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.282886][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.310066][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.312229][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.574146][ T4345] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.201062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.211525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.289568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.294871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.305210][ T6540] device veth0_vlan entered promiscuous mode [ 223.319713][ T6540] device veth1_vlan entered promiscuous mode [ 223.385050][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.387202][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.511186][ T4345] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.540464][ T6540] device veth0_macvtap entered promiscuous mode [ 223.544210][ T6540] device veth1_macvtap entered promiscuous mode [ 223.740640][ T4345] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.579816][ T4345] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.636235][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.638256][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.644103][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.646103][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.648001][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.658655][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.660930][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.663266][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.665235][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.667476][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.673197][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.676269][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.692041][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.716239][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.725162][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.727524][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.739210][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.757790][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.761571][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.763650][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.765634][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.767612][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.773918][ T6835] loop2: detected capacity change from 0 to 2048 [ 224.792121][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.794336][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.796523][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.816930][ T6540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.826717][ T6540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.836441][ T6540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.850330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.852731][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.855143][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.857849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.859105][ T6835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 224.864751][ T6540] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.866721][ T6540] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.869558][ T6540] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.871369][ T6540] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.919118][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.922090][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.952610][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.969054][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.978097][ T6547] device veth0_vlan entered promiscuous mode [ 225.087540][ T6547] device veth1_vlan entered promiscuous mode [ 225.097869][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.101131][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.108635][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.114470][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.123289][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.133929][ T6558] device veth0_vlan entered promiscuous mode [ 225.141533][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.151395][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.183827][ T6558] device veth1_vlan entered promiscuous mode [ 225.188053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.193680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.198191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.283521][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.285664][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.288167][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.290772][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.293315][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.297217][ T6547] device veth0_macvtap entered promiscuous mode [ 225.311570][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.313690][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.573125][ T6558] device veth0_macvtap entered promiscuous mode [ 225.576796][ T6558] device veth1_macvtap entered promiscuous mode [ 225.671129][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.673266][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.675456][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.682268][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.695668][ T4300] EXT4-fs (loop2): unmounting filesystem. [ 225.785178][ T6862] loop2: detected capacity change from 0 to 16 [ 225.797114][ T6862] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 225.875646][ T6547] device veth1_macvtap entered promiscuous mode [ 226.184842][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.191515][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.195742][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.208483][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.250559][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.259112][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.261699][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.414071][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.695250][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.786598][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.908489][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.910630][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.930006][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.946485][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.949260][ T5712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.959056][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.961054][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.963090][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.078691][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.081140][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.098722][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.100949][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.103217][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.105268][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.107434][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.133739][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.253952][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.257363][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.263212][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.274749][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.980328][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.982484][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.984292][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.986356][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.988241][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.134345][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.136461][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.138701][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.140685][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.142654][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.144588][ T6558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.146606][ T6558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.150049][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.293636][ T6902] loop6: detected capacity change from 0 to 16 [ 228.300185][ T6902] erofs: (device loop6): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 228.300504][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 228.304578][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 228.307193][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 228.324386][ T4741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 228.329116][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.331386][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.428555][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.430622][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.432607][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.434716][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.450700][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.452751][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.465076][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.472159][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.476499][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.479081][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.481028][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.483109][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.487380][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.494265][ T6547] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.496098][ T6547] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.498045][ T6547] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.499933][ T6547] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.511046][ T6608] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 229.423522][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 229.425937][ T6893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 229.440291][ T6558] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.442113][ T6558] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.443901][ T6558] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.445727][ T6558] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.929594][ T6919] netlink: 'syz.2.699': attribute type 29 has an invalid length. [ 230.761177][ T6922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.768762][ T6922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.827455][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.829630][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.960467][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 230.962567][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.030823][ T5709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.032815][ T5709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.128703][ T5709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.130502][ T5709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.188967][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 232.191257][ T6922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 232.545247][ T6950] netlink: 'syz.6.705': attribute type 29 has an invalid length. [ 233.560323][ T6963] fuse: Bad value for 'rootmode' [ 233.566015][ T6963] loop7: detected capacity change from 0 to 512 [ 233.593627][ T6963] ext4: Bad value for 'stripe' [ 234.217485][ T6957] loop8: detected capacity change from 0 to 40427 [ 234.232599][ T6957] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x3ffff [ 234.244468][ T6957] F2FS-fs (loop8): invalid crc value [ 234.257290][ T6957] F2FS-fs (loop8): Found nat_bits in checkpoint [ 234.307050][ T6957] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 235.524905][ T6957] F2FS-fs (loop8) : inject dquot initialize in f2fs_dquot_initialize of f2fs_rename2+0x864/0x1fd8 [ 236.110084][ T6558] syz-executor: attempt to access beyond end of device [ 236.110084][ T6558] loop8: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 239.283960][ T7012] loop1: detected capacity change from 0 to 40427 [ 239.319876][ T7012] F2FS-fs (loop1): Found nat_bits in checkpoint [ 239.379525][ T7012] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 240.824270][ T7036] netlink: 'syz.8.715': attribute type 29 has an invalid length. [ 241.534762][ T7037] fuse: Bad value for 'rootmode' [ 241.556603][ T7037] loop2: detected capacity change from 0 to 512 [ 241.598167][ T7037] ext4: Bad value for 'stripe' [ 242.449515][ T4294] syz-executor: attempt to access beyond end of device [ 242.449515][ T4294] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.351066][ T7073] netlink: 'syz.1.726': attribute type 29 has an invalid length. [ 248.141154][ T7101] fuse: Bad value for 'rootmode' [ 248.147987][ T7101] loop6: detected capacity change from 0 to 512 [ 248.150260][ T7101] ext4: Bad value for 'stripe' [ 248.527963][ T7106] netlink: 'syz.1.738': attribute type 29 has an invalid length. [ 248.909514][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.912232][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.788769][ T4345] device hsr_slave_0 left promiscuous mode [ 251.250345][ T4345] device hsr_slave_1 left promiscuous mode [ 251.549143][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.550901][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.707433][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.709253][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.756257][ T4345] device bridge_slave_1 left promiscuous mode [ 251.758102][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.870143][ T4345] device bridge_slave_0 left promiscuous mode [ 251.873710][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.957323][ T4345] device hsr_slave_0 left promiscuous mode [ 253.839308][ T4345] device hsr_slave_1 left promiscuous mode [ 254.096164][ T7165] fuse: Bad value for 'rootmode' [ 254.194436][ T7167] netlink: 'syz.1.752': attribute type 29 has an invalid length. [ 254.832377][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.108447][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.375861][ T7165] loop8: detected capacity change from 0 to 512 [ 255.377631][ T7165] ext4: Bad value for 'stripe' [ 