last executing test programs: 32.38699155s ago: executing program 2 (id=14): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 25.90868455s ago: executing program 2 (id=23): socket$pptp(0x18, 0x1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x40, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x11, 0x5, 0x0, 0x0, {[@md5sig={0x13, 0x12, "9352d97000000000998100"}]}}}}}}}, 0x0) epoll_create(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 24.436366253s ago: executing program 2 (id=26): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 18.643134053s ago: executing program 2 (id=34): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES64], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 18.382628606s ago: executing program 1 (id=35): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 18.201664999s ago: executing program 2 (id=37): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r4}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 16.916562349s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_INFO(0x0, 0x3, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r3, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 16.071186382s ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 15.974072754s ago: executing program 1 (id=41): recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/214, 0xd6, 0x2021, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x18200, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x101000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0x2000, 0x1fd, 0x1}) 13.530005631s ago: executing program 4 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76", 0x1a) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) 10.759439034s ago: executing program 4 (id=50): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8840) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x25, &(0x7f0000000140)=0x27a8dfcf, 0x4) 10.738343594s ago: executing program 3 (id=51): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r4}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 8.607052627s ago: executing program 3 (id=53): openat$nullb(0xffffffffffffff9c, 0x0, 0x6ee80, 0x0) io_setup(0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) 8.512457539s ago: executing program 4 (id=54): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="1719deced39964a22ebad09988a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.378709136s ago: executing program 3 (id=56): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) read$msr(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) write$binfmt_aout(r3, 0x0, 0xffffffdb) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7.377990856s ago: executing program 4 (id=57): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r0, 0x10003000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200040d1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bca) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getresuid(&(0x7f0000005100), &(0x7f0000005140), 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mbind(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x7fffffffffffffff, 0x3) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x9200}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0xc010) 6.306428403s ago: executing program 0 (id=58): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.000415408s ago: executing program 3 (id=59): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r4}, 0x18) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 5.730523022s ago: executing program 1 (id=60): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x9, 0x800000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x34020840) 5.728082582s ago: executing program 0 (id=61): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x129641) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r4, 0x0, 0x489, &(0x7f0000000380)={{0x84, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e20, 0x3, 'sh\x00', 0x4, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x2, 0x3, 0x48001, 0x66ef}}, 0x44) connect$can_j1939(r2, &(0x7f00000010c0)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.972809914s ago: executing program 3 (id=62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x9b39, @loopback}, 0x1c) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xa0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x57d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x7, 0x9}}}}}]}}]}}, 0x0) shutdown(r0, 0x1) 4.464402341s ago: executing program 1 (id=63): bpf$ENABLE_STATS(0x20, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/exec\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x10001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xd2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r4}, 0x18) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) 2.981290164s ago: executing program 1 (id=64): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000005c0)='cgroup.freeze\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff002) r2 = socket(0x2b, 0x80801, 0x1) sendmmsg$inet_sctp(r2, 0x0, 0x0, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) listen(r2, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, 0x0, 0x0, 0x24004044) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffa9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffa}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x200007, 0x4) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r7, 0x7b1, &(0x7f0000000140)={0x0, 0x5, 0x0, 0xc}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/195, 0xc3}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f0000000580)=""/84, 0x54}], 0x3}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001a80)}, 0xb0}, {{&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000340)=""/146, 0x92}, 0x8}], 0x3, 0x20, 0x0) bind$rxrpc(r2, 0x0, 0x0) 2.704689639s ago: executing program 0 (id=65): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1}, 0x10) 2.380067123s ago: executing program 0 (id=66): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) write$UHID_INPUT(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1.482787597s ago: executing program 3 (id=67): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000040)={0x8, 0x1ff, 0x9, 0xffffffff, 0x1a, "3eccd2000500"}) r5 = openat(0xffffffffffffff9c, 0x0, 0x10f042, 0x18b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0xf0f046, 0x7fff}) 1.386461069s ago: executing program 0 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) writev(r4, &(0x7f00000008c0), 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0x44) keyctl$invalidate(0x15, r5) 1.32758085s ago: executing program 32 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 1.259323701s ago: executing program 1 (id=70): recvfrom$inet(0xffffffffffffffff, &(0x7f00000003c0)=""/214, 0xd6, 0x2021, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x18200, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x101000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0x2000, 0x1fd, 0x1}) 1.171269712s ago: executing program 4 (id=71): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') socket$inet(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r6, 0x0) syz_clone3(&(0x7f0000002a40)={0x24888100, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) pread64(r0, &(0x7f0000000080)=""/196, 0xc4, 0x3) 0s ago: executing program 0 (id=72): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 59.106695][ T4241] cgroup: Unknown subsys name 'net' [ 59.249581][ T4241] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.481080][ T4241] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.585716][ T4271] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.585901][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.593986][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.601910][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.608389][ T4271] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.617575][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.622383][ T4271] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.629500][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.636313][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.644746][ T4270] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.650194][ T4271] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.657448][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.663817][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.671635][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.677675][ T4271] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.686688][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.692040][ T4271] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.706355][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.706617][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.722958][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.723038][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.730547][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.738432][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.745674][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.752605][ T4273] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.760068][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.766031][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.780788][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.801770][ T4271] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.821756][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.143732][ T4256] chnl_net:caif_netlink_parms(): no params data found [ 63.310729][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 63.356440][ T4257] chnl_net:caif_netlink_parms(): no params data found [ 63.377381][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.384944][ T4256] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.393159][ T4256] device bridge_slave_0 entered promiscuous mode [ 63.407839][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 63.417568][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.425214][ T4256] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.432934][ T4256] device bridge_slave_1 entered promiscuous mode [ 63.512803][ T4256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.523127][ T4255] chnl_net:caif_netlink_parms(): no params data found [ 63.543135][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.550369][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.558638][ T4253] device bridge_slave_0 entered promiscuous mode [ 63.567916][ T4256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.587076][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.594201][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.602347][ T4253] device bridge_slave_1 entered promiscuous mode [ 63.656079][ T4256] team0: Port device team_slave_0 added [ 63.684553][ T4256] team0: Port device team_slave_1 added [ 63.704606][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.725369][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.732489][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.740396][ T4257] device bridge_slave_0 entered promiscuous mode [ 63.757106][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.777067][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.784046][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.810250][ T4256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.822855][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.830083][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.838179][ T4257] device bridge_slave_1 entered promiscuous mode [ 63.845093][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.852169][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.860387][ T4252] device bridge_slave_0 entered promiscuous mode [ 63.890075][ T4256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.897653][ T4256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.923863][ T4256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.945541][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.952815][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.961189][ T4252] device bridge_slave_1 entered promiscuous mode [ 63.970500][ T4253] team0: Port device team_slave_0 added [ 64.004530][ T4253] team0: Port device team_slave_1 added [ 64.018269][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.025706][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.033438][ T4255] device bridge_slave_0 entered promiscuous mode [ 64.050545][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.074028][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.086775][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.096157][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.103307][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.111141][ T4255] device bridge_slave_1 entered promiscuous mode [ 64.127230][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.159500][ T4256] device hsr_slave_0 entered promiscuous mode [ 64.166383][ T4256] device hsr_slave_1 entered promiscuous mode [ 64.183392][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.190486][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.216964][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.230042][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.237192][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.263181][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.289214][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.317772][ T4252] team0: Port device team_slave_0 added [ 64.325413][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.345119][ T4257] team0: Port device team_slave_0 added [ 64.353143][ T4257] team0: Port device team_slave_1 added [ 64.360783][ T4252] team0: Port device team_slave_1 added [ 64.420219][ T4253] device hsr_slave_0 entered promiscuous mode [ 64.427116][ T4253] device hsr_slave_1 entered promiscuous mode [ 64.433584][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.441767][ T4253] Cannot create hsr debugfs directory [ 64.463602][ T4255] team0: Port device team_slave_0 added [ 64.477780][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.485740][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.511974][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.524105][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.531349][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.557466][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.569882][ T4255] team0: Port device team_slave_1 added [ 64.587981][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.595546][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.622228][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.643110][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.650282][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.676218][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.744192][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.751579][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.777740][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.811971][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.819109][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.846025][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.855302][ T4270] Bluetooth: hci2: command 0x0409 tx timeout [ 64.857837][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 64.862847][ T4270] Bluetooth: hci3: command 0x0409 tx timeout [ 64.869087][ T4269] Bluetooth: hci4: command 0x0409 tx timeout [ 64.875264][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 64.905623][ T4252] device hsr_slave_0 entered promiscuous mode [ 64.912436][ T4252] device hsr_slave_1 entered promiscuous mode [ 64.919225][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.927969][ T4252] Cannot create hsr debugfs directory [ 64.936584][ T4257] device hsr_slave_0 entered promiscuous mode [ 64.943770][ T4257] device hsr_slave_1 entered promiscuous mode [ 64.950960][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.958734][ T4257] Cannot create hsr debugfs directory [ 65.034882][ T4255] device hsr_slave_0 entered promiscuous mode [ 65.042218][ T4255] device hsr_slave_1 entered promiscuous mode [ 65.049364][ T4255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.057212][ T4255] Cannot create hsr debugfs directory [ 65.258180][ T4256] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.277802][ T4256] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.302749][ T4256] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.332477][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.347117][ T4256] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.367678][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.378316][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.393642][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.438424][ T4257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.471106][ T4257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.492396][ T4257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.501885][ T4257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.546848][ T4253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.577102][ T4253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.588020][ T4253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.598488][ T4253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.663194][ T4256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.709313][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.719178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.739845][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.751244][ T4256] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.769291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.779154][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.789242][ T4255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.800296][ T4255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.812401][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.823004][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.830722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.839832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.849830][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.857169][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.875316][ T4255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.907361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.915819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.928526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.937267][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.944490][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.955515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.964980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.973858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.983097][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.990377][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.999548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.008817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.018073][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.025174][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.033251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.042356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.051222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.059405][ T4255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.085766][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.093003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.102618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.112138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.123327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.132469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.155194][ T4256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.165759][ T4256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.197881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.209081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.219273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.230761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.241056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.250476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.259583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.269242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.278398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.287412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.296689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.306366][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.313478][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.321531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.330968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.340087][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.347235][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.355594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.365173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.373624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.381769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.406637][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.422135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.431538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.458703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.471903][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.488539][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.500954][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.512645][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.533592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.546589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.556884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.566641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.575614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.585593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.593926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.624111][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.632262][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.641863][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.650638][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.660829][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.668954][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.678873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.686797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.700730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.711145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.719943][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.727063][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.736882][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.763630][ T4256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.778283][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.794199][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.809073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.820685][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.827877][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.923989][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.934806][ T4274] Bluetooth: hci4: command 0x041b tx timeout [ 66.934824][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 66.940822][ T4274] Bluetooth: hci3: command 0x041b tx timeout [ 66.947290][ T4269] Bluetooth: hci2: command 0x041b tx timeout [ 66.953135][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 66.972416][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.981904][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.991804][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.000954][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.010791][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.020418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.029595][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.039173][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.049192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.058035][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.101854][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.135115][ T4253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.152159][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.170726][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.190564][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.200092][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.209005][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.217753][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.230303][ T4256] device veth0_vlan entered promiscuous mode [ 67.267905][ T4256] device veth1_vlan entered promiscuous mode [ 67.297488][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.319782][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.335373][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.386940][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.396726][ T4256] device veth0_macvtap entered promiscuous mode [ 67.408669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.423444][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.438352][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.448935][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.461610][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.487850][ T4256] device veth1_macvtap entered promiscuous mode [ 67.502881][ T4255] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.515003][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.523435][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.533267][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.563592][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.585469][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.605292][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.616173][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.623293][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.664112][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.676248][ T4256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.690037][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.699480][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.709532][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.718573][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.725727][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.740621][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.751772][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.764522][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.774101][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.783692][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.794106][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.808323][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.820625][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.834404][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.843222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.852790][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.868725][ T4257] device veth0_vlan entered promiscuous mode [ 67.878022][ T4256] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.887767][ T4256] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.898290][ T4256] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.907298][ T4256] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.923440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.933128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.942607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.951649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.961228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.971298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.989646][ T4257] device veth1_vlan entered promiscuous mode [ 68.032290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.043796][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.053565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.063428][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.072442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.080347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.088443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.097228][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.114975][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.136716][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.161941][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.177216][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.210474][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.232059][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.272750][ T4252] device veth0_vlan entered promiscuous mode [ 68.290828][ T4257] device veth0_macvtap entered promiscuous mode [ 68.314666][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.322907][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.332188][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.340964][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.352131][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.381953][ T4257] device veth1_macvtap entered promiscuous mode [ 68.397365][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.406278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.416588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.428173][ T4252] device veth1_vlan entered promiscuous mode [ 68.458182][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.480434][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.497520][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.511313][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.525100][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.557447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.567971][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.577368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.588090][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.597374][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.608920][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.618501][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.630238][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.641253][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.652817][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.669272][ T4253] device veth0_vlan entered promiscuous mode [ 68.676906][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.686065][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.693800][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.704807][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.719525][ T4252] device veth0_macvtap entered promiscuous mode [ 68.731974][ T4257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.734539][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.745777][ T4257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.754535][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.761596][ T4257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.774350][ T4257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.795608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.803546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.813825][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.822638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.839828][ T4252] device veth1_macvtap entered promiscuous mode [ 68.851245][ T4253] device veth1_vlan entered promiscuous mode [ 68.878484][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.892903][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.902446][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.911101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.919065][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.957522][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.997355][ T4253] device veth0_macvtap entered promiscuous mode [ 69.014475][ T4262] Bluetooth: hci3: command 0x040f tx timeout [ 69.020545][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 69.027777][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 69.027866][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 69.033792][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 69.048588][ T4341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.053807][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.075869][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.088140][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.100912][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.114520][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.122603][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.133128][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.152179][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.172209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.189373][ T4253] device veth1_macvtap entered promiscuous mode [ 69.209023][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.226315][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.240980][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.266793][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.281922][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.293194][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.302275][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.310629][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.319381][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.346046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.356502][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.385853][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.395987][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.407162][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.416926][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.427082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.435406][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.444040][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.472961][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.482253][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.486480][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.506402][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.507263][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.524406][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.535054][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.545736][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.556530][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.567304][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.567781][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.587143][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.599425][ T4255] device veth0_vlan entered promiscuous mode [ 69.607992][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.619389][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.627559][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.636974][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.645695][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.656318][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.667656][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.677760][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.688846][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699774][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.710528][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.722010][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.747346][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.763822][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.774439][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 69.780666][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.785784][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.794787][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.800733][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.811330][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.829591][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.837479][ T14] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 69.840744][ T4255] device veth1_vlan entered promiscuous mode [ 69.853608][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.898342][ T14] usb 2-1: config 0 descriptor?? [ 69.926665][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.941978][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.950777][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.960667][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.990478][ T4255] device veth0_macvtap entered promiscuous mode [ 70.057881][ T4255] device veth1_macvtap entered promiscuous mode [ 70.114977][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.132842][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.152657][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.173206][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.183149][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.184976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.195647][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.210865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.238220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.271589][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.281016][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.293765][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.311418][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.322018][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.335362][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.345445][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.347809][ T14] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 