last executing test programs: 13.868259566s ago: executing program 3 (id=110): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {0x0, 0xff3f0000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 12.116269653s ago: executing program 1 (id=116): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socket(0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r3, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1}) close_range(r5, 0xffffffffffffffff, 0x0) 6.613586248s ago: executing program 3 (id=126): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000080)={0x2, 0x9, 0x7, 0x4000, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r0, 0x80000) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_CAP_X86_USER_SPACE_MSR(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x4376ea830d45549b, 0x0, [0xffffffffffffffff, 0x8d, 0x20000006, 0x7fff, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x12, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x9e1, 0x2566, 0xfffffffe, 0x100000, 0x8, 0x6, 0x5, 0x10, 0x1002, 0xffffffff, 0x1, 0x6, 0x344, 0x1, 0x7, 0x0, 0x8, 0x3, 0x9, 0xe, 0x100, 0x1003, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x7df, 0x8, 0x400007, 0x1]}) 5.758855401s ago: executing program 0 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 5.414272716s ago: executing program 0 (id=129): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 5.280939408s ago: executing program 0 (id=130): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x3, 0x101000) socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xf, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) 5.204216479s ago: executing program 3 (id=131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x24008854) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x9, 0x2, 0x7b}}}, 0xc) sendfile(r6, r5, 0x0, 0x3a) inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x42000200) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x5, 0x5, 0x5}, 0x38, [0x9, 0x3, 0xa, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x3b, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x5, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xff, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0x4000e, 0xd76, 0x2, 0xde, 0x8, 0x9, 0x1, 0x999f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x400005, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc33, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x4, 0x5, 0x0, 0x981, 0x4, 0x31, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x0, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x7, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0xc, 0xe, 0x5, 0x7, 0x6, 0x1000002, 0x1, 0x1, 0xb, 0x8802, 0x200, 0x3], [0x401, 0xc584, 0x4, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x89b2, 0x7, 0x100009, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0xff, 0x9, 0xfffffff9, 0xe55, 0x10, 0x37, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x40, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x10, 0x2, 0x761, 0xb, 0x402, 0x800, 0xc4a, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x7, 0x1e0, 0x4, 0x2000e47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x9, 0x5, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x1208a8, 0x2, 0x3d, 0x7, 0x2, 0x6, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xa1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0x2000000e, 0x2, 0xd, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000580)={0x0, 0x1, 0x6, @local}, 0x10) 4.216314915s ago: executing program 0 (id=132): syz_usb_connect(0x2, 0x36, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xc9, 0x66, 0x7c, 0x40, 0x1d50, 0x60c6, 0xafe7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x58, 0x77, 0x2, 0x25, 0x84, 0x53, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6}}]}}]}}]}}, 0x0) 4.215544155s ago: executing program 2 (id=133): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 3.792791891s ago: executing program 1 (id=134): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) r8 = dup(r7) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r10, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd35, 0x35}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0xc040) ioctl$FS_IOC_GETVERSION(r9, 0x5b24, 0x0) 3.781033711s ago: executing program 2 (id=135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$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") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r0, 0x0, 0x0) 3.400021277s ago: executing program 3 (id=136): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x154, 0x1bc, 0x0, {0x0, 0xff3f0000}, [@common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}, @common=@inet=@ecn={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3cc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 3.328695968s ago: executing program 4 (id=137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) 2.55582526s ago: executing program 1 (id=138): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close(0x3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) 2.512289631s ago: executing program 2 (id=139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 2.388203983s ago: executing program 4 (id=140): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) 2.217958286s ago: executing program 4 (id=141): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x28, 0x80000, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x1d}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005b00)=ANY=[@ANYBLOB="2c00000012009702000000000000000007000000", @ANYRESHEX=r2], 0x2c}}, 0x400) socket(0x10, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x20}, 0x80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.501443056s ago: executing program 2 (id=142): pselect6(0x40, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xf, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x351}, 0x0, 0x0) 1.288302269s ago: executing program 4 (id=143): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0x10, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x10) 1.28799332s ago: executing program 1 (id=144): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x220a00}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x820) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.226702511s ago: executing program 2 (id=145): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0xa}, @void, @eth={@empty, @multicast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @mcast2, {[], {0x4e23, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x1, 0x0, @void}}}}}}}}}, 0x46) 1.153551032s ago: executing program 0 (id=146): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1.064254283s ago: executing program 4 (id=147): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000600000000070000000000f1ff9400000000000000"], &(0x7f00000003c0)='GPL\x00', 0x80, 0xfffffe3d, 0x0, 0x0, 0x1}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000040)='\xb1H\xd7\xda\xe8y\xa9rustV\x1eS=\xd4\x16\x95::\x00\x00\x00', 0x0) 943.882845ms ago: executing program 1 (id=148): r0 = syz_usb_connect(0x4, 0x3f, &(0x7f00000007c0)=ANY=[@ANYRESOCT], 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) r7 = syz_open_dev$ptys(0xc, 0x3, 0x1) r8 = dup(r7) write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r6, 0x0, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_NOTIFY_RADAR(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r10, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd35, 0x35}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0xc040) ioctl$FS_IOC_GETVERSION(r9, 