last executing test programs: 15.149406543s ago: executing program 4 (id=48): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 14.957037839s ago: executing program 3 (id=51): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 14.673987202s ago: executing program 4 (id=53): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r2, r2, 0x0, 0x4) shmctl$IPC_INFO(0x0, 0x3, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000140)) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x8000, 0x0, 0xff, 0x5, 0x0, 0x6, 0x67f}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r4, 0xc06c4124, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) socket$tipc(0x1e, 0x7, 0x0) 12.546645546s ago: executing program 4 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f00000001c0)) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000300)=0x0) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb48, 0x9, 0x8, 0xfffffffa, 0x4003}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x601, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000580)}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x364, 0xa4, 0x27c, 0xfeffffff, 0x138, 0x0, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0xffffffff, 'geneve1\x00', 'geneve0\x00', {0xff}}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x7ffffffe, {0x12, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback, @port=0x4e24, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xa4}}, {{@uncond, 0x0, 0xc0, 0xf4, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0xd00, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {0xff}, 0x84, 0x2}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @loopback, @icmp_id=0x67, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3c0) r6 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r6) ppoll(&(0x7f0000000380)=[{r7, 0x120}], 0x1, 0x0, 0x0, 0x0) 12.545281386s ago: executing program 3 (id=56): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 11.282938839s ago: executing program 0 (id=59): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) 9.056234191s ago: executing program 0 (id=60): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0xa46}], 0x1, 0x2102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.971549918s ago: executing program 3 (id=61): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$eJzs3Mtv3MQfAPCvvXn0nfz6K48+oIGCiCgkTVqgByQEAqkXJCQ4wDGkoSpNW9QEiVYVbREqR8RfAByR+As4wQUBJxBXuCOkCvXSwgEtstdOnGwatptuNnQ/H8mbGXtsz3g88diz3gB61kj2kURsi4hfImKoEa0kGMwTZeluXr84/ef1i9NJ1Ouv/jGYp7tx/eJ0mbRcb2sRGU0j0g+T2LvCfufOXzg1NTs7c66Ij8+ffmd87vyFJ0+enjoxc2LmzOTRo0cOTzzz9ORTd6ScWblu7Hn/7L7dx9745OXperz5/ZdZfrcVy6vlaBhe8z5HYiTq9Xo9XTJ3IP98dM1b31i2R8SVIpz0dTkztKwWEVl19eftfyhqsVh5Q/HSB13NHNBR2fVpsGlurfFnIJJs+aZKWuBukmjX0KPKK352/1tO69b52ACuPZ99zuTlv1lMjSV9kd23J8ONO/Zah/a/LSJev/zXp9kUKz6HAAC4s77O+j9PrNT/S+PeSrodxRjKcEQcjIidEfH/iNgVEfdE5Gnvi4j7b3P/+fjTlcV4c//np81tF64FWf/v2WJsa2n/b2HUZrhWxLbn5e9P3jo5O3OoOCaj0T+YxSdW2cc3L/788a2WjVT6f9mU7b/sCxb5+L1v2QO641PzU2spc9W1KxF7+lYqf7IwEpBExO6I2NPG9rNjdvLxL/Zl4R1bm5f/e/lXc7mNHC1V/zzisUb9X45l5S8ljSGSW41Pjm+K2ZlD4+VZ0eyHH6++Uo33V8JrK//aZfW/ZcXzvyh/2QzK8dq5Fjc8sBi8+utHxTabm3K75/9A8tqS3bw3NT9/biJiYCia508urlvGy/RZ+UcPRFwtBoKr7X9nxN+fFevtjYjsJH4gIh6MiP1F3h+KiIcj4sAqh+K7Fx55e/WD1d36P75a/UcMJ9Xx+jYCtVPfflVubKEqi38urdX/kTw0Wsxp5f9fqxm8E8cQAAAANro0H4NO0rGFcJqOjTW+w78rtqSzZ+fmD47Eu2eON8aqh6M/LZ90DVWeh04Uz4bL+OSy+OGI+F/+TaPNeXxs+uzs9m4XHnrc1lu0/80R8VunvvQCbBy39b5W0rl8AOsqf7fH+5rQu1pu//2dzQew/lz/oXdp/9C7Vmr/lyJudiErwDq7rev/c53LB7D+Vmv/HvnB3c39P/Qu7R96UvMr8eVvNLTzpv9iYOexNa3eQ4Fah7Yc1R/t6EAg0q4fuvYD6UbIxv4iMBgRra51qaN1uvz8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+O/7JwAA///M09j9") syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x108, 0x0, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x40000, 0x0, 'queue1\x00', 0x8000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') unshare(0x64000600) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd700000000000010100"], 0x114}], 0x1}, 0x0) 8.864445046s ago: executing program 2 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() socket$can_j1939(0x1d, 0x2, 0x7) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x1210080, &(0x7f00000002c0)={[{}, {@umask}, {@part={'part', 0x3d, 0x40007}}, {@creator={'creator', 0x3d, "e5cb853d"}}, {}, {@dir_umask={'dir_umask', 0x3d, 0x3}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r3, 0x2, 0x1) getdents64(r3, 0x0, 0x22) 7.528942395s ago: executing program 2 (id=63): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00') 7.526880995s ago: executing program 0 (id=64): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 7.22513604s ago: executing program 2 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x1, 0x1, "bc"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 6.750370879s ago: executing program 4 (id=67): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) gettid() r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x6, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x0) sendmsg$FOU_CMD_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x1, 0x0, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0bfe6ecd77084f21c01e020000000900010073797a30000000000900020073797a320000000018000480140001800b0001006c6f6f6b75700000040002800700"], 0x74}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x8001) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000154001030094958b3c982b00000000007227bac567d5c417fcdbab58ac51d5fd1f9e067cf0"], 0x14}}, 0x0) io_setup(0x222, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000500)={{0xf}, 0x1, 0x0, 0xcf, {0x8, 0x80}, 0x1e, 0x6}) 6.657812756s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES16], 0x1, 0xa23, &(0x7f0000001b00)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWbbVOLZk5/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAeJBeGvvG0GHv/wDwkXLO538AAAAAAAAAAAAAANjpUhTxZ5Hi1Z+004Xqekf9TGv2ytXxkdHNd9uTIkUtiqq+/Fs/eOjwkaPHjg938877f9iejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nX/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/8KPf4nZneOyKIn4WKerfezc1I6IW9z4Wd3nu3G97qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0YPYC7uSSPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+O7tqd2HPm5BX9m3IuJmPARztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFz6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVh/794UHa4a9N9ShionrFb6cPfrADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MXe6nrH0uIm7E1s7J7c+nDqda+efD7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/elM3e15z63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDI2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfR3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234/1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNuwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnN/58oc1/wM9267lef1xnv+Dd5n/v48Uf/LTp3JdZ+wP5dsfr/5dm//fiRT/9avra4/l2n1rtQe32q3tVs7/lyLFiR/9aLXPef7zyK7NUO/8f7Zvfa4+S7Zp/h/v2TaQ23X4lxyLj6LF17/9WnN6emrBBRce2IXyKGIHNMOFO1zY7lcmHoTy/f+fI8ULZ2qpexyT3/8/1rm2dvz3/nfW3v9f2JCrtun9f1/PthfyUUt/X0R9aWa+f39EffH1b3+5NdO8PHV5anb42NEjzw8fO/Z8/67usd3apS0P3SOhnP8zkeKVn/7L6ueY9cd/mx//792Qq7Zp/j/Z26d1xzVbHoqPpHL+r0eK77797urnzTsd/3c//x/4wvpc/f+3TfP/qZ5t1W/8Px7xfM+2A5+OOLXVxwIAAIBHzN68Tv6nv/4Pq+e8r//8H1/s1vZ+/3M7O+H8fwAAAAAA+Kjbm4r4q0jxP0NfSt1zyLby+8/JDblqm37/t79n2+QDOq9ly4MMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALADpSji6Ujx6k/aabkor3fUz7Rmr1wdHxndfLc9KVLUoqjqy7/1g4cOHzl67PhwN++8/4ftyXh57Nypxum5mfmFqcXFqcnG+Gzr4tzk1Jbv4V7332iwGoDGzGtXJi9dWmwceu7wupuvDryz+7H9AyeOv3h+X7d2fGR0dKynpq//Az/6LdJttu+KIi5Fivr33k3/UUTU4t7H4i7PnfttT9WJwaoT4yOjVUemW83ZpfLGVMtVtYiBnp1OdsfoAczFPWlEXCubXzZ4sOze2HxzoTkxPdU421xYai215mZTrdPasj8DUYvhFDEfEe3i1rvrjyImIsX332+nt4uIojsOz7409o2hw3dvT+0+9LHXync33dxX9q2IuBkPwZztYLujiI9Fih+cH4qfFZ1xrYbtmYivl/l0xDfLXI64nq+n8gnyVMR7mzyfeLj0RRFnI8Vcaqf/LPLcV68rZ15pfG320lxPbfd15aF/f3iQdvhrUz2K+Hn1it9OP/f/GQAAAADgEVLEb0aKGzMHUrU+uLqm2Jq93DjXnJjufK3f/e6/kfdaWVlZGUidbOQcynky59mcF3LO57yW83rON3PeyPlWzps5l3O2c0YtP37ORs6hnCdzns15Ied8zms5r+d8M+eNnG/lvJlzOWc7Z/ieHAAAAAAAANiBalHEE5Hih2+000rRWeC9EJ1cts75yPv/AAAA////DD1f") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f002) 