last executing test programs: 6.470493932s ago: executing program 0 (id=1): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x8000000e) epoll_create1$auto(0x1) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x40004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) preadv2$auto(r2, 0x0, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x40020009, 0xdd6, 0xefb3, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 6.322538884s ago: executing program 3 (id=9): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000f9dbdf250100000006000200000000000500070080000000080009000100000008000a000800000008001700", @ANYRES32], 0x3c}}, 0x4000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3d55, 0x0) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xfff) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mknod$auto(0x0, 0x1001, 0x4) open$dir(0x0, 0x201, 0x14) 5.49114464s ago: executing program 0 (id=13): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 4.797081722s ago: executing program 1 (id=14): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x121002, 0x0) socket(0x2, 0x80802, 0x0) socket(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 4.274901142s ago: executing program 2 (id=15): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) 4.254593434s ago: executing program 3 (id=16): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x20000000000ffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x7f, 0x3, 0x11) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(0x0, 0x0) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.172488274s ago: executing program 1 (id=17): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c", 0x2d) r1 = fcntl$auto_F_DUPFD(r0, 0x0, r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x9, 0xdf, 0x18, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mprotect$auto(0x0, 0x806121, 0x8) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) mmap$auto(0x400, 0x4, 0x9ede, 0x10, r1, 0x1a57a4dc) ioctl$auto_SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 3.921289142s ago: executing program 2 (id=18): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/udc/dummy_udc.0/maximum_speed\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) inotify_init1$auto(0x3000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 3.770001073s ago: executing program 0 (id=19): keyctl$auto(0xe, 0x1, 0x0, 0x5eaf, 0x8) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) socket(0x2c, 0x80003, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5407, 0x38) 3.560530648s ago: executing program 2 (id=20): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx8/power/runtime_status\x00', 0x3e52c0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x2ff) socketpair$auto(0x8, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0x8000, 0x0) 3.452787454s ago: executing program 3 (id=21): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r0 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r1 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x18, &(0x7f0000000380)=@bpf_attr_11={0x4, 0x9, 0x866b, 0x100005, 0x80000009, 0xfffffe01, 0xe6d9, r1}, 0x92) 3.226420357s ago: executing program 2 (id=22): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x9c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x80, 0x4, 0x0, 0x1, [@typed={0x14, 0x12d, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x110, 0x0, 0x0, @fd=r0}, @generic="b40881ba2e5f5a8ac452ec983baa599ff96ca07acfef613319f028b5aeefb5a86b91c4d7c1acb112541bfe", @generic="da2f802fb79937e08233aa86f09fe997fd2c9b04f683964b9e46b09c3f0a60cce00160636eab038eaa101972aa36688313e6a007aa"]}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) 3.149946578s ago: executing program 3 (id=23): mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0x12, 0x0, 0x0) r1 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/projid_map\x00', 0x0, 0x0) lseek$auto(r1, 0x1000, 0x80000000) socket(0x2, 0x4, 0x1) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c03, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x6) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 2.632790731s ago: executing program 1 (id=24): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x5, 0x84) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r1 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x10000000084, 0x23, 0x0, 0x8) 2.58219134s ago: executing program 0 (id=25): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x18, 0xa, 0x1) socket(0x2, 0x3, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) statmount$auto(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x26, 0x10004, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x5, 0x5, 0x4, 0x0, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0xbba, 0x0, 0x80000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xb0r\x93\x8d\x9b&C\xa7R\xe1\"\xdb \x19\x02\x11c\xdbWS\x01\xb6\xd8\xba\xeasp\xeaL\xde\xfb`\xc4\x1dDm5\xeeYEq+\x17ZEW\xfb\x8fdJ\aQ\xcc1M\x13k\xd6P\xd27\xf2\xc6E\xad1i\xf7\xab\xc3\'\x1ahq\xb1`E\xe7\xe4[\x00[\xf7gx\xe4\x9bK\xa8\xd7\x8a\x7f\x8a$E\xad5%?\xce~\x01E\x9a\x0f\xa1e]\xc9D\xc5p\xf6L\xef\xd6]\xbb\xc8\x1d\xeb\xef,\xab\x1dHk\x87\x95$\xc1\"\x98I!