0x5b24, 0x0) 910.493356ms ago: executing program 0 (id=149): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000040)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r0, 0x0, 0x0) 824.253897ms ago: executing program 3 (id=150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000070a01040000000000002000020000000900020073797a3200000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 823.991057ms ago: executing program 3 (id=151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x4, 0x30}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="011c9bf2a79c"], 0x8) close(r0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xd) epoll_create(0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x3) 189.350857ms ago: executing program 2 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 153.564627ms ago: executing program 1 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 0s ago: executing program 4 (id=154): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.178' (ED25519) to the list of known hosts. [ 47.888274][ T4173] cgroup: Unknown subsys name 'net' [ 48.076612][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.255615][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.705171][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 50.746155][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 50.805733][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 50.850257][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 50.890404][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.898294][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.906393][ T4190] device bridge_slave_0 entered promiscuous mode [ 50.918141][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.925496][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.933892][ T4183] device bridge_slave_0 entered promiscuous mode [ 50.943446][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.950518][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.959114][ T4183] device bridge_slave_1 entered promiscuous mode [ 50.978197][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.985652][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.993446][ T4190] device bridge_slave_1 entered promiscuous mode [ 51.022547][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.057531][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.086375][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.093961][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.102558][ T4193] device bridge_slave_0 entered promiscuous mode [ 51.116134][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.127364][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.139093][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 51.148747][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.156280][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.164336][ T4193] device bridge_slave_1 entered promiscuous mode [ 51.197983][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.205253][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.213530][ T4184] device bridge_slave_0 entered promiscuous mode [ 51.230646][ T4183] team0: Port device team_slave_0 added [ 51.254155][ T4190] team0: Port device team_slave_0 added [ 51.263692][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.270786][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.278763][ T4184] device bridge_slave_1 entered promiscuous mode [ 51.287161][ T4183] team0: Port device team_slave_1 added [ 51.294124][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.304345][ T4190] team0: Port device team_slave_1 added [ 51.311293][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.388767][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.396157][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.422819][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.448014][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.457542][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.464626][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.491305][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.502995][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.509942][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.536943][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.550170][ T4193] team0: Port device team_slave_0 added [ 51.564376][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.574225][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.581166][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.608974][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.623431][ T4193] team0: Port device team_slave_1 added [ 51.630603][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.638087][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.646556][ T4195] device bridge_slave_0 entered promiscuous mode [ 51.677622][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685693][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.693661][ T4195] device bridge_slave_1 entered promiscuous mode [ 51.753124][ T4184] team0: Port device team_slave_0 added [ 51.760501][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.774112][ T4183] device hsr_slave_0 entered promiscuous mode [ 51.780772][ T4183] device hsr_slave_1 entered promiscuous mode [ 51.788214][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.795375][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.821603][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.834708][ T4190] device hsr_slave_0 entered promiscuous mode [ 51.841559][ T4190] device hsr_slave_1 entered promiscuous mode [ 51.848590][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.857250][ T4190] Cannot create hsr debugfs directory [ 51.864803][ T4184] team0: Port device team_slave_1 added [ 51.871927][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.895524][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.903005][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.929205][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.955834][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.963901][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.990050][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.020671][ T4195] team0: Port device team_slave_0 added [ 52.027161][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.034496][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.060791][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.087928][ T4195] team0: Port device team_slave_1 added [ 52.120865][ T4193] device hsr_slave_0 entered promiscuous mode [ 52.128034][ T4193] device hsr_slave_1 entered promiscuous mode [ 52.134993][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.144693][ T4193] Cannot create hsr debugfs directory [ 52.191094][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.198311][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.225088][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.251863][ T4184] device hsr_slave_0 entered promiscuous mode [ 52.258878][ T4184] device hsr_slave_1 entered promiscuous mode [ 52.265567][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.273469][ T4184] Cannot create hsr debugfs directory [ 52.282866][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.289833][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.315930][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.406251][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 52.411710][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 