5.431560996s ago: executing program 3 (id=69): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) r2 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 5.374407661s ago: executing program 1 (id=70): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 5.090338234s ago: executing program 2 (id=71): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5.02030925s ago: executing program 3 (id=72): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) 4.967030024s ago: executing program 4 (id=73): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 3.046050302s ago: executing program 2 (id=74): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2.469272328s ago: executing program 1 (id=75): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3deff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0xffffffffffffffd3) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') process_vm_writev(r4, &(0x7f0000001ac0)=[{&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000580)}, {0x0}, {&(0x7f00000005c0)=""/152, 0x98}, {&(0x7f0000000680)=""/197, 0xc5}, {&(0x7f0000000780)=""/220, 0xdc}, {0x0}, {&(0x7f0000001a00)=""/131, 0x83}, {&(0x7f0000000940)=""/59, 0x3b}], 0xa, &(0x7f0000001e40)=[{&(0x7f0000000980)=""/22, 0x16}, {&(0x7f0000001b80)=""/147, 0x93}, {&(0x7f0000001c40)=""/198, 0xc6}], 0x3, 0x0) 1.158798355s ago: executing program 1 (id=76): r0 = socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x48942122, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.157949615s ago: executing program 0 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 700.395183ms ago: executing program 2 (id=77): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 699.402423ms ago: executing program 3 (id=88): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 686.194964ms ago: executing program 1 (id=78): r0 = socket$netlink(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x48942122, 0xb2, 0xe9, 0x8, 0x7f}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close_range(r0, 0xffffffffffffffff, 0x0) 504.738679ms ago: executing program 0 (id=79): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x100, {}, {}, @quote={{0xfb, 0x1}}}, {0x0, 0xfe, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) 434.934445ms ago: executing program 4 (id=80): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001880)={0x53, 0xffffffffffffffff, 0x6, 0xf7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000300)="b945c52f244e", 0x0, 0xff, 0x10016, 0x3, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x11, 0xa, 0x80000000) bind$packet(r2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r4, 0x0, 0xffffffdb) syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f000010b940)={0x4, [], 0x5, "1cd06e77880b14"}) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 833.37µs ago: executing program 1 (id=81): r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r2, 0x0, 0xffffffdb) 0s ago: executing program 0 (id=93): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 72.180185][ T4253] cgroup: Unknown subsys name 'net' [ 72.317859][ T4253] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.868788][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.447266][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.474249][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.475135][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.482190][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.489919][ T4272] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.496850][ T4279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.505867][ T4272] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.512362][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.519557][ T4272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.525928][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.532849][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.542150][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.547339][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.553988][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.567490][ T4272] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.569140][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.576984][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.582629][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.590952][ T4272] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.597847][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.603821][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.611586][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 75.617656][ T4272] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.624201][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.631999][ T4272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.638889][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.652916][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.653331][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.660926][ T4272] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.730024][ T4272] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.185121][ T4275] chnl_net:caif_netlink_parms(): no params data found [ 76.306279][ T4267] chnl_net:caif_netlink_parms(): no params data found [ 76.324808][ T4266] chnl_net:caif_netlink_parms(): no params data found [ 76.337699][ T4265] chnl_net:caif_netlink_parms(): no params data found [ 76.381855][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 76.455384][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.463175][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.471481][ T4275] device bridge_slave_0 entered promiscuous mode [ 76.485502][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.492911][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.501183][ T4275] device bridge_slave_1 entered promiscuous mode [ 76.594719][ T4275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.641140][ T4275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.653959][ T4266] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.661235][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.669439][ T4266] device bridge_slave_0 entered promiscuous mode [ 76.678523][ T4266] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.686422][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.694761][ T4266] device bridge_slave_1 entered promiscuous mode [ 76.702695][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.710061][ T4265] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.718187][ T4265] device bridge_slave_0 entered promiscuous mode [ 76.726273][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.733564][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.742059][ T4267] device bridge_slave_0 entered promiscuous mode [ 76.773996][ T4265] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.781362][ T4265] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.789571][ T4265] device bridge_slave_1 entered promiscuous mode [ 76.797531][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.805029][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.813229][ T4267] device bridge_slave_1 entered promiscuous mode [ 76.828574][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.835908][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.844798][ T4264] device bridge_slave_0 entered promiscuous mode [ 76.887078][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.894618][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.903331][ T4264] device bridge_slave_1 entered promiscuous mode [ 76.912562][ T4275] team0: Port device team_slave_0 added [ 76.921505][ T4266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.939503][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.959678][ T4275] team0: Port device team_slave_1 added [ 76.967595][ T4266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.979119][ T4265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.990171][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.028770][ T4265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.048269][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.094053][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.113059][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.120323][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.147499][ T4275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.168964][ T4266] team0: Port device team_slave_0 added [ 77.187693][ T4267] team0: Port device team_slave_0 added [ 77.205168][ T4275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.212576][ T4275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.239801][ T4275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.252959][ T4266] team0: Port device team_slave_1 added [ 77.265418][ T4265] team0: Port device team_slave_0 added [ 77.274120][ T4265] team0: Port device team_slave_1 added [ 77.282152][ T4267] team0: Port device team_slave_1 added [ 77.290679][ T4264] team0: Port device team_slave_0 added [ 77.336877][ T4264] team0: Port device team_slave_1 added [ 77.353102][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.360197][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.386370][ T4266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.431155][ T4266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.438274][ T4266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.464729][ T4266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.476673][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.483831][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.510283][ T4265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.522327][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.529325][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.557115][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.580963][ T4275] device hsr_slave_0 entered promiscuous mode [ 77.587763][ T4275] device hsr_slave_1 entered promiscuous mode [ 77.600103][ T4265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.607377][ T4265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.633709][ T4265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.645731][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.653224][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.680056][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.692344][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.699331][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.726329][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.738821][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.746060][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.772431][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.791935][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 77.791950][ T4277] Bluetooth: hci3: command 0x0409 tx timeout [ 77.792184][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 77.798254][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 77.815180][ T4272] Bluetooth: hci1: command 0x0409 tx timeout [ 77.871721][ T4267] device hsr_slave_0 entered promiscuous mode [ 77.879328][ T4267] device hsr_slave_1 entered promiscuous mode [ 77.886384][ T4267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.894613][ T4267] Cannot create hsr debugfs directory [ 77.913538][ T4266] device hsr_slave_0 entered promiscuous mode [ 77.921421][ T4266] device hsr_slave_1 entered promiscuous mode [ 77.928063][ T4266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.935868][ T4266] Cannot create hsr debugfs directory [ 77.994859][ T4264] device hsr_slave_0 entered promiscuous mode [ 78.003262][ T4264] device hsr_slave_1 entered promiscuous mode [ 78.009922][ T4264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.017589][ T4264] Cannot create hsr debugfs directory [ 78.049096][ T4265] device hsr_slave_0 entered promiscuous mode [ 78.056444][ T4265] device hsr_slave_1 entered promiscuous mode [ 78.063388][ T4265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.071084][ T4265] Cannot create hsr debugfs directory [ 78.434174][ T4266] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.453769][ T4266] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.463894][ T4266] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.474320][ T4266] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.525450][ T4275] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.535674][ T4275] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.546212][ T4275] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.564367][ T4275] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.654527][ T4267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.664870][ T4267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.674978][ T4267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.711158][ T4267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.790216][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.836395][ T4266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.846925][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.859002][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.870940][ T4264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.894343][ T4264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.907555][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.917505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.934295][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.942854][ T4264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.956334][ T4266] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.969421][ T4264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.992533][ T4265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.006708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.016594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.026829][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.034289][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.043050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.053268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.062161][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.069265][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.077680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.086062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.115217][ T4265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.124985][ T4265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.146755][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.155935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.166137][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.173544][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.181771][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.191802][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.217103][ T4265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.237572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.248606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.257486][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.264712][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.273523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.282991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.295035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.305510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.333888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.342608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.353449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.363151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.372046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.381188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.389612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.405082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.451717][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.461423][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.470026][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.479922][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.489378][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.498244][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.507038][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.516877][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.527722][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.572290][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 79.616301][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.634070][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.656966][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.687207][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.719823][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.743333][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.759340][ T4267] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.777169][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.803130][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.818052][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.835073][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.842297][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.857142][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.870716][ T4272] Bluetooth: hci1: command 0x041b tx timeout [ 79.876923][ T4272] Bluetooth: hci0: command 0x041b tx timeout [ 79.883265][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 79.883342][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 79.889288][ T4279] Bluetooth: hci3: command 0x041b tx timeout [ 79.914891][ T4265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.924255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.946856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.955808][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.963269][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.995379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.005333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.016323][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.023541][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.034238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.043529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.053549][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.060852][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.069207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.079029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.088484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.104108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.115445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.125146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.138743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.147975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.183278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.194421][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.204266][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.219726][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.229303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.243913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.259501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.268417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.285672][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.296351][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.305792][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.315116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.328097][ T4265] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.351528][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.362452][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.374069][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.383212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.393291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.426815][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.461094][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.476291][ T4266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.486232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.503322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.513326][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.520755][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.528832][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.538079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.547593][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.554793][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.563539][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.572630][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.581212][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.588799][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.597601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.654460][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.671661][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.732303][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.767251][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.788582][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.817450][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.829857][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.840037][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.849615][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.858456][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.867149][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.876758][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.886232][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.915719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.926952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.947560][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.986792][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.003600][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.016248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.026706][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.040273][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.049567][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.063830][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.075877][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.086667][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.099239][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.115137][ T4275] device veth0_vlan entered