255.412518][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.414217][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.445107][ T4345] device bridge_slave_1 left promiscuous mode [ 255.446538][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.526487][ T4345] device bridge_slave_0 left promiscuous mode [ 255.528021][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.098496][ T7186] netlink: 'syz.7.755': attribute type 29 has an invalid length. [ 257.086543][ T4345] device veth1_macvtap left promiscuous mode [ 257.087993][ T4345] device veth0_macvtap left promiscuous mode [ 257.090364][ T4345] device veth1_vlan left promiscuous mode [ 257.091859][ T4345] device veth0_vlan left promiscuous mode [ 257.168680][ T4345] device veth1_macvtap left promiscuous mode [ 257.170189][ T4345] device veth0_macvtap left promiscuous mode [ 257.171494][ T4345] device veth1_vlan left promiscuous mode [ 257.172767][ T4345] device veth0_vlan left promiscuous mode [ 260.338966][ T28] INFO: task syz.0.328:5445 blocked for more than 144 seconds. [ 260.340719][ T28] Not tainted 6.1.115-syzkaller #0 [ 260.341904][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.343545][ T28] task:syz.0.328 state:D stack:0 pid:5445 ppid:4304 flags:0x00000001 [ 260.345295][ T28] Call trace: [ 260.345917][ T28] __switch_to+0x320/0x754 [ 260.346780][ T28] __schedule+0xef4/0x1d44 [ 260.347638][ T28] schedule+0xc4/0x170 [ 260.349410][ T28] schedule_preempt_disabled+0x18/0x2c [ 260.350713][ T28] __mutex_lock_common+0xbd8/0x21a0 [ 260.351787][ T28] mutex_lock_nested+0x38/0x44 [ 260.352706][ T28] usbdev_release+0x80/0x6fc [ 260.353624][ T28] __fput+0x1c8/0x7c8 [ 260.354399][ T28] ____fput+0x20/0x30 [ 260.355178][ T28] task_work_run+0x240/0x2f0 [ 260.356075][ T28] do_notify_resume+0x2148/0x3474 [ 260.357021][ T28] el0_svc+0x9c/0x168 [ 260.357748][ T28] el0t_64_sync_handler+0x84/0xf0 [ 260.358943][ T28] el0t_64_sync+0x18c/0x190 [ 260.359946][ T28] [ 260.359946][ T28] Showing all locks held in the system: [ 260.361584][ T28] 1 lock held by rcu_tasks_kthre/12: [ 260.362572][ T28] #0: ffff800015ba5bf0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 260.364594][ T28] 1 lock held by rcu_tasks_trace/13: [ 260.365589][ T28] #0: ffff800015ba63f0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 260.367718][ T28] 1 lock held by khungtaskd/28: [ 260.368821][ T28] #0: ffff800015ba5a20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 260.370851][ T28] 1 lock held by dhcpcd/3965: [ 260.371751][ T28] #0: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x104/0x680 [ 260.373703][ T28] 2 locks held by getty/4066: [ 260.374603][ T28] #0: ffff0000d610c098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 260.376425][ T28] #1: ffff80001efd02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 260.378601][ T28] 3 locks held by kworker/1:4/4285: [ 260.379707][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 260.381831][ T28] #1: ffff800021397c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 260.383875][ T28] #2: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 260.385687][ T28] 5 locks held by kworker/0:3/4342: [ 260.386759][ T28] #0: ffff0000c46b0d38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 260.389108][ T28] #1: ffff800021637c20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 260.391416][ T28] #2: ffff0000d1ad1190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1b0/0x42e4 [ 260.393183][ T28] #3: ffff0000d1ad5510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x1bdc/0x42e4 [ 260.395110][ T28] #4: ffff0000d13cc268 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x1c04/0x42e4 [ 260.397202][ T28] 4 locks held by kworker/u4:6/4345: [ 260.398213][ T28] #0: ffff0000c03dd138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 260.400457][ T28] #1: ffff800021657c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 260.402435][ T28] #2: ffff800017fe8850 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 260.404256][ T28] #3: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 260.405991][ T28] 3 locks held by kworker/u4:11/4434: [ 260.407030][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 260.409522][ T28] #1: ffff8000216c7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 260.411518][ T28] #2: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 260.413187][ T28] 1 lock held by syz.0.328/5445: [ 260.414185][ T28] #0: ffff0000d1ad1190 (&dev->mutex){....}-{3:3}, at: usbdev_release+0x80/0x6fc [ 260.416371][ T28] 3 locks held by kworker/u4:22/5849: [ 260.417370][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 260.420527][ T28] #1: ffff800021427c20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 260.423718][ T28] #2: ffff800015bcd3c8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_storage_map_free+0x44/0x1d0 [ 260.425825][ T28] 4 locks held by syz.6.750/7154: [ 260.426987][ T28] #0: ffff0000d9362460 (sb_writers#9){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 260.429058][ T28] #1: ffff0000f2398b70 (&type->i_mutex_dir_key#7/1){+.+.}-{3:3}, at: filename_create+0x204/0x468 [ 260.431140][ T28] #2: ffff800015bcd3c8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xf8/0x258 [ 260.433139][ T28] #3: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 260.435000][ T28] 1 lock held by syz.6.750/7155: [ 260.436097][ T28] #0: ffff0000f2398b70 (&type->i_mutex_dir_key#7){++++}-{3:3}, at: lookup_slow+0x50/0x84 [ 260.438247][ T28] 3 locks held by syz.1.752/7167: [ 260.439623][ T28] #0: ffff80001804f4f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 260.441378][ T28] #1: ffff80001804f3a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 260.443288][ T28] #2: ffff800017ff4688 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 260.445176][ T28] 2 locks held by syz.8.753/7165: [ 260.446260][ T28] #0: ffff80001804f4f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 260.448033][ T28] #1: ffff80001804f3a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x114/0xc2c [ 260.450089][ T28] 3 locks held by syz.2.757/7190: [ 260.451215][ T28] #0: ffff0000d0909470 (&fc->uapi_mutex){+.+.}-{3:3}, at: __arm64_sys_fsconfig+0x720/0xd18 [ 260.453619][ T28] #1: ffff0000d904e0e0 (&type->s_umount_key#53){+.+.}-{3:3}, at: grab_super+0x6c/0x1bc [ 260.455696][ T28] #2: ffff800015bcd3c8 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_do_get_tree+0x18c/0x558 [ 260.457912][ T28] [ 260.458585][ T28] ============================================= [ 260.458585][ T28] [ 260.460313][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 260.461759][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.115-syzkaller #0 [ 260.463489][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.465527][ T28] Call trace: [ 260.466290][ T28] dump_backtrace+0x1c8/0x1f4 [ 260.467288][ T28] show_stack+0x2c/0x3c [ 260.468051][ T28] dump_stack_lvl+0x108/0x170 [ 260.469064][ T28] dump_stack+0x1c/0x58 [ 260.469917][ T28] panic+0x300/0x804 [ 260.470704][ T28] hung_task_panic+0x0/0x2c [ 260.471680][ T28] kthread+0x250/0x2d8 [ 260.472651][ T28] ret_from_fork+0x10/0x20 [ 260.473573][ T28] SMP: stopping secondary CPUs [ 260.474705][ T28] Kernel Offset: disabled [ 260.475682][ T28] CPU features: 0x080000,02070084,26017203 [ 260.477105][ T28] Memory Limit: none [ 261.227546][ T28] Rebooting in 86400 seconds..