52.414299][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 52.421261][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 52.469647][ T4195] device hsr_slave_0 entered promiscuous mode [ 52.476779][ T4195] device hsr_slave_1 entered promiscuous mode [ 52.483271][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 52.490040][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.498107][ T4195] Cannot create hsr debugfs directory [ 52.619295][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.638673][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.648392][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.659504][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.708062][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.727881][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.737605][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.753505][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.801244][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.824513][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.843149][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.851952][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.906025][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.921630][ T4184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.934895][ T4184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.954035][ T4184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.969063][ T4184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.998202][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.005739][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.014945][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.040142][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.055060][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.068932][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.078948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.088688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.098067][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.105417][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.114787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.123577][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.132519][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.146242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.155265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.164155][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.171984][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.226849][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.236217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.244657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.257109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.266436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.275723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.286264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.295066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.303639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.317843][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.341852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.350356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.359416][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.370258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.379217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.389080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.398383][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.405531][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.415978][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.438507][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.448531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.457537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.466735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.476069][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.483165][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.490807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.511846][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.532829][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.547575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.557752][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.592889][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.608808][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.618178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.627686][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.636718][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.646396][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.654418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.667867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.675984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.687434][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.698772][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.710981][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.720808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.732004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.755864][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.771026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.780258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.789043][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.796148][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.810312][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.827412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.836236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.845929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.856342][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.863528][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.871127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.880322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.889147][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.896568][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.909030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.935459][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.956090][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.969620][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.978691][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.992781][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.002583][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.011117][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.018357][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.026464][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.035766][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.043491][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.053530][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.073579][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.085652][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.095181][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.104526][ T1459] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.111644][ T1459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.120809][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.131355][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.145487][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.165072][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.177630][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.185934][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.196891][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.205715][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.214695][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.223333][ T1459] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.230471][ T1459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.239340][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.248066][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.257631][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.267309][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.277597][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.288061][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.317588][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.329092][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.345016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.352755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.360182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.369989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.378780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.388386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.397251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.406297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.416954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.425635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.434678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.446498][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.473236][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.482173][ T4253] Bluetooth: hci2: command 0x041b tx timeout [ 54.482479][ T4185] Bluetooth: hci3: command 0x041b tx timeout [ 54.497526][ T4195] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.508345][ T4253] Bluetooth: hci0: command 0x041b tx timeout [ 54.514705][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 54.524185][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.538143][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.547812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.559993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.568546][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 54.573252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.584497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.593324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.602390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.610799][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.620049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.628560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.637120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.646011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.666627][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.678661][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.705931][ T4183] device veth0_vlan entered promiscuous mode [ 54.718980][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.736681][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.764161][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.779408][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.795721][ T4190] device veth0_vlan entered promiscuous mode [ 54.813312][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.828282][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.840280][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.855003][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.882499][ T4183] device veth1_vlan entered promiscuous mode [ 54.895726][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.912972][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.926870][ T4190] device veth1_vlan entered promiscuous mode [ 54.956793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.965800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.983921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.994189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.006164][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.018410][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.033998][ T4183] device veth0_macvtap entered promiscuous mode [ 55.052448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.060820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.069284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.083191][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.105125][ T4183] device veth1_macvtap entered promiscuous mode [ 55.119008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.128129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.138763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.160687][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.177978][ T4190] device veth0_macvtap entered promiscuous mode [ 55.185844][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.194913][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.211195][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.233733][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.242531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.253337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.265539][ T4190] device veth1_macvtap entered promiscuous mode [ 55.288324][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.298300][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.308001][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.317711][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.330409][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.339087][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.349446][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.358699][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.368193][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.396501][ T4195] device veth0_vlan entered promiscuous mode [ 55.411306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.420379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.430153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.439048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.461313][ T4193] device veth0_vlan entered promiscuous mode [ 55.472972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.480896][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.489458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.499353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.508622][ T4195] device veth1_vlan entered promiscuous mode [ 55.530431][ T4193] device veth1_vlan entered promiscuous mode [ 55.550011][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.561552][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.574576][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.584035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.593929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.604556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.612838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.621840][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.630815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.640166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.674029][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.685329][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.702906][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.710417][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.719609][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.728414][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.738946][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.747802][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.756785][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.766227][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.778224][ T4184] device veth0_vlan entered promiscuous mode [ 55.795577][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806772][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.816269][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.825882][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.856548][ T4184] device veth1_vlan entered promiscuous mode [ 55.870128][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.878620][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.888391][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.897388][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.909407][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.919969][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.947539][ T4193] device veth0_macvtap entered promiscuous mode [ 55.960911][ T4195] device veth0_macvtap entered promiscuous mode [ 55.978180][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.988071][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.998266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.015725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.024035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.032312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.041165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.052497][ T4193] device veth1_macvtap entered promiscuous mode [ 56.068505][ T4195] device veth1_macvtap entered promiscuous mode [ 56.081704][ T4184] device veth0_macvtap entered promiscuous mode [ 56.088875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.098711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.129919][ T4184] device veth1_macvtap entered promiscuous mode [ 56.149665][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.161073][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.171814][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.182755][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.193805][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.224065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.233352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.245797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.256247][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.267194][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.277324][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.288590][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.300307][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.310916][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.322478][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.333041][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.343792][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.355116][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.366214][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.377431][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.386139][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.401767][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.410053][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.412965][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.423922][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.439001][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.439594][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.455724][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.466884][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.478040][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.489564][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.502616][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.514122][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.523555][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.535745][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.545772][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.556472][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.567401][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 56.567597][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.574029][ T4233] Bluetooth: hci1: command 0x040f tx timeout [ 56.589668][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.590650][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 56.606719][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.608961][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 56.617470][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.635306][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.644724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.653646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.657468][ T4233] Bluetooth: hci4: command 0x040f tx timeout [ 56.662731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.676314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.685475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.694142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.704236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.712488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.721091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.731009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.740371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.753712][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.763385][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.773237][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.782598][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.797588][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.807726][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.817092][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.826581][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.905658][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.917501][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.928465][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.939814][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.950021][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.960705][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.971754][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.983025][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.995936][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.007139][ T4184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.016798][ T4184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.027159][ T4184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.036306][ T4184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.081582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.105976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.277024][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.382639][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.395638][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.413695][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.499021][ T4300] process 'syz.1.2' launched '/dev/fd/-1' with NULL argv: empty string added [ 57.600782][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.617016][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.969568][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.987842][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.009472][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.078821][ T4301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.097488][ T4301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.206049][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.376037][ T1459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.653467][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 58.668094][ T1459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.737539][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 58.789031][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.794506][ T1459] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.812827][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 58.826538][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.834204][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 58.838403][ T4253] Bluetooth: hci4: command 0x0419 tx timeout [ 58.979018][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.746935][ T4328] loop4: detected capacity change from 0 to 64 [ 59.874813][ T4335] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 60.056322][ T4342] loop0: detected capacity change from 0 to 4096 [ 60.256602][ T4342] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 61.012947][ T4020] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 61.917390][ T4363] loop4: detected capacity change from 0 to 32768 [ 62.033562][ T4020] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 62.041498][ T4370] loop0: detected capacity change from 0 to 1024 [ 62.045810][ T4020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 62.048996][ T4363] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.20 (4363) [ 62.086327][ T4363] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 62.095348][ T4363] BTRFS info (device loop4): setting nodatasum [ 62.101643][ T4363] BTRFS info (device loop4): doing ref verification [ 62.108251][ T4363] BTRFS info (device loop4): use zlib compression, level 3 [ 62.115499][ T4363] BTRFS info (device loop4): force clearing of disk cache [ 62.122640][ T4363] BTRFS info (device loop4): setting nodatacow, compression disabled [ 62.129934][ T4352] loop1: detected capacity change from 0 to 32768 [ 62.130980][ T4363] BTRFS info (device loop4): turning on sync discard [ 62.144313][ T4363] BTRFS info (device loop4): using free space tree [ 62.151061][ T4363] BTRFS info (device loop4): has skinny extents [ 62.314483][ T4352] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.18 (4352) [ 62.342035][ T4020] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 62.351107][ T4020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.360023][ T4020] usb 3-1: Product: syz [ 62.368569][ T4020] usb 3-1: Manufacturer: syz [ 62.373283][ T4020] usb 3-1: SerialNumber: syz [ 62.383407][ T4020] usb 3-1: config 0 descriptor?? [ 62.441730][ T4390] ubi31: attaching mtd0 [ 62.453622][ T4390] ubi31: scanning is finished [ 62.458481][ T4390] ubi31: empty MTD device detected [ 62.648851][ T4390] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 62.656600][ T4390] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 62.664068][ T4390] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 62.671200][ T4390] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 62.678813][ T4390] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 62.685828][ T4390] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 62.694282][ T4390] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4087910774 [ 62.704797][ T4390] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 62.750183][ T4391] ubi31: background thread "ubi_bgt31d" started, PID 4391 [ 62.823397][ T4352] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 62.882095][ T4352] BTRFS info (device loop1): using free space tree [ 62.975602][ T4352] BTRFS info (device loop1): has skinny extents [ 62.982928][ T4363] BTRFS info (device loop4): enabling ssd optimizations [ 62.993950][ T4363] BTRFS info (device loop4): clearing free space tree [ 63.001533][ T4363] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.011631][ T4363] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.080495][ T4363] BTRFS info (device loop4): creating free space tree [ 63.089699][ T4363] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.099492][ T4363] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.136767][ T4404] sctp: [Deprecated]: syz.0.25 (pid 4404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 63.136767][ T4404] Use struct sctp_sack_info instead [ 63.237794][ T4020] hub 3-1:0.0: bad descriptor, ignoring hub [ 63.271836][ T4020] hub: probe of 3-1:0.0 failed with error -5 [ 63.634849][ T4020] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 63.795396][ T4020] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 64.655966][ T4352] BTRFS error (device loop1): open_ctree failed: -12 [ 64.681337][ T4451] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 64.771773][ T4200] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by udevd (4200) [ 64.805846][ T4020] usbtouchscreen: probe of 3-1:0.0 failed with error -90 [ 64.844165][ T4020] usb 3-1: USB disconnect, device number 2 [ 64.930132][ T4456] loop3: detected capacity change from 0 to 22 [ 64.952746][ T4458] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.958410][ T4456] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 65.156110][ T4467] netlink: 156 bytes leftover after parsing attributes in process `syz.1.35'. [ 65.167652][ T4456] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 65.169891][ T4467] x_tables: duplicate underflow at hook 2 [ 65.205048][ T4468] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 65.594896][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 65.622385][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 65.666072][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 65.698951][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 65.727942][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 65.757879][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 65.787395][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 65.890194][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.902837][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.912111][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.921227][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.930397][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.939715][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.948836][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.958711][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.968363][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.977557][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.398865][ T1108] cfg80211: failed to load regulatory.db [ 67.025405][ T4488] ODEBUG: Out of memory. ODEBUG disabled [ 67.170319][ T4491] block device autoloading is deprecated and will be removed. [ 67.531568][ T4020] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 67.931865][ T4020] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 67.961641][ T4020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 68.635062][ T4511] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 69.304751][ T4508] input: syz1 as /devices/virtual/input/input6 [ 69.331605][ T4020] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 69.340894][ T4020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.349244][ T4020] usb 4-1: Product: syz [ 69.353557][ T4020] usb 