promiscuous mode [ 81.130678][ T4266] device veth0_vlan entered promiscuous mode [ 81.149533][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.167958][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.178728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.199241][ T4275] device veth1_vlan entered promiscuous mode [ 81.238763][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.253643][ T4266] device veth1_vlan entered promiscuous mode [ 81.274205][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.291897][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.313755][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.386341][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.397855][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.439522][ T4266] device veth0_macvtap entered promiscuous mode [ 81.460253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.478732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.501432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.521181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.547762][ T4275] device veth0_macvtap entered promiscuous mode [ 81.560045][ T4266] device veth1_macvtap entered promiscuous mode [ 81.580748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.595629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.608055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.617458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.626779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.637967][ T4264] device veth0_vlan entered promiscuous mode [ 81.647994][ T4275] device veth1_macvtap entered promiscuous mode [ 81.672803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.687380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.698641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.720014][ T4264] device veth1_vlan entered promiscuous mode [ 81.749421][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.764902][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.774295][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.787768][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.809063][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.820359][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.834250][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.849340][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.860092][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.869105][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.877302][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.885764][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.896917][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.907043][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.917535][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.927917][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.944472][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.951604][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 81.960725][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 81.960879][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 81.966845][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 81.973459][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 81.991327][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.003159][ T4265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.021166][ T4275] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.030322][ T4275] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.046477][ T4275] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.056199][ T4275] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.077662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.093564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.108998][ T4266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.119107][ T4266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.130903][ T4266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.140021][ T4266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.158756][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.168229][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.204111][ T4264] device veth0_macvtap entered promiscuous mode [ 82.253175][ T4264] device veth1_macvtap entered promiscuous mode [ 82.265428][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.274350][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.283610][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.293214][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.351638][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.363544][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.374924][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.384230][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.393299][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.402378][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.416520][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.433828][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.444122][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.454881][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.467585][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.479201][ T4267] device veth0_vlan entered promiscuous mode [ 82.488930][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.499190][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.536802][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.547524][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.558890][ T4264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.571810][ T4264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.583251][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.602973][ T4267] device veth1_vlan entered promiscuous mode [ 82.623166][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.632359][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.646107][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.657889][ T4264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.667191][ T4264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.677285][ T4264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.686612][ T4264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.732455][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.741252][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.749936][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.759950][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.771015][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.796707][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.812888][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.836529][ T4265] device veth0_vlan entered promiscuous mode [ 82.855322][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.875165][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.908671][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.909681][ T4265] device veth1_vlan entered promiscuous mode [ 82.924742][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.946170][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.958693][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.977857][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.989582][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.008278][ T4267] device veth0_macvtap entered promiscuous mode [ 83.039041][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.048029][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.058380][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.071939][ T4267] device veth1_macvtap entered promiscuous mode [ 