last executing test programs: 18.87255159s ago: executing program 0 (id=292): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r4, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 18.275677159s ago: executing program 0 (id=296): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pread64(r5, 0x0, 0x0, 0xa) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000280)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 17.198118615s ago: executing program 0 (id=298): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 16.428004456s ago: executing program 4 (id=300): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 16.247028639s ago: executing program 0 (id=301): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @rand_addr=0x64010100}}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x8000}, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) 15.363922812s ago: executing program 4 (id=303): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) dup(r1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) 13.182471534s ago: executing program 1 (id=307): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x3, 0x3ff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x3, 0x2000079, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xc0000000, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) flock(r0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2a, &(0x7f0000000040)) 12.535233404s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b"], 0x20}, 0x4000) 11.47976922s ago: executing program 1 (id=311): r0 = syz_create_resource$binfmt(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4000854) socket$inet_udp(0x2, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 11.346736802s ago: executing program 0 (id=313): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 11.250105423s ago: executing program 1 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20002) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) open(0x0, 0x64842, 0x86) open_by_handle_at(r3, &(0x7f0000000000)=@isofs={0x14, 0x1, {0x15, 0x10, 0x4, 0x6, 0xfffff4bb, 0x1}}, 0x60380) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x1, 0x6da, &(0x7f0000000240)="$eJzs3UtoHOcdAPD/rFarXRUcOfEjlECWGNJSUVuyUFr1UreUokMoIT30vNhyLLyWg6QU2ZRG6ePeQ049pQfdQg8lvRvac0Og5KpjoJBLTrqpzOzMaqR9ypYlJfn9xMx8M99z/rMzsw/EBPCttTwb1SeRxPLsm1vp+u7OQntiZ2Eqz25HRC0iKhHVdL0eEWuR5d7Kp2xbkpdPBvXz4erS259/tftFZ62aT1n5yrB6fdR6N23nUzQjYiJf9poc0OInR7s/1N7tge2Nr1Law2tF4OKvz9gqPKP9HtvdvI//m82HVT/OeQucU0nnvtljJmI6v8dnd/386lA53dGdvO2zHgAAAAAcV+P4VV7Yi73YigvPYzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwTZU//z/Jp0qRbkZSPP+/lm+LPH0O9TwI8cnRDZ9NDcgAAAAAAAAAgK+hV/diL7biQrG+n2S/+b9W+o3/O/FebMRKrMf12IpWbMZmrMd8RMyUGqpttTY31+ezmhGXhtS8GZ/2qXlz8BhvnfA+AwAAAAAAAMA5Vx+Rf3+yd9sfYvng938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPkoiJziKbLhXpmahUI6JelNuO+DQiamc72mNJ+m18cvrjAAAAgGdSP7ya1Meo88L7sRdbcaFY30+yz/xXss/L9Xgv1mIzVmMz2rESd/LP0Omn/sruzkJ7d2fhQTr1tvuzL4819KzF6Hz30L/nl7MSjbgbq9mW63E7ktjPVPJWXt7dWUiXD/qP64N0TMlPc0NGM1FK30lnVz/J0n85/C1C9Vi7+JQqA3NmstzJbkTm8rGlNS4WEegfiZFHpzq0p/modL/5uTS8p/4x/2B479NHSvX95uZMHI3Ezah0j9CV4ZGI+N4/P/7Nvfba/Xt3N2bPzy719f7IEkcjsVCKxNVvUCRGm8sicbm7vhy/jF/HbHw59Vasx2r8NlqxGSvNIr+Vv57T+czwSH02XV57a9RI0nOy2b1+9RtTM7Ix1fIxRTN+kaVa8Vp2TC/EaiTxMCJW4o3s72bMd68GB0f48hhnfWWMK23Jte9ni26YojG47N/Ha/KkpHG9WIpr+Zo7k+WVtxxE6cW+USrudePfj0qq380TaQt/HHp/OG1HIzFfisRLg14vnZD+bT+db7TX7q/fa707Zn+v58v0PPrzubpLpEf4xajnO3cxmyfZOTWX5b3UvcMejlct/8Wlo9KTd7lbr3Om/ioexp1DZ+qPYjEWYykrfSUrPdlzx0rzrnZbOnwNT/PSd1rV7g875fdbD6PdeT8EwPk2/YPpWuN/jf80Pmr8qXGv8Wb951M/nnqlFpP/nvxJdW7i9coryT/io/j9wed/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6W08eny/1W6vrPdPVPpnJcNrtdr7xYPEhpQ5lEjyR+WMUTjZePR4f2SDwxNT+fCesvpJJoqnNY4u3HyOw0i2jx6v+uhjUTzlaYwukp6Ap5WfesxFzwdbJs/BoTyaaJ5cg8ULtpR1/Fdvo9/xmoiIfoVHXDgmTuLqA5ylG5sP3r2x8ejxD1cftN5ZeWdlbXJxcWluafGNhRt3V9src515qcKpPPwWOA3ltxNdtYh4dXTdIQ9qBQAAAAAAAAAAAJ6j0/hfiLPeRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODrbXk2qk8iifm563Pp+u7OQjudivRByWpEVCIi+V1E8q+IW9GZYqbUXDKonw9Xl97+/KvdLw7aqhblKxHbA+uNZzufohkRE/nypNq7Pbq92kFyqk920o1MGrBrReDgrP0/AAD//0f27Qo=") 11.116598485s ago: executing program 4 (id=316): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000180)={r4}) 5.998692301s ago: executing program 1 (id=317): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(0x0, 0x0) r4 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r4, &(0x7f00000003c0)={0x0, 0xc, 0x1, @thr={0x0, 0x0}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x14) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 5.876315963s ago: executing program 0 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000000000000000000000700000001890b"], 0x20}, 0x4000) 5.726588435s ago: executing program 2 (id=322): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x1000}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc8769723e875f523) 5.698383666s ago: executing program 4 (id=323): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x4008840) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 5.664560456s ago: executing program 1 (id=324): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @rand_addr=0x64010100}}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0x8000}, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @time=@tick=0xb}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control={0x4, 0x80000000, 0x200}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @time}], 0x70) 5.42051685s ago: executing program 3 (id=325): r0 = syz_create_resource$binfmt(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x4000854) socket$inet_udp(0x2, 0x2, 0x0) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 5.40224378s ago: executing program 2 (id=326): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00') getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) timer_settime(0x0, 0x3, &(0x7f000004a000)={{0x0, 0x1}, {0x7, 0xe4c}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) 5.226145822s ago: executing program 3 (id=327): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20002) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f00000001c0)) open(0x0, 0x64842, 0x86) open_by_handle_at(r3, &(0x7f0000000000)=@isofs={0x14, 0x1, {0x15, 0x10, 0x4, 0x6, 0xfffff4bb, 0x1}}, 0x60380) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080), 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000940)=ANY=[@ANYBLOB="0002e95029360a07fc41b26ad1241d4c6f89c1fb64b0dfd049dc7fc6e21ca59bd3e60d2913794c569da380179849974da1367b3ad9aaaa1f47473a858efdcba92c69828102001b61de05efa205057e4aedf5d02a05b9d2b8c668e51030c8af7370bfdb56de25a9cab92f73de6a50a8cff40600155c3a0918b6bcfcf1b1d6b5a62b3d462fc01731cb751e163a34223057dbc7f90bb463120d2477f14ca72593ffb62a335bf045f7de3bed8ed98b5a0ea2bd9fa940ce2a83e6f8d17d75ce648451cd48a49d58a4398fd7403b9c8f23ee02328c4234711e724222a4b954d41a4d267bf708f733a39802556470dcb50807acde4b7404b1121ad5cdb6a97033c55165cc87a333cf025c312a9b102cbc5315202720eaaccac46712e55a36c492567dded61edafa0dc6fcc77f"], 0x1, 0x6da, &(0x7f0000000240)="$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") 5.140584334s ago: executing program 2 (id=328): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x21}}, @ib={0x1b, 0xffff, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) 5.087364164s ago: executing program 2 (id=329): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf23}, 0x18}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000000)={0x2}, 0x4, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/65], 0xfc}}, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r5, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x6, 0x4}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) 4.974329516s ago: executing program 4 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = timerfd_create(0x0, 0x0) r6 = syz_io_uring_setup(0x58f2, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) open$dir(0x0, 0x80, 0x107) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x1f82, 0x0, 0x0, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r5, 0x40085400, &(0x7f0000000080)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1807000000000d000000000000000000851000000200000026000000feffff859500007b0000000095", @ANYRESHEX], &(0x7f0000000400)='GPL\x00', 0x2, 0x95, &(0x7f00000004c0)=""/149, 0x41100, 