4-1: Manufacturer: syz [ 69.358224][ T4020] usb 4-1: SerialNumber: syz [ 69.381381][ T4020] usb 4-1: config 0 descriptor?? [ 69.457981][ T4020] usb 4-1: can't set config #0, error -71 [ 69.466750][ T4020] usb 4-1: USB disconnect, device number 2 [ 69.620048][ T4518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.49'. [ 69.643537][ T4515] NILFS (nullb0): couldn't find nilfs on the device [ 69.832846][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 69.852896][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 69.871617][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 69.886812][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 69.902586][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 69.918065][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 69.933802][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 71.365731][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.374754][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.490972][ T4543] sctp: [Deprecated]: syz.0.53 (pid 4543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 72.490972][ T4543] Use struct sctp_sack_info instead [ 76.678570][ T4573] loop3: detected capacity change from 0 to 32768 [ 76.887543][ T4573] XFS (loop3): Mounting V5 Filesystem [ 77.372050][ T4596] sctp: [Deprecated]: syz.2.68 (pid 4596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.372050][ T4596] Use struct sctp_sack_info instead [ 77.753427][ T4573] XFS (loop3): Ending clean mount [ 79.135267][ T4615] vivid-008: kernel_thread() failed [ 79.760184][ T4578] loop4: detected capacity change from 0 to 32768 [ 79.767715][ T4620] Zero length message leads to an empty skb [ 79.779700][ T4195] XFS (loop3): Unmounting Filesystem [ 80.633371][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.76'. [ 80.853779][ T4650] loop4: detected capacity change from 0 to 4096 [ 81.964516][ T4650] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 82.001345][ T4633] loop2: detected capacity change from 0 to 32768 [ 82.127351][ T4653] loop0: detected capacity change from 0 to 8192 [ 82.211927][ T4653] ======================================================= [ 82.211927][ T4653] WARNING: The mand mount option has been deprecated and [ 82.211927][ T4653] and is ignored by this kernel. Remove the mand [ 82.211927][ T4653] option from the mount to silence this warning. [ 82.211927][ T4653] ======================================================= [ 83.187321][ T4675] vivid-001: kernel_thread() failed [ 83.197293][ T4675] vivid-001: kernel_thread() failed [ 83.411221][ T4661] NILFS (nullb0): couldn't find nilfs on the device [ 84.005780][ T4633] XFS (loop2): Mounting V5 Filesystem [ 84.175938][ T4633] XFS (loop2): log mount failed [ 84.733523][ T1324] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 84.743036][ T1324] Bluetooth: hci2: Injecting HCI hardware error event [ 84.752031][ T4194] Bluetooth: hci2: hardware error 0x00 [ 84.982032][ T4696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 88.907544][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 89.021561][ T4020] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 89.080426][ T4748] loop0: detected capacity change from 0 to 512 [ 89.161089][ T4748] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.187351][ T4748] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.231816][ T4748] EXT4-fs (loop0): 1 truncate cleaned up [ 89.238167][ T4748] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,max_dir_size_kb=0x000000007fffffff,dax=inode,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 89.259807][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.284912][ T4748] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.115: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 89.305709][ C0] vkms_vblank_simulate: vblank timer overrun [ 89.316644][ T4748] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 89.338383][ T4748] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.115: Deleting old file: nlink 5, error=-117 [ 89.711336][ T4020] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 89.730822][ T4020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.749936][ T4020] usb 3-1: Product: syz [ 89.755125][ T4020] usb 3-1: Manufacturer: syz [ 93.739067][ T4020] usb 3-1: SerialNumber: syz [ 93.837329][ T4773] loop4: detected capacity change from 0 to 1764 [ 93.852761][ T4020] usb 3-1: can't set config #1, error -71 [ 93.910453][ T4020] usb 3-1: USB disconnect, device number 3 [ 94.741609][ T4020] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 95.161626][ T4020] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 95.211587][ T4020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.902808][ T4020] usb 3-1: config 0 descriptor?? [ 95.973506][ T4020] usb 3-1: selecting invalid altsetting 3 [ 95.979513][ T4020] comedi comedi5: could not set alternate setting 3 in high speed [ 97.070215][ T4020] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 97.152657][ T4815] input: syz1 as /devices/virtual/input/input7 [ 97.317699][ T4020] usbduxsigma: probe of 3-1:0.0 failed with error -22 [ 97.337965][ T4020] usb 3-1: USB disconnect, device number 4 [ 97.641259][ T4820] loop2: detected capacity change from 0 to 1764 [ 97.681482][ T13] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.899612][ T13] usb 1-1: config 4 has an invalid interface number: 88 but max is 0 [ 98.908085][ T13] usb 1-1: config 4 has no interface number 0 [ 98.914726][ T13] usb 1-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 98.927024][ T13] usb 1-1: config 4 interface 88 has no altsetting 0 [ 99.141596][ T13] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 99.209238][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 99.220157][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.141'. [ 99.931530][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.939886][ T13] usb 1-1: Product: syz [ 99.944121][ T13] usb 1-1: Manufacturer: syz [ 99.948712][ T13] usb 1-1: SerialNumber: syz [ 100.151164][ T13] usb 1-1: USB disconnect, device number 2 [ 100.172806][ T1092] block nbd1: Attempted send on invalid socket [ 100.179697][ T1092] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 100.191924][ T1092] gfs2: error 10 reading superblock [ 100.533661][ T4865] ubi: mtd0 is already attached to ubi31 [ 101.099125][ T4860] loop0: detected capacity change from 0 to 1764 [ 206.351401][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 206.358618][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4524/1:b..l [ 206.367037][ C1] (detected by 1, t=10502 jiffies, g=8349, q=533) [ 206.373556][ C1] task:kworker/u4:13 state:R running task stack:19840 pid: 4524 ppid: 2 flags:0x00004000 [ 206.385694][ C1] Workqueue: bat_events batadv_nc_worker [ 206.391478][ C1] Call Trace: [ 206.395030][ C1] [ 206.398081][ C1] __schedule+0x11b8/0x43b0 [ 206.402688][ C1] ? mark_lock+0x94/0x320 [ 206.407128][ C1] ? mark_lock+0x94/0x320 [ 206.412039][ C1] ? release_firmware_map_entry+0x190/0x190 [ 206.418036][ C1] ? mark_lock+0x94/0x320 [ 206.422382][ C1] ? preempt_schedule_irq+0xa6/0x150 [ 206.427965][ C1] preempt_schedule_irq+0xb1/0x150 [ 206.433265][ C1] ? __cond_resched+0xb0/0xb0 [ 206.438330][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 206.444147][ C1] irqentry_exit+0x63/0x70 [ 206.448653][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 206.454208][ C1] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 206.459507][ C1] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 206.479211][ C1] RSP: 0018:ffffc900012efaa0 