\x81\b\x9a6\xfa\xda\xf5\xe5l\xd9\x10\f:\x99\x0f\xea\xc4\x03h\xc6y\x1f\xb5f,\xa6*\xa2\"7i\xd0+mr\xd1\'\x9b\xd1\b\xef\xa6\xaa\xa3o\xa0', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) socket(0xa, 0x2, 0x88) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0) 2.252837203s ago: executing program 1 (id=26): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x28341, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x101040, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe2400, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) 2.106536528s ago: executing program 3 (id=27): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x8200, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb 1 [ 101.323760][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 101.342180][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 101.348310][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 101.349958][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.358571][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 101.368729][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 101.373620][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.380775][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 101.394807][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.395395][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 101.409706][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.417933][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.426386][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 101.436008][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 101.560344][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 101.569289][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 101.583847][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 101.593759][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 101.602731][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.953764][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 102.149700][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 102.212279][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.220859][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.229118][ T5835] bridge_slave_0: entered allmulticast mode [ 102.238574][ T5835] bridge_slave_0: entered promiscuous mode [ 102.278671][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.285865][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.295718][ T5835] bridge_slave_1: entered allmulticast mode [ 102.303626][ T5835] bridge_slave_1: entered promiscuous mode [ 102.359525][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 102.427622][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.470953][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.504225][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 102.542154][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.549440][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.556912][ T5830] bridge_slave_0: entered allmulticast mode [ 102.564420][ T5830] bridge_slave_0: entered promiscuous mode [ 102.603289][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.610784][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.619609][ T5830] bridge_slave_1: entered allmulticast mode [ 102.627855][ T5830] bridge_slave_1: entered promiscuous mode [ 102.648403][ T5835] team0: Port device team_slave_0 added [ 102.691514][ T5835] team0: Port device team_slave_1 added [ 102.755567][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.769011][ T9] cfg80211: failed to load regulatory.db [ 102.792523][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.801155][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.808853][ T5826] bridge_slave_0: entered allmulticast mode [ 102.816180][ T5826] bridge_slave_0: entered promiscuous mode [ 102.826645][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.850419][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.857776][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.884109][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.895997][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.903574][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.911265][ T5826] bridge_slave_1: entered allmulticast mode [ 102.919263][ T5826] bridge_slave_1: entered promiscuous mode [ 102.957552][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.964604][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.990803][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.034939][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.042404][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.049820][ T5841] bridge_slave_0: entered allmulticast mode [ 103.057483][ T5841] bridge_slave_0: entered promiscuous mode [ 103.080649][ T5830] team0: Port device team_slave_0 added [ 103.092580][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.103462][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.111590][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.119652][ T5841] bridge_slave_1: entered allmulticast mode [ 103.127736][ T5841] bridge_slave_1: entered promiscuous mode [ 103.138085][ T5830] team0: Port device team_slave_1 added [ 103.146436][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.253609][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.270120][ T5835] hsr_slave_0: entered promiscuous mode [ 103.276742][ T5835] hsr_slave_1: entered