0x1}, 0x94) 4.329161186s ago: executing program 3 (id=331): unshare(0x22020600) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) 1.913318261s ago: executing program 3 (id=332): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 1.889074462s ago: executing program 2 (id=333): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r5}) 1.865824522s ago: executing program 4 (id=334): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x80) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, "260000001000", 0x0, 0x0, 0x4a, 0x0, 0x0, 0x9, 0xe}) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d042308483901020301090252"], 0x0) 288.493036ms ago: executing program 2 (id=335): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) close(0x3) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r5, 0x200004) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f00000001c0)={0x1, 0x200, @name="306a8dfc174b68b34babb17cb4a0e8a4a60b22f120790f7950ba8794e74c58cc"}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80003}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$apparmor_exec(r5, &(0x7f0000000000)=ANY=[], 0x8) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 230.248077ms ago: executing program 3 (id=336): socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x20000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=337): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket(0x2b, 0x1, 0x1) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@get={0xe0, 0x13, 0x1, 0x0, 0x0, {{'cbc(blowfish)\x00'}}}, 0xe0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x0) listen(r1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 48.315720][ T4171] cgroup: Unknown subsys name 'net' [ 48.455605][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.676690][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.990156][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 51.023196][ T4181] chnl_net:caif_netlink_parms(): no params data found [ 51.119864][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 51.166169][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 51.190997][ T4181] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.198678][ T4181] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.206867][ T4181] device bridge_slave_0 entered promiscuous mode [ 51.215301][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.222771][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.231357][ T4190] device bridge_slave_0 entered promiscuous mode [ 51.250822][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 51.263076][ T4181] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.270132][ T4181] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.278443][ T4181] device bridge_slave_1 entered promiscuous mode [ 51.286041][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.293171][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.301416][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.379245][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.404921][ T4181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.422753][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.439958][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.447192][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.454943][ T4192] device bridge_slave_0 entered promiscuous mode [ 51.464345][ T4181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.494514][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.502203][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.509828][ T4187] device bridge_slave_0 entered promiscuous mode [ 51.517279][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.525246][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.533108][ T4192] device bridge_slave_1 entered promiscuous mode [ 51.563553][ T4190] team0: Port device team_slave_0 added [ 51.569555][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.576784][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.585045][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.592548][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.599618][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.607962][ T4187] device bridge_slave_1 entered promiscuous mode [ 51.625833][ T4181] team0: Port device team_slave_0 added [ 51.633067][ T4190] team0: Port device team_slave_1 added [ 51.640671][ T4181] team0: Port device team_slave_1 added [ 51.646542][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.653766][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.661471][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.710098][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.739590][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.751287][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.768105][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.775172][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.801426][ T4181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.813638][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.820685][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.846657][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.859732][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.870580][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.881110][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.897355][ T4181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.904574][ T4181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.930759][ T4181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.946611][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.953747][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.979989][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.007424][ T4192] team0: Port device team_slave_0 added [ 52.015240][ T4192] team0: Port device team_slave_1 added [ 52.059243][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.066335][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.092474][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.108674][ T4187] team0: Port device team_slave_0 added [ 52.119339][ T4185] team0: Port device team_slave_0 added [ 52.133401][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.140403][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.166973][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.179544][ T4187] team0: Port device team_slave_1 added [ 52.186933][ T4185] team0: Port device team_slave_1 added [ 52.236731][ T4181] device hsr_slave_0 entered promiscuous mode [ 52.244000][ T4181] device hsr_slave_1 entered promiscuous mode [ 52.266718][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.274413][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.300677][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.312502][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.319443][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.345615][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.373319][ T4190] device hsr_slave_0 entered promiscuous mode [ 52.380041][ T4190] device hsr_slave_1 entered promiscuous mode [ 52.386841][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.394741][ T4190] Cannot create hsr debugfs directory [ 52.401024][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.407960][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.433932][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.445343][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.452590][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.478601][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.499014][ T4192] device hsr_slave_0 entered promiscuous mode [ 52.505772][ T4192] device hsr_slave_1 entered promiscuous mode [ 52.513109][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.520730][ T4192] Cannot create hsr debugfs directory [ 52.619412][ T4187] device hsr_slave_0 entered promiscuous mode [ 52.626963][ T4187] device hsr_slave_1 entered promiscuous mode [ 52.633577][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.641589][ T4187] Cannot create hsr debugfs directory [ 52.649757][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.656639][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.665801][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.673463][ T4185] Cannot create hsr