70.356103][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.373222][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.373612][ T14] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 70.384751][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.418746][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.450070][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.465087][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.479649][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.490729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.509257][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.531683][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.546124][ T14] ft260 0003:0403:6030.0001: chip code: 6424 8183 [ 70.564518][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.575536][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.586422][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.597607][ T4255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.608487][ T4255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.631887][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.646196][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.660979][ T2957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.687029][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.697762][ T4255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.707810][ T4255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.725611][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.733767][ T4255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.754056][ T4255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.785081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 70.793422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 70.804073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 70.814234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 70.822514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 70.869071][ T4357] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5'. [ 70.882117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 70.965877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.967593][ T14] ft260 0003:0403:6030.0001: failed to retrieve status: -32 [ 71.013058][ T4357] input: syz0 as /devices/virtual/input/input5 [ 71.034563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 71.042813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.053360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 71.104665][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 71.105875][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 71.105889][ T4274] Bluetooth: hci4: command 0x0419 tx timeout [ 71.125133][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 71.125622][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 71.340050][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.352591][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.699188][ T4303] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 71.733046][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.758908][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.920667][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.929446][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.972533][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.178050][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.095020][ T4243] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.354469][ T4243] usb 3-1: Using ep0 maxpacket: 32 [ 73.366978][ T4243] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 73.480437][ T4263] usb 2-1: USB disconnect, device number 2 [ 73.522189][ T4243] usb 3-1: config 0 has no interface number 0 [ 73.652021][ T4243] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 73.804141][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.956860][ T4243] usb 3-1: Product: syz [ 74.034711][ T4243] usb 3-1: Manufacturer: syz [ 74.131880][ T4243] usb 3-1: SerialNumber: syz [ 74.316869][ T4243] usb 3-1: config 0 descriptor?? [ 74.432391][ T4243] smsc95xx v2.0.0 [ 74.490453][ T4243] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 74.729565][ T4243] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 76.269217][ T4304] usb 3-1: USB disconnect, device number 2 [ 76.455750][ T7] cfg80211: failed to load regulatory.db [ 78.039968][ T4396] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 78.943630][ T4394] netlink: 'syz.2.14': attribute type 4 has an invalid length. [ 80.284221][ C1] sched: RT throttling activated [ 82.954865][ T4440] TCP: MD5 Hash failed for (0.0.0.0, 0)->(255.255.255.255, 20002) L3 index 0 [ 84.223583][ T4435] sctp: failed to load transform for md5: -2 [ 88.497747][ T4479] sp0: Synchronizing with TNC [ 88.683802][ T1043] block nbd4: Attempted send on invalid socket [ 88.690416][ T1043] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 88.700854][ T4477] vxfs: unable to read disk superblock at 1 [ 88.707489][ T1043] block nbd4: Attempted send on invalid socket [ 88.714019][ T1043] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 88.725789][ T4477] vxfs: unable to read disk superblock at 8 [ 88.731736][ T4477] vxfs: can't find superblock. [ 91.720088][ T4500] ubi31: attaching mtd0 [ 91.732206][ T4500] ubi31: scanning is finished [ 91.737052][ T4500] ubi31: empty MTD device detected [ 91.849638][ T4500] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 91.857315][ T4500] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 91.864705][ T4500] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 91.871786][ T4500] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 91.879300][ T4500] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 91.886233][ T4500] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 91.894651][ T4500] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 314953511 [ 91.904741][ T4500] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 91.984236][ T4503] ubi31: background thread "ubi_bgt31d" started, PID 4503 [ 91.993610][ T4506] erofs: (device nbd0): erofs_read_superblock: cannot find valid erofs superblock [ 98.345933][ T4571] capability: warning: `syz.0.49' uses deprecated v2 capabilities in a way that may be insecure [ 100.050305][ T4565] TCP: TCP_TX_DELAY enabled [ 101.556863][ T4597] Zero length message leads to an empty skb [ 104.122915][ T4615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 104.524304][ T4243] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 105.595303][ T4619] ubi: mtd0 is already attached to ubi31 [ 105.716229][ T4243] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.808561][ T4243] usb 4-1: config 1 interface 0 has no altsetting 0 [ 105.844135][ T4243] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 105.870682][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.879394][ T4243] usb 4-1: Product: syz [ 105.891913][ T4243] usb 4-1: Manufacturer: syz [ 105.899993][ T4243] usb 4-1: SerialNumber: syz [ 106.078891][ T4623] xt_CT: No such helper "snmp" [ 106.149129][ T4243] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 106.270971][ T4243] usb 4-1: USB disconnect, device number 2 [ 108.920459][ T4643] page:ffffea0001465e00 refcount:4 mapcount:1 mapping:ffff88805ada6868 index:0x2 pfn:0x51978 [ 108.931262][ T4643] memcg:ffff88807c5da000 [ 108.935518][ T4643] aops:shmem_aops ino:40f [ 108.939857][ T4643] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 108.949687][ T4643] raw: 00fff60000080015 ffffea0001464ec8 ffffea0001465e48 ffff88805ada6868 [ 108.958295][ T4643] raw: 0000000000000002 0000000000000000 0000000400000000 ffff88807c5da000 [ 108.966885][ T4643] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 