last executing test programs: 15.908107814s ago: executing program 2 (id=16): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 13.166568604s ago: executing program 3 (id=21): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = dup3(r4, r1, 0x0) recvmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 13.072088798s ago: executing program 2 (id=23): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80042, 0x0) 12.11815903s ago: executing program 3 (id=24): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = dup3(r4, r1, 0x0) recvmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 10.75389571s ago: executing program 2 (id=25): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r6 = dup3(r5, r2, 0x0) recvmmsg$unix(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 9.697863376s ago: executing program 3 (id=26): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000043dceb56e4d86cae000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x10) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @local}}, {{0x2, 0x0, @loopback}}}, 0x108) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000001440)=""/4106, 0x100a}], 0x1, 0x300, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b84939328a7fcb5dfc0c0969e7f9fd383143aa01c0a3c0f16ff70ce8bb011366c81151af160efad39284dc73eda5b5de57aaa0cedfc56a31e86559edac3f0e9e45f7a763fda821af28f9025fdd9d4aa3eee8082910dcc12d367890cf0b73090f4c697376d8957b7ec954f06647ff2294acf0a269a65827d83944ad4b3d96dce96e6bd3b95fbf4ea8a348ebf6138cd3c1ecb9", 0x92) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r7 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f00003fd000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './mnt/file0'}, 0xf) 8.961582868s ago: executing program 1 (id=27): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r1 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r5 = dup3(r4, r1, 0x0) recvmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) 7.921306274s ago: executing program 1 (id=28): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82280, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffa234, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 7.915161913s ago: executing program 3 (id=29): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x82280, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffa234, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 7.861041766s ago: executing program 0 (id=30): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) 6.772776134s ago: executing program 2 (id=31): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) r5 = dup(r4) write$FUSE_WRITE(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x800}}, 0x18) read$FUSE(r5, &(0x7f0000001240)={0x2020}, 0x2020) 6.495026836s ago: executing program 0 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000440)={{0x4, 0x6}, 'port1\x00', 0x1, 0x0, 0x2, 0x6, 0x5, 0x3, 0x5, 0x0, 0x0, 0xb}) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000a0a1fc29"], 0x5a}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="c4e2f53d9d05000000362e0fc7580966b815010f00d8c744240005000000c744240209000000c7442406000000000f011c24c4e17d10180fc77c1805640fc7b620f73b1ab9e60a0000b8b4000000ba000000000f30c4c13258c066ba4300ed", 0x5f}], 0x1, 0x51, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.174333253s ago: executing program 2 (id=33): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000240)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df793"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.984297142s ago: executing program 1 (id=34): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xfe00, 0x8000c62) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=""/229, 0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) close_range(r4, 0xffffffffffffffff, 0x0) 4.910811565s ago: executing program 3 (id=35): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) r5 = dup(r4) write$FUSE_WRITE(r5, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x800}}, 0x18) read$FUSE(r5, &(0x7f0000001240)={0x2020}, 0x2020) 3.079723685s ago: executing program 3 (id=36): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x3) syz_pidfd_open(0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x1e, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xd) r4 = dup(r3) write$FUSE_WRITE(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x800}}, 0x18) read$FUSE(r4, &(0x7f0000001240)={0x2020}, 0x2020) 3.060571486s ago: executing program 0 (id=37): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) dup3(r5, r2, 0x0) 2.984182749s ago: executing program 1 (id=38): syz_emit_ethernet(0x62, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xd, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0x4e, [@multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') shutdown(r2, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) 1.961038994s ago: executing program 0 (id=39): syz_emit_ethernet(0x62, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x5c, 0x0, {0xd, 0x4, 0x1, 0x1, 0x7, 0x67, 0x8, 0x1, 0x8, 0xfffd, @empty, @broadcast, {[@lsrr={0x83, 0x1f, 0x4e, [@multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x21}, @multicast2, @private=0x7f, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}, "3276ba29"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000003a80)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x2}, {0x0, 0x100000}, &(0x7f0000000480)=[{&(0x7f00000016c0)=""/96, 0x60}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2, 0x39, 0x2}}], 0x48, 0x4000000}, 0x0) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') shutdown(r2, 0x1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) 1.011268066s ago: executing program 1 (id=40): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0), 0x700}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0xfffd, 0x0) execveat(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000600), 0x0, 0x400) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x378, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x2e0, 0x206, 0x240, 