debugfs directory [ 52.741210][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 52.741269][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 52.747861][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 52.753934][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 52.766058][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 52.932773][ T4181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.949514][ T4181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.959592][ T4181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.971933][ T4181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.007833][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.017686][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.035684][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.047909][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.123020][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.143946][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.158314][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.168048][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.185805][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.218921][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.232094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.242636][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.257753][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.267096][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.289575][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.311384][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.319623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.328820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.338066][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.345314][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.355229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.378842][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.409535][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.422203][ T4185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.434569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.443532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.452352][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.459468][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.468027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.477382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.485513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.494052][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.504078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.512802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.521558][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.528823][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.537098][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.560395][ T4185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.570309][ T4185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.581346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.590085][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.601850][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.609086][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.617497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.626722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.635722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.644460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.654524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.668430][ T4185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.682615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.691597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.700196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.709395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.735561][ T4181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.746681][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.763547][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.774358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.785040][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.793911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.804955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.813580][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.822180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.830995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.840716][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.849151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.874756][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.887946][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.910756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.924711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.954861][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.963239][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.998142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.009524][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.025874][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.033038][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.044390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.054506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.063687][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.070792][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.079104][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.090660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.135540][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.145476][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.155933][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.166447][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.174924][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.182957][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.191999][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.205783][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.221749][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.229614][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.238185][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.247085][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.256846][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.278801][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.288466][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.301869][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.330958][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.338732][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.348210][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.357445][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.366475][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.375157][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.387910][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.398304][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.412748][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.444537][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.459142][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.469494][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.484356][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.495011][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.502116][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.510768][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.519301][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.528082][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.535176][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.543047][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.551988][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.563002][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.572460][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.581283][ T4220] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.588345][ T4220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.617742][ T4181] device veth0_vlan entered promiscuous mode [ 