last executing test programs: 1m10.733931413s ago: executing program 0 (id=37): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda8d) accept4$inet(r1, 0x0, 0x0, 0x800) 1m4.141120592s ago: executing program 0 (id=42): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r4 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000480)={@private2, 0x18, r7}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004e80)={0x18, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m2.777844669s ago: executing program 0 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4000}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4000000) 1m1.486918884s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m0.199760838s ago: executing program 0 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x2404c044) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffda5, 0x0, 0x0}) 45.102594484s ago: executing program 32 (id=51): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x2404c044) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xfffffffffffffda5, 0x0, 0x0}) 22.929488819s ago: executing program 1 (id=147): openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, r1, 0xb320a000) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) 21.729622579s ago: executing program 1 (id=151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 16.937443078s ago: executing program 1 (id=154): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4c050) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000380)={0x41, 0x4, 0x3}, 0x10) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe4) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)={0x66, 0x7d, 0x1, {{0x0, 0x49, 0x2, 0x1, {0x1}, 0x40000, 0x8, 0x5, 0x2, 0x1, '&', 0x0, '', 0xd, '/dev/net/tun\x00', 0x8, 'pimreg0\x00'}, 0x8, '[$)\\^%:}', 0x0, r4, r5}}, 0x66) r6 = socket$kcm(0x2, 0xa, 0x2) eventfd(0x1000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r8 = gettid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r2) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000002c0)={r13, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000040)={r13, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x3c, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r13, {0xe, 0x1}, {}, {0xd}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xffff0083}, {0x8, 0xb, 0x7}]}, 0x3c}}, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r10, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x48042}, 0x4008000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="6d30826100000000080013", @ANYRES32=r8], 0x28}}, 0x0) r14 = openat$full(0xffffff9c, &(0x7f0000000040), 0x121c40, 0x0) openat$cgroup_ro(r14, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) 7.941610576s ago: executing program 4 (id=170): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0xa, 0x4e1b, 0x1, @private0, 0xf1f2}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) shutdown(r0, 0x1) 7.934886808s ago: executing program 3 (id=171): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140)=0x40, 0x4) 7.818106037s ago: executing program 4 (id=172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) 7.736765811s ago: executing program 3 (id=173): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) write$snddsp(r2, 0x0, 0x0) 7.704287796s ago: executing program 3 (id=174): semget$private(0x0, 0x20000000102, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0x40}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11fa17f59dbc0325ce0c991cbac996d7eb1ac57947728edd7164fcdaee5d16907a30b8dcab517be26ca273ba5134cc8865b91", 0x99}, {&(0x7f00000004c0)}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp6\x00') sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000d14000227bd700014dcdf2508000300020100000800030002000000080001000200e8f04f000008003e0004000000080003000000000063183c5df0edd14935630dd101c50a1b5930afa3b253ad5c5155c69b009777008ad48f6087acf1be83e36c1353832028e9f3b5a64fcae4ac9be47315e1ca1043c79509c4ce18cd7ee4b5420d8fdf72078c3f396db5f51ab231cb1524551dc6e2b2f64d017527ae63455c9ce5f4bd0d07cf9afc3ff43676267ef449e85b"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4) read$FUSE(r3, &(0x7f0000005b00)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000014000280040003000800020000000000040004"], 0x40}}, 0x2008040) pread64(r4, 0x0, 0x0, 0xadc) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) r8 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000d, 0x31, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f0000004040)) mprotect(&(0x7f000091c000/0x4000)=nil, 0x4000, 0x5) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r9, {0x2, 0x4e22, @broadcast}, 0x1, 0x0, 0x0, 0x3}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800cef010006000000ff0300000c00010004000000080000000c00010004000000020000000c0001000500000003000000080005", @ANYRES32=r10], 0xb4}}, 0x0) 7.605552592s ago: executing program 4 (id=175): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 4.917750481s ago: executing program 4 (id=176): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003640)=""/191, 0xbf}, {0x0}], 0x2}}], 0x1, 0x10142, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.492813851s ago: executing program 4 (id=177): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4008}]}, 0x40}}, 0x0) 4.099228097s ago: executing program 3 (id=178): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00i\x00\x00\x00\x00', 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000100)=@add_del={0x2, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00bc5e000000080045f000200003000000119078ac1414f1ab14143600004e21"], 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x4cd29724, 0xff, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x3672, 0x0, 0x0, 0x2, 0x2}}) socket$tipc(0x1e, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 3.217496384s ago: executing program 3 (id=179): r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7fffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x1}}, 0x10) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = dup(r0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 2.180665086s ago: executing program 1 (id=180): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xe, 0x20, 0x4, 0x4}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={r3, 0x6}, &(0x7f0000000300)=0x8) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffffb31356d5c2cc949700636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000300003802c0000800800034000000002200007800e000100636f6e6e6c696d69740000000c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, 0x0, 0x10459) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0), 0x0, 0x0) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r8) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r9, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) close(r0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 2.119527847s ago: executing program 2 (id=181): socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f00000009c0)={0x0, 0x0, 0x3800, 0xffffffff, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x10, 0x0, @fd=r0, 0x1, 0x0, 0x7, 0x4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x8c0) write$binfmt_aout(r4, 0x0, 0x696) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x804) 1.961593813s ago: executing program 4 (id=182): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f00000001c0)={0x5, 0x7, 0xeeef0000, 0x1000, &(0x7f00000ee000/0x1000)=nil, 0x3}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) writev(0xffffffffffffffff, 0x0, 0xffffffffffffff6a) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r6 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x4000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8) shmctl$IPC_RMID(r6, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 1.869806488s ago: executing program 2 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x1, 0x71bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x7afc5, 0xe0f}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'dvmrp0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x17}]}]}, 0x50}}, 0x0) 1.531358075s ago: executing program 2 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2800, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0xfff, 0x1400, 0x9, 0x3ff, 0xffffffff}}}}}, 0x0) 1.438108041s ago: executing program 5 (id=97): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/psched\x00') pipe2(&(0x7f00000001c0), 0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xdd, 0x40, 0x7fff0000}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) dup(r0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0x202, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.285455955s ago: executing program 2 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r7) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r8, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 982.456916ms ago: executing program 3 (id=186): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$isdn(0x22, 0x2, 0x11) dup3(r0, 0xffffffffffffffff, 0x0) 889.965842ms ago: executing program 2 (id=187): r0 = syz_usb_connect$hid(0x9, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400018000000009040000010300000009210500000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x22, 0x5, {[@global=@item_012={0x1, 0x1, 0x4, '3'}, @global=@item_012={0x2, 0x1, 0xa, '<5'}]}}, 0x0}, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0x4, 0x88300) openat$kvm(0xffffff9c, &(0x7f0000001140), 0x800c0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f00000000c0)={[0x1ff]}, 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={r3, 0x718, 0x4, 0x0, 0xb, 0x9, 0x1, 0x0, {r3, @in6={{0xa, 0x4e23, 0x10, @local, 0x8000}}, 0xffffffff, 0x7ff, 0x40, 0x8, 0x7}}, &(0x7f0000000200)=0xb0) r4 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB='permp'], 0xff) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/4096) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000010c0)=""/116) r8 = msgget$private(0x0, 0x121) msgctl$IPC_INFO(r8, 0x3, &(0x7f0000000000)=""/4) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000040)={{0xf}, 0x1, 0x8, 0x7000, {0x2, 0x1}, 