EFLAGS: 00000206 [ 206.485286][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: cf8cf07596f40700 [ 206.493539][ C1] RDX: 0000000000000000 RSI: ffffffff8a0b2860 RDI: ffffffff8a599340 [ 206.501861][ C1] RBP: ffffc900012efbc0 R08: dffffc0000000000 R09: fffffbfff1ff6e19 [ 206.509955][ C1] R10: fffffbfff1ff6e19 R11: 1ffffffff1ff6e18 R12: ffffffff8c11c360 [ 206.517941][ C1] R13: 1ffff9200025df60 R14: 0000000000000246 R15: dffffc0000000000 [ 206.526019][ C1] ? rcu_lock_release+0x5/0x20 [ 206.530891][ C1] ? read_lock_is_recursive+0x10/0x10 [ 206.536374][ C1] ? __lock_acquire+0x7c60/0x7c60 [ 206.541422][ C1] rcu_lock_acquire+0x2a/0x30 [ 206.547756][ C1] ? rcu_lock_acquire+0x5/0x30 [ 206.552705][ C1] batadv_nc_worker+0xc9/0x5c0 [ 206.557483][ C1] process_one_work+0x863/0x1000 [ 206.562540][ C1] ? worker_detach_from_pool+0x240/0x240 [ 206.568336][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 206.573724][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 206.578751][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 206.584596][ C1] ? wq_worker_running+0x97/0x170 [ 206.589908][ C1] worker_thread+0xaa8/0x12a0 [ 206.594694][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 206.600693][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 206.605925][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.611945][ C1] kthread+0x436/0x520 [ 206.616086][ C1] ? rcu_lock_release+0x20/0x20 [ 206.621090][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.625695][ C1] ret_from_fork+0x1f/0x30 [ 206.630209][ C1] [ 206.633241][ C1] rcu: rcu_preempt kthread starved for 10516 jiffies! g8349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 206.644450][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 206.654837][ C1] rcu: RCU grace-period kthread stack dump: [ 206.660819][ C1] task:rcu_preempt state:R running task stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 206.671690][ C1] Call Trace: [ 206.674967][ C1] [ 206.677986][ C1] __schedule+0x11b8/0x43b0 [ 206.682505][ C1] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 206.688089][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 206.694001][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.699905][ C1] ? _raw_spin_unlock+0x40/0x40 [ 206.704857][ C1] ? rcu_is_watching+0x11/0xa0 [ 206.709739][ C1] ? release_firmware_map_entry+0x190/0x190 [ 206.715667][ C1] schedule+0x11b/0x1e0 [ 206.719941][ C1] schedule_timeout+0x15c/0x280 [ 206.724800][ C1] ? console_conditional_schedule+0x40/0x40 [ 206.730880][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 206.736789][ C1] ? update_process_times+0x200/0x200 [ 206.742189][ C1] ? prepare_to_swait_event+0x331/0x350 [ 206.747745][ C1] rcu_gp_fqs_loop+0x29e/0x11b0 [ 206.752689][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 206.757974][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 206.764224][ C1] ? rcu_gp_init+0x10e0/0x10e0 [ 206.769170][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 206.774387][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 206.779593][ C1] rcu_gp_kthread+0x98/0x350 [ 206.784223][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.789346][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 206.795244][ C1] ? __kthread_parkme+0x157/0x1b0 [ 206.800709][ C1] kthread+0x436/0x520 [ 206.804879][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 206.810085][ C1] ? kthread_blkcg+0xd0/0xd0 [ 206.814678][ C1] ret_from_fork+0x1f/0x30 [ 206.819298][ C1] [ 206.822355][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 206.828770][ C1] NMI backtrace for cpu 1 [ 206.833199][ C1] CPU: 1 PID: 4875 Comm: syz.3.151 Not tainted 5.15.189-syzkaller #0 [ 206.841260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.851631][ C1] Call Trace: [ 206.855006][ C1] [ 206.857963][ C1] dump_stack_lvl+0x168/0x230 [ 206.862730][ C1] ? show_regs_print_info+0x20/0x20 [ 206.867928][ C1] ? load_image+0x3b0/0x3b0 [ 206.872441][ C1] ? irq_work_queue+0xbf/0x140 [ 206.877208][ C1] nmi_cpu_backtrace+0x397/0x3d0 [ 206.882153][ C1] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 206.888499][ C1] ? _printk+0xcc/0x110 [ 206.892832][ C1] ? cpu_online+0x1d/0x30 [ 206.897162][ C1] ? load_image+0x3b0/0x3b0 [ 206.901681][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 206.907757][ C1] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 206.913857][ C1] rcu_check_gp_kthread_starvation+0x1cd/0x250 [ 206.920162][ C1] print_other_cpu_stall+0x10c8/0x1220 [ 206.925719][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 206.930682][ C1] ? timekeeping_advance+0x7f6/0xac0 [ 206.936080][ C1] rcu_sched_clock_irq+0x831/0x1110 [ 206.941327][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 206.946177][ C1] ? account_process_tick+0x227/0x3a0 [ 206.951563][ C1] update_process_times+0x193/0x200 [ 206.956763][ C1] tick_sched_timer+0x37d/0x560 [ 206.961620][ C1] __hrtimer_run_queues+0x4fe/0xc40 [ 206.966822][ C1] ? tick_setup_sched_timer+0x2c0/0x2c0 [ 206.972376][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 206.977489][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 206.983555][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 206.988506][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 206.994483][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 207.000117][ C1] [ 207.003046][ C1] [ 207.005975][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 207.011971][ C1] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 207.017793][ C1] Code: f6 ff 0f 1f 00 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7e db aa f7 48 89 df e8 46 b0 ab f7 e8 91 46 cc f7 fb bf 01 00 00 00 76 d4 9f f7 65 8b 05 17 d4 50 76 85 c0 74 02 5b c3 e8 c4 de 4e [ 207.038511][ C1] RSP: 0018:ffffc90002fefbc0 EFLAGS: 00000282 [ 207.044582][ C1] RAX: acbba8d5e6362100 RBX: ffff88805a0eca00 RCX: acbba8d5e6362100 [ 207.053207][ C1] RDX: dffffc0000000000 RSI: ffffffff8a0b15c0 RDI: 0000000000000001 [ 207.061284][ C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100b41d941 [ 207.069724][ C1] R10: ffffed100b41d941 R11: 1ffff1100b41d940 R12: ffff88805a0eca00 [ 207.077880][ C1] R13: 0000000000000011 R14: dffffc0000000000 R15: 0000000004000000 [ 207.085878][ C1] get_signal+0x11d6/0x12c0 [ 207.090413][ C1] arch_do_signal_or_restart+0xc1/0x1300 [ 207.096040][ C1] ? _copy_from_user+0x111/0x170 [ 207.100990][ C1] ? __ia32_sys_rt_sigreturn+0x660/0x790 [ 207.106626][ C1] ? rcu_lock_release+0x5/0x20 [ 207.111491][ C1] ? load_gs_index+0x120/0x120 [ 207.116601][ C1] ? get_sigframe_size+0x10/0x10 [ 207.121637][ C1] ? exit_to_user_mode_loop+0x3b/0x130 [ 207.127295][ C1] exit_to_user_mode_loop+0x9e/0x130 [ 207.132589][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 207.138158][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 207.143725][ C1] do_syscall_64+0x58/0xa0 [ 207.148588][ C1] ? clear_bhb_loop+0x30/0x80 [ 207.153282][ C1] ? clear_bhb_loop+0x30/0x80 [ 207.158143][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.164040][ C1] RIP: 0033:0x7fc1033ad9a9 [ 207.168461][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.188243][ C1] RSP: 002b:00007fc1011f40e8 EFLAGS: 00000246 [ 207.194458][ C1] RAX: fffffffffffffffc RBX: 00007fc1035d5088 RCX: 00007fc1033ad9a9 [ 207.203591][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1035d5088 [ 207.211796][ C1] RBP: 00007fc1035d5080 R08: 0000000000000000 R09: 0000000000000000 [ 207.219808][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc1035d508c [ 207.227969][ C1] R13: 0000000000000000 R14: 00007ffcea072290 R15: 00007ffcea072378 [ 207.235963][ C1]