54.627672][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.637389][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.646370][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.655963][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.664410][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.672370][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.681850][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.690017][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.698757][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.708257][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.716845][ T4220] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.723922][ T4220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.732776][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.741780][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.762947][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.772785][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.781350][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.789805][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.799765][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.808516][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.819354][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.820845][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 54.828375][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.838238][ T4259] Bluetooth: hci1: command 0x041b tx timeout [ 54.842275][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.847644][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 54.860857][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.861809][ T4259] Bluetooth: hci4: command 0x041b tx timeout [ 54.869600][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.875341][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 54.888605][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.903364][ T4181] device veth1_vlan entered promiscuous mode [ 54.918404][ T4190] device veth0_vlan entered promiscuous mode [ 54.930236][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.937978][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.948665][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.962605][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.974872][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.985553][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.995863][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.005349][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.013795][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.022805][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.047373][ T4190] device veth1_vlan entered promiscuous mode [ 55.056075][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.077205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.086331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.096803][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.106745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.116307][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.125321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.139438][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.153934][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.163571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.193448][ T4181] device veth0_macvtap entered promiscuous mode [ 55.214780][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.237278][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.258723][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.288158][ T4190] device veth0_macvtap entered promiscuous mode [ 55.299852][ T4181] device veth1_macvtap entered promiscuous mode [ 55.326765][ T4190] device veth1_macvtap entered promiscuous mode [ 55.355463][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.373731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.391747][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.400121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.409082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.419386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.428452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.437930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.459261][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.471445][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.483844][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.495278][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.507254][ T4192] device veth0_vlan entered promiscuous mode [ 55.513908][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.523276][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.532202][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.541838][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.551152][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.559670][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.569781][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.580911][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.592663][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.607342][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.616859][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.624968][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.634572][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.643611][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.651318][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.662267][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.672151][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.681081][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.689752][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.707350][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.716961][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.725837][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.735293][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.744290][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.757131][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.765452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.773084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.805668][ T4192] device veth1_vlan entered promiscuous mode [ 55.823428][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.832277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.842042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.899013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.910217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.919439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.928840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.937332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.947166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.956868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.975588][ T4185] device veth0_vlan entered promiscuous mode [ 56.019606][ T4185] device veth1_vlan entered promiscuous mode [ 56.053249][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.062912][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.072090][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.095108][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.107686][ T4187] device veth0_vlan entered promiscuous mode [ 56.113013][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.119548][ T4192] device veth0_macvtap entered promiscuous mode [ 56.128636][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.132822][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.143815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.144496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.178336][ T4192] device veth1_macvtap entered promiscuous mode [ 56.192349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.200136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.208582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.220006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.234173][ T4187] device veth1_vlan entered promiscuous mode [ 56.265751][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.270351][ T4185] device veth0_macvtap entered promiscuous mode [ 