0xf9}) msgsnd(0x0, &(0x7f0000002340)={0x1, "51067b00f0fca344e8c9f7b5c1233ea676ed06d3c11332bb5c2bf5069641cab3fecff9b14b31c293e3f58126ae12ec3abec78c0fce372f74c0583bb31d31565263e28616d8a8fba88dcd09bde71d79b26e123026266e0ac6e69d0c97f778937df1aa947325492653053d3b09994cef51421d166cac0490b869bf3be7f567d804aa0ab9599680658fee6e9e32b998795a9d41bfd1d922a2241b140ccbae747a63f13f1213f375e25d2c0f2f6457c8ef30b3b25be92cf90b4b4a85cba39762d6445b934b8ea71e6371f19b29e499e69675b0fa42743524e12103d2f45f37b8428eb4fe186f0c2503d8090ad070bd7aee9c40c0cf2ad1d770f7375e023fb2220afac5ce779e5b43d681c81012834fa59b3a85315c0b096571fe901d6b96c04f28b66c14e55e1a4440f25ed3e177db49ed8e372bf58e6c44c1f44ba75ea3d7c19e4eb7e557ffa517351c4740b2abb42087adb25903b9b28367f955bbcfd9bac1e2f1015ac1c23ca8f4f380dd84c210ef25c7c0d37a29ebcc3e079d09b6a9913c4775ee485217862a1268cef5bff2c7a4568819759ce9bba6d558033b951504cf464aeec46ef3b7d4cc137ab63751f0dc4c0b5724ac2f8fceda2d119803e8b80e9eea667f16fee9d018ccd5b43004c3abafb79974eb028ce69ac5cb958711947a0e0bbcc1e19478f5e567a7fe997c8612cbb44ec183cac7aa18ae75694df5246e55afb704370b35a83dd84e1d74515150295d4f0f871fbd799cc4926e2a872620d1066ab870956c11bc65fde67b11e2d75c8a0b71bb1dcb4a2a4a4874ce845ba47a715c8499a0d885c63d6de19b76b7f528fbec9f94a5efae0ea0418995393c59c2d8b32e59f3b555c84fc34c7090fdf96759df082d82d66e63501f76e31a03daa22496ba84c55bad6021fc1e2f65bc7e76063d7b57214fb69ed3c00aa8dd241df7ba6aa08c7591b74e62250df87c337d82b45d1eeb9561c19bb2b0874d2fc9845a3db6ec97d279b622df6b4da19c34a760e1087decc3027a88828b109b266b9caf5ac152cd8182f27588346ac840a90ed5ac4d7b93bbb71a19007bb4ca47f10075bdf460d47640a90844bda4cea5be139e096212ed630541f3875d1ac00cb3289585f19a9e2f3e21ea8d5fbc53c46dbc968200ad2da6ba4d33c037f146b2c92566118923e0c742cf23335418e48cff4941ba322bae6a78487dfe9b70204d98c2efedca633df0e9c52fd7b1540de5ded89447090f3962592754586d2ee230df25b0d36ec46648c71661c22301edbf63f069da4f8c48f1091ca1acc95bc207265bcc2eeb947afd3885d3e51373b65dfdabcaaa136e5a3ef8f9b1a31ef5e6b33e166f830f1ee0273d56b51b9034495d1eee4c1a103015839fb7bdbfe921f733d87c1d4f295b9473ed15e257784b0362cac224c9d05e3c8927574b79c3c980cc0ff058c371bb6f4a8f832e94b7b305bb243d0ccde1a18f64451ad71addc08d87b35cfe05897911d7331e0dc93c8e1e84b763df2ef9dd9d2b15d8e6b623e7cde73e7cc85244e242a69b9fb5dabfd06eccc594dab4d20ceea7725a7d989da10e08fa55f9f8be6937e413b521cc1c10c1729ec2203ffd5183fb698589c246dbdc3305b0dffe007aa5a674158c513fe93fc5083cafbc4529e13292f161aa36f2854964dd62c55ee82c2176d0590f8d64d17afc4e57b8cd80396aab4726156ea9acf3b6c0847ed86d610f94c14874f08e85e3ada66f4f8c3ca1b696a1a6d591744f4d38c013e3d595f67130ffd9bade1887b4b24f825acb817ce4298ce9a36121292880c27d8e6a5cd3ce4075ba7186bc46b34a92a5b5e25c50d10c2b36df1b04e2cf407e7bc3ba7973081a67f942677e5cc22f133e0782753c1451bca199dad8b48a2167bea181c75e201e8b601a20ec2777f5132815ced79df9c1b4a0308f8a185fcc3b52ce15a7822e507a9f3a3c6b46cc1c995e5b0baccd3d25063c7ee6dc1d749a334712da9c80c11c5413e97e999f49f09b32dfab2e205ff4a7d6c443859b09eb6e4e38e025f12402b525b5c21b7e8593a59894f10d53a46af3cef57faeb2693cec3c221c0a70222fdb1fd7697c8e8acb4b088d8e12d0bb36e91ab6a3d3bf65085d79de14f28568cdf764cad67f34b23ea19a626f1e86008dd2aba315a020ad107e7d6eee467eb56afc71fc16187e26d44b6c91fdc49bccc7f119d8666c6f84c9ba16b4d3c2838e27c146c614656200be8c998cf4d0fc12c0d827e2645fb2353e4c63676217e82a29341319e5de3b7f4d45308e00be508678690424e4a0b837684dd699d13d212d7cef4958e495453c9dd909336fa50bc74927947cfbcaf2fa281a9ee7d51d83005c32d0790d0561d5d87a6241ef77c8969a030a37d04c80dec6b8ee77c2eed4bcffa9829594b251619ec5232045cecd647f7f4ec257d02378da8c9e56fd29f266598bbfea064020502b5c2b3a73a005daa8b99d65b345af933baa4a080834b844d1c33b599fe398c7a1b81abf08f525175a2ea29abc5bc89990a067f94b9b3ffdd0e7e13907e71b1cfc68374aee28b029fd9011e0a6c20b35e758c945fe5fd3308e10660967eb501c2a3909a2f174791a2fce96d83a63b29ac1d16f6e22ea412d129a9305fbeb136485c1a62ee9dffc12b612d8753a0e06bb42cad49bebd38c91fb33da8ae02a5403c90d03b8f6220e2e58b2cf645cc66486ba199dc3ade3ae262f426afcfb588c210e6721215d1131d5bdfdccaa51c28f823d961be4094d98e622fa1d2b23f8c376f1eecebc4e60e79571a0da121fad121e9cf09438c7c7fd1edf1eba8a2e9e9c3f1138e8aa02cb67176c960aa6c723b5bb84736e06d7f462222ebca31bff528f9f2f6e8af5372993aceca7877ede3aec8436eff1fae5f91a27cd7fe464b53be15c3f283459079e3fa9f19fdc61e7ba515709398a54555f4bdf041c677b5c344dd780efe65757ce1a0a1aa9c609dc2650597aa4171d9576dd471293986c586f16f03c5c34df8ca8ebceffbe3da9a61b9824e3023095746894660e280fee8eb935db06af5cd15f87a05482140b40f74fae1dbde0c1d67b7ab036ef9f79e3cabec7221254a59193a9f66efe5725ce5bad8dca6e71ce8439453b5a0ad116b1888d42ddc86e251ba259d3104f261f02ccdc2f2bc4c8889ffa708e6485baf8bea765e9aff7a52304ddd38f4646749bb5552098c55ab020bdc786ccc34a3c0f17ab29f98d36e6b55d7e9f8bfc2539f37467803055571de54de40be593556e3c1c31309b8a4a5a1036c9b25e9aa61b413b35d9b3bbe8dd7f3282f9059834b18ae2a2080a7db33473fdf45a39f399a1821ac10cc88982caf8ef8b1013ebcd550365ec74eef21194631f13ba8e3775b42e54c82008a691a4567f7acba6bbb5e1f74590c138958c1a4d1fbe249191f62009b5b199ee1c34d0f45a3032b82f65e91d732b476cd957c682b34bf594e0048677b4477d5989f382c2c77cd4d60808915c21b96f11128c159fb8643557f26de24651bf8e4984a89c0910ef2febcf4329b1ff2c20e0f939c7817ec2099ee617541f55850beba4c89568d0e78bf9bf89b070960ee142a72d7cd27dcff85b89c116e761d93bac362351cabeab1685adf74364176c2bf6224426d934adcba157342f805cc9434e387bde92d8fec7d13db961a66fd9d218c5f3d18882feea10722f3e57520657c48ef0223b4af2567c68af3cbd816d51abf7f70cc02f181fbdff9354d4e2a0d9f925e2028f49192de15cb65a19e490a97d47cfc6fd5d1eb975985b9243deffe11941ce166ea27e090496ae5e9c66eaff716f0c1a284c294b3dd3d82bf2fa9a7ca1e77d6fe41829283ca6749cf3cf235d6d96e527614f7067a3d6c6453a033c5293f515bdaa1420f89b661a7dd0d40af56a5033046e689890836ee44f6aa84fdb3e9ed9fb9efdf8733f8e869038ea144d2efef86e26fc7addfaf716af7fcc439cacb018fc000bc30a53655ad8c86fef1c1874a4486d6c177f27d5d4164530f49b57baeaccc6d4a53c2f26112dee28c1b2f346dd9fe270ab8e0d18b15417fb9072987376148f5008caad5bae3e55027cffe4fa75a580b9ea7d53a2a1a3b025019ea70315dd5aa43bfeb3126ecf7105123c64437ff23958fb77c88878f7954ebd446566254ef980562352a949e674e5e7095ecc76421463fdb8fc9d3830785d72b288f3390409b35d3c360b28dc91df6e886eb27ce18ff7d2b860b25aa3f1bcf02b04ff3a3ba7db1b172359b8bd8bcbc475e7200f62dc6938b28a91872333826ef9119e20285f9e9b51bfe95702c296f0bcb495655caee9f28c544315fe447f676ed62280bb36a3d051e6028973d0383b55af38c6b8b465401bfcc148a12987fe38a0c010ad595c9c034e6aff85157150d49590816b4b88dd4323477b31827334ad57bbdb466fcafca44d97c821ea25ddd319c5ef48915e4864536f7296a02f3d2835084c3f632bcf6f2b4ae505bb1c50f7c0eb29ee110770dc55e742ef2c3a486075df2112ca3720cdb481e91f676f21d60a5937add1f76a679581e7a1397b3cab984fefb18c07ba7a20acd9f6b1e6af1eaa7ffffa3422d31a3bc960fdbe32b868ae50b50b2aa825b414160c738781666d73d3c53799c69590af7febfb9c8aadddb6b5367e045a723c4938ef23891d81df681eb9487588e9d824981449fc5d1291a332054974d8122f33c8e009ce68ddd504bc4ae20ba60b7427ad48c4760d8bcf4ac4f570ccd45ddc81173f1875347c6888d4c57f15f2ed207132ba692e644d8f726e8b1f6943fb1cd2a9d7b41b97c062ab502a0242eaa7f69c644648ee2ec1898332c1f05454699ccaad473a058f4b569cda51b9ac7babf645ff602a36afb8a7b2abb8efc3b643a00367153117eeed3ba7527e048276c52de566d5001bf7e1ba49806dc7fdd9c117c244c03da4b57a21a60df56f6a76840d1cc2508a1bb2845621bf5d599f6f20862da999d102d06f1dab2d43"}, 0xdd1, 0x0) msgctl$IPC_RMID(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0011022, 0x0, 0x3be4}]}) 545.536989ms ago: executing program 5 (id=188): socket$inet6(0xa, 0x3, 0x3c) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x1000000, 0x0, 0x3, 0x1}, 0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0x52b242d) keyctl$search(0xa, r3, &(0x7f0000000240)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, r3) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x11) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x11e) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="0100000000000000000009000000380003"], 0x4c}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) 545.145359ms ago: executing program 1 (id=189): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "1cc583", "fb9b2bdee1b7618cbc20439b1eee4d78af7b1a63c32702bb06569994bf05bbbbec37afac59fc0f3359bd4989f2edd4c52af3e4a7a35bc4eed2dae86c7c440035908794d146eaf457048770835ca7490f098b52588fe14cb5fc088355e092cdaef909e95b7c51cf96165b74a811536625e32374494ed9ce267739f922940657d708a7614889e4b3e17545eec660ad956b74a7388da3de334ffebc864970d45d2be4ec39b2b1fee3bdbc0e04957b5fd3b41e7fdae11a70cde685bcd669c828e4c593693c5b5df0d08d40975cb5810ee430ec508ed2f7ad139c7be36cc67c36af6e4f1f6eaf07a1295678f0850deb46849dc346218830e9523b2899d1a7351dd9b1"}}, 0x110) 319.772827ms ago: executing program 1 (id=190): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="704bf5ddec082d38277cd599f3e5441a687947fd7c78c8861e08e5daf58a258cee52c82a6ad6668ef01187bb25c994504e8abaee6931b5bfc7b3e78d7e1323b0a754c830889d8148bfe33c6814", 0x4d}, {&(0x7f0000000200)="9f1d6354a2eb281438bb72042df7782a0122ed4a325534d75abca157dbea678b258ff89afdaf3833c436089b04fddb581551d434931e0990e272662ee46c53e2207b55da74af6d29d2619a42ee394c8758b1a3c8719883ffaf123523edd66d902081e3b1313598515a7c80330f3dff57716f000dc840232a2dcf2d8b724f4c77a4adc944668de60c67aa37102d0c903b7cf85a7f6442c2357eeb879627d6ee5ea7f96438e60d150f83362057c2c81f199710e271e005edcdbb1c66f8b6651f26b5e826d33cbe055451930fc623749bfc36298a6ad3", 0xd5}, {&(0x7f0000000340)="a6c88dd6650a2a8f33642893043f799944e368913e91805e65f91cc6eae92034a6db3df0", 0x24}, {&(0x7f00000004c0)}], 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6(0xa, 0x1, 0x100) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 0s ago: executing program 2 (id=191): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004c, '\x00', 0x0, @sk_reuseport}, 0x90) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x80047437, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4c00, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 65.148955][ T4170] cgroup: Unknown subsys name 'net' [ 65.264800][ T4170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.914751][ T4170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.552147][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 68.569580][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 68.581873][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.625392][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 68.677618][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 68.794703][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.802288][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.812235][ T4183] device bridge_slave_0 entered promiscuous mode [ 68.851217][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.858897][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.867190][ T4183] device bridge_slave_1 