108.974175][ T4643] page_owner tracks the page as allocated [ 108.980342][ T4643] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4648, tgid 4643 (syz.4.71), ts 108416992193, free_ts 105748081934 [ 108.997889][ T4643] post_alloc_hook+0x173/0x1a0 [ 109.002645][ T4643] get_page_from_freelist+0x1a26/0x1ac0 [ 109.008179][ T4643] __alloc_pages+0x1df/0x4e0 [ 109.012748][ T4643] __folio_alloc+0xe/0x30 [ 109.017071][ T4643] vma_alloc_folio+0x4a3/0x900 [ 109.021826][ T4643] shmem_alloc_and_acct_folio+0x42e/0xb60 [ 109.027542][ T4643] shmem_get_folio_gfp+0x1361/0x3400 [ 109.032819][ T4643] shmem_read_mapping_page_gfp+0x99/0x2b0 [ 109.038553][ T4643] udmabuf_create+0x981/0xf90 [ 109.043237][ T4643] udmabuf_ioctl+0x1d1/0x2c0 [ 109.047808][ T4643] __se_sys_ioctl+0xfa/0x170 [ 109.052381][ T4643] do_syscall_64+0x4c/0xa0 [ 109.056780][ T4643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.062658][ T4643] page last free stack trace: [ 109.067306][ T4643] free_unref_page_prepare+0x8b4/0x9a0 [ 109.072747][ T4643] free_unref_page_list+0xbb/0x8e0 [ 109.077843][ T4643] release_pages+0x1f92/0x2200 [ 109.082589][ T4643] __pagevec_release+0x6d/0xe0 [ 109.087334][ T4643] shmem_undo_range+0x75b/0x2050 [ 109.092252][ T4643] shmem_evict_inode+0x248/0xa40 [ 109.097172][ T4643] evict+0x485/0x870 [ 109.101047][ T4643] __dentry_kill+0x431/0x650 [ 109.105613][ T4643] dentry_kill+0xb8/0x290 [ 109.109918][ T4643] dput+0xfa/0x1d0 [ 109.113614][ T4643] __fput+0x5e0/0x920 [ 109.117571][ T4643] task_work_run+0x1ca/0x250 [ 109.122142][ T4643] do_exit+0x936/0x2400 [ 109.126282][ T4643] do_group_exit+0x217/0x2d0 [ 109.130869][ T4643] get_signal+0x1272/0x1350 [ 109.135366][ T4643] arch_do_signal_or_restart+0xb0/0x1230 [ 109.141052][ T4643] ------------[ cut here ]------------ [ 109.146488][ T4643] kernel BUG at mm/filemap.c:153! [ 109.151521][ T4643] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 109.157576][ T4643] CPU: 0 PID: 4643 Comm: syz.4.71 Not tainted 6.1.141-syzkaller #0 [ 109.165443][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.175476][ T4643] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 109.181706][ T4643] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 4a 71 27 00 e9 0c fe ff ff e8 b0 f8 d5 ff 48 89 df 48 c7 c6 60 0d 75 8a e8 a1 e1 11 00 <0f> 0b e8 9a f8 d5 ff 48 89 df 48 c7 c6 c0 12 75 8a e8 8b e1 11 00 [ 109.201292][ T4643] RSP: 0018:ffffc90003687618 EFLAGS: 00010046 [ 109.207336][ T4643] RAX: 3dbf47542b4cd900 RBX: ffffea0001465e00 RCX: 3dbf47542b4cd900 [ 109.215299][ T4643] RDX: 0000000000000002 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 109.223248][ T4643] RBP: ffffc90003687778 R08: dffffc0000000000 R09: fffffbfff1bfd0b6 [ 109.231214][ T4643] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: dffffc0000000000 [ 109.239168][ T4643] R13: dffffc0000000000 R14: ffff88805ada6868 R15: ffff88805ada6870 [ 109.247135][ T4643] FS: 0000555562760500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 109.256041][ T4643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.262598][ T4643] CR2: 000000110c44c5cb CR3: 0000000030796000 CR4: 00000000003506f0 [ 109.270551][ T4643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.278502][ T4643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.286452][ T4643] Call Trace: [ 109.289709][ T4643] [ 109.292617][ T4643] __filemap_remove_folio+0xbb/0x860 [ 109.297896][ T4643] ? __rwlock_init+0x140/0x140 [ 109.302640][ T4643] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 109.309640][ T4643] ? _raw_spin_lock_irq+0xab/0xe0 [ 109.314647][ T4643] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 109.319996][ T4643] filemap_remove_folio+0xed/0x2c0 [ 109.325086][ T4643] truncate_inode_folio+0x59/0x70 [ 109.330093][ T4643] shmem_undo_range+0x4d2/0x2050 [ 109.335025][ T4643] ? shmem_truncate_range+0xb0/0xb0 [ 109.340224][ T4643] ? do_raw_spin_lock+0x11d/0x280 [ 109.345231][ T4643] ? __rwlock_init+0x140/0x140 [ 109.349972][ T4643] shmem_evict_inode+0x248/0xa40 [ 109.354893][ T4643] ? _raw_spin_unlock+0x24/0x40 [ 109.359724][ T4643] ? inode_wait_for_writeback+0x1b0/0x200 [ 109.365422][ T4643] ? shmem_free_in_core_inode+0xb0/0xb0 [ 109.370945][ T4643] ? do_raw_spin_lock+0x11d/0x280 [ 109.375948][ T4643] ? bit_waitqueue+0x30/0x30 [ 109.380516][ T4643] ? preempt_schedule_thunk+0x16/0x18 [ 109.385869][ T4643] ? do_raw_spin_unlock+0x11d/0x230 [ 109.391047][ T4643] ? shmem_free_in_core_inode+0xb0/0xb0 [ 109.396571][ T4643] evict+0x485/0x870 [ 109.400443][ T4643] ? __lock_acquire+0x7c50/0x7c50 [ 109.405446][ T4643] ? proc_nr_inodes+0x2f0/0x2f0 [ 109.410279][ T4643] ? do_raw_spin_unlock+0x11d/0x230 [ 109.415476][ T4643] ? _raw_spin_unlock+0x24/0x40 [ 109.420304][ T4643] ? iput+0x768/0x980 [ 109.424270][ T4643] __dentry_kill+0x431/0x650 [ 109.428835][ T4643] dentry_kill+0xb8/0x290 [ 109.433145][ T4643] ? dput+0x37/0x1d0 [ 109.437014][ T4643] dput+0xfa/0x1d0 [ 109.440747][ T4643] __fput+0x5e0/0x920 [ 109.444715][ T4643] task_work_run+0x1ca/0x250 [ 109.449307][ T4643] ? task_work_cancel+0x230/0x230 [ 109.454319][ T4643] ? __close_range+0x1c5/0x730 [ 109.459068][ T4643] ? exit_to_user_mode_loop+0x3b/0x110 [ 109.464505][ T4643] exit_to_user_mode_loop+0xe6/0x110 [ 109.469767][ T4643] exit_to_user_mode_prepare+0xb1/0x140 [ 109.475291][ T4643] syscall_exit_to_user_mode+0x16/0x40 [ 109.480726][ T4643] do_syscall_64+0x58/0xa0 [ 109.485121][ T4643] ? clear_bhb_loop+0x60/0xb0 [ 109.489773][ T4643] ? clear_bhb_loop+0x60/0xb0 [ 109.494426][ T4643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.500299][ T4643] RIP: 0033:0x7fe2fa18e929 [ 109.504699][ T4643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.524281][ T4643] RSP: 002b:00007fffd11756f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.532670][ T4643] RAX: 0000000000000000 RBX: 00007fe2fa3b7ba0 RCX: 00007fe2fa18e929 [ 109.540617][ T4643] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.548564][ T4643] RBP: 00007fe2fa3b7ba0 R08: 0000000000000158 R09: 00000014d11759ef [ 109.556511][ T4643] R10: 00007fe2fa3b7ac0 R11: 0000000000000246 R12: 000000000001a924 [ 109.564458][ T4643] R13: 00007fe2fa3b6160 R14: ffffffffffffffff R15: 00007fffd1175810 [ 109.572411][ T4643] [ 109.575407][ T4643] Modules linked in: [ 109.579317][ T4643] ---[ end trace 0000000000000000 ]--- [ 109.584748][ T4643] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80 [ 109.590974][ T4643] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 4a 71 27 00 e9 0c fe ff ff e8 b0 f8 d5 ff 48 89 df 48 c7 c6 60 0d 75 8a e8 a1 e1 11 00 <0f> 0b e8 9a f8 d5 ff 48 89 df 48 c7 c6 c0 12 75 8a e8 8b e1 11 00 [ 109.610560][ T4643] RSP: 0018:ffffc90003687618 EFLAGS: 00010046 [ 109.616605][ T4643] RAX: 3dbf47542b4cd900 RBX: ffffea0001465e00 RCX: 3dbf47542b4cd900 [ 109.624554][ T4643] RDX: 0000000000000002 RSI: ffffffff8a6c1160 RDI: ffffffff8abf1360 [ 109.632503][ T4643] RBP: ffffc90003687778 R08: dffffc0000000000 R09: fffffbfff1bfd0b6 [ 109.640449][ T4643] R10: fffffbfff1bfd0b6 R11: 1ffffffff1bfd0b5 R12: dffffc0000000000 [ 109.648404][ T4643] R13: dffffc0000000000 R14: ffff88805ada6868 R15: ffff88805ada6870 [ 109.656356][ T4643] FS: 0000555562760500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 109.665264][ T4643] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.671825][ T4643] CR2: 000000110c44c5cb CR3: 0000000030796000 CR4: 00000000003506f0 [ 109.679775][ T4643] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 109.687722][ T4643] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 109.695670][ T4643] Kernel panic - not syncing: Fatal exception [ 109.701986][ T4643] Kernel Offset: disabled [ 109.706295][ T4643] Rebooting in 86400 seconds..