56.286609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.291841][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.297384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.309977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.318015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.326866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.351078][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.359424][ T4187] device veth0_macvtap entered promiscuous mode [ 56.365857][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.377113][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.388374][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.398580][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.410947][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.423004][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.433030][ T4185] device veth1_macvtap entered promiscuous mode [ 56.451872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.460751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.469000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.477162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.487637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.496504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.505365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.514725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.533088][ T4187] device veth1_macvtap entered promiscuous mode [ 56.543620][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.557073][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.567561][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.578275][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.604974][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.631781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.644307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.666046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.712472][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.732260][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.751246][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.767273][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.778879][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.794643][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.807822][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.824495][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.836473][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.845897][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.854919][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.872553][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 56.881851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.890947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.902663][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.209282][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.266232][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.353162][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.409010][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.474844][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 57.487040][ T4296] loop1: detected capacity change from 0 to 128 [ 57.494035][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 57.503901][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 57.510012][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 57.516423][ T4228] Bluetooth: hci0: command 0x040f tx timeout [ 57.558152][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.570307][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.593765][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.604772][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.626424][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.639353][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.649735][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.666902][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.705900][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.723568][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.747783][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.879512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.910095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.136549][ T4304] loop1: detected capacity change from 0 to 40427 [ 58.158896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.265472][ T4304] F2FS-fs (loop1): invalid crc value [ 58.337489][ T4304] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.363789][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.382430][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.383332][ T4304] F2FS-fs (loop1): Start checkpoint disabled! [ 58.410870][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.420006][ T4304] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 58.436472][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.453889][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.486164][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.519881][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.542898][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.706590][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.830656][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.845947][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.940276][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.952379][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.952668][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.977767][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.980032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.989128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.990858][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 58.994888][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 58.995533][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #108!!! [ 59.100400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.102871][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.106870][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.108632][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.109639][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.109861][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 59.357361][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.386199][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.412909][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.450037][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.541264][ T1111] Bluetooth: hci0: command 0x0419 tx timeout [ 59.556133][ T1111] Bluetooth: hci1: command 0x0419 tx timeout [ 59.584654][ T1111] Bluetooth: hci3: command 0x0419 tx timeout [ 59.612400][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 59.619844][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 59.722564][ T144] attempt to access beyond end of device [ 59.722564][ T144] loop1: rw=1, want=45104, limit=40427 [ 59.744476][ T144] attempt to access beyond end of device [ 59.744476][ T144] loop1: rw=2049, want=45112, limit=40427 [ 59.845751][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.868059][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.877722][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.906941][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.934341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.952082][ T4320] loop0: detected capacity change from 0 to 512 [ 59.960238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.978036][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.989802][ T4220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.006515][ T4220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.017421][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.018335][ T4320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 60.051436][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.059295][ T4220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.073095][ T4320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.089559][ T4320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 60.090692][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.147768][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.155501][ T4320] System zones: 1-12 [ 60.179998][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.209675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.234062][ T4320] EXT4-fs (loop0): 1 truncate cleaned up [ 60.239731][ T4320] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,nouid32,debug,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 60.253888][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.269608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.107230][ T4323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.517682][ T4349] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 63.960545][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 64.555317][ T4362] capability: warning: `syz.0.16' uses deprecated v2 capabilities in a way that may be insecure [ 64.627200][ T4362] loop0: detected capacity change from 0 to 1024 [ 64.769509][ T4362] hfsplus: extend alloc file! (8192,8,110) [ 65.320634][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 65.328622][ T7] usb 3-1: can't read configurations, error -71 [ 65.632145][ T4373] Zero length message leads to an empty skb [ 67.432949][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.640160][ T4415] loop3: detected capacity change from 0 to 512 [ 70.757751][ T4415] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.28: iget: bad i_size value: 38620345925642 [ 70.775235][ T4415] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.28: couldn't read orphan inode 15 (err -117) [ 70.788934][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 71.226946][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.234891][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.675873][ T4419] ax25_connect(): syz.4.29 uses autobind, please contact jreuter@yaina.de [ 75.510002][ T4464] loop1: detected capacity change from 0 to 512 [ 75.677165][ T4464] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.41: iget: bad i_size value: 38620345925642 [ 75.694076][ T4464] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.41: couldn't read orphan inode 15 (err -117) [ 75.709360][ T4464] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.362150][ T1346] cfg80211: failed to load regulatory.db [ 81.532469][ T4518] loop0: detected capacity change from 0 to 128 [ 82.084076][ T4524] loop1: detected capacity change from 0 to 1024 [ 82.269794][ T4524] hfsplus: extend alloc file! (8192,8,110) [ 82.702586][ T4529] ax25_connect(): syz.3.57 uses autobind, please contact jreuter@yaina.de [ 82.821691][ T4535] netlink: 68 bytes leftover after parsing attributes in process `syz.1.58'. [ 83.368157][ T4538] loop0: detected capacity change from 0 to 40427 [ 83.389524][ T4538] F2FS-fs (loop0): invalid crc value [ 83.444312][ T4538] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.500723][ T4538] F2FS-fs (loop0): Start checkpoint disabled! [ 83.523063][ T4538] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 85.249637][ T4279] attempt to access beyond end of device [ 85.249637][ T4279] loop0: rw=1, want=45104, limit=40427 [ 85.546409][ T4279] attempt to access beyond end of device [ 85.546409][ T4279] loop0: rw=2049, want=40992, limit=40427 [ 87.271882][ T4587] netlink: 68 bytes leftover after parsing attributes in process `syz.4.71'. [ 88.132941][ T4591] netlink: 104 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.058691][ T4622] loop3: detected capacity change from 0 to 65536 [ 91.162699][ T4622] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 91.171397][ T4622] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 91.219202][ T4622] XFS (loop3): Mounting V5 Filesystem [ 91.933649][ T4622] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 91.988375][ T4622] XFS (loop3): Starting recovery (logdev: internal) [ 92.020566][ T4622] XFS (loop3): Ending recovery (logdev: internal) [ 92.034865][ T4622] XFS (loop3): Quotacheck needed: Please wait. [ 92.692603][ T4622] XFS (loop3): Quotacheck: Done. [ 93.300053][ T4187] XFS (loop3): Unmounting Filesystem [ 94.160455][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.556055][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.585837][ T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.615721][ T13] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.647403][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.698460][ T13] usb 5-1: config 0 descriptor?? [ 95.492660][ T4221] usb 5-1: USB disconnect, device number 2 [ 97.132921][ T4693] loop1: detected capacity change from 0 to 65536 [ 97.270035][ T4697] device team_slave_0 entered promiscuous mode [ 97.276499][ T4697] device team_slave_1 entered promiscuous mode [ 97.344408][ T4693] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 97.352870][ T4693] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 97.363011][ T4693] XFS (loop1): Mounting V5 Filesystem [ 97.470922][ T4693] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 97.526819][ T4693] XFS (loop1): Starting recovery (logdev: internal) [ 97.556040][ T4693] XFS (loop1): Ending recovery (logdev: internal) [ 97.565138][ T4693] XFS (loop1): Quotacheck needed: Please wait. [ 98.376632][ T4693] XFS (loop1): Quotacheck: Done. [ 99.402348][ T4727] netlink: 68 bytes leftover after parsing attributes in process `syz.4.105'. [ 99.827969][ T4190] XFS (loop1): Unmounting Filesystem [ 100.261134][ T4236] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.750553][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.770438][ T4236] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 100.809569][ T4236] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.879977][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.939486][ T4236] usb 1-1: config 0 descriptor?? [ 101.232206][ T4236] usb 1-1: USB disconnect, device number 2 [ 103.052783][ T4763] loop0: detected capacity change from 0 to 65536 [ 104.033924][ T4763] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 104.042350][ T4763] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 104.050868][ T4763] XFS (loop0): Mounting V5 Filesystem [ 104.102630][ T4763] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 104.123387][ T4763] XFS (loop0): Starting recovery (logdev: internal) [ 104.161799][ T4763] XFS (loop0): Ending recovery (logdev: internal) [ 104.170309][ T4763] XFS (loop0): Quotacheck needed: Please wait. [ 104.267841][ T4763] XFS (loop0): Quotacheck: Done. [ 105.268855][ T4181] XFS (loop0): Unmounting Filesystem [ 107.045022][ T4808] fuse: Unknown parameter '' [ 108.212148][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 108.256649][ T4827] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 108.600432][ T4243] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.670448][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.690011][ T4836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.815813][ T4823] loop3: detected capacity change from 0 to 65536 [ 109.073620][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.095159][ T4823] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 109.110621][ T1111] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.120908][ T4823] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 109.139464][ T1111] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.887055][ T4823] XFS (loop3): Mounting V5 Filesystem [ 109.890636][ T4243] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.917996][ T4823] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 110.030103][ T4823] XFS (loop3): Starting recovery (logdev: internal) [ 110.048931][ T4823] XFS (loop3): Ending recovery (logdev: internal) [ 110.060621][ T4243] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 110.065319][ T4823] XFS (loop3): Quotacheck needed: Please wait. [ 110.078248][ T4243] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 110.273012][ T4243] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 110.413416][ T4823] XFS (loop3): Quotacheck: Done. [ 110.668043][ T1111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 110.680644][ T4243] usb 1-1: language id specifier not provided by device, defaulting to English [ 110.690453][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.719213][ T1111] usb 2-1: Product: syz [ 110.729328][ T1111] usb 2-1: Manufacturer: syz [ 110.896570][ T1111] usb 2-1: SerialNumber: syz [ 110.914109][ T4243] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.989008][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.017661][ T4243] usb 