0x2e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x1e8, 0x208, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 967.758318ms ago: executing program 0 (id=41): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) flistxattr(0xffffffffffffffff, &(0x7f0000000140)=""/36, 0x24) syz_emit_vhci(0x0, 0x7) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) preadv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000280)=""/146, 0x92}, {0x0}], 0x3, 0x5, 0x4) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04ff8b38ec32c4dc186aad8814a428cf1918be2864364dcbaad5617ce9f6c8fc223cbecb2fb73fa53447826afed3c185569bc1dab7bf13cad0174138094cc976c9ced6a2ab45470a42f182748b00d32ead54bd3ad1ea077c88a51e56ab227c61effeafda55c7018b19d6945ff4d4d44530fdcb83d4fccba2349596cdb8"], 0x8e) r2 = socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = gettid() r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x800}, 0x40800) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 145.994794ms ago: executing program 0 (id=42): syz_open_dev$evdev(0x0, 0x1, 0x121000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 63.353407ms ago: executing program 2 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x80103, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=44): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xfe00, 0x8000c62) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)=""/229, 0xe5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x260, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x21c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x8}}, @TCA_ROUTE4_ACT={0x1f0, 0x6, [@m_ctinfo={0xc4, 0x15, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x8d, 0x6, "34d466fa82d5906ad8ff3fc757ae4e1546417860defed1717e2f58e17aed5b1264ef82d7734e155e0f1ac4e32635639acee5e62140e36f9a2f8bc34c2d504db956a5f1daec6d722d140a3d4f2acf6b16e397c39cd1143264d0d227ce8520f62068f1f731cb85c9742d15b3305aadcf5fc5f0dd1f8caaf204db5b3b2deb825c392dc2feb1151211ab31"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_gact={0x128, 0x10, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x9, 0x7, 0x3, 0xa43d}}]}, {0xe4, 0x6, "4352101dadacbf78912e039f2171559d2c6aea9468dd4a672ab4d304002d19dfc1022fd925ef2bfe220c8ce5b837d99c366a26fc6675ff3fa7b71e5d77d681f1fc6907b345214555b379108c4799e644ce53a8c82edb683e7ca260e527c392ab34e1e38c0f0aa89b4495693dfe46833920e338ae77d9dddcf5914a33cc2eaad3fc7e3b00727a08c8ef3474ba97ce2be2fe11d6d8b45349b66dc1d097b86410e74d03152434dec0620fa592ebdb7afa8479e3fd97e665d24450c4f74cf50826113e690f9ae1470e032dc5f12a7e05adc3c4e5a4c3e1eb83c6552ed7c23833461e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xf}}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.207' (ED25519) to the list of known hosts. [ 65.783235][ T5754] cgroup: Unknown subsys name 'net' [ 65.924134][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.363547][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.897687][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.899017][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.912590][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.921893][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.930607][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.931597][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.946588][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.948101][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.955359][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.968727][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.978365][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.986267][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.994966][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.995441][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.011916][ T5769] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.011942][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.026945][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.027552][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.042211][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.050692][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.058422][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.067477][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.075726][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.083159][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.437991][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 69.561427][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 69.630417][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 69.648353][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.655533][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.663939][ T5766] bridge_slave_0: entered allmulticast mode [ 69.673043][ T5766] bridge_slave_0: entered promiscuous mode [ 69.685835][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.693008][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.700253][ T5766] bridge_slave_1: entered allmulticast mode [ 69.707441][ T5766] bridge_slave_1: entered promiscuous mode [ 69.760888][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 69.774565][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.813525][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.820776][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.828013][ T5765] bridge_slave_0: entered allmulticast mode [ 69.835029][ T5765] bridge_slave_0: entered promiscuous mode [ 69.845739][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.886223][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.893928][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.901639][ T5765] bridge_slave_1: entered allmulticast mode [ 69.908985][ T5765] bridge_slave_1: entered promiscuous mode [ 69.944270][ T5766] team0: Port device team_slave_0 added [ 69.975643][ T5766] team0: Port device team_slave_1 added [ 