entered promiscuous mode [ 68.875613][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.883538][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.893630][ T4185] device bridge_slave_0 entered promiscuous mode [ 68.909507][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.917184][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.926609][ T4185] device bridge_slave_1 entered promiscuous mode [ 68.934694][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.942427][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.951896][ T4186] device bridge_slave_0 entered promiscuous mode [ 68.999979][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.008007][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.018681][ T4186] device bridge_slave_1 entered promiscuous mode [ 69.050496][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.062744][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.071025][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.081604][ T4193] device bridge_slave_0 entered promiscuous mode [ 69.099516][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.108518][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.117288][ T4184] device bridge_slave_0 entered promiscuous mode [ 69.129457][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.142255][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.153381][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.161810][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.171065][ T4193] device bridge_slave_1 entered promiscuous mode [ 69.186794][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.194867][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.204857][ T4184] device bridge_slave_1 entered promiscuous mode [ 69.215002][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.248379][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.280923][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.293979][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.323647][ T4183] team0: Port device team_slave_0 added [ 69.332090][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.352404][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.365754][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.379274][ T4185] team0: Port device team_slave_0 added [ 69.387760][ T4183] team0: Port device team_slave_1 added [ 69.424407][ T4185] team0: Port device team_slave_1 added [ 69.441739][ T4193] team0: Port device team_slave_0 added [ 69.456847][ T4186] team0: Port device team_slave_0 added [ 69.473808][ T4186] team0: Port device team_slave_1 added [ 69.489579][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.497149][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.524912][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.539675][ T4193] team0: Port device team_slave_1 added [ 69.546349][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.554585][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.583457][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.603721][ T4184] team0: Port device team_slave_0 added [ 69.627180][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.634808][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.663582][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.689245][ T4184] team0: Port device team_slave_1 added [ 69.705454][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.713037][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.742014][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.758125][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.765519][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.793888][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.814939][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.822965][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.850468][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.876627][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.884480][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.912160][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.929385][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.936753][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.965678][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.012238][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.019702][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.046503][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.059684][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.066791][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.095133][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.113378][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.120124][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 70.120124][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.134221][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 70.141604][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.194043][ T4185] device hsr_slave_0 entered promiscuous mode [ 70.201393][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 70.208229][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 70.215005][ T4185] device hsr_slave_1 entered promiscuous mode [ 70.221863][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.230818][ T4185] Cannot create hsr debugfs directory [ 70.240554][ T4186] device hsr_slave_0 entered promiscuous mode [ 70.248764][ T4186] device hsr_slave_1 entered promiscuous mode [ 70.256109][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.267541][ T4186] Cannot create hsr debugfs directory [ 70.317375][ T4193] device hsr_slave_0 entered promiscuous mode [ 70.325062][ T4193] device hsr_slave_1 entered promiscuous mode [ 70.332460][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.341214][ T4193] Cannot create hsr debugfs directory [ 70.365371][ T4184] device hsr_slave_0 entered promiscuous mode [ 70.373922][ T4184] device hsr_slave_1 entered promiscuous mode [ 70.384300][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.392824][ T4184] Cannot create hsr debugfs directory [ 70.759136][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.777609][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.789173][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.800151][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.863831][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.873634][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.886507][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.898476][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.971975][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.993275][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.007626][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.022552][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.089208][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.136179][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.147503][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.159685][ T4185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.179535][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.190453][ T4185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.203621][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.213955][ T4185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.225998][ T4185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.253191][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.264668][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.275139][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.282542][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.292591][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.302880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.312516][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.319935][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.330910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.351645][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.367767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.377440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.386713][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.401563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.422570][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.432902][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.445449][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.453353][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.462666][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.498216][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.508000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.519513][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.529888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.539605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.548589][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.557349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.577364][ T4184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.591218][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.602908][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.628820][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.641910][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.645425][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.655938][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.657411][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.670564][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.684000][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.692032][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.701597][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.711496][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.733400][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.748012][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.760444][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.808854][ T4183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.824008][ T4183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.847737][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.857124][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.867977][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.877368][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.887352][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.898699][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.907526][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.919553][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.928931][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.937863][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.948990][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.963514][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.997012][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.007008][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.018440][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.027520][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.042210][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.049974][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.061088][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.072007][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.082967][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.091299][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.100489][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.131154][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.183503][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.193754][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.203811][ T4232] Bluetooth: hci4: command 0x041b tx timeout [ 72.217685][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 72.227104][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.237999][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 72.245147][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.257316][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.267984][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.276566][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.287429][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 72.294929][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 72.322151][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.335924][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.348584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.392706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.407152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.417899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.428538][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.440178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.451440][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.475242][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.502029][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.518947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.534562][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.576243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.589639][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.616329][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.624952][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.667539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.679005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.694386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.704841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.716520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.726949][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.735477][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.746516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.760552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.774820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.784515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.799704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.808031][ T4184] device veth0_vlan entered promiscuous mode [ 72.824134][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.865083][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.893580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.905829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.915496][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.925575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.934651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.951919][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.962972][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.974846][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.996144][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.004666][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.016386][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.027463][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.040436][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.049785][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.057984][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.071205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.080522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.092372][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.102224][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.114639][ T4184] device veth1_vlan entered promiscuous mode [ 73.130623][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.146872][ T4183] device veth0_vlan entered promiscuous mode [ 73.175941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.185540][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.197181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.206776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.217520][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.225326][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.234109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.244040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.253984][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.261901][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.270152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.295554][ T4183] device veth1_vlan entered promiscuous mode [ 73.304237][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.314722][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.325047][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.340349][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.370294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.380635][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.390356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.401848][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.411347][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.425759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.435887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.452783][ T4184] device veth0_macvtap entered promiscuous mode [ 73.462583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.476337][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.495557][ T4193] device veth0_vlan entered promiscuous mode [ 73.534574][ T4184] device veth1_macvtap entered promiscuous mode [ 73.544405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.554573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.565039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.582086][ T4193] device veth1_vlan entered promiscuous mode [ 73.601937][ T4183] device veth0_macvtap entered promiscuous mode [ 73.639840][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.660862][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.677599][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.687517][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.699245][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.712222][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.724632][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.735428][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.745799][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.762196][ T4183] device veth1_macvtap entered promiscuous mode [ 73.779890][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.790283][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.810824][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.827251][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.838874][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.855423][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.868833][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.882293][ T4193] device veth0_macvtap entered promiscuous mode [ 73.901507][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.911929][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.921165][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.931603][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.942865][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.952757][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.964947][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.976376][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.986520][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.996681][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.012833][ T4193] device veth1_macvtap entered promiscuous mode [ 74.041545][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.054480][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.065580][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.076079][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.090096][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.107038][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.122097][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.150685][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.233118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.242886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.252756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.264162][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.278244][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 74.278671][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 74.289732][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 74.303480][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.317659][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.348027][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.361603][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 