1-1: Product: syz [ 111.027782][ T4243] usb 1-1: SerialNumber: syz [ 111.828713][ T1111] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 111.878422][ T4187] XFS (loop3): Unmounting Filesystem [ 111.891377][ T4243] usb 1-1: can't set config #1, error -71 [ 111.907164][ T4243] usb 1-1: USB disconnect, device number 3 [ 112.065007][ T1346] usb 2-1: USB disconnect, device number 2 [ 112.094491][ T1346] usblp0: removed [ 112.514589][ T4879] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 113.870452][ T1346] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.120437][ T1346] usb 5-1: Using ep0 maxpacket: 8 [ 114.240646][ T1346] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 114.259408][ T1346] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.305542][ T1346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.330436][ T1346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.365329][ T1346] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.394236][ T1346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.413834][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.553331][ T4897] loop0: detected capacity change from 0 to 65536 [ 114.654319][ T4897] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 114.675789][ T4897] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 114.690535][ T1346] usb 5-1: GET_CAPABILITIES returned 0 [ 114.696097][ T1346] usbtmc 5-1:16.0: can't read capabilities [ 114.758048][ T4897] XFS (loop0): Mounting V5 Filesystem [ 114.937677][ T1111] usb 5-1: USB disconnect, device number 3 [ 115.115051][ T4897] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 115.505134][ T4897] XFS (loop0): Starting recovery (logdev: internal) [ 115.678276][ T4897] XFS (loop0): Ending recovery (logdev: internal) [ 115.783727][ T4897] XFS (loop0): Quotacheck needed: Please wait. [ 115.887203][ T4897] XFS (loop0): Quotacheck: Done. [ 117.080526][ T4181] XFS (loop0): Unmounting Filesystem [ 118.970072][ T4965] netlink: 168 bytes leftover after parsing attributes in process `syz.4.180'. [ 121.294092][ T4990] loop2: detected capacity change from 0 to 1024 [ 121.393121][ T4990] hfsplus: extend alloc file! (8192,8,110) [ 122.818921][ T4978] loop1: detected capacity change from 0 to 65536 [ 122.916836][ T5005] ax25_connect(): syz.2.193 uses autobind, please contact jreuter@yaina.de [ 122.935403][ T4978] XFS (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 122.958169][ T4978] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 122.975836][ T4978] XFS (loop1): Mounting V5 Filesystem [ 123.118852][ T4978] XFS (loop1): log mount failed [ 125.020623][ T5039] loop2: detected capacity change from 0 to 1024 [ 125.781653][ T5039] hfsplus: extend alloc file! (8192,8,110) [ 126.891294][ T5049] netlink: 68 bytes leftover after parsing attributes in process `syz.1.204'. [ 127.526075][ T5053] ax25_connect(): syz.2.206 uses autobind, please contact jreuter@yaina.de [ 128.186641][ T5071] loop2: detected capacity change from 0 to 65536 [ 129.031241][ T5071] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 129.063563][ T5071] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 129.124963][ T5071] XFS (loop2): Mounting V5 Filesystem [ 129.452536][ T5071] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 129.996108][ T5071] XFS (loop2): Starting recovery (logdev: internal) [ 130.202816][ T5071] XFS (loop2): Ending recovery (logdev: internal) [ 130.266751][ T5071] XFS (loop2): Quotacheck needed: Please wait. [ 130.506693][ T5071] XFS (loop2): Quotacheck: Done. [ 131.628307][ T4185] XFS (loop2): Unmounting Filesystem [ 132.081358][ T5126] ax25_connect(): syz.3.225 uses autobind, please contact jreuter@yaina.de [ 132.662240][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668656][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.374331][ T5135] netlink: 68 bytes leftover after parsing attributes in process `syz.2.224'. [ 135.528996][ T5161] loop1: detected capacity change from 0 to 1024 [ 136.172440][ T5161] hfsplus: extend alloc file! (8192,8,110) [ 137.403507][ T5173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.238'. [ 137.512626][ T5176] ax25_connect(): syz.2.239 uses autobind, please contact jreuter@yaina.de [ 141.399097][ T5209] loop3: detected capacity change from 0 to 1024 [ 142.289468][ T5209] hfsplus: extend alloc file! (8192,8,110) [ 142.823868][ T5225] ax25_connect(): syz.2.253 uses autobind, please contact jreuter@yaina.de [ 148.514967][ T5263] loop0: detected capacity change from 0 to 1024 [ 149.166670][ T5263] hfsplus: extend alloc file! (8192,8,110) [ 149.703489][ T5273] ax25_connect(): syz.0.267 uses autobind, please contact jreuter@yaina.de [ 150.688917][ T5272] ODEBUG: Out of memory. ODEBUG disabled [ 151.191180][ T5272] syz.3.268 (5272): drop_caches: 2 [ 151.559625][ T5292] netlink: 'syz.4.274': attribute type 13 has an invalid length. [ 151.783325][ T5286] loop2: detected capacity change from 0 to 65536 [ 151.962964][ T5286] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 151.971906][ T5286] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 152.457384][ T5286] XFS (loop2): Mounting V5 Filesystem [ 152.552354][ T5286] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x40. [ 152.611607][ T5286] XFS (loop2): Starting recovery (logdev: internal) [ 152.927376][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.935892][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.953367][ T5286] XFS (loop2): Ending recovery (logdev: internal) [ 152.991247][ T5286] XFS (loop2): Quotacheck needed: Please wait. [ 153.036111][ T5286] XFS (loop2): Quotacheck: Done. [ 153.333565][ T4185] XFS (loop2): Unmounting Filesystem [ 153.697639][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.723465][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.835068][ T5322] loop2: detected capacity change from 0 to 1024 [ 154.015904][ T5322] hfsplus: extend alloc file! (8192,8,110) [ 154.568714][ T5328] netlink: 64 bytes leftover after parsing attributes in process `syz.2.278'. [ 154.935408][ T5292] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.945141][ T5292] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.954122][ T5292] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.963063][ T5292] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.081421][ T5288] device team_slave_0 entered promiscuous mode [ 155.087670][ T5288] device team_slave_1 entered promiscuous mode [ 155.093240][ T5292] syz.4.274 (5292) used greatest stack depth: 20480 bytes left [ 155.600398][ T4249] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 155.811543][ T4298] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 155.870568][ T4249] usb 5-1: Using ep0 maxpacket: 16 [ 156.678297][ T4249] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 156.699202][ T4249] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 156.751071][ T4249] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 156.770379][ T4249] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.891967][ T4298] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 156.910365][ T4298] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.957047][ T4298] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.980993][ T4298] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.990912][ T4249] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 157.000797][ T4249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.008803][ T4249] usb 5-1: Product: syz [ 157.014489][ T4249] usb 5-1: Manufacturer: syz [ 157.027425][ T4298] usb 2-1: config 0 descriptor?? [ 157.034210][ T4249] usb 5-1: SerialNumber: syz [ 157.064784][ T5351] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 157.802996][ T4298] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 157.811560][ T4249] usb 5-1: config 0 descriptor?? [ 157.830715][ T5339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.109156][ T5339] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 158.929800][ T4249] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 158.978987][ T4249] usb 5-1: USB disconnect, device number 4 [ 158.986213][ T3545] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 158.996493][ T1111] usb 2-1: USB disconnect, device number 3 [ 159.141385][ T5389] ax25_connect(): syz.0.296 uses autobind, please contact