83.086399][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.098094][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.107704][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.118808][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.138520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.187632][ T4265] device veth0_macvtap entered promiscuous mode [ 83.195189][ T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.207782][ T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.218168][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.230679][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.242035][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.252753][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.263082][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.273963][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.285887][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.297212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.308154][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.319637][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.329515][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.339014][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.378262][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.404773][ T4265] device veth1_macvtap entered promiscuous mode [ 83.414114][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.424814][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.447639][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.492070][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.521081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.537170][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.558431][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.570925][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.587862][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.596388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.600443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 83.659104][ T4267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.669977][ T4267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.681757][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.697176][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.859916][ T4384] loop3: detected capacity change from 0 to 1024 [ 84.030767][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 84.036918][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 84.043142][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 84.049323][ T4272] Bluetooth: hci3: command 0x0419 tx timeout [ 84.055491][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 84.210444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 84.542046][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.029804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.038272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.046911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 85.055688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.141250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 85.161110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.333304][ T4384] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.446102][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.707161][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.718383][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.729388][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.740095][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.751707][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.821279][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.828919][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.865414][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.915019][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.939721][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.978949][ T4267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.037502][ T4267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.047124][ T4267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.057148][ T4267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.073538][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.241156][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.270550][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.298174][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.144681][ T14] cfg80211: failed to load regulatory.db [ 87.192852][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.205860][ T4400] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.238680][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.264042][ T4265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.301306][ T4265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.368792][ T4265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.409149][ T4397] lo speed is unknown, defaulting to 1000 [ 87.415379][ T4397] lo speed is unknown, defaulting to 1000 [ 87.422747][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.445741][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.462152][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.491099][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.524277][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.536780][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.563380][ T4397] lo speed is unknown, defaulting to 1000 [ 87.584914][ T4397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.601526][ T4397] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.651974][ T4397] lo speed is unknown, defaulting to 1000 [ 87.674914][ T4397] lo speed is unknown, defaulting to 1000 [ 87.713782][ T4397] lo speed is unknown, defaulting to 1000 [ 87.772949][ T4397] lo speed is unknown, defaulting to 1000 [ 87.780034][ T4397] lo speed is unknown, defaulting to 1000 [ 88.896142][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.946801][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.979298][ T4414] device syzkaller0 entered promiscuous mode [ 89.002353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.064315][ T4390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.099559][ T4390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.193914][ T4421] bridge0: port 3(netdevsim0) entered blocking state [ 89.216779][ T4421] bridge0: port 3(netdevsim0) entered disabled state [ 89.240708][ T4421] device netdevsim0 entered promiscuous mode [ 89.254093][ T4421] bridge0: port 3(netdevsim0) entered blocking state [ 89.261614][ T4421] bridge0: port 3(netdevsim0) entered forwarding state [ 89.314066][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.338437][ T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.375473][ T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.423149][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.454424][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.479258][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.538947][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.030757][ T4403] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.051505][ T4316] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.240472][ T4403] usb 5-1: Using ep0 maxpacket: 16 [ 90.287704][ T4403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.309884][ T4316] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 90.366508][ T4316] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 90.430325][ T4403] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.475427][ T4316] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 90.496203][ T4403] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 