74.367946][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 74.386021][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.402306][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.417281][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.429757][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.438578][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.450074][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.460978][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.470325][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.486772][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.518716][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.527697][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.537699][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.553567][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.565288][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.575782][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.587711][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.600522][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.621654][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.634342][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.646764][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.661976][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.672895][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.687968][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.732818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.743176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.776951][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.799228][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.816634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.837031][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.894068][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.908905][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.966402][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.979751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.989091][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.006247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.016774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.026144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.035367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.044293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.053076][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.097519][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.112070][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.127142][ T4185] device veth0_vlan entered promiscuous mode [ 75.144110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.154716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.166744][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.194335][ T4185] device veth1_vlan entered promiscuous mode [ 75.216891][ T4186] device veth0_vlan entered promiscuous mode [ 75.235310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.245539][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.263960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.271923][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.285316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.295649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.333810][ T4186] device veth1_vlan entered promiscuous mode [ 75.344331][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.361133][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.416398][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.432164][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.446971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.459099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.467699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.493631][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.528291][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.536785][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.556220][ T4185] device veth0_macvtap entered promiscuous mode [ 75.575889][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.577164][ T4265] loop0: detected capacity change from 0 to 8192 [ 75.596211][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.613945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.624823][ T4265] ======================================================= [ 75.624823][ T4265] WARNING: The mand mount option has been deprecated and [ 75.624823][ T4265] and is ignored by this kernel. Remove the mand [ 75.624823][ T4265] option from the mount to silence this warning. [ 75.624823][ T4265] ======================================================= [ 75.646680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.699566][ T4186] device veth0_macvtap entered promiscuous mode [ 75.716932][ T4185] device veth1_macvtap entered promiscuous mode [ 75.761077][ T4186] device veth1_macvtap entered promiscuous mode [ 75.856515][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.953886][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.084957][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 76.272799][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.360174][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 76.360339][ T4258] Bluetooth: hci2: command 0x0419 tx timeout [ 76.374957][ T4258] Bluetooth: hci0: command 0x0419 tx timeout [ 76.441719][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 76.464852][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 76.536691][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.653886][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.688240][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.707450][ T4282] loop1: detected capacity change from 0 to 1024 [ 76.734046][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.746670][ T4282] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 76.760517][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.773320][ T4282] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 76.783950][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.796945][ T4282] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 76.822312][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.840033][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.862051][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.881030][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.905053][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.934875][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.974316][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.008227][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.036423][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.124083][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.038165][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #280!!! [ 78.048886][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.059139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.069463][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.080064][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.091323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.101303][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.112389][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.124018][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 78.201365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.309013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.354707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.489124][ T4295] loop0: detected capacity change from 0 to 256 [ 79.501363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.542564][ T4295] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.561810][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.574889][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.589679][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.600890][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.611977][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.623766][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.641680][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.656098][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.770767][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.781362][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.793350][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.814371][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.837416][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.861744][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.873447][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.077104][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.099599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.500609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.513609][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.523939][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.562719][ T4297] loop1: detected capacity change from 0 to 2048 [ 80.593358][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612722][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.657676][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.667544][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.702629][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.714406][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.740802][ T4297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.761069][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.786296][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.972122][ T4302] loop3: detected capacity change from 0 to 32768 [ 81.264910][ T4302] XFS (loop3): Mounting V5 Filesystem [ 81.585266][ T4302] XFS (loop3): Ending clean mount [ 81.607769][ T4302] XFS (loop3): Quotacheck needed: Please wait. [ 81.822920][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.848093][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.856893][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.882995][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.942870][ T4314] loop0: detected capacity change from 0 to 32768 [ 82.025487][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.043904][ T4302] XFS (loop3): Quotacheck: Done. [ 82.179286][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.194371][ T4314] XFS (loop0): Mounting V5 Filesystem [ 82.363144][ T4315] loop1: detected capacity change from 0 to 32768 [ 82.481527][ T4326] xt_hashlimit: size too large, truncated to 1048576 [ 82.865975][ T26] audit: type=1800 audit(1775920327.032:2): pid=4326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.10" name="file0" dev="loop3" ino=4420 res=0 errno=0 [ 82.888264][ C0] vkms_vblank_simulate: vblank timer overrun [ 82.949286][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.025358][ T4314] XFS (loop0): Ending clean mount [ 83.034898][ T4314] XFS (loop0): Quotacheck needed: Please wait. [ 83.065189][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.097494][ T4314] XFS (loop0): Quotacheck: Done. [ 83.379388][ T4315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.12 (4315) [ 83.967936][ T26] audit: type=1800 audit(1775920328.062:3): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11" name="file0" dev="loop0" ino=4420 res=0 errno=0 [ 84.051817][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.074906][ T4184] XFS (loop0): Unmounting Filesystem [ 84.229465][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.237555][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.368738][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.571084][ T4193] XFS (loop3): Unmounting Filesystem [ 84.689294][ T4315] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 84.758946][ T4315] BTRFS info (device loop1): setting nodatasum [ 84.772901][ T4315] BTRFS info (device loop1): force zlib compression, level 3 [ 84.839258][ T4315] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 84.884880][ T4315] BTRFS info (device loop1): use lzo compression, level 0 [ 84.899481][ T4315] BTRFS info (device loop1): turning on flush-on-commit [ 84.911058][ T4315] BTRFS info (device loop1): enabling auto defrag [ 84.917610][ T4315] BTRFS info (device loop1): max_inline at 4096 [ 84.925484][ T4315] BTRFS info (device loop1): using free space tree [ 84.934893][ T4315] BTRFS info (device loop1): has skinny extents [ 85.034700][ T4315] BTRFS error (device loop1): open_ctree failed: -12 [ 85.154962][ T4358] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.003323][ T1108] cfg80211: failed to load regulatory.db [ 87.172193][ T4387] loop3: detected capacity change from 0 to 2048 [ 87.622132][ T4391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20'. [ 89.389917][ T4387] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.720725][ T4409] loop1: detected capacity change from 0 to 16 [ 89.735915][ T4387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.19: bg 0: block 234: padding at end of block bitmap is not set [ 89.776217][ T4387] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 134 with error 28 [ 89.776327][ T4387] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.776327][ T4387] [ 89.776346][ T4387] EXT4-fs (loop3): Total free blocks count 0 [ 89.776362][ T4387] EXT4-fs (loop3): Free/Dirty block details [ 89.776411][ T4387] EXT4-fs (loop3): free_blocks=0 [ 89.776460][ T4387] EXT4-fs (loop3): dirty_blocks=144 [ 89.776475][ T4387] EXT4-fs (loop3): Block reservation details [ 89.776490][ T4387] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 89.840853][ T4409] erofs: (device loop1): mounted with root inode @ nid 36. [ 92.380248][ T4426] loop1: detected capacity change from 0 to 40427 [ 92.411211][ T4229] Bluetooth: hci5: command 0x1003 tx timeout [ 92.419218][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 92.758059][ C1] sched: RT throttling activated [ 92.790096][ T4426] F2FS-fs (loop1): invalid crc value [ 92.801225][ T4426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.061638][ T4426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 94.415101][ T4183] attempt to access beyond end of device [ 94.415101][ T4183] loop1: rw=2049, want=45104, limit=40427 [ 94.438615][ T13] Bluetooth: hci5: command 0x1001 tx timeout [ 94.445375][ T4198] Bluetooth: hci5: sending frame failed (-49) [ 94.596808][ T4439] loop0: detected capacity change from 0 to 512 [ 94.865169][ T4439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 95.598329][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.662617][ T4447] loop2: detected capacity change from 0 to 128 [ 96.088538][ T1108] usb 4-1: device not accepting address 2, error -71 [ 96.139145][ T4447] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.285292][ T4447] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 96.303121][ T4447] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.609229][ T4263] Bluetooth: hci5: command 0x1009 tx timeout [ 97.616275][ T4466] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 101.131914][ T4480] loop1: detected capacity change from 0 to 40427 [ 102.880702][ T4493] process 'syz.4.41' launched './file0' with NULL argv: empty string added [ 103.038798][ T4494] sd 0:0:1:0: device reset [ 106.252054][ T4514] loop0: detected capacity change from 0 to 128 [ 106.407761][ T4514] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 106.419490][ T4514] ext4 filesystem being mounted at /11/file1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.694865][ T4527] mmap: syz.1.52 (4527) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 107.945177][ T4534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.258243][ T4363] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.698512][ T4363] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 71, changing to 10 [ 109.008424][ T4363] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 109.774663][ T4363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.799416][ T4363] usb 5-1: Product: syz [ 109.803803][ T4363] usb 5-1: Manufacturer: syz [ 109.809157][ T4363] usb 5-1: SerialNumber: syz [ 110.248399][ T4363] usb 5-1: MIDIStreaming interface descriptor not found [ 110.595022][ T4363] usb 5-1: USB disconnect, device number 2 [ 111.285091][ T4263] kernel write not supported for file /amidi2 (pid: 4263 comm: kworker/0:8) [ 111.833191][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.578351][ T4363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.818244][ T4363] usb 2-1: Using ep0 maxpacket: 8 [ 115.111413][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.123944][ T4363] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 115.133592][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.144229][ T4363] usb 2-1: config 0 descriptor?? [ 115.254834][ T4616] device bridge1 entered promiscuous mode [ 115.683827][ T4609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.78'. [ 115.899491][ T4363] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.936645][ T4631] loop4: detected capacity change from 0 to 256 [ 116.001187][ T4631] FAT-fs (loop4): Unrecognized mount option "un³×ìZqi_xl" or missing value [ 116.684070][ T4363] usb 2-1: USB disconnect, device number 2 [ 117.203854][ T4614] loop2: detected capacity change from 0 to 32768 [ 117.691693][ T4647] comedi comedi0: Minor 9 could not be opened [ 117.703361][ T4631] loop4: detected capacity change from 0 to 32768 [ 117.776314][ T4631] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.82 (4631) [ 118.246573][ T4631] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 118.268310][ T4631] BTRFS info (device loop4): using free space tree [ 118.275497][ T4631] BTRFS info (device loop4): has skinny extents [ 118.282775][ T4653] loop3: detected capacity change from 0 to 512 [ 118.348543][ T4653] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.408145][ T4653] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.468906][ T4653] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 118.507430][ T4653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 118.548720][ T4653] System zones: 0-2, 18-18, 34-35 [ 118.555676][ T4653] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 118.620170][ T4653] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 118.641471][ T4653] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 118.650271][ T4631] BTRFS info (device loop4): enabling ssd optimizations [ 118.688229][ T4653] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 118.740536][ T26] audit: type=1800 audit(1775920363.352:4): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 118.809333][ T26] audit: type=1800 audit(1775920363.422:5): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 118.850948][ T4649] loop2: detected capacity change from 0 to 32768 [ 118.919511][ T4649] (syz.2.87,4649,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 118.972739][ T26] audit: type=1800 audit(1775920363.582:6): pid=4631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.82" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 119.004289][ T4649] (syz.2.87,4649,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 119.157383][ T4649] JBD2: Ignoring recovery information on journal [ 119.388718][ T4649] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 120.042631][ T4186] ocfs2: Unmounting device (7,2) on (node local) [ 121.201451][ T4356] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.478288][ T4356] usb 3-1: Using ep0 maxpacket: 16 [ 121.758291][ T4356] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 121.781798][ T4356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.761834][ T4356] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x65, skipping [ 122.773531][ T4356] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.957123][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 122.977654][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 122.986259][ T4356] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.028249][ T4356] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 123.038157][ T4356] usb 3-1: Manufacturer: syz [ 123.043629][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.066326][ T4356] usb 3-1: config 0 descriptor?? [ 123.076342][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.107413][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.133672][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.166037][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.202272][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.233385][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.340295][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.353085][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.363173][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.374085][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.398308][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.417355][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.455109][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.485157][ T4258] hid-generic 0002:0004:0009.0001: unknown main item tag 0x0 [ 123.525017][ T4258] hid-generic 0002:0004:0009.