70.008843][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.021167][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.040590][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.047889][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.074633][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.086452][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.093782][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.101148][ T5767] bridge_slave_0: entered allmulticast mode [ 70.108235][ T5767] bridge_slave_0: entered promiscuous mode [ 70.137729][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.144805][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.171397][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.188326][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.195445][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.202955][ T5767] bridge_slave_1: entered allmulticast mode [ 70.210072][ T5767] bridge_slave_1: entered promiscuous mode [ 70.234783][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.242596][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.250027][ T5764] bridge_slave_0: entered allmulticast mode [ 70.256848][ T5764] bridge_slave_0: entered promiscuous mode [ 70.265305][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.272654][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.280676][ T5764] bridge_slave_1: entered allmulticast mode [ 70.288261][ T5764] bridge_slave_1: entered promiscuous mode [ 70.306365][ T5765] team0: Port device team_slave_0 added [ 70.360949][ T5765] team0: Port device team_slave_1 added [ 70.370029][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.396507][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.408384][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.420195][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.450960][ T5766] hsr_slave_0: entered promiscuous mode [ 70.457749][ T5766] hsr_slave_1: entered promiscuous mode [ 70.494404][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.501466][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.527746][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.553123][ T5764] team0: Port device team_slave_0 added [ 70.561533][ T5767] team0: Port device team_slave_0 added [ 70.570744][ T5767] team0: Port device team_slave_1 added [ 70.594267][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.601441][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.627406][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.645587][ T5764] team0: Port device team_slave_1 added [ 70.663047][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.670301][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.696346][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.709099][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.716058][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.742050][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.843191][ T5765] hsr_slave_0: entered promiscuous mode [ 70.849931][ T5765] hsr_slave_1: entered promiscuous mode [ 70.856098][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.864646][ T5765] Cannot create hsr debugfs directory [ 70.871309][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.878483][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.904465][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.936703][ T5767] hsr_slave_0: entered promiscuous mode [ 70.943176][ T5767] hsr_slave_1: entered promiscuous mode [ 70.949686][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.957402][ T5767] Cannot create hsr debugfs directory [ 70.975933][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.983165][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.010416][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.048101][ T51] Bluetooth: hci0: command tx timeout [ 71.127572][ T51] Bluetooth: hci1: command tx timeout [ 71.127598][ T5083] Bluetooth: hci3: command tx timeout [ 71.127773][ T5771] Bluetooth: hci2: command tx timeout [ 71.155195][ T5764] hsr_slave_0: entered promiscuous mode [ 71.162127][ T5764] hsr_slave_1: entered promiscuous mode [ 71.168999][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.176572][ T5764] Cannot create hsr debugfs directory [ 71.410346][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.423241][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.433677][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.444161][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.513779][ T5765] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.530921][ T5765] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.540802][ T5765] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.562069][ T5765] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.644082][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.681441][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.691881][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.704840][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.711722][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.739421][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.752789][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.762129][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.774462][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.785109][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.883317][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.932973][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.971705][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.002630][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.009993][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.022707][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.036484][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.043642][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.083923][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.103153][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.110330][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.135024][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.142192][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.155241][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.165725][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.199631][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.206730][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.227855][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.264997][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.272164][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.284990][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.292229][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.320205][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.327394][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.383886][ T5765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.591296][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.711395][ T5766] veth0_vlan: entered promiscuous mode [ 72.742039][ T5766] veth1_vlan: entered promiscuous mode [ 72.834219][ T5766] veth0_macvtap: entered promiscuous mode [ 72.859765][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.870777][ T5766] veth1_macvtap: entered promiscuous mode [ 72.925745][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.945066][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.971700][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.981698][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991054][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.999961][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.022554][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.045541][ T5765] veth0_vlan: entered promiscuous mode [ 73.066049][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.105489][ T5765] veth1_vlan: entered promiscuous mode [ 73.127422][ T5771] Bluetooth: hci0: command tx timeout [ 73.208245][ T5771] Bluetooth: hci2: command tx timeout [ 73.209666][ T5083] Bluetooth: hci3: command tx timeout [ 73.223258][ T51] Bluetooth: hci1: command tx timeout [ 73.238904][ T5764] veth0_vlan: entered promiscuous mode [ 73.253911][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.264996][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.284118][ T5765] veth0_macvtap: entered promiscuous mode [ 73.316056][ T5764] veth1_vlan: entered promiscuous mode [ 73.324168][ T5765] veth1_macvtap: entered promiscuous mode [ 73.337168][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.345282][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.369774][ T5767] veth0_vlan: entered promiscuous mode [ 73.384664][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.402476][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.415755][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.439950][ T5767] veth1_vlan: entered promiscuous mode [ 73.460897][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.475492][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.488266][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.502895][ T5764] veth0_macvtap: entered promiscuous mode [ 73.522976][ T5764] veth1_macvtap: entered promiscuous mode [ 73.535491][ T5765] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.551532][ T5765] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.567272][ T5765] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.576179][ T5765] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.646714][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.664640][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.678769][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.698922][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.710807][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.721664][ T5767] veth0_macvtap: entered promiscuous mode [ 73.766440][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.792237][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.805815][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.817864][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.830435][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.848943][ T5767] veth1_macvtap: entered promiscuous mode [ 73.880136][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.890676][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.899945][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.913210][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.154412][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.285625][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.369452][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.439361][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.467500][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.485844][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.502310][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.520180][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.530728][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.540837][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.551370][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.561498][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.572411][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.590073][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.752705][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.797231][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.807725][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.816541][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.843343][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.885844][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.082853][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.114003][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.207325][ T51] Bluetooth: hci0: command tx timeout [ 75.287230][ T51] Bluetooth: hci3: command tx timeout [ 75.288862][ T5083] Bluetooth: hci1: command tx timeout [ 75.292762][ T51] Bluetooth: hci2: command tx timeout [ 