promiscuous mode [ 103.284797][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.291881][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.317895][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.331130][ T5826] team0: Port device team_slave_0 added [ 103.340221][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.350912][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.358473][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.386208][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.400995][ T5826] team0: Port device team_slave_1 added [ 103.477828][ T5829] Bluetooth: hci2: command tx timeout [ 103.477832][ T52] Bluetooth: hci0: command tx timeout [ 103.489308][ T5832] Bluetooth: hci1: command tx timeout [ 103.494949][ T5841] team0: Port device team_slave_0 added [ 103.515691][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.522711][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.548755][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.562157][ T5841] team0: Port device team_slave_1 added [ 103.588174][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.595330][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.621663][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.637096][ T5832] Bluetooth: hci3: command tx timeout [ 103.690679][ T5830] hsr_slave_0: entered promiscuous mode [ 103.697468][ T5830] hsr_slave_1: entered promiscuous mode [ 103.703731][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 103.709992][ T5830] Cannot create hsr debugfs directory [ 103.731755][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.738817][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.765874][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.787846][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.794820][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.821245][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.918977][ T5826] hsr_slave_0: entered promiscuous mode [ 103.926784][ T5826] hsr_slave_1: entered promiscuous mode [ 103.933445][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 103.939689][ T5826] Cannot create hsr debugfs directory [ 104.054451][ T5841] hsr_slave_0: entered promiscuous mode [ 104.061267][ T5841] hsr_slave_1: entered promiscuous mode [ 104.067949][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 104.073731][ T5841] Cannot create hsr debugfs directory [ 104.369786][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.409235][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.448177][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.475570][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.559496][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.579242][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.593024][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.618500][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.713589][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.729126][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.747247][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.781370][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.892600][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.906046][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.922675][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.935822][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.009292][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.095449][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.123508][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.152385][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.159854][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.191120][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.198323][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.240559][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.272389][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.279679][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.312561][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.319815][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.344730][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.426322][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.462143][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.481069][ T4513] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.490585][ T4513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.512758][ T4513] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.520828][ T4513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.557467][ T5829] Bluetooth: hci2: command tx timeout [ 105.557475][ T52] Bluetooth: hci0: command tx timeout [ 105.569993][ T5832] Bluetooth: hci1: command tx timeout [ 105.661930][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.706012][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.713384][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.732305][ T5829] Bluetooth: hci3: command tx timeout [ 105.744317][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.751612][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.952423][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.095054][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.178634][ T5835] veth0_vlan: entered promiscuous mode [ 106.224324][ T5835] veth1_vlan: entered promiscuous mode [ 106.338397][ T5830] veth0_vlan: entered promiscuous mode [ 106.353855][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.387344][ T5830] veth1_vlan: entered promiscuous mode [ 106.400603][ T5835] veth0_macvtap: entered promiscuous mode [ 106.439336][ T5835] veth1_macvtap: entered promiscuous mode [ 106.479779][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.512209][ T5830] veth0_macvtap: entered promiscuous mode [ 106.528937][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.553207][ T5830] veth1_macvtap: entered promiscuous mode [ 106.561442][ T5826] veth0_vlan: entered promiscuous mode [ 106.573522][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.609488][ T4513] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.619935][ T4513] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.634357][ T4513] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.650487][ T5826] veth1_vlan: entered promiscuous mode [ 106.659093][ T4513] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.685167][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.722264][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.745600][ T5841] veth0_vlan: entered promiscuous mode [ 106.773139][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.785246][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.803575][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.813475][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.857961][ T5841] veth1_vlan: entered promiscuous mode [ 106.886322][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.905596][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.953087][ T5826] veth0_macvtap: entered promiscuous mode [ 107.012244][ T5826] veth1_macvtap: entered promiscuous mode [ 107.028614][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.037435][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.039892][ T5841] veth0_macvtap: entered promiscuous mode [ 107.063019][ T5841] veth1_macvtap: entered promiscuous mode [ 107.070887][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.109660][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.141241][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.185289][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 107.201621][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.213069][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.235012][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.246632][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.262742][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.264225][ T4513] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.281199][ T4513] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298509][ T4513] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.327217][ T4513] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.393086][ T4513] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.433897][ T4513] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.436834][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.465113][ T4513] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.504353][ T4513] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.587923][ T5920] tipc: Withdrawal distribution failure [ 107.637040][ T5832] Bluetooth: hci1: command tx timeout [ 107.637162][ T52] Bluetooth: hci0: command tx timeout [ 107.642781][ T5829] Bluetooth: hci2: command tx timeout [ 107.675708][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.708142][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.734584][ T5924] hub 1-0:1.0: USB hub found [ 107.756173][ T5924] hub 1-0:1.0: 1 port detected [ 107.795054][ T5925] hub 1-0:1.0: USB hub found [ 107.800888][ T5829] Bluetooth: hci3: command tx timeout [ 107.819033][ T5925] hub 1-0:1.0: 1 port detected [ 107.835905][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.875185][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.934746][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.956600][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.132076][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.174464][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.323636][ T5931] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6'. [ 108.586010][ T5939] Console: switching to colour VGA+ 80x25 [ 108.901540][ T5942] Console: switching to colour frame buffer device 128x48 [ 109.717370][ T5829] Bluetooth: hci0: command tx timeout [ 109.717417][ T5832] Bluetooth: hci2: command tx timeout [ 109.728698][ T52] Bluetooth: hci1: command tx timeout [ 109.869711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.878980][ T52] Bluetooth: hci3: command tx timeout [ 109.972181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.983016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.007009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.074984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #50!!! [ 110.107354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.401340][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14'. [ 110.452842][ T5970] netlink: 354 bytes leftover after parsing attributes in process `syz.1.14'. [ 110.514874][ T5970] Zero length message leads to an empty