90.527626][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.556842][ T4403] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.619464][ T4403] usb 5-1: config 0 descriptor?? [ 90.632222][ T4428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 91.077628][ T4403] usbhid 5-1:0.0: can't add hid device: -71 [ 91.090660][ T4403] usbhid: probe of 5-1:0.0 failed with error -71 [ 91.171487][ T4403] usb 5-1: USB disconnect, device number 2 [ 91.260853][ T4255] usb 4-1: USB disconnect, device number 2 [ 92.175784][ T4446] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 92.175784][ T4446] program syz.4.13 not setting count and/or reply_len properly [ 92.898601][ T4448] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 95.751238][ T4478] tipc: Enabling of bearer rejected, failed to enable media [ 95.826275][ T4479] device syzkaller0 entered promiscuous mode [ 96.029695][ T4481] Zero length message leads to an empty skb [ 96.413198][ T4491] loop1: detected capacity change from 0 to 512 [ 96.427495][ T4491] EXT4-fs: Ignoring removed i_version option [ 96.447841][ T4489] device syzkaller0 entered promiscuous mode [ 96.463322][ T4491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.570581][ T4491] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.737800][ T4491] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 96.778301][ T4491] EXT4-fs (loop1): 1 truncate cleaned up [ 96.797422][ T4491] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.876695][ T4497] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 97.299369][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 98.150549][ T4315] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.512110][ T4315] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 98.564822][ T4315] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 98.619983][ T4315] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 98.655935][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.963104][ T4519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 100.722091][ T4316] usb 2-1: USB disconnect, device number 2 [ 101.281853][ T4545] tipc: Enabling of bearer rejected, failed to enable media [ 101.324154][ T4545] device syzkaller0 entered promiscuous mode [ 103.327527][ T4557] loop0: detected capacity change from 0 to 512 [ 103.430770][ T4557] EXT4-fs: Ignoring removed i_version option [ 103.439786][ T4557] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.520641][ T4557] EXT4-fs (loop0): 1 truncate cleaned up [ 103.644826][ T4557] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.182634][ T4265] EXT4-fs (loop0): unmounting filesystem. [ 104.480887][ T26] audit: type=1326 audit(1753903719.098:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 104.575711][ T26] audit: type=1326 audit(1753903719.128:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 105.781546][ T26] audit: type=1326 audit(1753903719.128:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 105.807749][ T4583] device syzkaller0 entered promiscuous mode [ 105.930536][ T26] audit: type=1326 audit(1753903719.128:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.017993][ T26] audit: type=1326 audit(1753903719.148:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.076361][ T26] audit: type=1326 audit(1753903719.148:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.120517][ T26] audit: type=1326 audit(1753903719.158:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.182698][ T26] audit: type=1326 audit(1753903719.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.207094][ T26] audit: type=1326 audit(1753903719.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 106.300433][ T26] audit: type=1326 audit(1753903719.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4576 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbc78e9a9 code=0x7ffc0000 [ 108.830565][ T4622] loop1: detected capacity change from 0 to 64 [ 110.180626][ T4315] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.459744][ T4315] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.494713][ T4315] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.536659][ T4315] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.573548][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.670125][ T4624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.061718][ T4315] usb 5-1: USB disconnect, device number 3 [ 112.344820][ T4650] loop3: detected capacity change from 0 to 512 [ 112.398432][ T4650] EXT4-fs (loop3): #blocks per group too big: 466944 [ 112.668058][ T4656] loop2: detected capacity change from 0 to 64 [ 114.209584][ T4650] lo speed is unknown, defaulting to 1000 [ 114.238261][ T4663] netlink: 256 bytes leftover after parsing attributes in process `syz.3.61'. [ 114.370526][ T4255] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.570538][ T4255] usb 3-1: Using ep0 maxpacket: 16 [ 114.579720][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.619130][ T4255] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.643707][ T4255] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 114.659342][ T4255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.709911][ T4255] usb 3-1: config 0 descriptor?? [ 114.835620][ T4674] loop1: detected capacity change from 0 to 1024 [ 114.873835][ T4674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.461465][ T4255] usbhid 3-1:0.0: can't add hid device: -71 [ 115.486788][ T4255] usbhid: probe of 3-1:0.0 failed with error -71 [ 115.703660][ T4255] usb 3-1: USB disconnect, device number 2 [ 115.989255][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 115.989272][ T26] audit: type=1800 audit(1753903730.608:33): pid=4681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.69" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 118.859579][ T26] audit: type=1326 audit(1753903733.478:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 119.101473][ T26] audit: type=1326 audit(1753903733.478:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 119.319413][ T26] audit: type=1326 audit(1753903733.518:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.179658][ T4723] device syzkaller0 entered promiscuous mode [ 120.202766][ T26] audit: type=1326 audit(1753903733.518:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.240179][ T26] audit: type=1326 audit(1753903733.518:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.271353][ T4724] tipc: Enabling of bearer rejected, failed to enable media [ 120.281428][ T4724] device syzkaller0 entered promiscuous mode [ 120.297950][ T26] audit: type=1326 audit(1753903733.518:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.333950][ T26] audit: type=1326 audit(1753903733.518:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.356788][ T26] audit: type=1326 audit(1753903733.518:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.381262][ T26] audit: type=1326 audit(1753903733.518:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc61518e9a9 code=0x7ffc0000 [ 120.585877][ T4727] loop3: detected capacity change from 0 to 512 [ 120.614014][ T4727] EXT4-fs: Ignoring removed i_version option [ 120.638612][ T4727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.677831][ T4730] device syzkaller0 entered promiscuous mode [ 120.757152][ T4727] EXT4-fs (loop3): 1 truncate cleaned up [ 120.767782][ T4727] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 120.937601][ T4739] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 120.937601][ T4739] program syz.0.79 not setting count and/or reply_len properly [ 121.593027][ T4754] [ 121.595511][ T4754] ====================================================== [ 121.602558][ T4754] WARNING: possible circular locking dependency detected [ 121.609618][ T4754] 