75.306400][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.315462][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.358348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.366210][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.219021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.227813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.338508][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.364315][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.398625][ T3444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.498784][ T3444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.292024][ T51] Bluetooth: hci0: command tx timeout [ 77.367897][ T51] Bluetooth: hci2: command tx timeout [ 77.373417][ T51] Bluetooth: hci1: command tx timeout [ 77.377100][ T5771] Bluetooth: hci3: command tx timeout [ 77.652352][ T5878] rdma_op ffff88805c3ae1f0 conn xmit_rdma 0000000000000000 [ 77.894310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.407678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.487695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.495930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.676068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.727546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.807611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 78.815853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 80.241609][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.915871][ T5899] binder: 5895:5899 ioctl 4018620d 0 returned -22 [ 81.961516][ T27] cfg80211: failed to load regulatory.db [ 86.134856][ T5938] binder: 5920:5938 ioctl 4018620d 0 returned -22 [ 91.964359][ T5978] syzkaller0: entered promiscuous mode [ 91.977526][ T5978] syzkaller0: entered allmulticast mode [ 92.800629][ T5974] syzkaller0: entered promiscuous mode [ 92.827109][ T5974] syzkaller0: entered allmulticast mode [ 95.060977][ T5995] Zero length message leads to an empty skb [ 98.623909][ T6012] binder: 6011:6012 ioctl 4018620d 0 returned -22 [ 99.096933][ T6019] process 'syz.1.40' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 99.182973][ T6022] Cannot find set identified by id 0 to match [ 205.357052][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 205.364161][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6029/1:b..l [ 205.372413][ C0] rcu: (detected by 0, t=10502 jiffies, g=9037, q=750 ncpus=2) [ 205.380087][ C0] task:syz.2.43 state:R running task stack:28168 pid:6029 ppid:5764 flags:0x00004000 [ 205.391643][ C0] Call Trace: [ 205.394946][ C0] [ 205.397896][ C0] __schedule+0x14d2/0x44d0 [ 205.402446][ C0] ? __bfs+0x5b0/0x5c0 [ 205.406532][ C0] ? __lock_acquire+0x1334/0x7c80 [ 205.411571][ C0] ? asan.module_dtor+0x20/0x20 [ 205.416446][ C0] ? mark_lock+0x94/0x320 [ 205.420803][ C0] ? preempt_schedule+0xab/0xc0 [ 205.425675][ C0] ? get_user_pages_remote+0x685/0xc10 [ 205.431150][ C0] preempt_schedule_common+0x82/0xc0 [ 205.436456][ C0] preempt_schedule+0xab/0xc0 [ 205.441159][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 205.446810][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 205.451859][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.458046][ C0] ? get_user_pages_remote+0x685/0xc10 [ 205.463534][ C0] preempt_schedule_thunk+0x1a/0x30 [ 205.468761][ C0] _raw_spin_unlock+0x3a/0x40 [ 205.473457][ C0] __text_poke+0x8da/0xb20 [ 205.477895][ C0] ? get_user_pages_remote+0x685/0xc10 [ 205.483373][ C0] ? __text_poke+0xb20/0xb20 [ 205.487984][ C0] ? text_poke+0xc0/0xc0 [ 205.492248][ C0] ? __mutex_trylock_common+0x153/0x250 [ 205.497814][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 205.503992][ C0] ? get_user_pages_remote+0x685/0xc10 [ 205.509465][ C0] text_poke_bp_batch+0x243/0x930 [ 205.514513][ C0] ? text_poke_loc_init+0x820/0x820 [ 205.519724][ C0] ? mutex_lock_nested+0x20/0x20 [ 205.524668][ C0] ? text_poke_queue+0x140/0x190 [ 205.529626][ C0] ? arch_jump_label_transform_queue+0x93/0x100 [ 205.535902][ C0] text_poke_finish+0x30/0x50 [ 205.540590][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 205.546679][ C0] static_key_disable_cpuslocked+0xc5/0x1a0 [ 205.552596][ C0] static_key_disable+0x1a/0x20 [ 205.557462][ C0] tracepoint_probe_unregister+0x6ad/0x930 [ 205.563381][ C0] ? _local_bh_enable+0xa0/0xa0 [ 205.568251][ C0] bpf_raw_tp_link_release+0x63/0x90 [ 205.573560][ C0] bpf_link_free+0x131/0x310 [ 205.578176][ C0] ? idr_preload_end+0x200/0x200 [ 205.583130][ C0] bpf_link_release+0x6e/0x80 [ 205.587816][ C0] __fput+0x234/0x970 [ 205.591829][ C0] task_work_run+0x1ce/0x250 [ 205.596434][ C0] ? task_work_cancel+0x240/0x240 [ 205.601479][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 205.606958][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 205.612259][ C0] exit_to_user_mode_prepare+0xf6/0x180 [ 205.617825][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 205.623297][ C0] do_syscall_64+0x61/0xb0 [ 205.627723][ C0] ? clear_bhb_loop+0x40/0x90 [ 205.632412][ C0] ? clear_bhb_loop+0x40/0x90 [ 205.637151][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.643104][ C0] RIP: 0033:0x7f738498f749 [ 205.647545][ C0] RSP: 002b:00007f7385822038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 205.655977][ C0] RAX: 0000000000000000 RBX: 00007f7384be6090 RCX: 00007f738498f749 [ 205.663960][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000006 [ 205.671946][ C0] RBP: 00007f7384a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 205.679925][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.687900][ C0] R13: 00007f7384be6128 R14: 00007f7384be6090 R15: 00007ffc9c666898 [ 205.695902][ C0] [ 205.698946][ C0] rcu: rcu_preempt kthread starved for 10359 jiffies! g9037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 205.710060][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 205.720035][ C0] rcu: RCU grace-period kthread stack dump: [ 205.725923][ C0] task:rcu_preempt state:R running task stack:27080 pid:17 ppid:2 flags:0x00004000 [ 205.736717][ C0] Call Trace: [ 205.740026][ C0] [ 205.742968][ C0] __schedule+0x14d2/0x44d0 [ 205.747508][ C0] ? asan.module_dtor+0x20/0x20 [ 205.752373][ C0] ? enqueue_timer+0x225/0x530 [ 205.757150][ C0] ? __mod_timer+0x984/0xdb0 [ 205.761763][ C0] schedule+0xbd/0x170 [ 205.765845][ C0] schedule_timeout+0x160/0x280 [ 205.770729][ C0] ? console_conditional_schedule+0x40/0x40 [ 205.776630][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 205.782533][ C0] ? update_process_times+0x1b0/0x1b0 [ 205.787928][ C0] ? prepare_to_swait_event+0x339/0x360 [ 205.793488][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 205.798359][ C0] ? rcu_gp_init+0x110e/0x1510 [ 205.803150][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 205.809338][ C0] ? rcu_gp_init+0x1510/0x1510 [ 205.814119][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 205.818991][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 205.824204][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 205.829415][ C0] rcu_gp_kthread+0x99/0x380 [ 205.834026][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 205.839157][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 205.844111][ C0] ? __kthread_parkme+0x162/0x1c0 [ 205.849157][ C0] kthread+0x2fa/0x390 [ 205.853229][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 205.858360][ C0] ? kthread_blkcg+0xd0/0xd0 [ 205.862963][ C0] ret_from_fork+0x48/0x80 [ 205.867392][ C0] ? kthread_blkcg+0xd0/0xd0 [ 205.872087][ C0] ret_from_fork_asm+0x11/0x20 [ 205.876964][ C0] [ 205.880000][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 205.886337][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 205.893366][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.903426][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 205.909164][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 23 bb 40 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 205.929307][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 205.935390][ C0] RAX: 8aa9acdf0b275600 RBX: ffffffff8161881b RCX: 8aa9acdf0b275600 [ 205.943370][ C0] RDX: 0000000000000001 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6f80 [ 205.951351][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 205.959368][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: ffffffff8e4a2128 [ 205.967356][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952688 [ 205.975336][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.984280][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.990871][ C0] CR2: 00007f8f23bb7198 CR3: 000000005dc60000 CR4: 00000000003506f0 [ 205.998855][ C0] Call Trace: [ 206.002151][ C0] [ 206.005092][ C0] default_idle+0x13/0x20 [ 206.009434][ C0] default_idle_call+0x6c/0xa0 [ 206.014219][ C0] do_idle+0x1eb/0x510 [ 206.018307][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 206.023520][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 206.029175][ C0] cpu_startup_entry+0x43/0x60 [ 206.033948][ C0] rest_init+0x2e2/0x300 [ 206.038207][ C0] ? time_init+0x40/0x40 [ 206.042459][ C0] arch_call_rest_init+0xe/0x10 [ 206.047321][ C0] start_kernel+0x459/0x4e0 [ 206.051845][ C0] x86_64_start_reservations+0x2a/0x30 [ 206.057319][ C0] x86_64_start_kernel+0x60/0x60 [ 206.062285][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 206.068394][ C0] [ 206.590559][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.596896][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.605716][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 206.612073][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.907245][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 208.907831][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 208.913344][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 208.919295][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 209.745550][ T5764] syz-executor (5764) used greatest stack depth: 20968 bytes left [ 209.836587][ T3467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.923767][ T3467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.983633][ T3467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.042382][ T5766] syz-executor (5766) used greatest stack depth: 20904 bytes left [ 210.116471][ T3467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.339816][ T3467] hsr_slave_0: left promiscuous mode [ 211.346493][ T3467] hsr_slave_1: left promiscuous mode [ 211.352817][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.361657][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.369881][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.377480][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.385154][ T3467] bridge_slave_1: left allmulticast mode [ 211.391784][ T3467] bridge_slave_1: left promiscuous mode [ 211.399040][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.409905][ T3467] bridge_slave_0: left allmulticast mode [ 211.415555][ T3467] bridge_slave_0: left promiscuous mode [ 211.421487][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.452330][ T3467] veth1_macvtap: left promiscuous mode [ 211.458646][ T3467] veth0_macvtap: left promiscuous mode [ 211.464811][ T3467] veth1_vlan: left promiscuous mode [ 211.471943][ T3467] veth0_vlan: left promiscuous mode [ 211.897158][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 211.942924][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 211.974914][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.013189][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.374749][ T3467] bond0 (unregistering): Released all slaves [ 212.883425][ T3467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.967852][ T3467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.025049][ T3467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.094956][ T3467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.330688][ T3467] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.431792][ T3467] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.486422][ T3467] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.550242][ T3467] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.682322][ T3467] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.730532][ T3467] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.851368][ T3467] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.918984][ T3467] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0