skb [ 110.537035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 110.557459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.057253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.518000][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.207519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.648237][ T6007] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78400 [ 112.690237][ T6007] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 112.702113][ T6007] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 112.713333][ T6007] page_type: f5(slab) [ 112.729010][ T6007] raw: 00fff00000000040 ffff88813ff30500 dead000000000122 0000000000000000 [ 112.796160][ T6007] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 112.826513][ T6007] head: 00fff00000000040 ffff88813ff30500 dead000000000122 0000000000000000 [ 112.848090][ T6007] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 112.866961][ T6007] head: 00fff00000000003 ffffea0001e10001 00000000ffffffff 00000000ffffffff [ 112.876227][ T6007] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 112.945492][ T6007] page dumped because: unmovable page [ 113.017447][ T6007] page_owner tracks the page as allocated [ 113.036931][ T30] audit: type=1800 audit(1765317772.553:2): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.27" name="dbroot" dev="configfs" ino=8073 res=0 errno=0 [ 113.077436][ T6007] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 104741369166, free_ts 104702829787 [ 113.099373][ T6007] post_alloc_hook+0x1af/0x220 [ 113.104421][ T6007] get_page_from_freelist+0xd0b/0x31a0 [ 113.111866][ T6007] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 113.118227][ T6007] alloc_pages_mpol+0x1fb/0x550 [ 113.123181][ T6007] new_slab+0x2c3/0x430 [ 113.127474][ T6007] ___slab_alloc+0xe18/0x1c90 [ 113.132766][ T6007] __slab_alloc.constprop.0+0x63/0x110 [ 113.138518][ T6007] __kmalloc_noprof+0x4fc/0x910 [ 113.143428][ T6007] __register_sysctl_table+0xb3/0x1900 [ 113.197498][ T6007] __addrconf_sysctl_register+0x1a2/0x360 [ 113.217002][ T6007] addrconf_sysctl_register+0x15f/0x1f0 [ 113.222663][ T6007] addrconf_notify+0x11e/0x19f0 [ 113.247097][ T6007] notifier_call_chain+0xbc/0x3e0 [ 113.273173][ T6007] call_netdevice_notifiers_info+0xbe/0x110 [ 113.319252][ T6007] netif_change_name+0x557/0x8f0 [ 113.334790][ T6007] do_setlink.constprop.0+0x3362/0x4380 [ 113.354689][ T6007] page last free pid 5827 tgid 5827 stack trace: [ 113.385690][ T6007] __free_frozen_pages+0x7df/0x1170 [ 113.406941][ T6007] __put_partials+0x130/0x170 [ 113.449417][ T6007] qlist_free_all+0x4c/0xf0 [ 113.472204][ T6007] kasan_quarantine_reduce+0x195/0x1e0 [ 113.494759][ T6007] __kasan_slab_alloc+0x69/0x90 [ 113.517012][ T6007] __kmalloc_noprof+0x2f6/0x910 [ 113.530007][ T6007] tomoyo_realpath_from_path+0xc2/0x6e0 [ 113.543425][ T6007] tomoyo_path_perm+0x274/0x460 [ 113.557841][ T6007] security_inode_getattr+0x116/0x290 [ 113.567944][ T6007] vfs_fstat+0x4b/0xe0 [ 113.576968][ T6007] __do_sys_newfstat+0x87/0x100 [ 113.587240][ T6007] do_syscall_64+0xcd/0xf80 [ 113.597221][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.155625][ T6020] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.169587][ T6020] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.233911][ T6020] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.307917][ T6020] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.314002][ T6020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.460401][ T6020] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.545096][ T6020] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.605643][ T6020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.689255][ T6020] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.760005][ T6020] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.781955][ T6020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.883178][ T6020] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.075943][ T6031] [ 115.078319][ T6031] ====================================================== [ 115.085381][ T6031] WARNING: possible circular locking dependency detected [ 115.092444][ T6031] syzkaller #0 Not tainted [ 115.096935][ T6031] ------------------------------------------------------ [ 115.104034][ T6031] syz.2.32/6031 is trying to acquire lock: [ 115.109866][ T6031] ffff8880342396d8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4d0/0xcc0 [ 115.121656][ T6031] [ 115.121656][ T6031] but task is already holding lock: [ 115.129043][ T6031] ffff888034238260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 115.138133][ T6031] [ 115.138133][ T6031] which lock already depends on the new lock. [ 115.138133][ T6031] [ 115.148541][ T6031] [ 115.148541][ T6031] the existing dependency chain (in reverse order) is: [ 115.157586][ T6031] [ 115.157586][ T6031] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 115.165340][ T6031] lock_sock_nested+0x41/0xf0 [ 115.170586][ T6031] smc_listen_out+0x202/0x4a0 [ 115.176052][ T6031] smc_listen_work+0x5a3/0x50b0 [ 115.181450][ T6031] process_one_work+0x9ba/0x1b20 [ 115.187020][ T6031] worker_thread+0x6c8/0xf10 [ 115.192251][ T6031] kthread+0x3c5/0x780 [ 115.196965][ T6031] ret_from_fork+0x983/0xb10 [ 115.202128][ T6031] ret_from_fork_asm+0x1a/0x30 [ 115.207484][ T6031] [ 115.207484][ T6031] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 115.217767][ T6031] __lock_acquire+0x1669/0x2890 [ 115.223473][ T6031] lock_acquire+0x179/0x330 [ 115.228527][ T6031] __flush_work+0x4e4/0xcc0 [ 115.233579][ T6031] cancel_work_sync+0xd1/0xf0 [ 115.238808][ T6031] smc_clcsock_release+0x5f/0xe0 [ 115.244295][ T6031] __smc_release+0x5c2/0x880 [ 115.249435][ T6031] smc_close_non_accepted+0xda/0x200 [ 115.255352][ T6031] smc_close_active+0xc3c/0x1070 [ 115.260913][ T6031] __smc_release+0x634/0x880 [ 115.266051][ T6031] smc_release+0x1fc/0x620 [ 115.271100][ T6031] __sock_release+0xb3/0x270 [ 115.276369][ T6031] sock_close+0x1c/0x30 [ 115.281071][ T6031] __fput+0x402/0xb70 [ 115.285679][ T6031] task_work_run+0x150/0x240 [ 115.290990][ T6031] exit_to_user_mode_loop+0xfb/0x540 [ 115.297003][ T6031] do_syscall_64+0x4ee/0xf80 [ 115.302215][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.308666][ T6031] [ 115.308666][ T6031] other info that might help us debug this: [ 115.308666][ T6031] [ 115.319202][ T6031] Possible unsafe locking scenario: [ 115.319202][ T6031] [ 115.326693][ T6031] CPU0 CPU1 [ 115.332262][ T6031] ---- ---- [ 115.337659][ T6031] lock(sk_lock-AF_SMC/1); [ 115.342728][ T6031] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.352290][ T6031] lock(sk_lock-AF_SMC/1); [ 115.359518][ T6031] lock((work_completion)(&new_smc->smc_listen_work)); [ 115.367435][ T6031] [ 115.367435][ T6031] *** DEADLOCK *** [ 115.367435][ T6031] [ 115.377674][ T6031] 3 locks held by syz.2.32/6031: [ 115.382714][ T6031] #0: ffff8880772e3008 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 115.393331][ T6031] #1: ffff888034238260 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 115.402879][ T6031] #2: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfb/0xcc0 [ 115.412107][ T6031] [ 115.412107][ T6031] stack backtrace: [ 115.418072][ T6031] CPU: 1 UID: 0 PID: 6031 Comm: syz.2.32 Not tainted syzkaller #0 PREEMPT(full) [ 115.418104][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.418129][ T6031] Call Trace: [ 115.418139][ T6031] [ 115.418148][ T6031] dump_stack_lvl+0x116/0x1f0 [ 115.418188][ T6031] print_circular_bug+0x275/0x340 [ 115.418234][ T6031] check_noncircular+0x146/0x160 [ 115.418281][ T6031] __lock_acquire+0x1669/0x2890 [ 115.418307][ T6031] ? __debug_object_init+0x2de/0x3d0 [ 115.418345][ T6031] lock_acquire+0x179/0x330 [ 115.418368][ T6031] ? __flush_work+0x4d0/0xcc0 [ 115.418401][ T6031] ? mark_held_locks+0x49/0x80 [ 115.418425][ T6031] ? __flush_work+0x4d0/0xcc0 [ 115.418456][ T6031] __flush_work+0x4e4/0xcc0 [ 115.418487][ T6031] ? __flush_work+0x4d0/0xcc0 [ 115.418521][ T6031] ? __pfx___flush_work+0x10/0x10 [ 115.418555][ T6031] ? __pfx_wq_barrier_func+0x10/0x10 [ 115.418599][ T6031] ? do_raw_spin_lock+0x12c/0x2b0 [ 115.418629][ T6031] ? __pfx___might_resched+0x10/0x10 [ 115.418670][ T6031] cancel_work_sync+0xd1/0xf0 [ 115.418707][ T6031] smc_clcsock_release+0x5f/0xe0 [ 115.418734][ T6031] __smc_release+0x5c2/0x880 [ 115.418758][ T6031] ? __pfx_sock_def_readable+0x10/0x10 [ 115.418801][ T6031] smc_close_non_accepted+0xda/0x200 [ 115.418830][ T6031] smc_close_active+0xc3c/0x1070 [ 115.418859][ T6031] __smc_release+0x634/0x880 [ 115.418885][ T6031] smc_release+0x1fc/0x620 [ 115.418907][ T6031] ? kmem_cache_free+0x8a/0x770 [ 115.418942][ T6031] __sock_release+0xb3/0x270 [ 115.418971][ T6031] ? __pfx_sock_close+0x10/0x10 [ 115.418998][ T6031] sock_close+0x1c/0x30 [ 115.419024][ T6031] __fput+0x402/0xb70 [ 115.419050][ T6031] ? _raw_spin_unlock_irq+0x23/0x50 [ 115.419080][ T6031] task_work_run+0x150/0x240 [ 115.419109][ T6031] ? __pfx_task_work_run+0x10/0x10 [ 115.419143][ T6031] ? __do_sys_close_range+0x278/0x730 [ 115.419189][ T6031] exit_to_user_mode_loop+0xfb/0x540 [ 115.419223][ T6031] do_syscall_64+0x4ee/0xf80 [ 115.419257][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.419285][ T6031] RIP: 0033:0x7ff4f718f7c9 [ 115.419311][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.419336][ T6031] RSP: 002b:00007ffec8144898 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 115.419362][ T6031] RAX: 0000000000000000 RBX: 000000000001c0cd RCX: 00007ff4f718f7c9 [ 115.419380][ T6031] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 115.419396][ T6031] RBP: 00007ff4f73e7da0 R08: 0000000000000001 R09: 0000000fc8144b8f [ 115.419413][ T6031] R10: 0000001b30020000 R11: 0000000000000246 R12: 00007ff4f73e5fac [ 115.419430][ T6031] R13: 00007ff4f73e5fa0 R14: ffffffffffffffff R15: 00007ffec81449b0 [ 115.419457][ T6031] [ 115.890466][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.357041][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.599262][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.844583][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.957019][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.437018][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.677509][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.916931][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.040557][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.516952][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.756946][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.997308][ T52] Bluetooth: hci3: command 0x0c1a tx timeout