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 123.574247][ T4356] usb 3-1: USB disconnect, device number 2 [ 123.664582][ T4733] block device autoloading is deprecated and will be removed. [ 124.231116][ T4212] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.661668][ T4212] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.770441][ T4734] chnl_net:caif_netlink_parms(): no params data found [ 124.928264][ T4212] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.099677][ T4212] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.347249][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.448276][ T4734] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.497503][ T4734] device bridge_slave_0 entered promiscuous mode [ 125.535809][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.545815][ T4734] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.573054][ T4734] device bridge_slave_1 entered promiscuous mode [ 125.635070][ T4734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.666683][ T4734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.798315][ T4263] Bluetooth: hci5: command 0x0409 tx timeout [ 126.006298][ T4734] team0: Port device team_slave_0 added [ 126.021530][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 126.089465][ T4734] team0: Port device team_slave_1 added [ 126.302604][ T4767] input: syz0 as /devices/virtual/input/input6 [ 127.043479][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.151404][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.619847][ T4787] loop1: detected capacity change from 0 to 40427 [ 128.826859][ T4692] Bluetooth: hci5: command 0x041b tx timeout [ 128.900576][ T4787] F2FS-fs (loop1): invalid crc value [ 128.918719][ T4787] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.020189][ T4787] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.128407][ T4734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.149387][ T4692] Bluetooth: hci5: command 0x040f tx timeout [ 131.870554][ T4734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.877855][ T4734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.016736][ T4734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.047402][ T4804] netlink: 'syz.4.118': attribute type 1 has an invalid length. [ 132.074826][ T4804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.118'. [ 132.128963][ T4804] Zero length message leads to an empty skb [ 132.402508][ T4734] device hsr_slave_0 entered promiscuous mode [ 132.437949][ T4734] device hsr_slave_1 entered promiscuous mode [ 132.486267][ T4734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.551563][ T4734] Cannot create hsr debugfs directory [ 132.612035][ T4822] netlink: 'syz.2.122': attribute type 32 has an invalid length. [ 132.657694][ T4822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 133.084725][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.091990][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.158459][ T4692] Bluetooth: hci5: command 0x0419 tx timeout [ 134.019458][ T4847] loop4: detected capacity change from 0 to 40427 [ 137.093447][ T4864] binder: 4863:4864 ioctl c0306201 200000000680 returned -14 [ 137.473838][ T4734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 137.511958][ T4734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 138.835244][ T4889] loop3: detected capacity change from 0 to 40427 [ 141.376667][ T4212] device hsr_slave_0 left promiscuous mode [ 141.376969][ T4889] F2FS-fs (loop3): invalid crc value [ 141.389686][ T4212] device hsr_slave_1 left promiscuous mode [ 142.115088][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.133428][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.143209][ T4889] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.212092][ T4889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.249455][ T4212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.303886][ T4212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.356638][ T4212] device bridge_slave_1 left promiscuous mode [ 142.368288][ T4212] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.496158][ T4212] device bridge_slave_0 left promiscuous mode [ 142.505548][ T4901] vivid-004: disconnect [ 142.531463][ T4897] vivid-004: reconnect [ 142.565751][ T4212] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.743097][ T4212] device veth1_macvtap left promiscuous mode [ 142.772986][ T4212] device veth0_macvtap left promiscuous mode [ 142.795724][ T4212] device veth1_vlan left promiscuous mode [ 142.826662][ T4212] device veth0_vlan left promiscuous mode [ 142.899452][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.144'. [ 142.951507][ T4913] capability: warning: `syz.2.144' uses 32-bit capabilities (legacy support in use) [ 143.327091][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 143.343710][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 143.364584][ T4212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.385448][ T4212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.470769][ T4212] bond0 (unregistering): Released all slaves [ 143.556724][ T4734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 143.571401][ T4734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.601271][ T4910] netlink: 36 bytes leftover after parsing attributes in process `syz.2.144'. [ 143.803077][ T4929] netlink: 'syz.4.146': attribute type 4 has an invalid length. [ 143.828262][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.146'. [ 146.506201][ T4948] loop2: detected capacity change from 0 to 40427 [ 146.600329][ T4734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.766770][ T4734] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.845120][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.858653][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.907784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.959566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.057983][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.065579][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.142587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.235829][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.267096][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.328367][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.336278][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.450432][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.491442][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.555912][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 150.619228][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.695424][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 150.736883][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.800371][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 150.844456][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 150.928530][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.051265][ T4734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.130078][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.148854][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.222948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.248711][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.298583][ T4734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.298124][ T4363] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.328376][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 153.348777][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.429788][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.446008][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.480826][ T4734] device veth0_vlan entered promiscuous mode [ 153.515991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.526451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.582643][ T4734] device veth1_vlan entered promiscuous mode [ 153.696389][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.727505][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.748289][ T4363] usb 2-1: config 0 has no interfaces? [ 153.789289][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.826728][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.870103][ T4734] device veth0_macvtap entered promiscuous mode [ 153.948701][ T4363] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 153.993777][ T4363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.021021][ T4734] device veth1_macvtap entered promiscuous mode [ 154.085671][ T4363] usb 2-1: Product: syz [ 154.105748][ T4363] usb 2-1: Manufacturer: syz [ 154.142658][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.154783][ T4363] usb 2-1: SerialNumber: syz [ 154.185924][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.201590][ T4363] usb 2-1: config 0 descriptor?? [ 154.268821][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.333483][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.354620][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.376668][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.628490][ T5010] syz.1.154 uses obsolete (PF_INET,SOCK_PACKET) [ 156.338189][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.877887][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.626430][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.640637][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.679084][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.723484][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.782431][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.847276][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.904720][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.936933][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.964927][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.994998][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.025463][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.055302][ T4734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.095314][ T4734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.127860][ T4734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.156532][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.214216][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.305215][ T4734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.378212][ T4734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.387373][ T4734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.461706][ T4734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.699691][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.709236][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.913400][ T5049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.096281][ T5049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.212060][ T5049] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.229707][ T5049] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.250446][ T5049] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.265407][ T5049] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.516146][ T4172] usb 2-1: USB disconnect, device number 3 [ 164.556981][ T5091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 164.743030][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.760859][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.805072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 164.881609][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.907519][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.947464][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.002106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.413589][ T5111] device team_slave_0 entered promiscuous mode [ 165.420612][ T5111] device team_slave_1 entered promiscuous mode [ 165.457699][ T5111] device vlan2 entered promiscuous mode [ 165.486461][ T5111] device team0 entered promiscuous mode [ 166.746204][ T5131] [ 166.748604][ T5131] ====================================================== [ 166.756062][ T5131] WARNING: possible circular locking dependency detected [ 166.763346][ T5131] syzkaller #0 Not tainted [ 166.768159][ T5131] ------------------------------------------------------ [ 166.775474][ T5131] syz.5.188/5131 is trying to acquire lock: [ 166.781475][ T5131] ffff88807a594c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 166.793143][ T5131] [ 166.793143][ T5131] but task is already holding lock: [ 166.801053][ T5131] ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 166.811120][ T5131] [ 166.811120][ T5131] which lock already depends on the new lock. [ 166.811120][ T5131] [ 166.822340][ T5131] [ 166.822340][ T5131] the existing dependency chain (in reverse order) is: [ 166.831958][ T5131] [ 166.831958][ T5131] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 166.840360][ T5131] __mutex_lock_common+0x1e3/0x2400 [ 166.846209][ T5131] mutex_lock_nested+0x17/0x20 [ 166.851550][ T5131] rfkill_register+0x33/0x8a0 [ 166.857054][ T5131] hci_register_dev+0x452/0x970 [ 166.863131][ T5131] vhci_create_device+0x32c/0x5c0 [ 166.870103][ T5131] vhci_write+0x391/0x450 [ 166.875739][ T5131] vfs_write+0x745/0xd60 [ 166.880694][ T5131] ksys_write+0x152/0x260 [ 166.886239][ T5131] do_syscall_64+0x4c/0xa0 [ 166.891858][ T5131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.898630][ T5131] [ 166.898630][ T5131] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 166.906825][ T5131] __mutex_lock_common+0x1e3/0x2400 [ 166.912633][ T5131] mutex_lock_nested+0x17/0x20 [ 166.918534][ T5131] vhci_send_frame+0x88/0x100 [ 166.924039][ T5131] hci_send_frame+0x1a9/0x2e0 [ 166.929480][ T5131] hci_tx_work+0x9f9/0x1710 [ 166.934818][ T5131] process_one_work+0x85f/0x1010 [ 166.940389][ T5131] worker_thread+0xaa6/0x1290 [ 166.945906][ T5131] kthread+0x436/0x520 [ 166.950687][ T5131] ret_from_fork+0x1f/0x30 [ 166.955640][ T5131] [ 166.955640][ T5131] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 166.965632][ T5131] __flush_work+0x116/0x210 [ 166.970868][ T5131] hci_dev_do_open+0xc58/0x1270 [ 166.976609][ T5131] hci_power_on+0x1c1/0x610 [ 166.981922][ T5131] process_one_work+0x85f/0x1010 [ 166.987483][ T5131] worker_thread+0xaa6/0x1290 [ 166.993079][ T5131] kthread+0x436/0x520 [ 166.997936][ T5131] ret_from_fork+0x1f/0x30 [ 167.003154][ T5131] [ 167.003154][ T5131] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 167.011372][ T5131] __mutex_lock_common+0x1e3/0x2400 [ 167.017212][ T5131] mutex_lock_nested+0x17/0x20 [ 167.022656][ T5131] bg_scan_update+0x44/0x3b0 [ 167.027913][ T5131] process_one_work+0x85f/0x1010 [ 167.033677][ T5131] worker_thread+0xaa6/0x1290 [ 167.039305][ T5131] kthread+0x436/0x520 [ 167.044163][ T5131] ret_from_fork+0x1f/0x30 [ 167.049537][ T5131] [ 167.049537][ T5131] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 167.060132][ T5131] __lock_acquire+0x2c42/0x7d10 [ 167.065986][ T5131] lock_acquire+0x19e/0x400 [ 167.071513][ T5131] __flush_work+0x116/0x210 [ 167.076751][ T5131] __cancel_work_timer+0x3f4/0x560 [ 167.083548][ T5131] hci_request_cancel_all+0xcc/0x300 [ 167.089870][ T5131] hci_dev_do_close+0x4e/0x1030 [ 167.095506][ T5131] hci_rfkill_set_block+0x10a/0x190 [ 167.101347][ T5131] rfkill_set_block+0x1c6/0x420 [ 167.106941][ T5131] rfkill_fop_write+0x452/0x560 [ 167.112764][ T5131] vfs_write+0x30b/0xd60 [ 167.117628][ T5131] ksys_write+0x152/0x260 [ 167.122960][ T5131] do_syscall_64+0x4c/0xa0 [ 167.128827][ T5131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.136024][ T5131] [ 167.136024][ T5131] other info that might help us debug this: [ 167.136024][ T5131] [ 167.146832][ T5131] Chain exists of: [ 167.146832][ T5131] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 167.146832][ T5131] [ 167.164229][ T5131] Possible unsafe locking scenario: [ 167.164229][ T5131] [ 167.172612][ T5131] CPU0 CPU1 [ 167.178196][ T5131] ---- ---- [ 167.183642][ T5131] lock(rfkill_global_mutex); [ 167.188455][ T5131] lock(&data->open_mutex); [ 167.196259][ T5131] lock(rfkill_global_mutex); [ 167.204071][ T5131] lock((work_completion)(&hdev->bg_scan_update)); [ 167.210720][ T5131] [ 167.210720][ T5131] *** DEADLOCK *** [ 167.210720][ T5131] [ 167.219124][ T5131] 1 lock held by syz.5.188/5131: [ 167.224764][ T5131] #0: ffffffff8d6c51a8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x18b/0x560 [ 167.235546][ T5131] [ 167.235546][ T5131] stack backtrace: [ 167.242220][ T5131] CPU: 1 PID: 5131 Comm: syz.5.188 Not tainted syzkaller #0 [ 167.249879][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.261447][ T5131] Call Trace: [ 167.265077][ T5131] [ 167.268063][ T5131] dump_stack_lvl+0x188/0x250 [ 167.272969][ T5131] ? load_image+0x400/0x400 [ 167.277660][ T5131] ? show_regs_print_info+0x20/0x20 [ 167.283072][ T5131] ? print_circular_bug+0x12b/0x1a0 [ 167.288522][ T5131] check_noncircular+0x296/0x330 [ 167.294473][ T5131] ? look_up_lock_class+0x71/0x110 [ 167.301570][ T5131] ? add_chain_block+0x940/0x940 [ 167.306618][ T5131] ? lockdep_lock+0xf1/0x1f0 [ 167.312120][ T5131] ? __lock_acquire+0x12e8/0x7d10 [ 167.317650][ T5131] ? mark_lock+0x94/0x320 [ 167.322556][ T5131] __lock_acquire+0x2c42/0x7d10 [ 167.327675][ T5131] ? verify_lock_unused+0x140/0x140 [ 167.333928][ T5131] ? verify_lock_unused+0x140/0x140 [ 167.339935][ T5131] ? mark_lock+0x94/0x320 [ 167.344505][ T5131] lock_acquire+0x19e/0x400 [ 167.349353][ T5131] ? __flush_work+0xfa/0x210 [ 167.354668][ T5131] ? __lock_acquire+0x7d10/0x7d10 [ 167.360417][ T5131] ? read_lock_is_recursive+0x10/0x10 [ 167.365919][ T5131] ? start_flush_work+0x776/0x820 [ 167.371556][ T5131] __flush_work+0x116/0x210 [ 167.376297][ T5131] ? __flush_work+0xfa/0x210 [ 167.381045][ T5131] ? flush_work+0x20/0x20 [ 167.385672][ T5131] ? try_to_grab_pending+0xfa/0x7f0 [ 167.391161][ T5131] ? mark_lock+0x94/0x320 [ 167.395766][ T5131] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 167.401947][ T5131] ? lock_chain_count+0x20/0x20 [ 167.407010][ T5131] ? mark_lock+0x94/0x320 [ 167.411567][ T5131] ? __cancel_work_timer+0x36a/0x560 [ 167.416932][ T5131] __cancel_work_timer+0x3f4/0x560 [ 167.422414][ T5131] ? cancel_work_sync+0x20/0x20 [ 167.427589][ T5131] ? __cancel_work+0x1f9/0x2e0 [ 167.432719][ T5131] ? lockdep_hardirqs_on+0x94/0x140 [ 167.439574][ T5131] ? __cancel_work+0x27b/0x2e0 [ 167.446138][ T5131] ? cancel_work+0x20/0x20 [ 167.450885][ T5131] ? lock_chain_count+0x20/0x20 [ 167.455910][ T5131] hci_request_cancel_all+0xcc/0x300 [ 167.461414][ T5131] hci_dev_do_close+0x4e/0x1030 [ 167.466674][ T5131] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 167.473006][ T5131] ? _raw_spin_unlock+0x40/0x40 [ 167.478379][ T5131] hci_rfkill_set_block+0x10a/0x190 [ 167.484531][ T5131] ? rcu_lock_release+0x20/0x20 [ 167.491208][ T5131] rfkill_set_block+0x1c6/0x420 [ 167.497063][ T5131] rfkill_fop_write+0x452/0x560 [ 167.502693][ T5131] ? rfkill_fop_read+0x4d0/0x4d0 [ 167.507956][ T5131] ? common_file_perm+0x110/0x1c0 [ 167.513218][ T5131] ? fsnotify_perm+0x5d/0x560 [ 167.518363][ T5131] ? security_file_permission+0x75/0xa0 [ 167.524297][ T5131] ? rfkill_fop_read+0x4d0/0x4d0 [ 167.530049][ T5131] vfs_write+0x30b/0xd60 [ 167.534815][ T5131] ? file_end_write+0x250/0x250 [ 167.539863][ T5131] ? __fget_files+0x40f/0x480 [ 167.544767][ T5131] ? __fdget_pos+0x1e2/0x370 [ 167.549854][ T5131] ? ksys_write+0x71/0x260 [ 167.554828][ T5131] ksys_write+0x152/0x260 [ 167.559692][ T5131] ? __ia32_sys_read+0x80/0x80 [ 167.564860][ T5131] ? lockdep_hardirqs_on+0x94/0x140 [ 167.570576][ T5131] do_syscall_64+0x4c/0xa0 [ 167.575517][ T5131] ? clear_bhb_loop+0x30/0x80 [ 167.580396][ T5131] ? clear_bhb_loop+0x30/0x80 [ 167.585426][ T5131] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.591926][ T5131] RIP: 0033:0x7fc7a40f4819 [ 167.596616][ T5131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.616711][ T5131] RSP: 002b:00007fc7a234e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 167.625952][ T5131] RAX: ffffffffffffffda RBX: 00007fc7a436dfa0 RCX: 00007fc7a40f4819 [ 167.635392][ T5131] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000004 [ 167.644096][ T5131] RBP: 00007fc7a418ac91 R08: 0000000000000000 R09: 0000000000000000 [ 167.653235][ T5131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.663321][ T5131] R13: 00007fc7a436e038 R14: 00007fc7a436dfa0 R15: 00007ffe05bbf918 [ 167.672256][ T5131]