jreuter@yaina.de [ 162.192470][ T5418] loop1: detected capacity change from 0 to 1024 [ 162.714356][ T5418] hfsplus: extend alloc file! (8192,8,110) [ 166.404559][ T5465] netlink: 68 bytes leftover after parsing attributes in process `syz.3.312'. [ 171.399426][ T5477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.319'. [ 171.605211][ T5477] device netdevsim0 entered promiscuous mode [ 172.292153][ T5508] loop3: detected capacity change from 0 to 1024 [ 172.408661][ T5508] hfsplus: extend alloc file! (8192,8,110) [ 173.259293][ T5516] netlink: 68 bytes leftover after parsing attributes in process `syz.2.329'. [ 176.844148][ T5325] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.250506][ T5325] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.317629][ T5325] usb 5-1: config 0 has no interfaces? [ 177.457456][ T5541] [ 177.459811][ T5541] ====================================================== [ 177.466912][ T5541] WARNING: possible circular locking dependency detected [ 177.473958][ T5541] 5.15.186-syzkaller #0 Not tainted [ 177.479154][ T5541] ------------------------------------------------------ [ 177.486167][ T5541] syz.3.337/5541 is trying to acquire lock: [ 177.492053][ T5541] ffff888060419450 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0 [ 177.503473][ T5541] [ 177.503473][ T5541] but task is already holding lock: [ 177.510684][ T1111] Bluetooth: hci0: command 0x0406 tx timeout [ 177.510939][ T5541] ffff888060418120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 177.525914][ T5541] [ 177.525914][ T5541] which lock already depends on the new lock. [ 177.525914][ T5541] [ 177.536308][ T5541] [ 177.536308][ T5541] the existing dependency chain (in reverse order) is: [ 177.545402][ T5541] [ 177.545402][ T5541] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 177.553212][ T5541] lock_sock_nested+0x44/0x100 [ 177.558486][ T5541] smc_listen_out+0x109/0x3d0 [ 177.563928][ T5541] process_one_work+0x863/0x1000 [ 177.569365][ T5541] worker_thread+0xaa8/0x12a0 [ 177.574542][ T5541] kthread+0x436/0x520 [ 177.579111][ T5541] ret_from_fork+0x1f/0x30 [ 177.584028][ T5541] [ 177.584028][ T5541] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 177.594159][ T5541] __lock_acquire+0x2c33/0x7c60 [ 177.599512][ T5541] lock_acquire+0x197/0x3f0 [ 177.604516][ T5541] __flush_work+0xdd/0x1b0 [ 177.609453][ T5541] __cancel_work_timer+0x3ac/0x520 [ 177.615074][ T5541] smc_clcsock_release+0x5c/0xe0 [ 177.620532][ T5541] __smc_release+0x398/0x500 [ 177.625630][ T5541] smc_close_non_accepted+0xd1/0x1f0 [ 177.631524][ T5541] smc_close_active+0x9d3/0xd90 [ 177.636886][ T5541] __smc_release+0x9a/0x500 [ 177.641996][ T5541] smc_release+0x2ca/0x530 [ 177.646930][ T5541] sock_close+0xd5/0x240 [ 177.651675][ T5541] __fput+0x234/0x930 [ 177.656160][ T5541] task_work_run+0x125/0x1a0 [ 177.661250][ T5541] exit_to_user_mode_loop+0x10f/0x130 [ 177.667236][ T5541] exit_to_user_mode_prepare+0xb1/0x140 [ 177.673296][ T5541] syscall_exit_to_user_mode+0x16/0x40 [ 177.679365][ T5541] do_syscall_64+0x58/0xa0 [ 177.684289][ T5541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.690690][ T5541] [ 177.690690][ T5541] other info that might help us debug this: [ 177.690690][ T5541] [ 177.700986][ T5541] Possible unsafe locking scenario: [ 177.700986][ T5541] [ 177.708416][ T5541] CPU0 CPU1 [ 177.713858][ T5541] ---- ---- [ 177.719228][ T5541] lock(sk_lock-AF_SMC/1); [ 177.723714][ T5541] lock((work_completion)(&new_smc->smc_listen_work)); [ 177.733297][ T5541] lock(sk_lock-AF_SMC/1); [ 177.740337][ T5541] lock((work_completion)(&new_smc->smc_listen_work)); [ 177.747450][ T5541] [ 177.747450][ T5541] *** DEADLOCK *** [ 177.747450][ T5541] [ 177.755582][ T5541] 2 locks held by syz.3.337/5541: [ 177.760590][ T5541] #0: ffff888074bcee10 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 177.770750][ T5541] #1: ffff888060418120 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x251/0x530 [ 177.780149][ T5541] [ 177.780149][ T5541] stack backtrace: [ 177.786038][ T5541] CPU: 0 PID: 5541 Comm: syz.3.337 Not tainted 5.15.186-syzkaller #0 [ 177.794100][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.804145][ T5541] Call Trace: [ 177.807407][ T5541] [ 177.810319][ T5541] dump_stack_lvl+0x168/0x230 [ 177.814993][ T5541] ? load_image+0x3b0/0x3b0 [ 177.819477][ T5541] ? show_regs_print_info+0x20/0x20 [ 177.824653][ T5541] ? print_circular_bug+0x12b/0x1a0 [ 177.829864][ T5541] check_noncircular+0x274/0x310 [ 177.834781][ T5541] ? add_chain_block+0x940/0x940 [ 177.839700][ T5541] ? lockdep_lock+0xdc/0x1e0 [ 177.844265][ T5541] ? rcu_lock_release+0x5/0x20 [ 177.849013][ T5541] ? __kernel_text_address+0x9a/0x100 [ 177.854400][ T5541] ? mark_lock+0x94/0x320 [ 177.858736][ T5541] __lock_acquire+0x2c33/0x7c60 [ 177.863567][ T5541] ? deref_stack_reg+0xd0/0x120 [ 177.868403][ T5541] ? hlock_conflict+0x59/0x1f0 [ 177.873183][ T5541] ? check_path+0x40/0x40 [ 177.877493][ T5541] ? verify_lock_unused+0x140/0x140 [ 177.882666][ T5541] ? mark_lock+0x94/0x320 [ 177.887121][ T5541] ? __lock_acquire+0x13ad/0x7c60 [ 177.892136][ T5541] ? add_chain_block+0x940/0x940 [ 177.897070][ T5541] lock_acquire+0x197/0x3f0 [ 177.901553][ T5541] ? __flush_work+0xc1/0x1b0 [ 177.906127][ T5541] ? read_lock_is_recursive+0x10/0x10 [ 177.911483][ T5541] __flush_work+0xdd/0x1b0 [ 177.915874][ T5541] ? __flush_work+0xc1/0x1b0 [ 177.920440][ T5541] ? flush_work+0x20/0x20 [ 177.924742][ T5541] ? try_to_grab_pending+0xf3/0x7e0 [ 177.929915][ T5541] ? lockdep_hardirqs_off+0x70/0x100 [ 177.935177][ T5541] ? mark_lock+0x94/0x320 [ 177.939484][ T5541] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 177.945544][ T5541] ? lock_chain_count+0x20/0x20 [ 177.950371][ T5541] ? print_unlock_imbalance_bug+0x160/0x160 [ 177.956241][ T5541] ? __cancel_work_timer+0x331/0x520 [ 177.961503][ T5541] __cancel_work_timer+0x3ac/0x520 [ 177.966592][ T5541] ? cancel_work_sync+0x20/0x20 [ 177.971419][ T5541] ? __local_bh_enable_ip+0x12a/0x1b0 [ 177.976763][ T5541] ? lockdep_hardirqs_on+0x94/0x140 [ 177.981936][ T5541] ? __local_bh_enable_ip+0x12a/0x1b0 [ 177.987289][ T5541] ? _local_bh_enable+0xa0/0xa0 [ 177.992120][ T5541] smc_clcsock_release+0x5c/0xe0 [ 177.997036][ T5541] __smc_release+0x398/0x500 [ 178.001604][ T5541] smc_close_non_accepted+0xd1/0x1f0 [ 178.006868][ T5541] smc_close_active+0x9d3/0xd90 [ 178.011700][ T5541] __smc_release+0x9a/0x500 [ 178.016181][ T5541] smc_release+0x2ca/0x530 [ 178.020576][ T5541] sock_close+0xd5/0x240 [ 178.024799][ T5541] ? sock_mmap+0x90/0x90 [ 178.029023][ T5541] __fput+0x234/0x930 [ 178.032986][ T5541] task_work_run+0x125/0x1a0 [ 178.037563][ T5541] exit_to_user_mode_loop+0x10f/0x130 [ 178.042913][ T5541] exit_to_user_mode_prepare+0xb1/0x140 [ 178.048439][ T5541] syscall_exit_to_user_mode+0x16/0x40 [ 178.053875][ T5541] do_syscall_64+0x58/0xa0 [ 178.058304][ T5541] ? clear_bhb_loop+0x30/0x80 [ 178.062964][ T5541] ? clear_bhb_loop+0x30/0x80 [ 178.067619][ T5541] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.073514][ T5541] RIP: 0033:0x7fdc6cbab929 [ 178.077921][ T5541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.097509][ T5541] RSP: 002b:00007fdc6aa13038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 178.105906][ T5541] RAX: 0000000000000000 RBX: 00007fdc6cdd2fa0 RCX: 00007fdc6cbab929 [ 178.113865][ T5541] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 178.121919][ T5541] RBP: 00007fdc6cc2db39 R08: 0000000000000000 R09: 0000000000000000 [ 178.130054][ T5541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.138188][ T5541] R13: 0000000000000000 R14: 00007fdc6cdd2fa0 R15: 00007fffe6002e98 [ 178.146760][ T5541] [ 178.152379][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 178.158404][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 178.170486][ T1111] Bluetooth: hci1: command 0x0406 tx timeout [ 178.190494][ T5325] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 178.204554][ T5325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.272312][ T5325] usb 5-1: Product: syz [ 178.294494][ T5325] usb 5-1: Manufacturer: syz [ 178.310401][ T5325] usb 5-1: SerialNumber: syz [ 178.323292][ T5325] usb 5-1: config 0 descriptor?? [ 178.506472][ T13] usb 5-1: USB disconnect, device number 5 [ 185.940440][ T1111] Bluetooth: hci3: command 0x0406 tx timeout