6.1.147-syzkaller #0 Not tainted [ 121.614964][ T4754] ------------------------------------------------------ [ 121.622090][ T4754] syz.3.88/4754 is trying to acquire lock: [ 121.627997][ T4754] ffff888071e80400 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}, at: ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 121.640017][ T4754] [ 121.640017][ T4754] but task is already holding lock: [ 121.647414][ T4754] ffff888071e83eb8 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 121.656791][ T4754] [ 121.656791][ T4754] which lock already depends on the new lock. [ 121.656791][ T4754] [ 121.667325][ T4754] [ 121.667325][ T4754] the existing dependency chain (in reverse order) is: [ 121.676893][ T4754] [ 121.676893][ T4754] -> #1 (&ei->i_data_sem/3){++++}-{3:3}: [ 121.684851][ T4754] down_write+0x36/0x60 [ 121.689574][ T4754] ext4_xattr_inode_lookup_create+0x15c4/0x1d10 [ 121.696377][ T4754] ext4_xattr_ibody_set+0x1fe/0x690 [ 121.702245][ T4754] ext4_xattr_set_handle+0xa7c/0x12b0 [ 121.708168][ T4754] ext4_xattr_set+0x22a/0x320 [ 121.713397][ T4754] __vfs_setxattr+0x3e0/0x420 [ 121.718744][ T4754] __vfs_setxattr_noperm+0x129/0x5e0 [ 121.724585][ T4754] vfs_setxattr+0x168/0x2f0 [ 121.729657][ T4754] setxattr+0x2b2/0x2d0 [ 121.734482][ T4754] path_setxattr+0x142/0x280 [ 121.739638][ T4754] __x64_sys_setxattr+0xb7/0xd0 [ 121.745145][ T4754] do_syscall_64+0x4c/0xa0 [ 121.750220][ T4754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.756711][ T4754] [ 121.756711][ T4754] -> #0 (&sb->s_type->i_mutex_key#8/1){+.+.}-{3:3}: [ 121.765753][ T4754] __lock_acquire+0x2cf8/0x7c50 [ 121.771180][ T4754] lock_acquire+0x1b4/0x490 [ 121.776239][ T4754] down_write+0x36/0x60 [ 121.781006][ T4754] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 121.787923][ T4754] ext4_xattr_block_set+0x23a/0x32a0 [ 121.793898][ T4754] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 121.800338][ T4754] __ext4_expand_extra_isize+0x301/0x3e0 [ 121.806639][ T4754] __ext4_mark_inode_dirty+0x47f/0x770 [ 121.812653][ T4754] ext4_setattr+0x1457/0x19f0 [ 121.818046][ T4754] notify_change+0xc74/0xf40 [ 121.823174][ T4754] do_truncate+0x197/0x220 [ 121.828133][ T4754] path_openat+0x27f2/0x2e70 [ 121.833427][ T4754] do_filp_open+0x1c1/0x3c0 [ 121.838647][ T4754] do_sys_openat2+0x142/0x490 [ 121.843903][ T4754] __x64_sys_openat+0x135/0x160 [ 121.849373][ T4754] do_syscall_64+0x4c/0xa0 [ 121.854407][ T4754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.861228][ T4754] [ 121.861228][ T4754] other info that might help us debug this: [ 121.861228][ T4754] [ 121.872003][ T4754] Possible unsafe locking scenario: [ 121.872003][ T4754] [ 121.879470][ T4754] CPU0 CPU1 [ 121.884949][ T4754] ---- ---- [ 121.890335][ T4754] lock(&ei->i_data_sem/3); [ 121.894980][ T4754] lock(&sb->s_type->i_mutex_key#8/1); [ 121.903306][ T4754] lock(&ei->i_data_sem/3); [ 121.910447][ T4754] lock(&sb->s_type->i_mutex_key#8/1); [ 121.916105][ T4754] [ 121.916105][ T4754] *** DEADLOCK *** [ 121.916105][ T4754] [ 121.925491][ T4754] 5 locks held by syz.3.88/4754: [ 121.930527][ T4754] #0: ffff8880540d4460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 121.939783][ T4754] #1: ffff888071e84030 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x183/0x220 [ 121.950335][ T4754] #2: ffff888071e841d0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xe6f/0x19f0 [ 121.960739][ T4754] #3: ffff888071e83eb8 (&ei->i_data_sem/3){++++}-{3:3}, at: ext4_setattr+0x13d4/0x19f0 [ 121.970518][ T4754] #4: ffff888071e83cf8 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x3fe/0x770 [ 121.981092][ T4754] [ 121.981092][ T4754] stack backtrace: [ 121.987094][ T4754] CPU: 0 PID: 4754 Comm: syz.3.88 Not tainted 6.1.147-syzkaller #0 [ 121.995023][ T4754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.005390][ T4754] Call Trace: [ 122.008676][ T4754] [ 122.011629][ T4754] dump_stack_lvl+0x168/0x22e [ 122.016515][ T4754] ? load_image+0x3b0/0x3b0 [ 122.021036][ T4754] ? show_regs_print_info+0x12/0x12 [ 122.026346][ T4754] ? print_circular_bug+0x12b/0x1a0 [ 122.031562][ T4754] check_noncircular+0x274/0x310 [ 122.036780][ T4754] ? add_chain_block+0x940/0x940 [ 122.041789][ T4754] ? lockdep_lock+0xdc/0x1e0 [ 122.046465][ T4754] ? verify_lock_unused+0x140/0x140 [ 122.051768][ T4754] ? _find_first_zero_bit+0xcf/0x100 [ 122.057253][ T4754] __lock_acquire+0x2cf8/0x7c50 [ 122.062118][ T4754] ? __lock_acquire+0x7c50/0x7c50 [ 122.067167][ T4754] ? verify_lock_unused+0x140/0x140 [ 122.072467][ T4754] ? mark_buffer_dirty+0x2d8/0x7a0 [ 122.077776][ T4754] lock_acquire+0x1b4/0x490 [ 122.082308][ T4754] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 122.088832][ T4754] ? __might_sleep+0xd0/0xd0 [ 122.093440][ T4754] ? read_lock_is_recursive+0x10/0x10 [ 122.099006][ T4754] ? __ext4_mark_inode_dirty+0x4eb/0x770 [ 122.104662][ T4754] down_write+0x36/0x60 [ 122.108847][ T4754] ? ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 122.115573][ T4754] ext4_xattr_inode_lookup_create+0x18b5/0x1d10 [ 122.121874][ T4754] ? ext4_xattr_ibody_set+0x690/0x690 [ 122.127461][ T4754] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 122.133478][ T4754] ? lock_chain_count+0x20/0x20 [ 122.138377][ T4754] ext4_xattr_block_set+0x23a/0x32a0 [ 122.143697][ T4754] ? __might_sleep+0xd0/0xd0 [ 122.148664][ T4754] ? __getblk_gfp+0x4f/0xb20 [ 122.153442][ T4754] ? xattr_find_entry+0x12b/0x2f0 [ 122.158576][ T4754] ? ext4_xattr_block_find+0x2b0/0x2b0 [ 122.164219][ T4754] ? ext4_xattr_block_find+0x241/0x2b0 [ 122.169781][ T4754] ext4_expand_extra_isize_ea+0x109b/0x19b0 [ 122.175876][ T4754] __ext4_expand_extra_isize+0x301/0x3e0 [ 122.181529][ T4754] __ext4_mark_inode_dirty+0x47f/0x770 [ 122.187093][ T4754] ext4_setattr+0x1457/0x19f0 [ 122.191865][ T4754] ? ext4_write_inode+0x5e0/0x5e0 [ 122.196918][ T4754] notify_change+0xc74/0xf40 [ 122.201543][ T4754] do_truncate+0x197/0x220 [ 122.205969][ T4754] ? aa_get_current_label+0x110/0x1d0 [ 122.211359][ T4754] ? put_page_bootmem+0x2c0/0x2c0 [ 122.216394][ T4754] ? ima_bprm_check+0x1f0/0x1f0 [ 122.221275][ T4754] ? bpf_lsm_path_truncate+0x5/0x10 [ 122.226485][ T4754] path_openat+0x27f2/0x2e70 [ 122.231173][ T4754] ? do_sys_openat2+0xcf/0x490 [ 122.235956][ T4754] ? __x64_sys_openat+0x135/0x160 [ 122.241041][ T4754] ? do_filp_open+0x3c0/0x3c0 [ 122.245856][ T4754] do_filp_open+0x1c1/0x3c0 [ 122.250396][ T4754] ? vfs_tmpfile+0x480/0x480 [ 122.255028][ T4754] ? _raw_spin_unlock+0x24/0x40 [ 122.259906][ T4754] ? alloc_fd+0x58f/0x630 [ 122.264358][ T4754] do_sys_openat2+0x142/0x490 [ 122.269139][ T4754] ? do_sys_open+0xe0/0xe0 [ 122.273568][ T4754] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 122.279942][ T4754] ? lock_chain_count+0x20/0x20 [ 122.284916][ T4754] __x64_sys_openat+0x135/0x160 [ 122.289895][ T4754] do_syscall_64+0x4c/0xa0 [ 122.294355][ T4754] ? clear_bhb_loop+0x60/0xb0 [ 122.299228][ T4754] ? clear_bhb_loop+0x60/0xb0 [ 122.303924][ T4754] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.309958][ T4754] RIP: 0033:0x7fa048d8e9a9 [ 122.314471][ T4754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.334536][ T4754] RSP: 002b:00007fa049c23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 122.343059][ T4754] RAX: ffffffffffffffda RBX: 00007fa048fb6160 RCX: 00007fa048d8e9a9 [ 122.351165][ T4754] RDX: 0000000000000242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 122.359166][ T4754] RBP: 00007fa048e10d69 R08: 0000000000000000 R09: 0000000000000000 [ 122.367334][ T4754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.375416][ T4754] R13: 0000000000000000 R14: 00007fa048fb6160 R15: 00007ffd25041a68 [ 122.383497][ T4754] [ 122.663833][ T4275] EXT4-fs (loop3): unmounting filesystem.